Privacy Policy

1 General information

1.1 What is personal data

Personal data is information that discloses or may disclose the user's identity. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data

Personal data is used exclusively for establishing the contract, content design, execution or processing of the contractual relationship (Art. 6 (1 b) GDPR).

In addition, personal data will only be processed if we have obtained your consent to do so (Art. 6 (1 a) GDPR) or if the processing of the data is necessary for our legitimate interests and if the assessment shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 (1 f) GDPR).

We may use processors to process your personal data, with whom we have concluded a contract for order processing if necessary, but we will not pass on the personal data to third parties beyond this.

The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract, insofar as this is necessary for the delivery of ordered goods. In order to process payments, the necessary payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data will be processed in the EU and in countries classified by the EU as safe or appropriate. If personal data is processed in the USA, we try to ensure that our services are certified under the "Data Privacy Framework".

1.3 Usage data

General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Duration of storage

We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (in particular tax law).

In detail, the following retention periods apply, for example:

Type of data Retention period
Tax data 10 years
Commercial or business letters (including e-mails and faxes) and other documents, insofar as these are relevant for taxation purposes. 6 years from the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report were prepared, the commercial or business letter was received or sent or the accounting voucher was created, the record was made or the other documents were created.
Transaction and registration data 10 years from the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, the commercial or business letter was received or sent or the accounting document was created, the record was made or the other documents were created.
Consent to data processing under data protection law For the duration of the possibility of the assertion of rights by the data subject(s).
(Electronic) correspondence that has no relevance under tax law. As long as this is necessary for the fulfillment of the task, unless the processing serves the assertion, exercise or defense of legal claims.
Usage data following section 1.3 of this privacy policy max. 30 days

2. Your rights

2.1 Information

You can request information from us as to whether we process your personal data and, if this is the case, you have a right to information about this personal data and to the further information specified in Art. 15 GDPR.

2.2 Right to rectification

You have the right to rectify inaccurate personal data concerning you and may request the completion of incomplete personal data following Art. 16 GDPR.

2.3 Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to erase it immediately, in particular if one of the following reasons applies

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.
  • Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.

2.4 Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data if

  • you dispute the accuracy of the data and we therefore check the accuracy,
  • the processing is unlawful and you oppose the erasure and request the restriction of use instead
  • we no longer need the data, but you need it to assert, exercise or defend legal claims,
  • you have objected to processing your data and it is not yet sure whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means.

2.6 Right of revocation and objection

Insofar as the processing of your personal data is based on consent (Art. 6 (1 a) GDPR), you have the right to revoke this consent at any time. This does not affect the lawfulness of the process based on the consent until revocation.

Insofar as the processing of your personal data is based on Art. 6 (1 e) GDPR or Art. 6 (1 f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation following Art. 21 GDPR. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

2.7 General information and right to lodge a complaint

Exercising your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.

3. Data security

3.1 Data security

All data on our website is secured by technical and organizational measures against loss, destruction, access, modification and dissemination.

3.2 Sessions and cookies

To operate the website, we use cookies or server-side sessions in which data can be stored. We only use cookies or server-side sessions that are technically necessary for the operation of this website (e.g. spam protection for the contact form, shopping cart function) and for which the consideration shows that there are no overriding interests on your part (Art. 6 (1 f) GDPR).

4. Presence on social media platforms

We use the following social media platforms for company presentation and communication (explicit reference is made to the data protection declarations and opt-out options linked below).

These social media platforms may process personal data outside the EU; in this respect, we refer you to the above data protection declarations of the social media platforms. The respective social media platforms may be able to create user profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior can even be stored independently of your device. For example, your usage profile can be used to place advertisements that presumably correspond to your interests.

We process the personal data exclusively for communication with you via the social media platform you have selected and to optimize our online presence and ensure that no interests on your part are affected that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, your personal data will also be processed on the basis of this consent (Art. 6 (1 a) GDPR).

5. Third-party services

5.1 Social media links

We have our own social media pages with third-party providers that can be reached via links from this website. Using the links will take you to the respective websites of the third-party providers (e.g. YouTube). To avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a link so that usage profiles cannot be created by the third-party provider simply by using the link.

5.2 Use of YouTube

This website and the integrated offers contain so-called embeddings of videos on YouTube. These enable the connection to YouTube and the videos stored there. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). YouTube is only used with your consent (Art. 6 (1 a) GDPR). The purpose and scope of data collection and data use by Google and your rights and settings options for protection as a YouTube customer can be found in YouTube's privacy policy. You can find this at: https://www.youtube.com/t/privacy/.

6. Contacting us

You are welcome to use the following contact options to contact us regarding data protection. Controller within the meaning of the GDPR:

Syrreal Works GmbH
Eichenallee 9
15738 Zeuthen
Germany

E-Mail: office@syrreal.works
Phone: +49 30 233 297 50