information obligation in line with GDPR
Information to be provided pursuant to the EU General Data Protection Regulation (GDPR)
On this page, BUSSE Sportartikel GmbH & Co. KG (here ‘BUSSE’) offers commercial users the opportunity to register their company through the submission of personal data. Registration is necessary in order to carry out pre-contractual measures and to conclude a contract with the user.
The data is entered by the user into an input mask and transmitted to BUSSE through an SSL/TLS encrypted connection. BUSSE shall review the data and decide whether a customer account will be set up for the commercial user’s firm for purchasing. The results of the decision shall be sent to the user via email.
All data shall be processed in secure IT systems within Germany. No data shall be passed on to third parties.
The following data shall be collected as part of the registration process:
1. Date and time of your submission
2. Information about you and your company, particularly address, industry and contact information
Data controller:
BUSSE Sportartikel GmbH & Co. KG, Industriering 2, DE 49393 Lohne (here 'BUSSE')
Contact: datenschutz@busse-reitsport.de
Purpose of processing and legal basis:
The legal basis for the processing of data in the course of the registration process is the user’s given consent pursuant to Art. 6 (1) (a) GDPR.
After the opening of a customer account for the user, the processing of personal data shall be undertaken for pre-contractual purposes (Art. 6 (1) (b) GDPR).
Duration of storage: Should BUSSE decide, after the registration of the user, not to create a customer account for the user’s company, all collected data will be automatically deleted after a period of two months unless legal retention periods prohibit its deletion.
If BUSSE however decides to create a customer account, BUSSE shall process and store the user’s personal data for the duration of the business relationship. The data shall be processed exclusively in Germany or within the EU/EEA and, barring other provisions requiring its retention, deleted at the end of the collaboration.
Rights of data subjects: The data subject has the right to ask BUSSE for comprehensive information on their stored personal data (Art. 15 GDPR). The data subject may also demand that incorrect data be rectified (Art. 16 GDPR), erased (Art. 17 GDPR) or restricted with regard to its processing (Art. 18 GDPR). The data subject furthermore has the right to object (Art. 21 GDPR) and to data portability (Art. 20 GDPR). An informal message sent to the contact address found in the legal notice area ("Impressum") of www.busse-reitsport.de shall suffice. No costs, other than the transmission costs according to basic tariffs, shall be incurred.
The data subject also has the right of appeal to the competent data protection supervisory authority (e.g. Die Landesbeauftragte für den Datenschutz Niedersachsen).
External service providers: BUSSE sometimes uses the services of external providers in the fulfilment of our contractual or statutory obligations.
Additional recipients: Personal data may be passed on to additional recipients, such as to authorities in compliance with legal provisions (e.g. tax authorities, social insurance agencies, etc.). BUSSE also uses service providers to process data. This includes data processors, e.g. website hosting providers and other IT service providers for external administration, maintenance and remote servicing; website design, cloud services, scanning services, file/data carrier disposal services, direct marketing services, website tracking, advertising agencies, collection agencies and credit agencies.
Other: Further information on data privacy can be found online at:
www.busse-reitsport.de/datenschutz.php
