Data protection and privacy policy

Controller responsible for the processing of your personal data

BMA Braunschweigische Maschinenbauanstalt GmbH

Am Alten Bahnhof 5
38122 Braunschweig
Germany

Phone: +49 5331804-0
Fax: + 49 5331804-260
www.bma-worldwide.com

Purposes and legal basis of data processing

We process your personal data exclusively in compliance with the statutory requirements of the EU General Data Protection Regulation (GDPR), the new Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG), and, where applicable, other relevant sector-specific laws. We therefore process your data only inasmuch as there is a contractual basis for this, you have given your consent to the processing of these data, or we are legally allowed or required to process your data. 

Data processing for the purpose of performance of a contract or for taking steps prior to entering into a contract

We process the personal data you provide to us inasmuch as this is required for entering into a contract, performance of a contract, or termination of a contract. For details of the purposes of data processing, please refer to the relevant contract documentation.

The legal basis for data processing for the performance of a contract and taking steps prior to entering into a contract is normally Article 6 (1) (b) GDPR.

Data processing for the purpose of legitimate interests pursued by the controller or by a third party

We also process your data inasmuch as this is required for the purpose of legitimate interests pursued by us or by a third party. Processing by us because of a legitimate interest includes regular direct marketing activities for our own products and services; preparing internal statistics; criminal investigations; and actions to ensure the correct functioning of our IT infrastructure.

The legal basis for data processing because of legitimate interests pursued by us or by a third party is Article 6 (1) (f) GDPR.

Data processing for compliance with a legal obligation

Moreover, we process your data inasmuch as this is required for compliance with a legal obligation that we are subject to. Legal obligations that we are subject to include, in particular, record-keeping duties under the German fiscal and commercial codes.

The legal basis for data processing for compliance with a legal obligation is Article 6 (1) (c) GDPR, in combination with the relevant legal standard in each case.

Data processing based on consent and for other purposes

We may also process your personal data inasmuch as you have given your express consent to this (see also Article 6 (1) (a) GDPR). In these cases, we provide you separately with additional data protection information in the context of the consent procedure. You can withdraw your consent at any time using the above contact details.

This also applies to the revocation of declarations of consent given to us before the effective date of the GDPR, i.e. before May 25, 2018. Revocation of consent has an effect only for the future and does not affect the legitimacy of the data processed until revocation.

Inasmuch as we will process your personal data in future for purposes not listed in this data protection and privacy policy, we will, where applicable, notify you separately of this in compliance with statutory requirements.

Length of data storage

We will store your personal data only for as long as this is required in the context of the purposes specified above, and for a period where the establishment of legal claims against us could be expected.

The statutory limitation period for such claims may in individual cases run for between three and thirty years.

We also store your personal data inasmuch as we are required to do so in the context of the statutory duties of documentation and record-keeping (such as under the German Commercial and Fiscal Codes or the Money Laundering Act).

Statutory retention periods may run for up to ten years. In exceptional cases, specific duties of documentation may exist, which require your personal data to be kept for longer.