Data Privacy Statement

Of

g/d/p Markt- und Sozialforschung GmbH

g/d/p Marktanalysen GmbH

The companies in the Forschungsgruppe g/d/p
Richardstr. 18
D-22081 Hamburg

 

We, g/d/p Markt- und Sozialforschung GmbH and g/d/p Marktanalysen GmbH (hereinafter "We" or "g/d/p"), are delighted about your interest in data protection at our company.

We take the protection of your personal data and its confidential treatment very seriously. Processing your personal data takes place exclusively within the framework of the legal provisions of European Union data protection law, and, in particular, the General Data Protection Regulation (hereinafter "GDPR") and the other applicable regulations.

We would like to inform you with this Privacy Policy about how we process your personal data and about your data protection rights.

1. Name and contact details of the Data Controller responsible for processing personal data and the company Data Protection Officer

The Data Controller responsible for processing your personal data are the companies:

g/d/p Markt- und Sozialforschung GmbH

g/d/p Marktanalysen GmbH

The companies in the Forschungsgruppe g/d/p

Richardstr. 18

D-22081 Hamburg

contact@gdp-group.com

Phone: 49 (0)40/29 8 76-0

 
Please feel free to contact us if you have any questions or comments about privacy.

You can reach our Data Protection Officer under the following contact details:

Heike Iburg

Data Protection Officer

Richardstraße 18

D-22081 Hamburg

privacy@gdp-group.com

Phone: +49 (0)40/29876-0

 

2. Object of data protection

The object of data protection is "personal data. Personal data is any type of information that relates to an identified or identifiable natural person (what is referred to as a "Data Subject"). This includes, for example, information such as your name, postal address, email address or telephone number, but also information that you voluntarily provide in the context of market research and market analysis, such as information from a personal interview, telephone survey or online survey conducted with you.

 

3. Nature and purpose of personal data processing

Below you will find an overview of the nature and purposes, as well as legal basis, when we process your personal data.

3.1 Preparation and performance of the contract

We process your personal data insofar as it is necessary for performing the contract and possibly for the preparation of a contractual relationship with you. Purposes specifically include:

  • Communication with you
  • Preparation of a contractual relationship with you
  • Implementation and performance of a contractual relationship with you


Further details on the purposes of data processing may arise from the documents we provide you with.

Data processing takes place on the basis of Sec. 6 (1) (b) GDPR. In this respect, we process personal data, which is necessary for performing the contract and, if necessary, preparing the contractual relationship.

3.2 Fulfilment of legal obligations

We also process your personal data in order to comply with legal obligations to which we are subject. These obligations may arise, for instance, from commercial, tax, money laundering, financial or criminal law. The purposes of processing arise from the respective legal obligation; processing usually serves the purpose of complying with state control and information obligations.

Data processing takes place on the basis of Sec. 6 (1) (c) GDPR. When we collect data based on a legal obligation, we process the personal information necessary for fulfilling the legal obligation.

3.3 Preservation of legitimate interests

We also process your personal data in order to safeguard our legitimate interests or those of third parties. In doing so, we pursue the following interests and purposes:

  • Scientific work by g/d/p in the areas of market research and market analysis
  • Conducting commissioned scientific work for our cooperation partners for market research and market analysis purposes
  • Market research and market analysis to improve product offerings and presentations and to support offerings by our cooperation partners

Data processing takes place on the basis of Sec. 6 (1) (f) GDPR.

3.4 Consent

If you have given you consent for specific purposes, then the purposes arise from the respective content of the consent provided.

Data processing takes place on the basis of Sec. 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the lawfulness of any processing performed based on the consent you granted until revocation took place.

 

4. Period of storage

We only store your personal data for as long as it is necessary for fulfilling the aforementioned purposes or – in the case of consent – as long as you have not revoked your consent (and no other legal basis intervenes).

In the case of a justified objection, we will delete your personal data unless its further processing is permitted in accordance with the relevant statutory provisions. We also delete your personal data if we are obliged to do so for legal reasons.

 

5. Data Disclosure 

We only share your personal data with third parties (recipients) if:

  • According to Sec. (1) (1) (a) GDPR, you have granted your express consent for one or more specific purposes,
  • Disclosure according to Art. 6 (1) (1) (f) GDPR is required to assert, exercise or defend against legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
  • In the event that a legal obligation exists for disclosing your data according to Art. (6) (1) (1) (c) GDPR, and
  • This is legally permissible and required according to Art. 6 (1) (1) (b) GDPR in order to execute a contractual relationships with you.
  • We have the assigned the management of the data in accordance with Sec. 28 GDPR.

A transfer of your personal data to what are referred to as third countries or international organisations does not take place.

6. Change of purpose

In accordance with Sec. 13 (3) GDPR, we point out the following to you:

The transmission of your personal data for purposes other than those listed above does not take place at any time.

If we intend to process your personal data for a purpose other than the one for which your personal information was collected, we will provide you with information about said other purpose and all other relevant information in accordance with Sec. 13 (2) GDPR prior to further processing.

 7. Rights of data subjects

Your rights:

  • In accordance with Art. 15 GDPR, you are entitled to request information about the personal data on your person that we process. Specifically, you can demand information on the purposes of processing your personal data, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, your right to have your data rectified, deleted, limited in processing or object to it completely, the existence of your right to complain, the source of your data if we did not collect it, and the existence of automated decision-making processes including profiling and, where appropriate, full and in-depth information on the details of this;
  • To rectification, i.e. in accordance with Sec. 16 GDPR, you are entitled to demand that the personal data that we store on your person be promptly corrected, if incorrect, or incomplete;
  • To deletion, i.e. in accordance with Sec. 17 GDPR, you are entitled to demand the deletion of personal data that we store on your person, insofar as its processing is not required for the purpose of exercising the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the pursuit, exercise or defence of rights;
  • To restrict processing, i.e. in accordance with Sec. 18 GDPR, you are entitled to demand that the processing of your personal data be restricted, insofar as you dispute the accuracy of the data, and its processing is unlawful, but you reject its deletion and we no longer require the data, but you require it to assert, exercise or defend against legal claims or you have objected to its processing in accordance with Sec. 21 GDPR;
  • To data portability, i.e. in accordance with Sec. 20 GDPR, you are entitled to receive the data that you have provided us with on your person in a standard, structured and machine-readable format, or to request that it be transmitted to another data controller;
  • To revoke your consent, i.e. in accordance with Sec. 7 (3) GDPR, you are entitled to revoke at any time the consent you have given us once us. The consequence of this is that we are not permitted to continue processing your data for the future based on this consent and in accordance with Sec. 77 GDPR,
  • To complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work, or our company headquarters.

 

8. Right to object

If your personal data is processed based on legitimate interests in accordance with Sec. 6 (1) (1) (f) GDPR, you are, in accordance with Sec. 21 GDPR, entitled to object to it being processed, insofar as there are reasons for this which arise from your specific situation, or your objection is directed against direct marketing. In the latter case, you are generally entitled to object, which we will then implement without you needing to state any specific situation.

If you would like to exercise your right to object or revoke your consent, please send an email to: contact@gdp-group.com.

9. Sources and data categories for third-party collection

We not only process personal data that we receive from you directly. We also obtain some personal data from third parties. Below is an overview of the sources and categories of data that third parties collect:

  • Address and sample suppliers
  • Publicly available sources, such as
    • Regional data
    • Phone books

 

Additional Notes

In accordance with Sec. 13 (2) (e) GDPR, we point out the following to you:

Providing us with your personal data is not required by law or contract, but it may be necessary for concluding a contract, insofar as its provision is required for preparing a contract or for performing or concluding a contract. You are not obliged to provide us with personal data. Non-provision does not result in any negative consequences for you.

In accordance with Sec. 13 (2) (f) GDPR, we point out the following to you:

We do not process your personal data for the purpose of automated decision-making.

10. Updates and amendments to this Data Privacy Statement

This Data Privacy Statement was last updated in May 2018.

We may find it necessary to amend this Data Privacy Statement as a result of enhancements to our website and related services, or owing to amended legal or official requirements. In this case, we will send you the latest Data Privacy Statement.