With this guideline, which the managing director has confirmed, employees and business customers are informed about the processing of personal data within the company. This guideline is the basis for the declaration of consent by business customers and employees. The personal data are processed on the one hand by the company, but also by third parties, for example by partners with whom ARM GmbH & Co.KG operates.

1. Responsibility of the company

ARM GmbH & Co.KG is responsible for the processing of personal data in the company on the basis of the EU General Data Protection Regulation and the Federal Data Protection Act. Questions should always be addressed to the person responsible for data protection at the company.

2. Basis for the dissemination of data in the company

The processing of personal data in ARM GmbH & Co.KG is based on the consent given by those concerned and on the company's data protection guidelines. Business customers and employees have submitted to these regulations with their consent to the processing of personal data.

3. Processing by the company

The processing of the personal data takes place on the occasion of your inquiry with us and is necessary for the purposes mentioned for the processing of your order and for the fulfillment of obligations from the underlying contract. The personal data collected is stored until the legal retention period for merchants expires (6, 8 or 10 years after the end of the calendar year in which the contractual relationship was terminated) and then deleted. In exceptional cases, this does not apply if we are obliged to store it for longer due to tax or commercial storage obligations (in accordance with the German Commercial Code, StGB or AO) or if you have consented to storage beyond that.

4. Processing by third parties

Your personal data will not be transferred to third parties. Exceptions to this only apply if this is necessary for the execution of contractual relationships with you. This includes in particular the transfer to service providers commissioned by us (so-called contract processors) or other third parties whose activity is necessary for the execution of the contract (e.g. shipping companies, authorities or subcontractors). The data passed on may only be used by the third parties for the stated purposes.

5. Deletion and transfer of data

You can request the deletion of your personal data stored by us, unless their processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

6. Rights

Right to restriction of processing: You can request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful, but you refuse to delete it. You also have this right if we no longer need the data, but you need it to assert, exercise or defend legal claims. You also have this right if you have objected to the processing of your personal data. Right to data portability: You can request that we provide you with the personal data you have provided to us in a structured, common and machine-readable format. Alternatively, you can request the direct transfer of the personal data you have provided to us to another person responsible, insofar as this is possible.

7. Company data protection officer

If you are of the opinion that the processing of your personal data violates applicable law, the management should be contacted. VA Data Protection: Authorized Officer Andreas Gartner

8. Supervisory authority and right of appeal

You can complain to the supervisory authority responsible for us, e.g. if you believe that we are processing your personal data unlawfully.

The authority responsible for us is: The Saxon Data Protection Officer, Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Email: saechsdb@slt.sachsen.de