Legal notice

LEGAL BASIS FOR THE PROCESSING
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain
consent for a specific processing purpose. If the processing of personal data is necessary
for the performance of a contract to which the data subject is party, as is the case, for
example, when processing operations are necessary for the supply of goods or to provide
any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to
such processing operations which are necessary for carrying out pre-contractual measures,
for example in the case of inquiries concerning our products or services. Is our company
subject to a legal obligation by which processing of personal data is required, such as for
the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare
cases, the processing of personal data may be necessary to protect the vital interests of the
data subject or of another natural person. This would be the case, for example, if a visitor
were injured in our company and his name, age, health insurance data or other vital
information would have to be passed on to a doctor, hospital or other third party. Then the
processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be
based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which
are not covered by any of the abovementioned legal grounds, if processing is necessary for
the purposes of the legitimate interests pursued by our company or by a third party, except
where such interests are overridden by the interests or fundamental rights and freedoms of
the data subject which require protection of personal data. Such processing operations are
particularly permissible because they have been specifically mentioned by the European
legislator. He considered that a legitimate interest could be assumed if the data subject is a
client of the controller (Recital 47 Sentence 2 GDPR).