Information on Data Protection
Protecting your personal data is very important to us. In this privacy policy, we would like to inform you about the type of personal data (hereinafter data) we collect, use and process as well as the scope and purpose of these activities. Additionally, we would like to explain the rights that you have.
Protecting your personal data is very important to us. In this privacy policy, we would like to inform you about the type of personal data (hereinafter data) we collect, use and process as well as the scope and purpose of these activities. Additionally, we would like to explain the rights that you have.
1. Name and address of the controller
Responsible for the processing personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) is:
Sinn Spezialuhren GmbH
Wilhelm-Fay-Strasse 21
65936 Frankfurt am Main, Germany
Tel.: +49 (0)69 9784 140
Internet: www.sinn.de
Email: info@sinn.de
You can contact our data protection officer at: datenschutz@sinn.de
Responsible for the processing personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) is:
Sinn Spezialuhren GmbH
Wilhelm-Fay-Strasse 21
65936 Frankfurt am Main, Germany
Tel.: +49 (0)69 9784 140
Internet: www.sinn.de
Email: info@sinn.de
You can contact our data protection officer at: datenschutz@sinn.de
2. Data subjects
This privacy policy applies to all natural persons who are customers, potential customers, suppliers or business partners of Sinn Spezialuhren GmbH or employees of a customer, supplier or business partner that cooperates with Sinn Spezialuhren GmbH as well as those who apply for a job with Sinn Spezialuhren GmbH. The privacy policy explains how Sinn Spezialuhren GmbH, Wilhelm-Fay-Strasse 21, 65936 Frankfurt am Main, Germany (hereinafter Sinn Spezialuhren, we, us) collects and processes your personal data in connection with the management of our business relationship.
This privacy policy applies to all natural persons who are customers, potential customers, suppliers or business partners of Sinn Spezialuhren GmbH or employees of a customer, supplier or business partner that cooperates with Sinn Spezialuhren GmbH as well as those who apply for a job with Sinn Spezialuhren GmbH. The privacy policy explains how Sinn Spezialuhren GmbH, Wilhelm-Fay-Strasse 21, 65936 Frankfurt am Main, Germany (hereinafter Sinn Spezialuhren, we, us) collects and processes your personal data in connection with the management of our business relationship.
2.1 Customers, potential customers, suppliers and business partners of Sinn Spezialuhren GmbH
a) Categories of personal data
Unless restricted by local laws, Sinn Spezialuhren collects, processes and uses the following categories of personal data about you:
- Name
- Title or position
- Business contact details (address, phone and fax numbers, email address)
- Name of employer
- Content of communication (e.g. email or business letters)
- Website registration and details concerning website use
- Contractual details
- Products or services supplied or offered
- Invoice and payment information
- Details about the business relationship
Unless restricted by local laws, Sinn Spezialuhren collects, processes and uses the following categories of personal data about you:
- Name
- Title or position
- Business contact details (address, phone and fax numbers, email address)
- Name of employer
- Content of communication (e.g. email or business letters)
- Website registration and details concerning website use
- Contractual details
- Products or services supplied or offered
- Invoice and payment information
- Details about the business relationship
b) Purposes of data processing
If necessary, we process your personal data solely to ensure an effective customer relationship with you. This includes:
- Processing your enquiries and complaints
- Correcting previously submitted personal data due to changes in contact details or similar reasons
- Completing pre-contractual measures
- Implementing the contractual relationship
- Processing invoices
- Communicating with you
- Documenting the business relationship
- Sending advertising and promotional information
- Ensuring the security of our IT systems
If necessary, we process your personal data solely to ensure an effective customer relationship with you. This includes:
- Processing your enquiries and complaints
- Correcting previously submitted personal data due to changes in contact details or similar reasons
- Completing pre-contractual measures
- Implementing the contractual relationship
- Processing invoices
- Communicating with you
- Documenting the business relationship
- Sending advertising and promotional information
- Ensuring the security of our IT systems
2.2 Individuals who apply for a job with Sinn Spezialuhren
a) Categories of personal data
Sinn Spezialuhren collects, processes and uses the following categories of personal data, among others, in connection with your application:
- Personal details: name, nationality and date of birth;
- Contact details: home address, telephone numbers and email addresses;
- Application information: work experience (including references from previous employers), qualifications and professional background, academic background, language skills, professional knowledge and skills, certificates, membership in professional associations, social engagement
- Job interview records
- Communication data (email, written correspondence)
Sinn Spezialuhren collects, processes and uses the following categories of personal data, among others, in connection with your application:
- Personal details: name, nationality and date of birth;
- Contact details: home address, telephone numbers and email addresses;
- Application information: work experience (including references from previous employers), qualifications and professional background, academic background, language skills, professional knowledge and skills, certificates, membership in professional associations, social engagement
- Job interview records
- Communication data (email, written correspondence)
b) Purposes of data processing
If necessary, we process your personal data solely to ensure the effective management of your application. This includes:
- Application and recruitment activities
- Administration of your application documents
- Evaluation of qualifications
- Conducting interviews
- Making a hiring decision
- Planning the induction and new recruit process
- Communication with you
If necessary, we process your personal data solely to ensure the effective management of your application. This includes:
- Application and recruitment activities
- Administration of your application documents
- Evaluation of qualifications
- Conducting interviews
- Making a hiring decision
- Planning the induction and new recruit process
- Communication with you
2.3 Visiting and using our website
When our website is visited, we may collect certain technical data about users, which is automatically sent to us by their web browser when they access a website online or use an application on a mobile device.
Such data is automatically recorded by our servers. It includes, but is not limited to, the IP address, browser type, browser language, the date and time of the visit, and uniform resource locators (URLs, i.e. website addresses) you visited before or after accessing our website.
Depending on the location of the user and the data concerned, such technical information may fall under the category of personal data.
The following list outlines the specific data concerned as well as the processing purposes, legal basis, recipients and transfers to third countries:
When our website is visited, we may collect certain technical data about users, which is automatically sent to us by their web browser when they access a website online or use an application on a mobile device.
Such data is automatically recorded by our servers. It includes, but is not limited to, the IP address, browser type, browser language, the date and time of the visit, and uniform resource locators (URLs, i.e. website addresses) you visited before or after accessing our website.
Depending on the location of the user and the data concerned, such technical information may fall under the category of personal data.
The following list outlines the specific data concerned as well as the processing purposes, legal basis, recipients and transfers to third countries:
Log files
We create a log of your visit to our website. The following data is processed: name of the accessed website page, date and time of access, data transfer volumes, browser type and version, operating system in use, referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website and for analysis purposes. We process data accordingly on the basis of our legitimate interests in accordance with article (6)(1)(f) of the GDPR. The log file is deleted after seven days unless it is required to provide clarification or evidence of specific infringements that become known during the stipulated retention period.
We create a log of your visit to our website. The following data is processed: name of the accessed website page, date and time of access, data transfer volumes, browser type and version, operating system in use, referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website and for analysis purposes. We process data accordingly on the basis of our legitimate interests in accordance with article (6)(1)(f) of the GDPR. The log file is deleted after seven days unless it is required to provide clarification or evidence of specific infringements that become known during the stipulated retention period.
Hosting
With regard to hosting, all data to be processed in connection with the running of this website is stored. This is necessary to enable website operation. We process data accordingly on the basis of our legitimate interests in accordance with article (6)(1)(f) of the GDPR. To make our website available, we use the services of web hosting providers, with whom we share the above data.
With regard to hosting, all data to be processed in connection with the running of this website is stored. This is necessary to enable website operation. We process data accordingly on the basis of our legitimate interests in accordance with article (6)(1)(f) of the GDPR. To make our website available, we use the services of web hosting providers, with whom we share the above data.
Contact
If you contact us, your data (name, contact and address details, if provided) and your message will be processed solely for the purpose of processing and managing your enquiry. We process this data on the basis of article 6(1)(b) or article 6(1)(f) of the GDPR in order to manage your enquiry.
If you contact us, your data (name, contact and address details, if provided) and your message will be processed solely for the purpose of processing and managing your enquiry. We process this data on the basis of article 6(1)(b) or article 6(1)(f) of the GDPR in order to manage your enquiry.
Purchase processing
We process your order data in order to process the purchase contract. This data processing is carried out in accordance with the legal basis set out in article 6(1)(b) of the GDPR.
We share your address information with the company charged with delivery. If it is necessary for processing the contract, we also provide your email address or telephone number so that a delivery date can be agreed with the company charged with delivery (advance notice).
We share your transaction data (name, order date, payment method, dispatch and/or receipt date, amount and payee, if applicable, bank details or credit card details, if applicable address information, if applicable email adress) with the payment service provider responsible for processing payment. In the Sinn online shop, you will be taken from the ordering process directly to the payment pages, where you can then pay. Payment by credit card at our business locations is handled via the terminals of our external payment service provider.
We process your order data in order to process the purchase contract. This data processing is carried out in accordance with the legal basis set out in article 6(1)(b) of the GDPR.
We share your address information with the company charged with delivery. If it is necessary for processing the contract, we also provide your email address or telephone number so that a delivery date can be agreed with the company charged with delivery (advance notice).
We share your transaction data (name, order date, payment method, dispatch and/or receipt date, amount and payee, if applicable, bank details or credit card details, if applicable address information, if applicable email adress) with the payment service provider responsible for processing payment. In the Sinn online shop, you will be taken from the ordering process directly to the payment pages, where you can then pay. Payment by credit card at our business locations is handled via the terminals of our external payment service provider.
Cookies
We use cookies to enable the use of certain features. These are short data files that are stored on your device and exchanged with other providers. Some of the cookies we use are immediately deleted after you close your browser (‘session cookies’). Other cookies remain on your device and allow us to recognise your browser when you next visit (‘persistent cookies’). You can delete all of the cookies stored on your device, and the most popular browsers have settings that can prevent the storage of cookies. If these settings are active, you may need to make some settings every time you visit this website and accept that some features may be compromised as a result.
Web analysis with etracker
We use the etracker service from Etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, to analyse user data on our website. We do not use cookies by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you give your consent, cookies are used to enable a statistical analysis of the reach of this website, to measure the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offering or its components. Cookies are small text files that are stored by the Internet browser on the user's end device. Etracker cookies do not contain any information that enables the identification of a user.
The legal basis for data processing is our legitimate interest in optimising our online offering and our website in accordance with Art. 6 Para. 1 a) GDPR. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymised or pseudonymised as early as possible. The data generated with etracker is processed and stored exclusively in Germany. It is not used for any other purpose, merged with other data or passed on to third parties.
You can object to the data processing described above at any time by clicking on the slider. The objection has no negative consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.
Further information on data protection at etracker can be found here.
Google Fonts
To make visiting our website attractive, we use external fonts from Google Fonts of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Ireland) in the server version, i.e. the font is hosted by us on the website server and no data is passed on to Google.
Google Maps
We use the Google Maps service from Google Ireland on our website to provide you with an interactive map.
The legal basis for processing is your consent in accordance with Art. 6 para. 1 a) GDPR.
We use embedded Google Maps maps in extended data protection mode. This means that Google does not store cookies for a user who displays a website with an embedded map but does not click on the activation of the map to start the display. If the map is clicked, Google may store cookies on the user's device. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating it. Google stores your data as usage profiles and uses them for the purposes of advertising, market research or customising its services. Further information on your rights and setting options to protect your privacy can be found at: www.google.de/intl/de/policies/privacy.
It is possible that data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA (Google USA) when using Google Maps. For data transfers to the USA, there is an adequacy decision by the EU Commission in accordance with Art. 45 GDPR. Google is certified under the EU-US Data Privacy Framework, as required.
YouTube
On our website, we have integrated videos from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (YouTube), a subsidiary of Google USA.
These videos are stored on www.youtube.com and can be played directly from our website. YouTube uses cookies for data collection and statistical data analysis. We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user's device. If you are logged in to Google or YouTube, your data will be assigned directly to your account. If you do not wish your data to be associated with your profile, you must log out before activating this function. Google/YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or customising its services.
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 a) GDPR.
Further information on the purpose and scope of data collection and its processing by Google/YouTube can be found in their privacy policy. It also contains further information on your rights and setting options to protect your privacy at: www.google.de/intl/de/policies/privacy .
When you play the videos, log data is transmitted to YouTube's servers in the USA. It is possible that data may also be transferred to Google USA when you use YouTube. The EU Commission has issued an adequacy decision for data transfers to the USA in accordance with Art. 45 GDPR. Google is certified under the EU-US Data Privacy Framework, as required.
We use cookies to enable the use of certain features. These are short data files that are stored on your device and exchanged with other providers. Some of the cookies we use are immediately deleted after you close your browser (‘session cookies’). Other cookies remain on your device and allow us to recognise your browser when you next visit (‘persistent cookies’). You can delete all of the cookies stored on your device, and the most popular browsers have settings that can prevent the storage of cookies. If these settings are active, you may need to make some settings every time you visit this website and accept that some features may be compromised as a result.
Web analysis with etracker
We use the etracker service from Etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, to analyse user data on our website. We do not use cookies by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you give your consent, cookies are used to enable a statistical analysis of the reach of this website, to measure the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offering or its components. Cookies are small text files that are stored by the Internet browser on the user's end device. Etracker cookies do not contain any information that enables the identification of a user.
The legal basis for data processing is our legitimate interest in optimising our online offering and our website in accordance with Art. 6 Para. 1 a) GDPR. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymised or pseudonymised as early as possible. The data generated with etracker is processed and stored exclusively in Germany. It is not used for any other purpose, merged with other data or passed on to third parties.
You can object to the data processing described above at any time by clicking on the slider. The objection has no negative consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.
Further information on data protection at etracker can be found here.
Google Fonts
To make visiting our website attractive, we use external fonts from Google Fonts of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Ireland) in the server version, i.e. the font is hosted by us on the website server and no data is passed on to Google.
Google Maps
We use the Google Maps service from Google Ireland on our website to provide you with an interactive map.
The legal basis for processing is your consent in accordance with Art. 6 para. 1 a) GDPR.
We use embedded Google Maps maps in extended data protection mode. This means that Google does not store cookies for a user who displays a website with an embedded map but does not click on the activation of the map to start the display. If the map is clicked, Google may store cookies on the user's device. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating it. Google stores your data as usage profiles and uses them for the purposes of advertising, market research or customising its services. Further information on your rights and setting options to protect your privacy can be found at: www.google.de/intl/de/policies/privacy.
It is possible that data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA (Google USA) when using Google Maps. For data transfers to the USA, there is an adequacy decision by the EU Commission in accordance with Art. 45 GDPR. Google is certified under the EU-US Data Privacy Framework, as required.
YouTube
On our website, we have integrated videos from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (YouTube), a subsidiary of Google USA.
These videos are stored on www.youtube.com and can be played directly from our website. YouTube uses cookies for data collection and statistical data analysis. We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user's device. If you are logged in to Google or YouTube, your data will be assigned directly to your account. If you do not wish your data to be associated with your profile, you must log out before activating this function. Google/YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or customising its services.
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 a) GDPR.
Further information on the purpose and scope of data collection and its processing by Google/YouTube can be found in their privacy policy. It also contains further information on your rights and setting options to protect your privacy at: www.google.de/intl/de/policies/privacy .
When you play the videos, log data is transmitted to YouTube's servers in the USA. It is possible that data may also be transferred to Google USA when you use YouTube. The EU Commission has issued an adequacy decision for data transfers to the USA in accordance with Art. 45 GDPR. Google is certified under the EU-US Data Privacy Framework, as required.
2.4 Video conference
We use the service Cisco Webex which is provided by Cisco Systems, Inc., Legal Department, 170 West Tasman Dr., San Jose, CA 95134, USA for our video conferences.
When a video conference is held with Cisco Webex, Cisco processes the following three categories of personal data.
- Registration information
- User information
- User-generated data
For more information about what data are processed from each category, see the Webex Meetings Privacy Data Sheet:
https://trustportal.cisco.com/c/r/ctp/trust-portal.html?search_keyword=Webex%20Meeting
All confidential data are encrypted by the service when they are stored. Stored data that are not encrypted are protected by highly secure protective mechanisms and conventional operating procedures for computing centres. The computing centres of Webex Meetings have a communications infrastructure which boasts industry-leading performance and availability. Cisco has secured its data centres for Webex Meetings both physically and logically. The corresponding certifications have been awarded pursuant to BSI C5 and ISO/IEC 27001.
Cisco Webex meets the criteria of the following certificates and regulatory requirements:
- ISO/IEC 27001, 27017
- ISO 27018
- SOC 2 Type 1 and Type 2
- Cloud computing compliance criteria catalogue (C5) – German Federal Office for Information Security (BSI)
- EU–US Privacy Shield
- APEC Cross-Border Privacy Rules
- Binding corporate rules
- European standard contractual clauses
- European GDPR
Available certificates can be found at: https://trustportal.cisco.com/
We use the service Cisco Webex which is provided by Cisco Systems, Inc., Legal Department, 170 West Tasman Dr., San Jose, CA 95134, USA for our video conferences.
When a video conference is held with Cisco Webex, Cisco processes the following three categories of personal data.
- Registration information
- User information
- User-generated data
For more information about what data are processed from each category, see the Webex Meetings Privacy Data Sheet:
https://trustportal.cisco.com/c/r/ctp/trust-portal.html?search_keyword=Webex%20Meeting
All confidential data are encrypted by the service when they are stored. Stored data that are not encrypted are protected by highly secure protective mechanisms and conventional operating procedures for computing centres. The computing centres of Webex Meetings have a communications infrastructure which boasts industry-leading performance and availability. Cisco has secured its data centres for Webex Meetings both physically and logically. The corresponding certifications have been awarded pursuant to BSI C5 and ISO/IEC 27001.
Cisco Webex meets the criteria of the following certificates and regulatory requirements:
- ISO/IEC 27001, 27017
- ISO 27018
- SOC 2 Type 1 and Type 2
- Cloud computing compliance criteria catalogue (C5) – German Federal Office for Information Security (BSI)
- EU–US Privacy Shield
- APEC Cross-Border Privacy Rules
- Binding corporate rules
- European standard contractual clauses
- European GDPR
Available certificates can be found at: https://trustportal.cisco.com/
2.5 Newsletter
Registration and distribution
When signing up for our newsletter, you will need to state your email address, title and name to enable us to address you personally. You will also need to complete a registration form. To prevent misuse, we will send you an email after you have registered to confirm your registration (double opt-in process). To ensure that the registration process is legally compliant, the following registration details will be logged: the time of registration and confirmation as well as your IP address.
The legal basis for distributing the newsletter is your consent in accordance with Art. 6(1)(a) GDPR. The data used in connection with sending the confirmation email for your registration and the associated data logging is processed in accordance with Art. 6(1)(f) GDPR due to our legitimate interest in ensuring that your registration is completed correctly.
When signing up for our newsletter, you will need to state your email address, title and name to enable us to address you personally. You will also need to complete a registration form. To prevent misuse, we will send you an email after you have registered to confirm your registration (double opt-in process). To ensure that the registration process is legally compliant, the following registration details will be logged: the time of registration and confirmation as well as your IP address.
The legal basis for distributing the newsletter is your consent in accordance with Art. 6(1)(a) GDPR. The data used in connection with sending the confirmation email for your registration and the associated data logging is processed in accordance with Art. 6(1)(f) GDPR due to our legitimate interest in ensuring that your registration is completed correctly.
Tracking and profiling
Tracking is carried out for the purpose of tailoring future newsletters to the interests of our readers by individually measuring, storing and analysing open/click rates in recipient profiles. For the purpose of optimally displaying the newsletter, we track the email program used and store it in the recipient profiles.
The legal basis for tracking and profiling is also the consent you give in accordance with Art. 6(1)(a) GDPR when registering.
Tracking is carried out for the purpose of tailoring future newsletters to the interests of our readers by individually measuring, storing and analysing open/click rates in recipient profiles. For the purpose of optimally displaying the newsletter, we track the email program used and store it in the recipient profiles.
The legal basis for tracking and profiling is also the consent you give in accordance with Art. 6(1)(a) GDPR when registering.
Data transfer
The newsletter is distributed via the service provider CleverReach, to which we transmit the aforementioned data.
The newsletter is distributed via the service provider CleverReach, to which we transmit the aforementioned data.
Withdrawal of consent
You may withdraw your consent at any time by emailing info.marketing@sinn.de, by fax, by post or by using the unsubscribe link in any email you receive, without affecting the legality of the processing carried out on the basis of your consent until the withdrawal.
You may withdraw your consent at any time by emailing info.marketing@sinn.de, by fax, by post or by using the unsubscribe link in any email you receive, without affecting the legality of the processing carried out on the basis of your consent until the withdrawal.
3. Legal basis for data processing
We always process your personal data in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG new).
Below you can read a description of the legal basis on which we process your personal data. Please note that these details are examples only and do not represent a complete or exhaustive list of the possible legal basis for data processing.
We always process your personal data in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG new).
Below you can read a description of the legal basis on which we process your personal data. Please note that these details are examples only and do not represent a complete or exhaustive list of the possible legal basis for data processing.
Consent (article 6(1)(a) of the GDPR)
We process certain personal data only with your prior, explicit consent. This is the case, for example, if you have agreed that we may send advertising or promotional information in electronic format. You are entitled to revoke your consent at any time in order to stop the continued processing of this data.
We process certain personal data only with your prior, explicit consent. This is the case, for example, if you have agreed that we may send advertising or promotional information in electronic format. You are entitled to revoke your consent at any time in order to stop the continued processing of this data.
Fulfilment of a contract with you (article 6(1)(b) of the GDPR)
Data processing is necessary in order to fulfil a contract or to complete pre-contractual measures. Sinn Spezialuhren processes your personal data solely in order to meet the legal obligations resulting from such contracts.
Data processing is necessary in order to fulfil a contract or to complete pre-contractual measures. Sinn Spezialuhren processes your personal data solely in order to meet the legal obligations resulting from such contracts.
Fulfilment of a legal obligation (article 6(1)(c) of the GDPR)
Sinn Spezialuhren is subject to a range of legal requirements. In order to comply with these requirements, we need to process certain personal data.
Sinn Spezialuhren is subject to a range of legal requirements. In order to comply with these requirements, we need to process certain personal data.
Protection of the legitimate interests of Sinn Spezialuhren or a third party (article 6(1)(f) of the GDPR)
Sinn Spezialuhren processes certain personal data in order to safeguard its legitimate interests or the interests of third parties. However, this only happens in individual cases if your interests as data subject do not have priority over the interests of Sinn Spezialuhren.
Sinn Spezialuhren processes certain personal data in order to safeguard its legitimate interests or the interests of third parties. However, this only happens in individual cases if your interests as data subject do not have priority over the interests of Sinn Spezialuhren.
4. Recipients or categories of recipients of personal data
As a rule, Sinn Spezialuhren ensures that your personal data is accessible only to a limited number of authorised persons who need to know this information in line with the purposes of processing outlined above.
Your personal data is not disclosed, sold or otherwise transmitted to third parties unless this is necessary for the purpose of fulfilling the contract with you or you have given your express consent to such transmission.
We also employ external contractors when processing your enquiries and providing access to our services. These service providers are contractually obliged to comply with data protection regulations, and they process personal data only in line with our instructions.
Under these conditions, the recipients of personal data may include service providers, processors or other third parties tasked with providing the following services:
- Support and maintenance of IT and telecommunications systems
- Data destruction
- Debt recovery and payment processing
- Customer relationship management
- Marketing
- Website management
- Media technology
- Payments
- Purchasing and procurement
The personal data we collect or process about you may be transferred to recipients who may be located inside or outside the European Economic Area (EEA). For recipients located outside the EEA, we have taken appropriate measures to ensure compliance with the specifications of the Data Protection Act, such as the conclusion of appropriate EU Commission model contractual clauses, recognised codes of conduct or recognised certification mechanisms (Article 42 GDPR). In addition, we carefully assess the legal systems of the third countries concerned where necessary and take additional measures in line with the ECJ ruling on the transfer of personal data to third countries (Schrems II).
Payment by credit card at our business locations is handled by the external payment service provider Unzer POS GmbH, Gotenstraße 10, 20097 Hamburg, Germany. For more details about data privacy and other legal information, please refer to:
https://www.unzer.com/de/datenschutz/
Payments by credit card in Sinn’s online shop are handled by the external payment service providers Commerzbank AG, Kaiserplatz, 60311 Frankfurt am Main, Germany and PAYONE GmbH, Lyoner Str. 9, 60528 Frankfurt am Main. Further information about data protection policy as well as other legal information can be found under the following links.
Commerzbank AG: https://www.commerzbank.de/portal/de/footer1/recht/rechtliche_hinweise.html
PAYONE GmbH: https://a.storyblok.com/f/64176/x/e0a00cec36/payone-information-zu-datenverarbeitung-gemass-art-14-dsgvo-0220.pdf
If you order a catalog with a delivery address in Switzerland, we will pass on your data for the purpose of processing the order to our Swiss sales partner Uhrenatelier Sonja Lobeto, Breitestrasse 13, 8472 Seuzach.
As a rule, Sinn Spezialuhren ensures that your personal data is accessible only to a limited number of authorised persons who need to know this information in line with the purposes of processing outlined above.
Your personal data is not disclosed, sold or otherwise transmitted to third parties unless this is necessary for the purpose of fulfilling the contract with you or you have given your express consent to such transmission.
We also employ external contractors when processing your enquiries and providing access to our services. These service providers are contractually obliged to comply with data protection regulations, and they process personal data only in line with our instructions.
Under these conditions, the recipients of personal data may include service providers, processors or other third parties tasked with providing the following services:
- Support and maintenance of IT and telecommunications systems
- Data destruction
- Debt recovery and payment processing
- Customer relationship management
- Marketing
- Website management
- Media technology
- Payments
- Purchasing and procurement
The personal data we collect or process about you may be transferred to recipients who may be located inside or outside the European Economic Area (EEA). For recipients located outside the EEA, we have taken appropriate measures to ensure compliance with the specifications of the Data Protection Act, such as the conclusion of appropriate EU Commission model contractual clauses, recognised codes of conduct or recognised certification mechanisms (Article 42 GDPR). In addition, we carefully assess the legal systems of the third countries concerned where necessary and take additional measures in line with the ECJ ruling on the transfer of personal data to third countries (Schrems II).
Payment by credit card at our business locations is handled by the external payment service provider Unzer POS GmbH, Gotenstraße 10, 20097 Hamburg, Germany. For more details about data privacy and other legal information, please refer to:
https://www.unzer.com/de/datenschutz/
Payments by credit card in Sinn’s online shop are handled by the external payment service providers Commerzbank AG, Kaiserplatz, 60311 Frankfurt am Main, Germany and PAYONE GmbH, Lyoner Str. 9, 60528 Frankfurt am Main. Further information about data protection policy as well as other legal information can be found under the following links.
Commerzbank AG: https://www.commerzbank.de/portal/de/footer1/recht/rechtliche_hinweise.html
PAYONE GmbH: https://a.storyblok.com/f/64176/x/e0a00cec36/payone-information-zu-datenverarbeitung-gemass-art-14-dsgvo-0220.pdf
If you order a catalog with a delivery address in Switzerland, we will pass on your data for the purpose of processing the order to our Swiss sales partner Uhrenatelier Sonja Lobeto, Breitestrasse 13, 8472 Seuzach.
5. Duration of data storage
Your personal data will be deleted pursuant to Art. 17(1)(a) GDPR if it is no longer required for the purposes for which it was processed or if you have withdrawn any consent given and it is no longer subject to statutory retention periods.
In principle, we delete applicants’ data three months after the employment decision has been made by Sinn Spezialuhren or after candidates reject an offer from Sinn Spezialuhren. Sinn Spezialuhren may retain your application data for two years if you have agreed to be considered for other positions at Sinn Spezialuhren.
Your personal data will be deleted pursuant to Art. 17(1)(a) GDPR if it is no longer required for the purposes for which it was processed or if you have withdrawn any consent given and it is no longer subject to statutory retention periods.
In principle, we delete applicants’ data three months after the employment decision has been made by Sinn Spezialuhren or after candidates reject an offer from Sinn Spezialuhren. Sinn Spezialuhren may retain your application data for two years if you have agreed to be considered for other positions at Sinn Spezialuhren.
6. Automated decision-making processes
7. Data security
Sinn Spezialuhren has taken appropriate technical and organisational measures to prevent the unauthorised or unlawful disclosure of your personal data and unauthorised or unlawful access to your personal data as well as the inadvertent or unlawful loss, destruction or modification of your personal data and any damage. These measures ensure a level of security that corresponds to the risks involved in processing and the nature of the personal data to be protected. Our security measures are continuously improved in line with developments in technology.
Sinn Spezialuhren has taken appropriate technical and organisational measures to prevent the unauthorised or unlawful disclosure of your personal data and unauthorised or unlawful access to your personal data as well as the inadvertent or unlawful loss, destruction or modification of your personal data and any damage. These measures ensure a level of security that corresponds to the risks involved in processing and the nature of the personal data to be protected. Our security measures are continuously improved in line with developments in technology.
8. Your rights as data subject
a) Information
b) Rectification, deletion, restriction of processing (blocking) and objection
If you no longer agree that your personal data may be stored or if this information is no longer correct, we will have your data deleted or blocked with appropriate notice or make the necessary corrections (to the extent possible under the applicable law). The same applies if we receive the instruction to restrict processing with future effect.
If you no longer agree that your personal data may be stored or if this information is no longer correct, we will have your data deleted or blocked with appropriate notice or make the necessary corrections (to the extent possible under the applicable law). The same applies if we receive the instruction to restrict processing with future effect.
c) Data portability
Upon request, we will provide you with your data in a structured, commonly used and machine-readable format so that you can share this information with another controller if desired.
Upon request, we will provide you with your data in a structured, commonly used and machine-readable format so that you can share this information with another controller if desired.
d) The right to lodge a complaint
You have the right to complain to the responsible supervisory authority about your rights as a data subject. Contact details of the Federal and State Commissioner for Data Protection can be found at:
(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).
You have the right to complain to the responsible supervisory authority about your rights as a data subject. Contact details of the Federal and State Commissioner for Data Protection can be found at:
(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).
e) The right to revoke consent with future effect
You are able to revoke any consent given at any time with future effect. Your withdrawal of consent does not affect the legality of any data processing carried out with your consent before the time of revocation.
You are able to revoke any consent given at any time with future effect. Your withdrawal of consent does not affect the legality of any data processing carried out with your consent before the time of revocation.
f) Restrictions
In cases where we are unable to identify the data subject of information, for instance if it has been made anonymous for analysis purposes, the rights outlined above do not apply. It may be possible to exercise the right to information, deletion, blocking, correction or transfer to another company with respect to such information if you provide us with additional information that allows us to identify the data subject.
In cases where we are unable to identify the data subject of information, for instance if it has been made anonymous for analysis purposes, the rights outlined above do not apply. It may be possible to exercise the right to information, deletion, blocking, correction or transfer to another company with respect to such information if you provide us with additional information that allows us to identify the data subject.
g) Exercising your rights as data subject
If you have any questions concerning the processing of your personal data, or if you would like to exercise your right to information, correction, blocking, objection or deletion with respect to your personal data, or to have it transferred to another company, please contact datenschutz@sinn.de.
If you have any questions concerning the processing of your personal data, or if you would like to exercise your right to information, correction, blocking, objection or deletion with respect to your personal data, or to have it transferred to another company, please contact datenschutz@sinn.de.