This privacy policy provides an overview of the processing of your personal data that we process. It also serves to provide information about your rights under data protection law. This data protection information corresponds to the general information on data processing in total. With us. It serves to fulfil our information and transparency obligations pursuant to Art. 5 para. 1 lit. a, Art. 12 para. 1 sentence 1 GDPR.
Responsible for data processing is:
SK Yacht ServicesE-Mail:
Owner: Sarah Kroker Phone: +49 162 6754875
Sethlehemmer Str. 37
21745 Hemmoor
Types and sources of processing data:
We process personal data that we receive from our customers and business partners as well as from third parties in the context of our business relationships. For this purpose, we process such data that is necessary for the provision of our service and that we either receive from you or from publicly accessible sources (such as.B. Debtor registers, land registers, trade and association registers, press, Internet) lawfully win or which are legitimately transmitted to us by other companies or third parties (e.g. a credit reference agency).
In doing so, we may process the following personal data :
- Contact details and personal details such as name, address, date and place of birth as well as nationality,
- Communication data such as telephone and e-mail address,
- Legitimation data (e.B. IDENTITY card data),
- Authentication data (e.B. signature sample) and order data (e.B. payment order).
- In addition, this may also include data from the fulfilment of our contractual obligations, information about your financial situation (e.B. creditworthiness data, scoring or rating data), credit-relevant data (e.B income and expenses), documentation data (e.B. consulting protocol) and other data comparable to the categories mentioned.
Purpose and legal bases of processing:
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG)
- for the fulfilment of contractual obligations acc. 6 para. 1 lit.b GDPR
The processing of data takes place for the fulfilment / provision or mediation of the contractual obligations between SK Yacht Services and our customers / business partners and service providers. This includes in particular the communication and transmission and use of the data for the fulfilment of the contract.
- in the context of the balancing of interests acc. 6 para. 1 lit. f GDPR
Insofar as it is necessary, we process your data beyond the actual fulfilment of the contract to safeguard the legitimate interests of us or third parties. For example, for consultation and data exchange with credit agencies, for asserting legal claims and defending legal disputes, for preventing or investigating criminal offences or for measures for business management and further development of services and products.
- on the basis of your consent acc. 6 para. 1 lit. a GDPR
If you have given your consent to the processing of personal data for certain purposes (e.B. for advertising and marketing purposes (newsletter or website analysis), we process these in accordance with Art. 6 para. 1 lit. a GDPR for the purpose for which consent was given. You can revoke your consent at any time for the future. In this case, your data will be deleted in principle. This does not apply if we need your data for archiving and verification purposes. Here, however, the processing of the data is restricted and deleted according to statutory retention obligations. Usually 6 to 10 years.
Data transfers to third parties:
SK Yacht Services internally grants access to your data to those bodies that need it to fulfil their contractual obligations. In addition, in individual cases and as necessary, we transmit your data to other data recipients, who support us in fulfilling the purpose. This is done either on the basis of their consent (e.B. Newsletter dispatch) or which we may legitimately transmit without consent. This can be e.B. Service providers for our online shop, payment service providers, public bodies, but also our partners and representatives (lawyers, debt collection, tax consultants).
Transfer of data to a third country or to an international organisation:
In addition, we do not transfer any personal data to countries outside the European Union (so-called third countries). However, if it is required by law (e.B. tax reporting obligations) or if you have given your consent, we also transfer data to third countries. Accordingly, a transfer takes place insofar as we are entitled to do so. In such cases, a transfer may take place e.B. to Switzerland or the USA. However, we make sure that we comply with the regulations on data protection in accordance with Art. 44 et seq. GDPR.
Storage period:
We process and store your personal data until the purpose of the processing has been fulfilled. This is the case, for example.B. in the fulfilment of our contractual and legal obligations or until your consent is revoked. If the data is no longer required for the purpose, it will be deleted regularly. This does not apply if we are legally obliged to carry out further processing.
We therefore process your data after the purpose has been fulfilled to a limited extent to:
- Fulfillment of retention obligations under commercial and tax law, which ariseB. from the German Commercial Code (HGB) and the Tax Code (AO). The storage and documentation periods specified there are usually two to ten years.
- Preservation of evidence within the framework of the statutory statute of limitations. According to §§ 195 et seq. of the German Civil Code (BGB), these statutes of limitations can amount to up to 30 years, whereby the regular limitation period is 3 years, calculated from the end of the year in which the business relationship ends.
Your rights as a data subject:
Each data subject has:
- the right to information in accordance with Article 15 GDPR,
- the right to rectification in accordance with Article 16 GDPR,
- the right to erasure in accordance with Article 17 GDPR,
- the right to restriction of processing pursuant to Article 18 GDPR,
- the right to object under Article 21 GDPR,
- the right to data portability under Article 20 GDPR and
- the right to lodge a complaint with the competent data protection supervisory authority in accordance with Art. 77 GDPR in conjunction .m 19 BDSG.
The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right to erasure.
Obligation to provide data:
In order for us to fulfil our purpose (e.B. provision of services), we need your corresponding personal data. If there is a business relationship between you and us, you must provide us with such data that we need for the establishment, execution and termination of a business relationship and for the fulfilment of the associated contractual obligations or which are legally obliged to collect.
Automatized decision-making and profiling:
We do not use fully automated decision-making in accordance with Article 22 GDPR . Should we use these procedures in individual cases, we will inform you separately about this and about your rights in this regard, if this is required by law.
Profiling with the aim of evaluating certain personal aspects also does not take place by us.
Right to object in the event of processing:
In individual cases, you have a right of revocation, which you can assert at any time for reasons arising from your particular situation. Thus, you can object to the processing of your personal data on the basis of Article 6 (1) (e) GDPR (data processing in the public interest) and Article 6 (1) (f) GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
You can address your objection informally to the following recipients with the subject “Objection” stating your name, address and date of birth:
SK Yacht ServicesE-Mail:
Owner: Sarah Kroker Phone: +49 162 6754875
Sethlehemmer Str. 37
21745 Hemmoor
If you have the feeling that we do not process your data in accordance with the law, you can of course also contact the data protection supervisory authority responsible for us. The data protection supervisory authority responsible for us is:
The State Commissioner for Data Protection Niedersachsen
Prinzenstraße 5
30159 Hanover
by e-mail
by phone 0511/120-4500
This privacy policy has been created by Schwarte Consulting, Eilenburger Str. 32, 04317 Leipzig, Germany, Website: www.schwarte-consulting.com. Schwarte Consulting acts as external data protection officers, among other things.