1.Who are we?
This is the Privacy Policy of EUROBEND GmbH, located at Alexanderstrasse 1, D-90547 Stein Nürnberg, Germany, HRB17481, Amtsgericht “Furth” and EUROBEND SA, 350 Tatoiou Avenue 136-77, Athens, Greece (hereafter, “Eurobend” or “we”).
Eurobend produces a wide range of CNC machines for the construction, wire and mattress industry, straightening, bending and mesh welding machines (the “Products”).
Industrial companies can purchase the Products at our establishments or via email.   
The references to “we” “our” and “ours” in this Privacy Policy are references to Eurobend.  “You” and “your” refer to any person who provides Personal Data by contacting us with a view to the possible purchase of our Products, by placing orders for them and/or by using our website or with whom we interact as representative of one of our customers or suppliers.
The protection of your Personal Data is important to us. For this reason, in this Privacy Policy we explain how We handle your Personal Data as a Data Controller. 
 
2.Definitions

  • GDPR or General Data Protection Regulation: Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC.
  •  DPL or Data Protection Law: The German Privacy Act (Bundesdatenschutzgesetz – BDSG)  and the Greek Law 4624/2019 on the Hellenic Data Protection Authority (HDPA), measures for implementing Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and transposition of Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 and other provisions. 
  • Personal Data: any information relating to an identified or identifiable natural person.
  •  Data Controller: the person who, alone or together with others, determines the purpose of and means for Processing Personal Data. 
  • Processing: an operation or set of operations performed upon Personal Data or a set of Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of data.

 3.From whom do we collect Personal Data?
We collect Personal Data from you as an employee or representative when you place an inquiry or order with us on behalf of your employer or if your company designates you as a contact person.
We also collect Personal Data from you as a visitor to our website.

 4.How do we collect Personal Data?
We collect your Personal Data when you contact us regarding our products and services, when we meet in person, when you place an inquiry or order at one of our establishments, by email, when you use our website or when you subscribe to our newsletters or when you otherwise interact with us as representative of one of our customers or suppliers.   
 
5.What Personal Data do we process?
The Personal Data we process are: surname, first name, title, address, professional email address, the company you work for or represent, your phone number (including mobile phone number), and any other Personal Data you may voluntarily provide to us when we communicate with you.
 
6.For what purpose and on what legal basis do we use your Personal Data?
We process your Personal Data for the purpose of entering into and performing the contract with you, including:

  • Answering your questions regarding our products and services
  • Handling and processing your requests for quotations and orders (drawing up a quotation, confirming and executing an order, changing or refusing an order, etc.)
  • Drawing up invoices, monitoring payments and other accounting activities
  • Delivery and any installation of the ordered products
  • Providing technical support
  • Providing after-sales services
  • Executing (contractual and statutory) warranties and indemnities
  • Handling possible complaints

When you as an employee or representative of a company, contact us or visit our website, or when your company provides us with your contact details, we will process your Personal Data on the basis of the legitimate interest of Eurobend to provide information about products and services, for the purpose of entering into agreements and for the efficient execution of those agreements with your company.
We may also use your Personal Data:

  •  To improve the use of the website. This is based on our justified interest to offer you a better experience when using our website.
  • To combat fraud and infringements, and to manage disagreements and litigation on the basis of our legitimate interest in detecting and curbing fraud and infringements, such as inadmissible or unlawful statements, in order to secure our IT systems, and to conduct litigation.
  • To reply to an application with a view to the conclusion of a possible employment contract or other cooperation agreement.
  • For direct marketing purposes within what is specified later in this policy regarding direct marketing.
  • For possible analyses in the context of business restructurings or takeovers, based on our legitimate interest and that of the parties involved in those transactions to bring those transactions to a successful conclusion.
  • To comply with any legal obligations to which we may be subject.

 7.Who has access to your Data?

All our employees have an obligation of confidentiality and may only process Personal Data to the extent necessary for their duties. In addition, the following persons have access to your Personal Data:

  •  Business support services 

We are also obliged to use various business support services, such as accountants and auditors, to whom we may pass on your Personal Data if necessary.   

  •  Litigation 

We may also disclose your Personal Data to third parties who assist us in the context of any disputes and litigation, such as the liability insurer or attorneys and bailiffs in the context of legal proceedings (e.g., liability disputes or unpaid invoices), or to protect our property, safety, people and other rights and interests.

  •  Restructurings 

We may also disclose your Personal Data to third parties in the context of any business acquisition or restructuring, such as prospective purchasers of shares or companies with which we may merge or which may acquire our business or an area of activity or set of assets.
Apart from in these cases, your Personal Data will not be disclosed to third parties. If we do wish to disclose your Personal Data to a third party, We will inform you or, if necessary, obtain your consent. However, we may process anonymous or aggregated data and communicate it to third parties. Finally, we may also pass on our Personal Data to authorities or judicial bodies if we are legally obligated to do so.
If third parties process your Personal Data on our behalf, we will make the necessary contractual arrangements to ensure that they only process your Personal Data in accordance with Eurobend’s instructions and in accordance with the GDPR and the DPL, including the implementation of adequate security measures.
 
 8.Direct Marketing
Your Personal Data may be used by us to send you information about offers that may be of interest to you. This information may be sent to you by email. In cases where this is necessary, we will of course first obtain your consent.
To the extent that we process Personal Data in accordance with your free consent, you have the right to withdraw your consent at any time.
 
9.How long will Your Personal Data be kept?
We will keep your Personal Data only for as long as necessary for the relevant purposes, or for as long as contractually defined. We regularly review our retention periods for Personal Data.
Where we are required by law to keep certain types of Personal Data for specified legal periods (e.g., accounting information), We will comply with those periods.

10.Your rights
In conformity with the GDPR, you as a data subject may exercise various rights concerning your Personal Data which is processed by us. This is explained in more detail below.
What rights do you have?

  •  Right to access and a copy 

Access – You always have the right to free access to your Personal Data which we process, unless such access is excluded by law.
You also have the right to receive certain information about this Processing. More specifically, you are entitled to information about the following:

  •  whether or not the Personal Data is being processed;
  • the Personal Data itself;
  • the purposes of the Processing of the Personal Data;
  • the categories of Personal Data and their retention period;
  • the categories of recipients to whom this Personal Data is provided;
  • the rights relating to this Personal Data;
  • the source of this Personal Data, if it was not sourced from you;
  • the existence of automated decision-making based on this Personal Data, as well as the underlying logic and consequences of that decision-making.

Copy – Furthermore, you are entitled to receive a copy of your Personal Data, free of charge, to the extent that you are permitted to consult it in accordance with the GDPR. If you require several copies of the same information, Eurobend reserves the right to charge a fee for administrative costs.

  •  Right to rectification 

In addition, you have the right to demand that all incorrect or incomplete processed Personal Data be corrected or completed free of charge. If we determine that the Personal Data is indeed incorrect or incomplete, it will be corrected or completed.
You may also request that Personal Data is temporarily not processed further (except in certain cases provided for by law) until the accuracy or completeness of the Personal Data has been verified and any inaccuracy or incompleteness has been corrected (except in certain cases provided for by law). See the section on “right to restriction of Processing” below.

  •  Right to data portability 

You also have the right, within certain limits determined by the GDPR, to ask us to transfer a copy of your Personal Data in a machine-readable format (e.g., XML) to you and/or directly to another institution or person of your choice. However, this right only applies to Personal Data that you have provided to us yourself.

  • Right to withdraw consent

If you have given us your consent for a particular Processing of your Personal Data, you have the right to withdraw your consent at any time. We will then no longer process the Personal Data. However, this does not affect the lawfulness of the Processing prior to the withdrawal of your consent.

  •  Right to object to the Processing 

When we process your Personal Data based on our legitimate interest, you may in certain cases object to such Processing.
However, if the Processing does not involve a form of direct marketing, we may still proceed with the Processing of your Personal Data if this is necessary for compelling legitimate grounds. Pending an assessment of these grounds, you may request that we temporarily cease Processing the Personal Data in question (except in certain cases provided for by law). See the section on “right to restriction of Processing” below.

  •  Right of erasure 

If You believe that your Personal Data should no longer be processed (e.g., because this data is no longer necessary or is being processed unlawfully), you can request erasure of your Personal Data from our files.
Instead of erasure, you may also request that your Personal Data remain stored but not be processed further (except in certain cases provided for by law). See the section on “right to restriction of Processing ” below.
However, as the Data Controller, we are not obliged to remove Personal Data if it may or must still be lawfully processed in accordance with the GDPR.

  •  Right to restriction of Processing 

In certain cases, you have the right to request that your Personal Data be kept by us, but temporarily not be processed further. Apart from the cases mentioned under the right of rectification, objection and erasure in this Privacy Policy, you also have this right when we no longer need the Personal Data, but you still need them in the context of a legal action.
 In some cases, however, the right to restriction of Processing does not apply and We may still process your Personal Data. These cases are as follows:

  •  if you yourself have given Your specific consent for a certain Processing;
  • if Eurobend  itself needs the Personal Data in the context of a legal action;
  • if the Personal Data must be processed to protect the rights of another natural or legal person; or
  • for important reasons of public interest.

 How to contact us for this?

  •  Exercising your rights 

Contact point – To exercise your rights, you can contact us at the address mentioned at the beginning of this policy.
Verification – If your request is unclear or if there is any doubt as to the identity of the person trying to exercise the rights on your behalf, we may request the necessary additional information. If the applicant refuses to provide the necessary information, we may refuse the request.
Handling period – After submitting your request, you will receive a confirmation of receipt and we will let you know as soon as possible, and at the latest within one month, what action will be taken in response to the request. In case of complex or frequent requests, this period may be extended to three months after the submission of the request. If so, we will inform you of this.
Free of charge – This request procedure is in principle completely free of charge. However, if your request is manifestly unfounded or if you make excessive use of your rights, in particular by repeatedly making similar requests, we have the right to refuse these requests or to charge a reasonable fee for the administrative costs. 

  •  Questions or complaints 

Questions – For all questions about the Processing of Personal Data by Eurobend you can contact us by email (info@eurobend.com) or by letter at the addresses mentioned at the beginning of this Privacy Policy.
Complaints – If you believe that the provisions of this Privacy Policy or the GDPR are not being complied with, you can submit a complaint to the Data Protection Authority of Bayern (Germany) or the Hellenic Data Protection Authority. If you have any complaints, we ask you to first submit them to us, so that a solution can be sought.   
 
11.Security measures to prevent loss, misuse or alteration of your Personal Data
We use security measures to protect your Personal Data against unauthorized access and against unlawful Processing, accidental loss, destruction and corruption.
However, information transmitted via the internet will never be 100% secure. As a result, we cannot guarantee the security of the information you transmit to us.
Once we have received the information, we do our utmost to ensure the security of our systems.
 
12.Transfer of Your data to outside the EU
The Personal Data that you provide us is exclusively processed within the European Union. If a Processing of your Personal Data would be done in countries outside the European Union (“EU”), we will take the necessary steps to ensure that such processing is done in accordance with the GDPR, such as by using standard contractual clauses allowing a transfer of Personal Data to third countries.
If you use our services while you are outside the EU, your Personal Data may be transferred outside the EU so that we can continue to provide you with these services.
 
13.Questions or comments?
Any questions or comments regarding this Privacy Policy or our practices related to the protection of personal data can be submitted to us by email to info@eurobend.com.
 
14.Revision of this Privacy Policy
This Privacy Policy will be reviewed on a regular basis. This Policy was last updated in November 2020.