Privacy policy WhatsApp

Data protection information for users of WhatsApp

Hermann Hartje KG
Deichstraße 120-12
27318 Hoya
Phone: +49 (0) 4251 / 811 – 0
E-Mail: info@hartje.de

Contact details of the data protection officer

Dennis Möllenbruck
c/o secom IT GmbH
Nienburger Straße 9a
27232 Sulingen
Phone: 04271 94738 00
E-Mail: datenschutz@secom-it.de

1. Type and purpose of data processing and legal basis

We process personal data that you transmit to us as part of communication via WhatsApp. The following personal data is processed: Your name, telephone number, email address, contact notes, images and voice messages. This data is processed for the purpose of business customer communication with you, e.g. exchange of information on availability, requirements, queries and to coordinate appointments. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR (your consent). You can revoke your consent at any time with effect for the future, simply send us an e-mail to datenschutz@hartje.de.

2. Data recipients and third country transfers

When using WhatsApp Business, your data (telephone number) will be transmitted to WhatsApp Ireland Limited (WhatsApp, Inc. Willow Road, Menlo Park, California 94025, USA) for technical reasons. WhatsApp also processes personal data outside the EU/EEA and therefore in so-called third countries. To ensure an adequate level of data protection, we (controller) have concluded an order processing agreement and EU standard contractual clauses with WhatsApp (processor). Further transfers to WhatsApp sub-processors within the scope of order processing are carried out in accordance with the general authorisation specified in the data processing conditions.

Further information on the processing of your personal data on WhatsApp can be found here: https://www.whatsapp.com/legal/privacy-policy-eea#privacy-policy-information-we-collect und weitere Infos unter: https://www.whatsapp.com/legal.

3. Duration of data storage

We will use the data specified in section 1 until you withdraw your consent. After you withdraw your consent, your data will no longer be used for business communication via WhatsApp and will be anonymised. The data mentioned in section 1 will be deleted after 6 months at the latest if you are inactive (no chat participation).

To delete the chat history, you can write ‘I want to delete my data’ in the WhatsApp chat at any time and we will take care of deleting the history and the associated data immediately.

4. Use of automated individual case decisions or profiling measures

We do not use automated processing to make a decision.

5. Your rights

You can assert the following rights:

• Information in accordance with Art. 15 GDPR about your personal data stored by us.
• Rectification in accordance with Art. 16 GDPR. If personal data stored by us is incorrect or incomplete, you have the right to have it corrected or completed in accordance with Art. 16 GDPR.
• Deletion in accordance with Art. 17 GDPR, provided that there are no other legal obligations to the contrary, you have the right to have your data stored by us deleted.
• Restriction of processing in accordance with Art. 18 GDPR. You can request the restriction of processing if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it, we no longer need the data but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.
• Data portability in accordance with Art. 20 GDPR. If the processing is carried out by automated means, you have the right to receive the data in a commonly used and machine-readable format and to transmit it to another controller or to have it transmitted by us.
• Right to object in accordance with Art. 21 GDPR. You may object to the processing on grounds relating to your particular situation, but it must be taken into account whether there are legitimate grounds for the processing or whether the processing serves the establishment, exercise or defence of legal claims.
• If the processing of data is based on consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that certain data may have to be stored for a certain period of time in order to fulfil legal requirements.
• In accordance with Art. 77 GDPR, you have the option of contacting the above-mentioned data protection officer if you have any requests for information, requests for information, revocations or objections to data processing, please address these to the above-mentioned contact details. You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully. The address of the supervisory authority responsible for our company is:
  
  The State Commissioner for Data Protection of Lower Saxony
  Prinzenstr. 5
  30159 Hannover
  E-Mail: poststelle@lfd.niedersachsen.de