Privacy policy

Principles of data processing at Thamm Catering GmbH

You have come to this page via a link because you want to find out how we handle (your) personal data. In order to fulfill our information obligations in accordance with Art. 12 ff. of the General Data Protection Regulation (GDPR), we are pleased to provide you with our information on data protection below:

Who is responsible for data processing?
The controller within the meaning of data protection law is Thamm Catering GmbH
Kaiserin Augusta Allee 31
10585 Berlin

You will find further information about our company, details of the authorized representatives and other contact options in the legal notice on our website.

Which of your data do we process? And for what purposes?
If we have received data from you, we will only process it for the purposes for which we received or collected it. We primarily process personal data for the fulfillment or initiation of business relationships. Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.

What is the legal basis for this?
The legal basis for the processing of personal data is generally – unless there are specific legal provisions – Art. 6 GDPR. In particular, the following possibilities come into consideration here:
– Consent (Art. 6 para. 1 lit. a) GDPR)
– Data processing for the performance of contracts (Art. 6 para. 1 lit. b) GDPR
– Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
– Data processing to fulfill a legal obligation (Art. 6 para. 1 lit. c) GDPR)
If personal data is processed on the basis of your consent, you have the right to revoke your consent to us at any time with effect for the future. If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

How long will the data be stored?
We process the data for as long as this is necessary for the respective purpose. Insofar as statutory retention obligations exist – e.g. under commercial law or tax law – the personal data concerned will be stored for the duration of the retention obligation. Once the retention obligation has expired, we will check whether there is any further need for processing. If it is no longer necessary, the data will be deleted. At the end of a calendar year, we generally review data with regard to the need for further processing. Due to the volume of data, this review is carried out with regard to specific data types or purposes of processing. Of course, you can request information about the data we have stored about you at any time (see below) and, if it is not necessary, request that the data be deleted or processing be restricted.

To which recipients is the data forwarded?
Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permissible on the basis of a balancing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent to do so.

Cookie management
We use the consent tool “Real Cookie Banner” to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at <a href=”https://devowl.io/de/rcb/datenverarbeitung/” rel=”noreferrer” target=”_blank”>https://devowl.io/rcb/data-processing/</a>.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Where is the data processed?
Your personal data will be processed by us exclusively on our business premises in the Federal Republic of Germany. Your rights as a “data subject” You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be. Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so. You also have the right to object to processing within the scope of the statutory provisions. The same applies to the right to data portability. In particular, you have a right to object in accordance with Art. 21 para. 1 and 2 GDPR against the processing of your data in connection with direct advertising, if this is done on the basis of a balancing of interests.

Our data protection officer
We are not legally obliged to appoint a data protection officer. The management is responsible for compliance with data protection regulations and is available to answer your questions. Right to lodge a complaint You have the right to lodge a complaint about the processing of personal data by us with a data protection supervisory authority.
Status: 30.05.2018

We hereby expressly prohibit the use of contact data published within the scope of the imprint obligation by third parties for sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Responsible for content according to § 10 paragraph 3 MDStV:
Matthias Thamm