General Data Privacy Information

for Aroma Chemical Services International GmbH (“ACSI”)

General

ACSI attaches great importance to protecting your personal data. We inform you what personal data we collect, how our data is used, and the options available to you.

1. Where can I find the information important to me?

This General Data Privacy Information provides an overview of the aspects that generally apply to the processing of your data by ACSI.
Additional information on data privacy associated with the use of our website can be found in the data privacy policy.

2. On what legal basis does ACSI process my data?

We process your data in line with the regulations of European and German data privacy laws (the regulations cited below refer to the EU General Data Protection Regulation, GDPR), i.e. only to the extent that and insofar as

• it is necessary for performance of a contract with you or to carry out steps at your request prior to entering into a contract (Art.6 sec. 1b GDPR) or
• you have given your consent to the processing of your data (Art.6 sec. 1a GDPR) or
• processing is necessary in order to protect our own or third party legitimate interests, e.g. in the following cases: to assert claims, to defend our interests in lawsuits, to recognize and eliminate misuse; to prevent and investigate criminal offenses; to ensure secure IT operations at ACSI; Art. 6 sec. 1f GDPR. Or
• for compliance with legal requirements, e.g. the retention of documents for commercial and fiscal purposes (Article 6 sec. 1c GDPR), or where it is in the public interest (Article 6 sec. 1e GDPR).

3. What are my rights?

You have the right

1. to demand information regarding the categories of data being processed, the purpose of processing, the recipients of the data, and the planned duration of data storage (Art. 15 GDPR);
2. to demand the rectification or completion of inaccurate or incomplete data (Art. 16 GDPR);
3. to withdraw your consent at any time with future effect (Art. 7 sec. 3 GDPR);
4. to object to data processing on the basis of a legitimate interest based on your particular situation (Art. 21 sec. 1 GDPR);
5. in specific cases as outlined in Art. 17 GDPR, to demand the erasure of data, particularly where the data is no longer necessary for the intended purposes, or was processed unlawfully, or you have withdrawn your consent in accordance with (c) above, or have objected to data processing in accordance with (d) above;
6. under certain circumstances, to demand the restriction of data processing, to the extent that erasure is not possible, or the obligation to erase data is disputed (Art. 18 GDPR);
7. to data portability, i.e. you may receive your disclosed data in a commonly used, machine-readable format, such as CSV, and where applicable, transmit it to others (Art. 20 GDPR)
8. to complain to the competent supervisory authority (the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW).

4. Will my data be used for advertising or market research purposes?

We will use your personal data for advertising or market research purposes if you have given your consent; you may withdraw your consent at any time for the future. The opportunity of withdrawing your consent is also pointed out to you when we obtain it.

5. Who does ACSI share my data with?

With so-called commissioned data processors, i.e. companies we have contracted to process data within the relevant statutory framework, see Article 28 of the GDPR (assistant, auxiliary persons). In these cases, ACSI is still responsible for protecting your data. We subcontract to companies mainly in the following areas: IT, sales, marketing, finance, consulting, customer service, human resources, logistics, printing.
With cooperation partners who provide services on your behalf or in conjunction with your ACSI contract at their own responsibility. This applies if you have requested the services of such partners from us, or if you consent to the involvement of a partner, or if we involve the partner on the basis of a lawful permit.
On the basis of our statutory legal obligations: In selected cases, we are legally obliged to transmit certain data to the requesting government agency.

6. Where is my data processed?

In general, your data is processed in Germany and elsewhere in Europe. In exceptional cases, if your data is processed in countries outside of the European Union (so-called third countries), this will be because you have given your explicit consent, or because it is necessary for performance of our contract with you, or because the law so permits (Art. 49 GDPR). Above and beyond this, your data will only be processed in third countries provided certain measures are taken to ensure an adequate level of data privacy (for example, an adequacy decision by the EU Commission or appropriate safeguards, Art. 44ff. GDPR).

7. Who is responsible for data processing?

The controller is
Aroma Chemical Services International GmbH
Johannisstr. 3, D-37603 Holzminden

8. Who should I contact if I have any queries regarding data privacy at ACSI?

If you have any queries, please contact our Data Protection Officer datenschutzbeauftragter@acsint.com