We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation laws applicable to us. This privacy policy provides you with comprehensive information about the processing of your personal data by Kurtz Holding GmbH & Co Beteiligungs KG and the rights to which you are entitled.


Personal data is any information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, telephone number, e-mail address, but also your IP address.
Anonymous data exists if no personal reference to the user can be established.

Responsible body and data protection officer

​Kurtz Holding GmbH & Co. Beteiligungs KG
Frankenstraße 2
Industriegebiet Wiebelbach
97892 Kreuzwertheim
www.kurtzersa.de
Tel.: +49 9342 807-0
Fax: +49 9342 807-404
E-Mail: info@kurtzersa.de​ts.kurtzersa.de

Contact of the Data Protection Officer (atarax Unternehmensgruppe)
datenschutz@kurtzersa.de​

Your Rights as a Data Subject

First, we would like to inform you about your rights as a data subject. These rights are standardized in Articles 15 - 22 of the EU General Data Protection Regulation (EU-GDPR).​

This includes:

To exercise these rights, please contact: datenschutz@kurtzersa.de. The same applies if you have questions about data processing in our company. You also have the right to lodge a complaint with a data protection supervisory authority.​

Right to Object

Please note the following regarding your right to object:​

If we process your personal data for direct marketing purposes, you have the right to object to this data processing at any time without providing reasons. This also applies to profiling insofar as it is associated with direct marketing.​

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, preferably to: info@kurtzersa.de.​

In the event that we process your data to protect legitimate interests, you can object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.​

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.​

Purposes and Legal Bases of Data Processing

When processing your personal data, the provisions of the EU-GDPR and all other applicable data protection regulations are observed. The legal bases for data processing arise in particular from Art. 6 EU-GDPR.​

We use your data for business initiation, fulfillment of contractual and legal obligations, execution of the contractual relationship, offering products and services, and strengthening the customer relationship, which may also include analyses for marketing purposes and direct advertising. The legal bases for data processing are the contract (purchase agreement) Art. 6 I 1 lit. b GDPR, consent Art. 6 I 1 lit. a GDPR, and data processing Art. 6 I 1 lit. f GDPR in the case of legitimate interest.​

Your consent also constitutes a data protection permission. In this context, we inform you about the purposes of data processing and your right of withdrawal. If consent also relates to the processing of special categories of personal data, we will explicitly inform you in the consent and inform you about your right to object.​

Processing of special categories of personal data within the meaning of Art. 9 para. 1 EU-GDPR only occurs if this is required by legal provisions and there is no reason to assume that your legitimate interest in excluding the processing outweighs.​

Disclosure to Third Parties

We will only pass on your data within the framework of legal provisions or with corresponding consent to third parties. Otherwise, data will not be disclosed to third parties unless we are obliged to do so due to mandatory legal regulations (disclosure to external bodies such as supervisory authorities or law enforcement agencies).​

Recipients of Data / Categories of Recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations. The data is transmitted exclusively to the sales, service, and communications departments.​

In many cases, service providers support our specialist departments in fulfilling their tasks. With all service providers, the necessary data protection contractual framework has been concluded. In the case of order processing, the purchasing department ensures that the necessary data processing agreements are concluded.​

Third Country Transfer / Third Country Transfer Intention

Data transfer to third countries (outside the European Union or the European Economic Area) only occurs if this is necessary for the execution of the contractual relationship, legally required, or you have given us your consent.​

We transfer your personal data to a service provider or to group companies outside the European Economic Area if your inquiries concern the branches in these third countries (USA, Mexico, Russia, China).​

Compliance with the data protection level is ensured by: EU standard contractual clauses.​

Data Retention Period

We store your data as long as it is needed for the respective processing purpose. Please note that numerous retention periods require data to continue to be stored. This particularly concerns commercial or tax retention obligations (e.g., Commercial Code, Tax Code, etc.). If there are no further retention obligations, the data is routinely deleted after the purpose has been achieved.​

In addition, we may retain data if you have given us your permission to do so or if there are legal disputes and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.​

Secure Transmission of Your Data

To protect the data stored with us against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons as best as possible, we use appropriate technical and organizational security measures. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.​

Data exchange to and from our website always takes place in encrypted form.