提供資訊的義務

1. 您有哪些資料保護權利?

根據 EU-GDPR(一般資料保護規定),所有資料主體在處理其個人資料方面均享有以下權利:

  • 依據 EU-GDPR 第 15 條的造訪權
  • 依據 EU-GDPR 第 16 條的更正權
  • 依據 EU-GDPR 第 17 條的刪除權
  • 依據 EU-GDPR 第 18 條的限制處理權
  • 依據 EU-GDPR 第 20 條的資料可攜權
  • 依據 EU-GDPR 第 21 條的反對權

造訪權和刪除權受 BDSG(德國聯邦資料保護法)第 34 和 35 條中規定的限制的約束。此外,如果您認為對您個人資料的處理違反了法律規定,您有權向負責的資料保護監管機構投訴(GDPR 第 77 條和 BDSG 第 19 條)。

2. What do you need to know about your right to object?


  • Right to object on a case-by-case basis

    You have the right to object at any time to the processing of your personal data under Article 6, paragraph 1(e), of the GDPR (data processing in the public interest) and Article 6, paragraph 1(f), of the GDPR (data processing based on legitimate interests) for any reason relating to your specific personal situation; this also applies to profiling based on these provisions as defined in Article 4, number 4, of the GDPR.
    If you file an objection, we will no longer process your personal data unless we can demonstrate that there are legitimate compelling grounds for processing that override your interests, rights and freedoms or that the processing is required for the establishment, exercise or defence of legal claims.


  • Right to object to data processing for direct marketing purposes

    In some cases, we may process your personal data for direct marketing purposes. You have the right to object to your personal data being used for direct marketing purposes at any time; this also applies to any profiling that is related to such direct marketing exercises. If you file an objection to your data being processed for direct marketing purposes, we will no longer use your personal data for these purposes.


  • Please note that your objection will only apply to future data processing, which means that the legality of any processing that has taken place up to the point at which your objection is made remains unaffected. The further processing of your data based on other legal purposes, such as the fulfilment of legal obligations, also remains unaffected.
  • You can submit your objection in any format to:

3. Do you have any obligation to provide data?

In the context of our joint activities, you must provide us with the personal data that we require to accept and perform the relevant activities and to fulfil the associated contractual obligations or that we are required to collect by law. Without this data, we will generally be unable to enter into a contract with you, fulfil our obligations under our contract or provide you with our services.

4. Who receives your data?

The departments at Festo that have access to your data are those that require access to enable us to fulfil our contractual and legal obligations (such as call centre services, customer administration, document processing, logistics, IT/EDP maintenance, etc.). Service providers and agents working on our behalf may also receive your data for the purposes outlined above; such third parties are subject to an agreement to maintain confidentiality. We also employ contractors in various departments (such as IT, HR, finance, sales, etc.).

All data exchanged within our Group is subject to our binding corporate rules on data protection.

The list of companies in the Festo Group can be viewed here:
https://www.festo.com/hq/en/cms/festo.htm

Your data may also be transferred to other parties for whom you have granted your consent for your data to be shared. Please note that you may already have provided consent directly to Festo or to another external intermediary.

In relation to passing information to recipients outside of Festo, we are contractually obliged to maintain confidentiality with regard to all customer-related information and feedback of which we become aware in the course of our business activity. We may only share the information we have about you when required to do so by law or when you have provided your consent for us to do so.

When data is transferred to external parties in third-party countries (outside the EU), we will ensure that these countries observe the same standards as the EU.

For the USA, the EU Commission has decided (in its resolution of 12.07.2016) that the EU–US Privacy Shield regulations provide adequate data protection (adequacy decision, Article 45 of the GDPR). Further information can be found at: https://www.privacyshield.gov

On some of our Internet pages we use content and services from other providers, who may, in turn, use cookies and other active components. If you click on this content, we will send the data required to the relevant provider (e.g. the fact that you clicked on this content on our page and any other information that you have already provided on our website for this purpose). We have no control over how these providers process your personal data. Please consult the Internet pages of the relevant providers for information on their data processing policies.

5. How long will your data be stored?

We will process and store your personal data for as long as required to fulfil our precontractual, contractual and legal obligations. Data that is no longer required to fulfil our contractual or legal obligations is deleted on a regular basis, unless (limited) further processing is required for the following purposes:

  • Compliance with commercial and tax-related retention periods as defined in state-specific and other regulations. We are required to comply with the retention and documentation periods specified in these regulations.

  • Retention of evidence in the context of statute of limitation regulations.
    These limitation periods may last up to 30 years; the general limitation period varies from country to country.