Information in accordance with Art. 13 of the General Data Protection Regulation (GDPR) – Customers

Please note further information on our privacy policy from our website privacy policy and our platform privacy policy.

1. Name and contact details of the controller

Responsible for data processing within the meaning of the GDPR is:

Demodesk GmbH Isartorplatz 8 80331 Munich www.demodesk.com contact@demodesk.com

2. Contact details of the data protection officer

DataCo GmbH

Dachauer Str. 65 80335 Munich - Germany datenschutz@dataguard.de

3. Purposes and legal basis of the processing

Your personal data is processed for the following purposes:

• Fulfilment of pre-contractual measures
• Establishment, implementation and termination of the contractual relationship
• Provision of our platform
• Inclusion in our contact database
• Contact (e-mail, telephone, video telephony)
• Customer administration and customer care - especially the processing of customer inquiries
• Direct advertising in the form of telephone
• Examination and optimization of procedures for direct customer contact and needs analysis
• Market and opinion research, unless you have objected to the use of this data for these purposes
• Assertion, exercise or defense of legal claims
• Ensuring better customer service
• Measures for business management and further development of our products.

4. Recipients or categories of recipients of personal data

We only transfer your personal data to other parties if this is permitted by law or if you have given your consent. Recipients are in particular:

• Banking institutions
• Authorities (tax offices, courts)
• Tax consultant
• **Lawyers

**

In general, the transmission of data is used for accounting purposes and for the assertion, exercise or defense of legal claims (if necessary).

In addition, your data will be transferred to processors in order to provide our services. These processors will provide partial services in connection with our service provision. The corresponding processors are specified in our data processing agreements.

5. Transfer of personal data to a third country

By commissioning processors outside the EU, your personal data will be processed partly outside the EU. The transfer of data is always based on the concluded data processing agreements in accordance with Art. 28 GDPR and EU standard data protection clauses in accordance with Art. 46 GDPR.

6. Duration of storage of personal data

We will delete your personal data as soon as the purposes for its storage mentioned under item 3 cease to apply, you object to the use of your personal data (see item 9) or you revoke your previously granted consent. However, your personal data may also be stored beyond this, especially in the following cases:

• insofar as there are still open obligations from the contractual relationship
• if contractual, legal (in particular from German Commercial Code (HGB), Criminal Code (StGB) and Fiscal Code (AO)) or statutory retention periods oppose deletion
• for the assertion, exercise or defense of legal claims
• if this is required under European or national law to fulfil a legal obligation to which we are subject.

7. Rights of data subjects

According to the GDPR you have the following rights:

If your personal data is processed, you have the right to obtain informationfrom the controller about the data stored about you (Art. 15 GDPR).

If incorrect personal data is processed, you have the right of correction(Art. 16 GDPR).

If the legal requirements are met, you can request deletionor restrictionof data processing (Art. 17 and 18 GDPR).

If you exercise the right to correct, delete or restrict the processing of your personal data, we will notify all recipients of your data of your correction, deletion or restriction(Art. 19 GDPR).

If you have consented to data processing or if a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data transferability(Art. 20 GDPR)

There is also a right of complaint to a supervisory authority (Art. 77 GDPR). The responsible supervisory authority for us is:

Bayerisches Landesamt für Datenschutzaufsicht

Promenade 18 91522 Ansbach - Germany

Phone: +49 (0) 981 180093-0 Fax: +49 (0) 981 180093-800

8. Right of withdrawal in case of consent

If you have consented to the processing of your personal data by the controller, you can revoke this consent at any time for the future. In this case, the lawfulness of the data processing that took place until the revocation is not affected.

9. Right of withdrawal in case of consent

At any time, you have the right to object, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 lit. e GDPR (data processing in the public interest) and Art. 6 para. 1 lit. f GDPR (data processing based on a balance of interests), Art. 21 para. 1 GDPR. This also applies to profiling based on this provision within the meaning of Art. 4 para. 4 GDPR.

If you raise an objection, we will no longer process your personal data, unless we can prove compelling interests worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection may be raised in any form.