General Privacy Notice of SINN Power GmbH
(As of May 2023)

In the course of contract processing, personal data is collected, processed, and used. The protection of your personal data is very important to us. We therefore process your data exclusively in accordance with data protection regulations.

1. Data Controller

The data controller for the processing described in this privacy notice within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR; hereinafter, references to “Art.” without a legal citation refer to the GDPR) is:

SINN Power GmbH
Germeringer Str. 9, 82131 Gauting, Germany

2. Types of Personal Data

As part of contract processing, we collect and process the following personal data:

• Master and contact data (name, first name, address, e-mail address, telephone number)

• Contract processing data, such as contract number, contract details, payment information, bank details, delivery location, and delivery time

3. Purpose and Legal Basis of Processing

We process your personal data for the following purposes:

• Fulfillment of the contract

• Implementation of pre-contractual measures

• Compliance with legal obligations

• Protection of legitimate interests

The processing of your personal data is generally based on Art. 6(1)(b) GDPR for the performance of a contract, Art. 6(1)(f) GDPR for the protection of legitimate interests, and Art. 6(1)(c) GDPR for compliance with legal obligations. In individual cases, it may also be based on Art. 6(1)(f) GDPR for the protection of our legitimate interests.

4. Disclosure of Personal Data

In the course of contract processing, your personal data may be disclosed to third parties if necessary for the fulfillment of the contract. This may include service providers engaged to handle the contract. Any processors are bound by Art. 28 GDPR.

No transfer of personal data to third countries takes place.

5. Retention Period

We store your personal data only as long as necessary to fulfill the contract or as required by statutory retention periods.

6. Data Subject Rights

According to Art. 15 GDPR, you have the right to obtain information about the personal data stored about you, including any recipients and planned storage period. If incorrect personal data is processed, you have the right to request correction under Art. 16 GDPR.

If the legal requirements are met, you may also request deletion or restriction of processing and object to the processing (Art. 17, 18, and 21 GDPR).

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority under Art. 77(1) GDPR.