Obligations Customers Satisfaction

1. General Information

We are delighted that you would like to participate in the customer satisfaction survey of the DEKRA Certification GmbH. In the following we would like to provide you with information on the processing of your personal data in the context of the online survey.
Controller
DEKRA Certification GmbH
Handwerkstraße 15
70565 Stuttgart
Data Protection Officer
DDSK GmbH
Irina Weiß

2. Processing Framework

2.1 Source and Categories of Personal Data

You can conduct the customer satisfaction survey without actively providing personal data. However, due to the technical implementation of the customer satisfaction survey, we collect your IP address, but we do not use this IP address to draw conclusions about your person.

2.2 Purposes and Legal Basis for Processed Data

We process data to ascertain the satisfaction of our customers regarding the service we provide and the cooperation with our team of auditors. This helps us to continuously improve our services. In addition, we are required by accreditation law to conduct customer satisfaction surveys.
We process personal data in accordance with the provisions/regulations of the General Data Protection Regulation (GDPR), the new version of the Federal Data Protection Act of Germany (BDSG-neu) and other applicable data protection regulations.
The legal basis for the processing of your personal data is the protection of our legitimate interests in accordance with Art. 6 (1) f GDPR. Our legitimate interests are the fulfilment of accreditation requirements, which oblige us to conduct a customer satisfaction survey. It is necessary to collect the IP address to comply with our obligations regarding the security of our website and to prevent fraud effectively.
We will inform you in advance if we process your personal data at a later time for a purpose not mentioned above.

2.3 Consequences of Failure to Provide Data

Your participation in the customer satisfaction survey is technically only possible by collecting your IP address. Without collecting your IP address, a participation is unfortunately not possible.

2.4 Automated Individual Decision-Making

We do not use sole automated decision-making procedures pursuant to Article 22 GDPR.

2.5 Recipients of Data Within the EU

Within our company, only the persons and departments (e.g. specialist departments, management, personnel department) will receive your data, which they need for the evaluation of the customer satisfaction survey.
We also use a specialized software provider for the online survey. It cannot be ruled out, that this provider may get access to personal data within the scope of maintenance and service measures of the systems. We ensure the lawful processing of personal data by concluding appropriate data protection contracts.

2.6 Data Recipients Outside the EU

If we transfer personal data to service providers or corporate enterprises outside the European Economic Area (EEA), the transfer will only take place if the third country has been approved by the EU Commission on the basis of an adequacy decision or if other appropriate data protection guarantees (e.g. binding corporate rules or standard data protection clauses) have been provided.

2.7 Storage Periods

We process data of participants as long as necessary to fulfil the purpose. After the purpose has ceased, the data will be erased without undue delay.

2.8 Your Rights

By law, you have the right to receive free information about your stored personal data, as well as the right to rectification, the right to data portability and the right to erasure; if the erasure conflicts with statutory storage obligations, we will restrict the processing. In addition, you have the right to object to the processing of the data under certain conditions or to demand the restriction of processing. Furthermore, you have the right to lodge a complaint with a supervisory authority.
If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time with future effect.