Information letter pursuant to Article 13 GDPR

adies and Gentlemen,

PRESTO GmbH & Co KG, Gewerbepark 4, 49196 Bad Laer, processes the personal data of suppliers, customers and other service providers in legally regulated procedures.

Personal data is information (e.g. surname, first name, e-mail address, address, etc.) and facts related to your person. PRESTO GmbH & Co KG, Gewerbepark 4, 49196 Bad Laer, collects, stores and transmits your data in accordance with the provisions of Article 13 GDPR:

1. Name and contact details of the data controller and the company data protection officer:

E-mail address: kontakt@presto.de       Email address: datenschutz@saphirit.de

2. Collection and storage of personal data, as well as the type and purpose and their use:

We collect the following information for the purpose of ensuring trouble-free operation and improving our services:

• Title, first name, surname
• E-mail address
• Address
• Telephone number (landline and/or mobile)

3. Duration of storage of your data:

Your personal data will be stored for as long as is necessary for the fulfilment of our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual or legal obligations, it will be deleted, unless we are obliged to store itfor a longer period of time in accordance with Article 6(1)(1)(c) GDPR due to tax and commercial law storage and documentation obligations (Section 257 of the German Commercial Code (Handelsgesetzbuch (HGB)), Section 147 of the German Tax Code (Abgabenordnung (AO)) or you have consented to further storage in accordance with Article 6(1)(1)(a) GDPR.

4. Recipients/categories of recipients of the personal data:

Your data will not be passed on to third parties. However, if we pass on data to third parties due to legal requirements, you will be informed immediately.

5. Transfer to a third country:

If data is transferred to a third country, we comply with the data protection regulations. In particular, we base the transfer on adequacy decisions of the EU Commission or other comparable agreements.

6. Rights of data subjects under the General Data Protection Regulation:

a) If your personal data is processed, you have the right to obtain information about the personal data stored about you (Art. 15 GDPR).

b) If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).

c) If the legal requirements are met, you can request the erasure or restriction of the processing and object to the processing (Art. 17, 18 and 21 GDPR).

d) If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).

Furthermore, you have the right to lodge a complaint with the office of the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover.

Version 002_2023-11-20