Data protection

3. General information and mandatory disclosures

Data Protection

​

We take the protection of your personal data very seriously. We treat your personal information confidentially and in accordance with legal data protection regulations and this privacy policy.

When you use this website, various personal data is collected.
Personal data refers to data that can be used to personally identify you.

This privacy policy explains which data we collect, how we use it, and for what purpose.
Please note that data transmission on the internet (e.g., communication via email) can have security gaps. A completely secure protection against access by third parties is not possible.

​

Information about the Responsible Party

​

The responsible party for data processing on this website is:

Samsam-Tech
Lüdersring 105B
22547 Hamburg
Phone: +49 1771482584
Email: Info@samsam-tech.de

The responsible party is the natural or legal person who decides alone or jointly with others on the purposes and means of processing personal data.

​

Storage Duration

​

Unless a more specific storage period is mentioned in this privacy policy, your personal data remains with us until the purpose for processing no longer applies.
If you make a valid deletion request or revoke your consent, your data will be deleted unless there are legally permitted reasons for storage (e.g., tax or commercial retention periods). In such cases, deletion occurs once these reasons no longer apply.

​

Legal Bases for Data Processing on This Website

​

If you have consented to data processing, we process your data based on Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR for special data categories.
If you have consented to transfer data to third countries, processing is also based on Art. 49 (1) lit. a GDPR.
If you consented to cookie storage or device data access, processing additionally follows § 25 (1) TDDDG.

If your data is required for contract performance or pre-contract measures, processing is based on Art. 6 (1) lit. b GDPR.

If processing is required due to a legal obligation, we rely on Art. 6 (1) lit. c GDPR.

Processing may also occur based on our legitimate interest under Art. 6 (1) lit. f GDPR.

Details on the legal basis used in each context are provided below.

​

Recipients of Personal Data

​

We work with various external parties in the course of our business. Personal data may be transferred to these parties when necessary for contract fulfillment, due to legal obligations, based on our legitimate interest, or when another legal basis permits it.

Data is only transferred to processors on the basis of valid processing agreements.
In cases of joint processing, a joint processing agreement is established.

​

Withdrawal of Consent

​

Many processing operations are only possible with your explicit consent. You may withdraw previously granted consent at any time.
The legality of data processing prior to withdrawal remains unaffected.

​

Right to Object (Art. 21 GDPR)

​

(Your translated legal paragraph remains unchanged in meaning; I am keeping the structure and uppercase as legally required.)

IF DATA PROCESSING IS BASED ON ART. 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO DIRECT MARKETING.
IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 (2) GDPR).

​

Right to Lodge a Complaint

​

In case of GDPR violations, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, workplace, or place of alleged infringement.
This right exists without prejudice to other legal remedies.

​

Right to Data Portability

​

You have the right to receive personal data processed based on your consent or contract automatically, in a common, machine-readable format. You may also request direct transfer to another controller, where technically feasible.

​

Right to Access, Correction, and Deletion

​

Within the limits of the law, you may request information at any time about your stored personal data, its origin, recipients, and purpose of processing, as well as correction or deletion of this data.

​

Right to Restrict Processing

​

You may request restriction of processing under the following circumstances:

• You dispute the accuracy of the personal data (restriction applies during verification).

• Processing is unlawful, and you request restriction instead of deletion.

• We no longer need the data, but you require it for legal claims.

• You objected under Art. 21 (1) GDPR, and a balancing of interests is pending.

If processing is restricted, your data may only be processed with your consent, for legal claims, to protect others’ rights, or for important public interest.