Privacy
Privacy matters to us. We do our best to explain everything relating to your data as clearly and transparently as we can.
Should any questions remain, we are of course happy to help at the email address shown below (see the Data Controller section).
| Categories of data Which data do we process? |
Contact details: first name, last name, company, email address, phone number, submitted images, messages from correspondence |
| Data controller Who is responsible for processing the data? |
The party responsible for processing the submitted data is:
Pennyworth Co GmbH |
| Source of data Where does the data come from? |
The data to be processed was provided to us by the customer. |
| Data sharing / recipients With whom do we share the data? |
For the provision of our services and the resulting legal obligations (e.g. bookkeeping), the data must be retained. All data is kept for the statutory retention periods and then deleted or anonymised. |
| Rights relating to your data | You can reach us at office@pennyworthco.com to exercise your rights relating to data protection (access, rectification, erasure, restriction, data portability, objection). If you believe that the processing of your data is unlawful or that your data-protection rights have been violated, you may contact the supervisory authority (Data Protection Authority). |
The following table lists which personal data is processed:
| Purpose of processing | Legal basis / interest | Retention period |
|---|---|---|
| Contact form enquiries We need the data from the contact form in order to respond to enquiries |
Legitimate interest | We store the data for the duration of the business relationship. After it ends, we retain the data for a maximum of 3 years. |
| Customer retention campaigns To personalise potential campaigns, we collect personal data with explicit consent. |
Consent, optional and revocable at any time | We store the data for the duration of the campaign. After it ends, we retain the data for a maximum of 1 year. |
| Unsolicited job applications Application documents sent to us may contain personal data. |
Processing of pre-contractual measures | If no employment relationship is established, we ask for explicit consent to keep the application on file. Otherwise, application documents are deleted after 1 year at the latest. |
| Technical functionality Server logs are written to ensure the website is delivered without errors. |
Legitimate interest | Log files are retained for a period of 2 months. |
| Legal obligation Fulfilment of legal obligations (accounting, financial obligations) |
Legal obligation | Deletion or anonymisation after the statutory retention period |
