General Data Protection Information of
CA International GmbH

Controller and Contact Information
The controller is CA International GmbH,
Email: info@cainternational.eu
Note: The previous email addresses associated with the former company have been replaced with the new company email addresses.

  1. Data and Its Origin
    a) We process personal data from you that we collect to manage our business relationships with the company you represent.
  • Name, first name, and contact details of contact persons
  • Name, first name, and contact details of interested parties
  • Planning data
  • In the case of using electronic media: IT usage data
  • Possibly private information such as date of birth (voluntary)

b) If you, as a customer or business partner, are a natural person, the following data, which we collect for the execution of pre-contractual and contractual measures, will be processed in addition to the aforementioned data:

  • Contact details
  • Planning data
  • Account details
  • Possibly non-essential information such as date of birth (voluntary)

c) If you communicate with us via electronic media such as the internet or our web portal, IT usage data will also be processed.

  1. Data Processing Purposes and Legal Bases
    For 2. a):
    To initiate or execute contracts with our customers or business partners, we process your personal data as a contact person based on the legitimate interests of the controller. We always balance these interests with your personal rights. Therefore, usually only the name and business contact details are used to document the business relationship and personal contact. The legal basis for this is Art. 6(1)(f) GDPR.
    If private data or data for sending newsletters is processed, this is based solely on your consent under Art. 6(1)(a) GDPR.

For 2. b):
Your personal data will be processed to fulfill a contract or pre-contractual measures to the necessary extent. The legal basis for this is Art. 6(1)(b) GDPR.
If non-essential information is processed, this is based solely on your consent under Art. 6(1)(a) GDPR.

For 2. a and b):
As an interested party in information and products, we process your personal data either within the scope of consent (Art. 6(1)(a) GDPR, e.g., for marketing measures) or based on the legitimate interest of the controller in balancing with your personal rights (Art. 6(1)(f) GDPR). Special provisions of the Unfair Competition Act (UWG) are particularly considered here.

A credit check is carried out based on our legitimate interest in secure business operations in balance with your personal rights under Art. 6(1)(f) GDPR. For this purpose, we cooperate with CRIFBÜRGEL Hannover Bielefeld GmbH & Co. KG, from whom we receive the necessary data. Furthermore, we may process your personal data to assert, exercise, or defend civil claims based on Section 24(1)(2) of the Federal Data Protection Act (BDSG). For this purpose, we transmit your name and contact details to CRIFBÜRGEL Hannover Bielefeld GmbH & Co. KG.
You can find the information according to Art. 14 GDPR on the processing carried out by CRIFBÜRGEL Hannover Bielefeld GmbH & Co. KG here: www.crifbuergel.de/de/datenschutz
As part of the implementation of the status of an authorized economic operator under Article 76 of the Customs Code (Regulation (EEC) No 2913/92) and Article 253 ff. of the Customs Code Implementing Regulation (Regulation (EEC) No 2454/93), random checks are carried out at irregular intervals to determine whether you are suspected of terrorism.

For 2. c):
To offer you secure electronic media, usage data will be processed to the necessary extent to ensure IT security, as well as statistical usage data in anonymized form to improve the quality of our services. This data collection is based on Art. 6(1)(f) GDPR.

  1. Data Recipients
    We do not pass on your data to unauthorized third parties. However, data will be disclosed to the extent necessary for contract execution with natural persons to:
  • Financial institutions (transfers/direct debits)
  • External contractors in accordance with  Art. 28 GDPR .

  5 . Transfer to Third Countries or International Organizations

The transfer of your data to a third country or international organizations is not planned.

6 .Retention Period of Your Data

Your personal data will be deleted after the expiration of the legal retention periods, which arise, for example, from the Civil Code (BGB), Commercial Code (HGB), and the Tax Code (AO).

If data is not affected by this, it will be deleted when the purpose for which it was collected ceases to apply. 

7 . Your Rights
You have the following rights concerning CA International GmbH:

  • The right to access your stored personal data (Art. 15 GDPR)
  • The right to correct data if it is incorrect, outdated, or otherwise incorrect (Art. 16 GDPR)
  • The right to delete data if storage is unlawful, the purpose of processing has been fulfilled, and storage is no longer required, or you withdraw consent for the processing of specific personal data (Art. 17 GDPR)
  • The right to restrict processing if one of the conditions in Art. 18(1)(a) to (d) GDPR is met
  • The right to data portability for the personal data concerning you that you have provided (Art. 20 GDPR)
  • The right to withdraw any given consent, whereby the withdrawal does not affect the lawfulness of the processing carried out based on the consent until the withdrawal (Art. 7(3) GDPR)
  • The right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
  1.  Right to Object
    If you have given consent for processing your data (Art. 6(1)(a) or Art. 9(2)(a) GDPR), you have the right to withdraw this consent at any time.
    You can also object to other processing based on a legitimate interest under Art. 6(1)(f) GDPR at any time, stating reasons arising from your particular situation. In the case of a justified objection, we will generally no longer process the personal data for the relevant purposes and delete the data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
    If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or the processing is for the establishment, exercise, or defense of legal claims.
    For concerns of this nature, please contact us .

  2.  Requirement to Provide Personal Data
    If you are a customer or business partner as a natural person, your information is mandatory for the proper execution of the business relationship. Without your information, the legal transaction (obligation relationship) or the business relationship cannot be properly processed, which could lead to the termination of the contract or the non-performance of payments.
  3. For more information, please refer to the privacy policy on the website

Subscribe to our newsletter to get updates on our latest offers!