Privacy policy
II. Details on the processing of personal data
Purpose of processing the personal data
Pre-contractual steps
Purpose of processing the personal data
Taking steps prior to entering into a contract, including pre-contractual communication.
Categories of personal data processed
Master data,
contact data,
communication data,
contract data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
If the data subject is our (potential) supplier, the legal basis is taking steps at the request of the data subject prior to entering into a contract (point (b) of Article 6 paragraph 1 of the General Data Protection Regulation).
If the data subject is not our (potential) supplier, the legal basis is a balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest is taking steps at the request of our (potential) supplier prior to entering into a contract.
Recipient
Shipping/courier service providers.
Performance of contracts
Purpose of processing the personal data
Performance of contracts with our suppliers, including contractual communication, exchange of services and payment processing.
Categories of personal data processed
Master data,
contact data
bank account data,
communication data,
contract data,
invoice data,
payment data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
If the data subject is our supplier, the legal basis is the performance of a contract, to which the data subject is party (point (b) of Article 6 paragraph 1 of the General Data Protection Regulation).
If the data subject is not our supplier, the legal basis is a balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest is the performance of the contract with our supplier.
Recipient
Shipping/courier service providers,
IT service providers.
Proper accounting and storage
Purpose of processing the personal data
Proper accounting and storage to comply with contractual and statutory, in particular commercial law and tax law retention obligations.
Categories of personal data processed
Master data,
identification data,
contact data,
bank account data,
communication data,
contract data,
invoice data,
payment data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Compliance with a legal obligation (point (c) of Article 6 paragraph 1 of the General Data Protection Regulation), in particular compliance with statutory requirements for proper accounting and statutory, in particular professional ethics, commercial and tax law retention obligations.
If the data subject is our supplier, the legal basis is also the performance of a contract, to which the data subject is party (point (b) of Article 6 paragraph 1 of the General Data Protection Regulation).
If the data subject is not our supplier, the legal basis is also a balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest is the performance of the contract with our supplier.
Recipient
Accounting service providers,
archiving service providers.
Storage for evidence purposes
Purpose of processing the personal data
Storage for evidence purposes for the establishment, exercise or defence of possible legal claims.
Categories of personal data processed
Master data,
contact data,
bank account data,
communication data,
contract data,
minutes data,
invoice data,
payment data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interests is the establishment, exercise or defence of legal claims.
Recipient
Archiving service providers.
Establishment, exercise or defence of legal claims
Purpose of processing the personal data
Establishment, exercise or defence of legal claims, including liaison with external lawyers.
Categories of personal data processed
Master data,
contact data,
bank account data,
communication data,
contract data,
invoice data,
payment data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interests is the establishment, exercise or defence of legal claims.
Recipient
Courts and/or authorities,
external lawyers.
Liaison with external tax advisors and/or auditors
Purpose of processing the personal data
Liaison with external tax advisors and/or auditors to comply with statutory obligations.
Categories of personal data processed
Master data,
contact data,
bank account data,
communication data,
contract data,
invoice data,
payment data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Compliance with a legal obligation (point (c) of Article 6 paragraph 1 of the General Data Protection Regulation).
Recipient
External tax advisors,
external auditors.
Cooperation with courts and/or authorities
Purpose of processing the personal data
Cooperation with courts and/or authorities to comply with statutory obligations.
Categories of personal data processed
Master data,
contact data,
bank account data,
communication data,
contract data,
invoice data,
payment data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Compliance with a legal obligation (point (c) of Article 6 paragraph 1 of the General Data Protection Regulation).
Recipient
Courts and/or authorities.
Business relationship management
Purpose of processing the personal data
Business relationship management, making contact to inform our suppliers and to maintain relationships with our suppliers.
Categories of personal data processed
Master data,
contact data,
communication data,
contract data,
minutes data,
analysis data,
survey data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
The legal basis for business relationship management is generally a balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest is the maintenance and strategic alignment of the relationships with our suppliers.
The legal basis for making contact to inform our suppliers can, depending on the circumstances of each individual case, in particular the way in which contact is made, either consent (point (a) of Article 6 paragraph 1 of the General Data Protection Regulation) or a balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest is information our suppliers.
Recipient
-