Privacy policy

Information on data processing

As one of the relevant stakeholders mentioned above, we primarily process your personal data to establish and fulfill a contractual relationship with you or due to a legitimate interest. For example, this may be the case if we have entered into a contract with your employer, and you are the designated contact person for fulfillment. We collect, store, and, if necessary, disclose your data to the extent required to provide the contractually agreed-upon services, provide information, conduct direct marketing activities, or engage in other activities related to our business operations. Failure to provide this information may result in the inability to conclude the contract. Furthermore, we only process your data if you have given consent for the processing or if another legal basis exists.

Purposes of data processing

We process your personal data to achieve the following purposes in connection with the initiation and execution of a contractual relationship or other activities in the interest of the company:

• Contractual processing
• Advertising to existing customers, using as a selection criterion for direct marketing to provide you with a tailored service
• Creditworthiness checks
• Customer analysis for market and opinion research
• Reporting on our company
• Compliance with legal or contractual requirements
• Resolution of legal disputes, enforcement of contracts, and assertion, defense, and exercise of legal claims, detection and prosecution of fraudulent and other unlawful activities

Types of data processed by us

The following personal data is processed:

• Contact data: Name, address, phone number
• Identification/payment data: Account number, VAT ID
• Other data: Additional necessary information regarding the business relationship or voluntarily provided, as well as data from publicly available sources.

Categories of recipients

Personal data is transmitted, as necessary, to affiliated companies, regulatory authorities, and legal service providers/auditors. If we are legally obligated to do so, we will release your data to the relevant authorities upon request.

These service providers have been carefully selected by us, formally engaged in writing, and are bound by our instructions. Our service providers are regularly monitored by us. The service providers will not disclose this data to third parties but will delete it after the contract is fulfilled and the statutory retention periods have expired, unless you have consented to further storage.

Examples of such service providers include:

• Banks, payment service providers

Legal basis for processing

The legal bases for processing your data include, in particular:

1. Article 6(1)(a): Based on your consent, whereby consent is generally not required for the conclusion or continuation of an existing contract.
2. Article 6(1)(b): For the establishment, execution, and termination of a contractual relationship.
3. Article 6(1)(c): To fulfill a legal obligation.
4. Article 6(1)(f): To safeguard a legitimate interest.

Our legitimate interests in this context include the achievement of the purposes mentioned above and additionally, for example, in:

• Advancing our business interests, including direct marketing and creditworthiness checks.
• Realizing efficiency and effectiveness potentials, also in collaboration with partners and possibly affiliated companies.
• Ensuring compliance with security regulations, requirements, industry standards, and contractual obligations.
• Asserting, exercising, or defending legal claims.
• Preventing harm and/or liability of the company through appropriate measures.
• Conducting information and communication measures, including promotional activities.
• Reporting on corporate information.

Customer analysis

In the case of customer analysis, the processing of your data occurs either in an anonymous form or, if anonymous processing is not possible or not meaningful for factual reasons, in pseudonymized form.

Certain processes or services mentioned above are carried out by carefully selected and commissioned service providers. We transmit or receive personal data of these service providers solely based on a processing contract. If a service provider is located outside the European Union or the European Economic Area, a transfer to a third country takes place. With these service providers, data protection agreements in compliance with legal requirements are contractually established to ensure an adequate level of data protection, and appropriate guarantees are agreed upon.

Data collected from third parties

Possibly, data may be provided to us by third parties, for example, as part of recommendations. In this case, it usually involves contact details in connection with specific product or service needs. We may also collect data from credit reporting agencies regarding creditworthiness and/or negative features.

Retention period

Upon achieving the respective purpose, your data will be deleted in compliance with legal retention periods.