Data protection notice for business partners

Data protection information for contact person at our business partners

(e.g. commercial customers, suppliers, cooperation partners)

 

Purpose of the data processing

We process your personal data for the following purposes:

  • Establishment of professional contact and communication
  • Maintaining business relations and implementing contracts between us and your employer or client

 

Legal basis

We process your data for our legitimate interests as stated above (Art. 6 Para. 1 Letter f GDPR). These are the performance of the contract and the maintenance of the business relationship with you and your employer/client. Insofar as we process personal data beyond this, this is based on your consent (Art. 6 Para. 1 Letter a GDPR).

 

Categories and sources of personal data

We process the following information about you: Name, gender, title, professional contact data, professional position, employer, information on previous communication. If you have voluntarily provided us with additional data, we may also have stored this data. If you have not provided us with your data yourself, we have received it from your employer or another business partner.

 

Recipient

The following entities may have access to your information:

  • IT service providers who operate, maintain or service our IT systems
  • other companies in our group

 

We use IT service providers/cloud service providers whose sub-contractors/parent companies are located in the USA. The legal basis for the transfer to this third country is EU standard contractual clauses.

 

Retention period

The personal data are stored for as long as they are necessary for the above-mentioned purposes. If your contact details are processed in connection with invoices, we will store them in accordance with the statutory retention periods. As a rule, the storage period is often 10 years in Germany due to accounting and tax regulations.

 

Your rights as data subjects

As data subjects you are entitled to the following rights, provided that the legal requirements are fulfilled:

  • Right to be informed, Art. 15 GDPR
  • Right to rectification, Art. 16 GDPR
  • Right to erasure, Art. 17 GDPR
  • Right to restriction of processing, Art. 18 GDPR
  • Right to data portability, Art. 20 GDPR
  • Right to object, Art. 21 GDPR

 

Provided the data processing is based on your consent, you may revoke it at any time, in whole or in part with effect on the future.

 

Insofar as the data processing is based on an assessment of the legitimate interests, you have the right to object to this processing of the data. There must be justified reasons for this, which result from your particular situation.

 

You also have the right to lodge a complaint with the data protection supervisory authority regarding the processing of your data.

 

Controller and data protection officer

Responsible for this data processing is:

Elkay Interior Systems GC GmbH, Gabriel-Dreßler-Straße 7, 63741 Aschaffenburg, info.gc@elkayinteriorsystems.com


The data protection officer can be contacted at fox-on Datenschutz GmbH, Pollerhofstr. 33a, 51789 Lindlar, Germany, dpo@fox-on.com