INFORMATION REQUIREMENTS FOR SUPPLIERS ACCORDING TO ART. 13, 14 AND 21 DSGVO

The following data protection information provides you with an overview of the collection, processing and use of your data.

WHO IS RESPONSIBLE FOR DATA PROCESSING?

The responsible party in terms of data protection law is

BlueBioTech International GmbH
Rudolf-Diesel-Straße 4
24568 Kaltenkirchen

TYPE OF DATA

Relevant personal data are

  • name
  • address
  • other contact data
  • birthday
  • City and nationality,
  • legitimation data (ID card data)
  • authentication data (signature specimen)
  • Bank details

Darüber hinaus werden auch:

  • Sales data
  • Advertising and sales data
  • documentation data (consultation protocol) and
  • other data related to the aforementioned categories

are processed and stored.

PURPOSE OF PROCESSING

We always process personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG). We collect, process and use personal data of the supplier for the purpose of establishing and fulfilling the obligations arising from the contractual agreements in the context of the supply of goods and services by the supplier. The purpose of the collection and processing results primarily from the respective subject matter of the contract (contract for work and materials, service contract). This may also include needs analyses and consulting.

A collection and processing of the data can still take place:

  • on the basis of legitimate interests
    • Consultation of and data exchange with credit agencies, advertising, market research etc.
  • on the basis of consent given
    • transfer to affiliated companies (lawfulness with consent, can be revoked)
  • on the basis of legal requirements
    • fulfilment of control and reporting obligations under tax law

All further details on the purpose of data processing can be found in the respective contract documents and terms and conditions.

DATA TRANSFER

Within the company, your data will be passed on to those departments that need it to fulfil our contractual and legal obligations. Processors employed by us may also receive data for these purposes. In addition to companies within the Group, these also include companies in the IT services and printing and shipping services categories.

If data is passed on to recipients outside the company, we always ensure that applicable data protection regulations are observed and complied with. We are only authorized to pass on your information if this is required by law, is necessary for the fulfilment of contractual obligations, you have given your consent or we are authorized to provide information.

Under these conditions, recipients of personal data may be, for example:

  • Public bodies and institutions (offices).

Other data recipients may be those bodies for which you have given us your consent to transfer data.

STORAGE OF DATA

We process and store your personal data, if necessary, for the duration of our business relationship, which includes, for example, the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO) (2 to 10 years).

TRANSFER TO THIRD COUNTRIES

As a matter of principle, data is not transferred to third countries (countries outside the European Economic Area EEA). Exceptions are circumstances in which a transfer is necessary for the fulfilment of contractual obligations, is required by law or you have given us your consent for this. We will inform you accordingly before transfer.

RIGHT OF THE DATA SUBJECT

Within the framework of the legal requirements, you have the right to information about the processing of your personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to object to processing and the right to data portability.

When asserting the right to information and the right to erasure, the restrictions according to §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority pursuant to Art. 77 DS-GVO in conjunction with. § 19 BDSG.

PROVISION OF DATA

Within the scope of our business relationship, only those personal data must be provided which are necessary for the establishment, implementation and termination of a business relationship or which we are legally obliged to collect. Without the provision of this data, it is not possible to conclude a contract or we must refuse to do so, or an existing contract is no longer feasible on our part and may have to be terminated.

AUTOMATIC DECISION MAKING

In the course of the establishment and implementation of the business relationship, we generally do not use automated decision-making or corresponding means to this end. Should this type of procedure be used in individual cases, we will inform you of this separately, insofar as this is required by law.

Scoring

We do not use your data to create profiles (scoring) for the purpose of establishing and carrying out the business relationship.

INFORMATION ABOUT YOUR RIGHT OF OBJECTION

  1. Individual right of objection
    You have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

  2. Right to object to processing of data for direct marketing purposes.
    In individual cases, we process your personal data in order to conduct direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

    The objection can be issued informally and addressed immediately to the data protection officer.

OUR DATA PROTECTION OFFICER

Herr Philipp Herold
Mein Datenschutzbeauftragter.de
Rudolf-Diesel-Straße 10
23617 Stockelsdorf
Phone: +49 451 16085221
E-Mail: datenschutzbeauftragter@bluebiotech.de