Data protection information on the processing of business contacts
1. Description and scope of data processing
In addition to contact information that we receive electronically, employees and managing directors of our company receive, for example, business cards or lists of participants at events that contain business contact information. In addition, business contact information from other sources is collected and processed.
This personal business contact data is transferred by us to a contact database/CRM system.
- Title
- First and last name
- Company
- Role
- Company address
- E-mail address
- Internet address
- Telephone number
- Mobile phone number
- Fax number
In addition, the time and reason for the transfer of contact information and, if applicable, other information resulting from business-related communication is stored. This includes:
- Industry
- Appointment dates
- Contact history
- Customer number, customer type
- Date of birth, if applicable
The data is processed exclusively within the scope of our business relationship. The data will not be passed on to third parties unless you give us your consent to do so.
2. Legal basis for data processing
The legal basis for the processing of data processed in the course of the collection and storage of business contact data is Art. 6(1)(f) of GDPR for members and employees of companies or organisations, or Art. 6(1)(b) of GDPR for sole proprietorships, provided that the contact is based on pre-contractual measures or is necessary for the fulfilment of a contract.
If the data subject has given their consent, Art. 6(1)(a) GDPR is the legal basis for the processing.
3. Purpose of data processing
Administering and ensuring the possibility to contact persons, companies, employees of companies or public bodies. The processing of business contact data may serve one or more of the following purposes.
Insofar as Art. 6(1)(f) applies as legal basis, these purposes also constitute the necessary legitimate interest in the processing of the data.
- Maintaining contacts
- Exchange of information
- Cooperation/business collaboration
- Potential future cooperation/business collaboration
- Offer preparation and contract processing
- Accounting
- Project implementation
- Sending information material
- Sending birthday greetings
4. Duration of storage
After a period of four years at the end of the respective calendar year, it will be verified whether further storage of the personal data in the contact management system is necessary. If it is not necessary, the data will be deleted. The verification is carried out depending on the respective purpose.
If you object to further processing of your contact data, the data will be deleted immediately. The data will not be deleted after four years or the option to object will not apply if there are legal reasons (retention periods, verifiability) that prevent deletion. This data is blocked for further processing.
5. Possibility of objection and removal
You have the option to object to the processing and storage of your personal business contact data at any time. If you have given your consent to the processing of personal business contact data, you have the option of withdrawing your consent to processing. The objection can be sent by post, fax or e-mail.
In both cases, all personal data stored in the course of contact management will be deleted unless there are legal reasons (retention periods, verifiability) to the contrary. In the latter case, the data will be blocked.
In the event of deletion or blocking, processing for the stated purposes cannot be continued, or future contact cannot be made.
