Data protection information for our contact persons at suppliers, contractors or other service providers in accordance with the European General Data Protection Regulation (GDPR)

The following information provides you, as the contact person at our suppliers, contractors or other service providers (hereinafter "contact persons"), with an overview of the processing of your personal data by our company and your rights under the GDPR

1. Data processing controller and data protection officer

The controller responsible for data processing is

Industrieterrains Düsseldorf-Reisholz AG Henkelstraße 
16440589 Düsseldorf
Telephone: +49 211 748 36-0

E-mail: mail(at)idr.de(hereinafter "company", "we") The data protection officer of our company is: Sascha Hasselbach
Kronprinzstr. 47-4940764
Langenfeld Phone: +49 2173 20 41 244
E-mail: sascha.hasselbach(at)datenschutz-extern-nrw.de

2. Data sources and type of use of personal data

We process personal data that we receive from you as a contact person as part of our business relationship. In the contract initiation phase, i.e. before the contract is concluded, and during the business relationship, personal data is generated by us and you. The personal data usually generated are: name, salutation, title, address, telephone number, fax number, e-mail address, account data, your company / firm (with VAT ID), department, position, date of birth, billing rates, exemption certificates, insurance certificates, guarantees, credit assessments, extracts from the commercial register as well as inquiries and correspondence for the conclusion, administration, execution and billing of the contract with you or your company

3. Purpose and legal basis of data processing

Your personal data will be processed in accordance with the applicable data protection regulations, in particular the GDPR and the German Federal Data Protection Act (BDSG). Specifically, this is done for the following purposes and on the following legal bases

a) Based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR

 

If you have given us your consent to process your data for specific purposes, e.g. to receive a newsletter, we will process your data on the legal basis of your consent. The scope and purpose of the data processing is described in the corresponding declaration of consent provided to you

b) For the fulfillment of contractual obligations pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR

 

The processing of personal data is carried out for the performance of contracts, namely for the performance of the contract concluded with you or your company. Further information on the purposes and scope of the contractual services for which the data is processed can be found in the respective contract

c) To fulfill legal requirements in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR

 

As a company, we are subject to various legal requirements to fulfill tax control and reporting obligations. To ensure compliance with these requirements, personal data is processed in the context of business initiation and processing in accordance with the legal requirements

d) As part of the balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR

 

We process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties

• We use your contact data to invite you to events organized by our company.

4. Who receives my data?

We pass on your personal data within our company to the departments that need this data to fulfill contractual and legal obligations or to implement our legitimate interests. In addition, the following departments may receive your personal data

• processors employed by us (Art. 28 GDPR), in particular e.g. in the area of IT services;
• public bodies and institutions in the event of a legal or official obligation under which we are obliged to provide information, report or disclose data or the disclosure of data is in the public interest;
• Bodies and institutions on the basis of our legitimate interest or the legitimate interest of the third party (e.g. authorities, lawyers, courts, experts, supervisory authorities);
• other bodies for which you have given us your consent to transfer data.

5. Will my personal data be transferred to a "third country"?

Your personal data will only be transferred to countries outside the EU or the EEA if you have given us your consent to do so or if this is a necessary condition for the performance of a contract

6. How long will my data be stored?

Your personal data will be processed and stored for as long as is necessary to fulfill our contractual and legal obligations. After fulfillment of the contractual and legal obligations, the personal data is regularly deleted. Exceptions to this are

• The fulfillment of retention periods under commercial and tax law. The periods for this are between two and ten years.
• The preservation of evidence within the framework of the statute of limitations. According to §§ 195 ff. of the German Civil Code, these limitation periods can be up to thirty years. The regular limitation period here is three years until the end of the year.

7. What data protection rights can I exercise as a contact person?

As a "data subject", you have the following rights with regard to the personal data concerning you (Art. 15 ff. GDPR): The data subject has the right to request confirmation from us as to whether personal data concerning him or her is being processed; if this is the case, he or she has a right to information about this personal data and to the information listed in detail in Art. 15 GDPR. The data subject has the right to demand that we rectify any inaccurate personal data concerning him or her without delay and, if necessary, to have incomplete personal data completed (Art. 16 GDPR).

The data subject has the right to obtain from us the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure). The data subject has the right to obtain from us restriction of processing where one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has lodged an objection to the processing, for the duration of the examination by the controller.The data subject has the right to object to the processing of personal data concerning him/her at any time for reasons arising from his/her particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR). The revocation only takes effect in the future. Processing of personal data prior to the withdrawal of consent is not affected by this.Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement. In North Rhine-Westphalia, the competent supervisory authority is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
E-mail: poststelle(at)ldi.nrw.deConsent given by a data subject to the processing of personal data can be revoked at any time. This also applies to consent given before May 25, 2018 (validity of the GDPR). The revocation only takes effect in the future. Processing of personal data prior to the revocation is not affected by this

8. Obligation to provide data for contract processing

The data requested by us in the respective contract (name, company/company, contact and account data) must be provided. If you do not provide this data, we will have to reject you or your company as a contact person, as we absolutely need it to process the contract. as at: June/2019