Processing of business contacts
Description and scope of data processing
In addition to contact information we receive electronically, employees and managers of our company receive, for example, business cards or event participant lists containing business contact information. We also collect and process business contact information from other sources. This personal business contact information is transferred by us to a contact database/CRM system
- title
- First and Last Name
- company
- function
- Company address
- E-mail address
- Company website
- Telephone number
- Mobile phone number
- fax number
In addition, the time and reason for the transfer of contact information and any further information arising from business-related communication are stored. For example,.
- Industry
- Appointment data
- Contact history
- Customer number, customer type
The data will be processed exclusively within the scope of our business relationship. The data will not be shared with third parties unless you give us your explicit consent.
Legal basis for data processing
The legal basis for processing the data transferred during the collection and storage of business contact details is Article 6(1)(f) GDPR for employees and staff of companies or organizations, or Article 6(1)(b) GDPR for sole proprietorships, provided that the contact is based on pre-contractual measures or is necessary for the performance of a contract. Sanctions list checks are carried out on the basis of Article 6(1)(c) GDPR.
Purpose of data processing
Administration and provision of contact options for individuals, companies, company employees, or public authorities. The processing of business contact data may serve one or more of the following purposes. If Article 6(1)(f) applies as the legal basis, these purposes also constitute the necessary legitimate interest in processing the data
- Maintaining contacts
- Information exchange
- Cooperation/business partnership
- Potential future cooperation/business partnership
- Offer preparation and contract processing
- Accounting
- Project execution
- Sending information material
Another purpose of processing business contact data is sanctions list checks for export and EU embargo control, which must be carried out due to the requirements of European foreign trade law.
Storage duration
After four years, at the end of each calendar year, it is reviewed whether further storage of personal data in the contact management system is necessary. If it is not necessary, the data is deleted. This review is carried out depending on the specific purpose.
If you object to the further processing of your contact details, the data will be deleted immediately. Deletion after four years, or the right to object, will not apply if legal reasons (retention periods, documentation requirements) prevent deletion.
Opportunity to object and have the matter rectified
You have the right to object to the processing and storage of your personal business contact details at any time. If you have given your consent to the processing of your personal business contact details, you have the right to withdraw your consent at any time.
In both cases, all personal data stored during contact management will be deleted, unless legal requirements (retention periods, documentation) prevent this. In the latter case, the data will be blocked. If the data is deleted or blocked, an existing conversation cannot be continued, and future contact cannot be established.
