Data protection information for

Suppliers and business partners

Data protection information for

Suppliers and business partners

We are pleased that you are interested in us and that you are contacting or have contacted our company as a supplier or business partner. We would like to provide you with the following information on the processing of your personal data in connection with contacting us as a supplier or business partner.

The protection of your personal data is important to us. Personal data is information about the personal or material circumstances of an identified or identifiable natural person. This includes, for example, the civil name, address, telephone number and date of birth, but also all other data that can be related to an identifiable person.

Our data protection practices comply with the statutory regulations, in particular those of the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (GDPR). The following data protection information serves to fulfil the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.

Who is responsible for data processing?

The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others determines the purposes and means of the processing of personal data.

With regard to your application, the controller is

isel Germany GmbH
Bürgermeister-Ebert-Straße 40
36124 Eichenzell
Germany

Email: info[at]isel.com
Phone: +49 6659 / 981-0
Fax: +49 6659 / 981-776

You can find further information about our company, details of the authorised representatives and other contact options in the legal notice on our website:

https://www.isel.com/impressum

Which of your data do we process? And for what purposes?

When you contact us, we collect the following data:

Your data that we have received from you in the context of contract initiation or processing (e.g. the name of your legal representatives, company, commercial register number, VAT ID number, company number, address),
Your contact details of contact persons in the company (first name, surname),
Your communication data (telephone number, mobile number, e-mail address, fax number),
your supplier number as well as your order and delivery data for the purpose of initiation,
Your order and contract data,
your billing and payment data (bank details, SEPA mandate, etc.),
all information that is necessary for your consultation and/or the execution of your enquiry within the framework of the supplier or business partner relationship.

This data is collected

to be able to identify you as our supplier / business partner,
to be able to correspond with you and/or otherwise contact you,
to be able to support you responsibly and successfully,
to fulfil the business purpose such as pre-contractual measures, e.g. to prepare offers, process enquiries(Art. 6 para. 1 subpara. 1 lit. b GDPR),
for the fulfilment of contractual obligations (order, order processing, payment processing, invoicing) to deliver goods and services(Art. 6 para. 1 subpara. 1 lit. b GDPR),
to maintain business contacts and to inform the business partner about new products and service offers(Art. 6 para. 1 subpara. 1 lit. f GDPR)
for processing due to legal obligations, e.g. with regard to tax law requirements(Art. 6 para. 1 subpara. 1 lit. c GDPR in conjunction with specific legal bases, such as § 147 AO, § 257 HGB),
to be able to process and enforce any liability claims we may have against you
to be able to pursue any (payment) claims on your part against us.

What is the legal basis for this?

The data processing takes place

for the fulfilment of (pre-)contractual obligations(Art. 6 para. 1 subpara. 1 lit. b GDPR):
Your data is processed for the fulfilment of the contract. The data is processed in particular when initiating business and when executing contracts with you.
for the fulfilment of legal obligations(Art. 6 para. 1 subpara. 1 lit. c GDPR):
Processing of your data is necessary for the purpose of fulfilling various legal obligations, e.g. from the German Commercial Code or the German Fiscal Code.
to safeguard legitimate interests(Art. 6 para. 1 subpara. 1 lit. f GDPR):
Based on a balancing of interests, data processing may take place beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties. Data processing to safeguard legitimate interests takes place, for example, in the following cases:
o Measures for business management and further development of services,
o In the context of legal prosecution.

How long will the data be stored?

Your data will be stored or collected both digitally (in our administration software / document management system) and in paper form.

The personal data collected by us as part of the supplier / business partner relationship will be stored or retained until the statutory retention period expires and then deleted or destroyed. Anything else shall only apply if we are obliged to store/retain data for a longer period due to other statutory provisions (e.g. the German Fiscal Code [AO], the German Money Laundering Act [GwG], etc.)(Art. 6 para. 1 subpara. 1 lit. c GDPR).

After the end of the retention period, we will have your existing paper records and documents collected by a certified company in sealed containers and then destroyed, while maintaining all confidentiality.

To which recipients is the data passed on?

Your personal data will not be transferred to third parties for purposes other than those listed below. Data will only be passed on if this is necessary for the proper processing of the contractual relationship with you(Art. 6 para. 1 subpara. 1 lit. b GDPR). This includes in particular the disclosure to our principal bank, in the event of any claims against you to our lawyer, any authorities and customers. Data is also passed on to public authorities (tax authorities) due to legal regulations, to external bodies (contractual partners) due to the fulfilment of the contract, if necessary, to external contractors (e.g. IT service providers, waste disposal companies) to process the data on our behalf in accordance with Art. 28 GDPR and to other external bodies (e.g. credit institution for supplier payments, tax consultants, customs) due to our overriding legitimate interests. The transferred data may only be used by the third party for the stated purposes.

Your personal data will not be transferred to third parties.

The employees of our company who come into contact with your data are subject to strict confidentiality and non-disclosure obligations, compliance with which we constantly monitor. Other persons with whom we work and who come or could come into contact with your data have also been or will be obliged by us in writing to maintain confidentiality and secrecy and - as they have also been or will be expressly informed - will themselves be liable to prosecution in the event of a breach.

Where is the data processed?

The data is processed exclusively on the internal servers of the controller.

If we transfer personal data to service providers outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection (admissibility requirements of Chapter V, Art. 44-50 GDPR) or if other appropriate data protection guarantees (e.g. binding corporate data protection regulations or EU standard contractual clauses) are in place.

Your rights as a "data subject"

You have the right to information(Art. 15 GDPR) about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then request proof from you that you are the person you claim to be.
Furthermore, you have the right to rectification(Art. 16 GDPR) or erasure(Art. 17 GDPR) or restriction(Art. 18 GDPR) of processing, insofar as you are legally entitled to this.

FURTHER,YOU HAVE A RIGHT OF OBJECTION (Art. 21 GDPR) AGAINST PROCESSING WITHIN THE FRAMEWORK OF THE LEGAL REQUIREMENTS. The same applies to the right to data portability(Art. 20 GDPR).

Our data protection officer

We have appointed a data protection officer in our company in accordance with Art. 37 GDPR. You can reach him under the following contact options

isel Germany GmbH

- To the data protection officer -

Bürgermeister-Ebert-Straße 40, D-36124 Eichenzell
Email: datenschutz[at]isel.com

Right of appeal

You have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Amendment of this data protection notice

We revise this data protection information in the event of changes in the processing procedure or other occasions that make this necessary. The current version can always be found on this website.

Status: 29/04/2024