Information on the processing of data

Data protection regarding the processing of personal data of our business partners (customers / suppliers; B2B)
We, LISEGA SE, Gerhard-Liesegang-Str. 1, 27404 Zeven,

as the contractual partner of your company, process the personal data with regard to your person for purposes of our legitimate interests for the preparation of the offer und the fulfilment of the contracts on the basis of art. 6 (1) s. 1 let. f GDPR. Bookkeeping and cost accounting on the basis of art. 6 (1) s. 1 let. b GDPR and for the fulfilment of contractual and legal obligations (e.g. commercial and tax law) on the basis of art. 6 (1) s. 1 let. c GDPR. The business relationship exists between your company and us. Because of external requirements (e.g. within the scope of tax law and customs law) it can happen that personal data regarding your person is compared to lists which were published by federal authorities.

Furthermore, data may also be processed for legitimate purposes in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, such as marketing, internal market research and marketing purposes, in-house statistics. The legitimate interests are in particular process optimisation and cost-based attribution; in this connection your interests, fundamental rights and freedoms are duly taken into account.

Only if you have given us your consent or if we have informed you adequately about the data collection according to § 7 UWG (German Law against Unfair Competition), we use your data to provide you with information about products, services, events and other useful information about us. You can object to receiving such information any time with effect for the future.

The data provided by you are essential in order to conduct the contractual relationship. Without these provided data we are not able to perform the contractual relationship.

Transfer
Your personal data is partly transferred to external service providers (e. g. tax consultants, legal advisors). To some extent, external IT contractors can access your data (within the scope of commissioned data processing according to Art. 28 GDPR). In these cases, the service providers are bound by instructions. This is ensured by corresponding contracts. Some of these contractors are located outside the EU / EEA; those contractors ensure an adequate level of data protection by concluding EU standard contractual clauses

Affiliates
In order to provide you with the best possible information and services for the purposes outlined above, information about the contractual relationship (including personal data) is provided within our globally operating LISEGA group (including the US and other non-EU / non-EEA countries). Even those companies within the group which are located outside the EU ensure an adequate level of data protection by concluding EU Standard Contractual Clauses

Retention and erasure of personal data
Your personal data will be stored as long as these are required to fulfil the above-mentioned purposes. The data will be erased at the latest after the termination of the contractual relationship and after expiry of the statutory retention periods of civil, commercial and tax law.
Your rights: see below
Contact details of the Data Protection Officer: see below

Rights of the data subjects
We hereby inform you that pursuant to Article 15 et seqq. GDPR you have the right to obtain information on the personal data concerned, as well as the right to rectification, erasure, restriction of processing and the right to object to processing of your personal data as well as the right to data portability. Moreover, you have the right to lodge a complaint with a supervisory authority according to Art. 77 GDPR if you believe that the processing of your personal data infringes the GDPR. If the processing of the personal data is based on Article 6 para. 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR (Consent), you also have the right to withdraw your consent at any time without affecting the legality of the processing based on the consent until its withdrawal.

Right of access by the data subject, Art. 15 GDPR
You have the right to obtain confirmation as to whether or not and to which extent personal data of the data subject is being processed (especially the purpose of the processing, recipient of the data, retention period, etc.).

Right to rectification, Art. 16 GDPR
You have the right to obtain the rectification of the personal data concerning you, if these are incorrect or incomplete. This includes the right of completion of incomplete personal data by providing supplementary statements or notifications.

Right to erasure, Art. 17 GDPR
You have the right to demand the erasure of your personal data. This is possible e. g. when the data is not needed anymore for the purpose it was originally collected for or if there is another legal obligation that requires erasure of the personal data. This right may be excluded in individual cases.

Right to restriction of processing, Art. 18 GDPR
You have the right to demand restriction of the processing of your personal data. This is possible e. g. when the data has been recorded incorrectly or the processing of the data is unlawful. When restricting the processing of personal data, the processing is only allowed in closely defined cases.

Right to data portability, Art. 20 GDPR
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, and the right to have those data transmitted from one controller to another controller. This only applies if you have provided that information yourself.

Right to object, Art. 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you with effect to the future, if the processing of personal data was based on legitimate interests (see Art. 6 para. 1 lit. e, f GDPR). If you object, it will be evaluated whether or not the processing is based on current law and, if this is not the case, any further processing of your personal data will be refrained from.

Right to lodge a complaint with a supervisory authority, Art. 77 GDPR
You have the right to lodge a complaint with a supervisory authority of the Union or Member States in case of potential infringements of current data protection provisions.

Contact details of the responsible supervisory authority:
Mailing address: Postfach 221, 30002 Hannover
Phone: 0511 120-4500 (Monday, Wednesday, Friday: 09h00 – 12h00, remaining time: answering machine)
E-Mail: poststelle@lfd.niedersachsen.de

Contact details of the Data Protection Officer
If you have any questions regarding the processing of your personal data, you can contact our Data Protection Officer directly, who will be available with his team i. a. in the event of requests for information, other requests or complaints.

Contact details to external Data Protection Officer:
Mailing address: Otto-Hausmann-Ring 113, 42115 Wuppertal, Germany
Phone: +49 202 946 7726 200
E- Mail: datenschutz.lisega@uimc.de

Status: July 12, 2019