This data protection information for business partners informs you of how your personal data is processed by Ferdinand Henneken GmbH. ZIn accordance with Article 4, Point 1 of the GDPR, your personal data include all information by which you are identified or identifiable, in particular by reference to an identifier such as a name, or an organisation or customer number with which you can be identified. We are providing this data protection information for business partners ( „Notification“ ), in order to explain, as the responsible body, the data processing processes to our suppliers, customers and business partners (collectively known as “ Business partners“  ) and their employees who are in contact with Ferdinand Henneken GmbH.  

Scope:

This notification applies if you are an independent business partner of Ferdinand Henneken GmbH (e.g. a supplier, customer, shareholder or consultant) or if you are an employee of a business partner who acts on behalf of the business partner with Ferdinand Henneken GmbH.  

Categories of personal data and data sources:

Ferdinand Henneken GmbH processes the following personal data from your company or from third parties (e.g. your supervisor, authorities or public resources):  

• Personal data relating to independent business partners: name, business contact details, services or products offered, contractual information, communication contents (such as e-mails or business letters), payment information, invoice information and the development of the business relationship

• Personal data relating to employees of an independent business partner: name, business contact details, employer name, title/position and communication contents (such as e-mails or business letters)

Data processing purposes, legal basis and consequences:

Your personal data will be used to fulfil the contractual relationships with the business partner (including fulfilling contractual performance obligations, invoice processing, communication and adherence to legal regulations), for marketing and CRM tasks and for fraud prevention.   Ferdinand Henneken GmbH relies on the following legal bases regarding data processing:

• Fulfilling the contractual relationship with the business partner (Article 6 b of the GDPR);
• Legitimate interests of Ferdinand Henneken GmbH, Ferdinand Henneken GmbH subsidiaries or third parties (e.g. government entities or courts) (Article 6 f of the GDPR). The legitimate interest can be company-wide exchange of information, marketing and CRM tasks, preventing fraud, IT misuse and money laundering, operating an informant system, physical security, IT and network security, internal determinations or potential mergers and takeovers;
• Consent (Article 6 a of the GDPR);
• Fulfilling legal obligations (Article 6 c of the GDPR);
• Legitimate interest of the body responsible, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Article 6 f of the GDPR);

Providing personal data is required to conclude and/or perform the business partner contract and is voluntary. However, if you do not provide this data, this could delay the business partner management and administrative processes, or make them impossible. 

Categories of recipients:

Ferdinand Henneken GmbH is permitted to use service providers who act as processors to provide IT and other administrative support (e.g. service providers who support accounting or who offer IT hosting and maintenance support). These service providers may have access to your personal data if this is required to provide these services. Any access to your personal data is limited to those people who require the information to complete their tasks. Ferdinand Henneken GmbH is permitted to publish your personal data if requested or required to do so by governmental authorities, courts, external authorities or similar third parties. Jeder Zugriff auf Ihre personenbezogenen Daten ist auf die Personen beschränkt, die die Information für die Vervollständigung Ihrer Tätigkeiten benötigt. Die Ferdinand Henneken GmbH darf Ihre personenbezogenen Daten offenlegen, sollte dies von Regierungsbehörden, Gerichten, externen Behörden oder auch ähnlichen Dritten gefordert oder verlangt werden.

Retention period:

The personal data will be saved by Ferdinand Henneken GmbH and our service providers as long as they are required to fulfil our obligations. The data will be saved as long as required for this purpose in accordance with the applicable data protection regulation. As soon as Ferdinand Henneken GmbH no longer required the data to fulfil contractual or legal obligations, it will be deleted from our systems and records and/or measures taken so that your personal data is anonymised properly so that it is no longer identifiable unless we must retain your personal data in order to comply with legal or regulatory obligations to which Ferdinand Henneken GmbH is subject. For example, legally prescribed retention periods resulting from the German Commercial Code or German Tax Code, which are normally between 6 and 10 years, or we must secure evidence within the limitation period that is normally 3 years but can also last up to 30 years. 

Your rights:

If you have given your consent with regard to certain processing tasks, you can revoke this at any time with future effect. This revocation does not affect previous processing of data. In accordance with the applicable data protection regulations, you have the right: a) to view your personal data; b) to request correction of your personal data; c) to request deletion of your personal data; d) to require limitations to processing of your personal data; e) to request that your personal data is transferred; f) to revoke consent to process your personal data. Note that the aforementioned rights can be limited by national law. Gemäß der geltenden Datenschutzgesetze haben Sie das Recht: a) Einsicht in Ihre personenbezogenen Daten zu nehmen; b) die Berichtigung Ihrer personenbezogenen Daten anzusetzen; c) die Löschung Ihrer personenbezogenen Daten zu beantragen; d) Einschränkungen bei der Verarbeitung Ihrer personenbezogenen Daten vorauszusetzen; e) die Übertragung Ihrer personenbezogenen Daten anzufordern; f) der Verarbeitung Ihrer personenbezogenen Daten zu wiedersprechen. Beachten Sie, dass die oben genannten Rechte durch nationales Recht beschränkt sein könnten.  

a)  Right of access: you have the right to receive confirmation from us as to whether we process your personal data and obtain access to this data. The access information contains the purpose of processing, the categories of personal data, the data subject and the recipient of categories of recipient among other things. However, this is not an absolute right and the interests of others can limit your right of access. You have the right to receive a copy of the personal data that is processed. We have the right to assess a reasonable fee for the administrative costs for further copies requested by you.

b)  Right to erasure (right to be forgotten): under certain circumstances, you have the right to have personal data regarding yourself erased.

c)  ght to restriction of processing: under certain circumstances, you have the right to obtain a restriction of processing of your personal data from us. Under these circumstances, the corresponding data will be marked and only processed for a specific purpose.

d)  Right to data portability: under certain circumstances, you have the right to receive the personal data provided by you in a structured, frequently used, machine-readable format and are entitled to transmit this data to another company without hindrance.  

You also have the right to submit a complaint to a supervisory authority.  

Right to object in accordance with Article 21 of the General Data Protection Regulation

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1). As Ferdinand Henneken GmbH primarily processes and uses your personal data for the purpose of the contractual relationship with you, Ferdinand Henneken GmbH has a legitimate interest in processing your personal data, which will override your restriction request. In order to exercise this right, please contact us as specified in “Questions”.   Ferdinand Henneken GmbH does not perform any automated individual decision-making.  

Questions:

If you have any questions regarding this notification or your rights, please contact us at info@henneken-tumbler.de. You can contact Ferdinand Henneken GmbH’s data protection officer using the following contact data:

Paul Köhler BITsic – Datenschutz und Informationssicherheit –    

Untere Kampstraße 12   

33181 Fürstenberg

Tel.: +49 (0)2953 99244          

Fax: +49 (0)2953 99245          

E-Mail: paul.koehler@bitsic.de

Internet: www.bitsic.de