Data protection
Information for customers and suppliers
Preliminary remark:
The following information for our customers and suppliers is a translation of our information leaflet for customers and suppliers from our German website.
In case of contradictions between the information in German language and the English translation, the German information applies in case of doubt. The English translation is for informational purposes only.
Data protection information on the collection of personal data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR) for business partners
With this information, we inform you about the processing of your personal data and the rights to which you are entitled under data protection law. Which data is processed in detail and how it is used depends largely on the services provided and agreed.
Who is responsible for data processing and who can I contact?
Eurofins Inpac Medizintechnik GmbH
Gewerbestr. 34
75217 Birkenfeld
You can reach our data protection officer Stefan Heß at: datenschutz@emetz.de
What do we process your data for (purposes of processing) and on what legal basis do we do this?
We process personal data in compliance with the EU General Data Protection Regulation (GDPR) and all other relevant laws:
- For the fulfilment of contractual obligations (Art. 6 (1b) GDPR)
The processing of personal data (Art. 4 No. 2 GDPR) is carried out for the processing of orders, the preparation of offers and the corresponding pre-contractual measures, the provision of services, invoicing and the delivery of goods.
The purposes of the processing are primarily based on the services to be provided by us. - As part of the balancing of interests (Art. 6 (1f) GDPR)
Where necessary, we also process your data in order to protect our legitimate interests or those of third parties. This may be the case, for example, for- ensuring IT security and IT operations, including testing
- for the prevention and investigation of criminal offences
- for statistical purposes
- to determine creditworthiness with credit agencies
- We may also send you e-mail advertising for similar goods and services. In these cases, we process the data required for this - even without you having given your express consent - in order to send you advertising content by email containing goods/services that are similar to those that you have already purchased in the past. The legal basis for the data processing described above is in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG).
- Processing due to legal requirements (Art. 6 para. 1c) GDPR)
We may process your personal data in order to fulfil legal obligations. This includes, for example, retention periods under commercial and tax law and, if necessary, information to authorities.
To whom is the data forwarded (categories of recipients)?
Data processing within the company and the Group:
We have bundled certain data processing procedures in our company. These are carried out centrally by specialised company divisions. Your data may be processed, for example, for telephone customer service, invoice processing or mail processing.
Within our group of companies (the Eurofins Group), your data will be transferred to specific areas for activities that are centrally organised, where necessary for the purposes mentioned. In this way, we ensure smooth data processing throughout the Group. Data processing within the Group is always carried out in compliance with data protection regulations.
External contractors and service providers (processors):
We also use external contractors and service providers to fulfil our tasks and contracts. These may include IT service providers, logistics companies, cloud providers or document shredders, for example.
Other recipients:
In addition, data may be passed on to recipients to whom we are obliged to pass on data due to legal obligations (e.g. law enforcement authorities and courts).
Duration of data storage:
Where necessary, we process and store your personal data for the duration of our business relationship. This also includes the initiation and processing of a contract/order. In addition, we are subject to various retention obligations, including those arising from the German Commercial Code. Finally, the storage period is also determined by the statutory limitation periods, which are generally 3 years but can also be up to 30 years.
Data transfer to third countries:
Data will only be transferred to third countries (countries outside the EU and the European Economic Area EEA) if this is necessary for the fulfilment of a contract/order/business relationship, including the initiation thereof, and only in compliance with the data protection requirements prescribed for this purpose.
Rights of data subjects:
You can request information about the personal data stored about you using the contact details provided above. (Art. 15 GDPR). In addition, under certain conditions, you can request the rectification or erasure of your data (Art. 16 and 17 GDPR). You have the right to request the restriction of the processing of your personal data
(Art. 18 GDPR). Furthermore, you have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format (Art. 20 GDPR).
Is there an obligation to provide data?
As part of a business initiation or business relationship with us, you generally only need to provide the data that we require to establish, implement or terminate this relationship. Without the provision of the necessary data, we may have to refuse to establish a business relationship or may not be able to do so or may even have to terminate such a relationship.
Right to lodge a complaint:
You have the option of lodging a complaint with the data protection officer named above or with a data protection supervisory authority.
Right to object to direct marketing:
You have the right to object to the processing of your personal data for direct marketing purposes.
If we process your data to protect legitimate interests, you can object to this processing if your particular situation gives rise to reasons that speak against data processing.
