Privacy Notice for Our Business Partners
Compliance with data protection regulations is a top priority for us. Below, we would like to inform you as a business partner or as the designated contact person for a relevant business partner about the collection and processing of your personal data.
Data Controller
The data controller is Haarländer GmbH, Regensburger Ring 14, 91154 Roth, Phone: +49 9171 9618-0,
Email: info@haarlaender-gmbh.com.
Type of Data
As part of our business relationship, you must provide the personal data necessary for establishing, conducting, and terminating a business relationship and for fulfilling the associated obligations—data that we are legally required to collect or are entitled to collect based on legitimate interests. Without this data, we will generally not be able to enter into a business relationship with you.
Therefore, when you, as a business partner, or your company enters into a business relationship with us, we generally process the following personal data:
• Title, first name, last name,
• a valid email address,
• Business partner’s address,
• business phone number (landline/cell),
• the necessary quotation and contract information (including the subject matter of the business relationship, type of service, related pricing information, terms of performance, date of performance, and information regarding due dates),
• Information regarding the conduct of the business relationship (correspondence details, any warranty issues, duration of the business relationship),
• If applicable, tax ID number, HRB number, and business bank account information
Purpose and Legal Basis for Data Processing
To fulfill contractual obligations (Art. 6(1)(b) GDPR)
The processing of your personal data may be necessary either for the implementation of pre-contractual measures preceding a contractually regulated business relationship or for the fulfillment of obligations arising from a contract concluded with you. This may include, for example, the processing of purchase orders, deliveries, or payments, or the preparation of and response to requests for quotes from individuals, in order to establish the basis or terms of a contractual relationship.
To comply with a legal obligation (Art. 6(1)(c) GDPR)
The purposes of data processing are determined on a case-by-case basis by legal requirements. These legal obligations include, for example, compliance with retention and identification requirements—such as those related to anti-money laundering regulations, tax audit and reporting obligations, commercial and foreign trade laws, sanctions regulations, and data processing in response to requests from government authorities.
To pursue legitimate interests (Art. 6(1), first sentence, f) of the GDPR)
In addition, it may be necessary to process your personal data to safeguard legitimate interests. These legitimate interests include, in particular, the conclusion or performance of contracts and other business relationships with our business partners, for whom you may act as a representative or employee. Furthermore, legitimate interests include internal administrative purposes (e.g., for accounting or process and workflow optimization), the selection of suitable business partners, ensuring the security of our company’s IT infrastructure, conducting compliance investigations, asserting legal claims, defending against liability claims, ensuring the security of buildings and facilities, or preventing criminal offenses and settling claims arising from the business relationship.
Upon conclusion of the contract, we occasionally collect data regarding your creditworthiness from credit bureaus to fulfill the legitimate interests mentioned above. We use the creditworthiness data from credit reporting agencies to assess your creditworthiness. Credit reporting agencies store data they receive, for example, from banks or companies. This data includes, in particular, last name, first name, date of birth, address, and information regarding payment history. You can obtain information about the data stored about you directly from the credit reporting agencies.
If you participate in the conclusion of a contract offered by us via digital signature (e.g., Adobe Sign), we process your data—in particular your email address, IP address, and the times at which you edited the respective contract document (e.g., approved, viewed, or digitally signed it), including the time and date for each action. Our legitimate interest lies in the efficient and rapid digital processing of the contract signing as well as the corresponding logging of the signing process for verification purposes. Additionally, it is possible to sign certain contracts with a so-called qualified electronic signature. In this case, in addition to the data mentioned above, we also process the certificate data associated with your signature. Our legitimate interest in this regard is to verify whether you possess a valid qualified electronic signature, which can serve as a substitute for any applicable legal requirement for written form. A prerequisite for using a qualified electronic signature is registration with a trust service provider (e.g., D-Trust / Bundesdruckerei), which you must complete on your own. However, the respective provider processes the data you provide during registration under its own responsibility and not on our behalf.
Based on consent (Article 6(1)(a) of the GDPR)
In addition, the processing of your personal data may be based on voluntary consent within the meaning of Article 6(1)(a) of the GDPR.
Obligation to Provide Your Personal Data
Within the scope of our business relationship, you must provide the personal data necessary for the establishment, conduct, and termination of a business relationship and for the fulfillment of the associated obligations, which we are legally required to collect or are entitled to collect based on legitimate interests. Without this data, we will generally not be able to enter into a business relationship with you.
Retention Period/Criteria for Determining the Retention Period
Personal data will be retained for as long as necessary to fulfill the purposes mentioned above or as long as statutory or contractual retention obligations exist (relevant in this context are, in particular, the statutory retention obligations under the German Commercial Code (HGB) and the German Fiscal Code (AO), which provide for retention for up to twelve years) or you have consented to further retention pursuant to Art. 6(1)(a) of the GDPR.
Recipients/Categories of Recipients of Your Data
Within the scope of contractual relationships, to fulfill legal obligations, and to safeguard legitimate interests, processors, government agencies, or service providers may also have access to your personal data.
Compliance with data protection regulations is ensured in this regard.
In the case of contracts concluded via digital signature, your data is also accessible to all persons involved in the contract approval and signing process, as they receive a log after the contract is signed that shows all processing steps, including email address, IP address, date, and time. Furthermore, your data may be accessible to the respective service providers we use for the corresponding digital signature process. For Adobe Sign, this is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West, Business Campus, Saggart D24, Dublin, Ireland. If a qualified electronic signature is used for digital contract execution, your data is also accessible to D-Trust GmbH, Kommandantenstraße 18, 10969 Berlin, as this company verifies the validity of the signature.
If we transfer personal data to recipients outside the European Economic Area (EEA), such transfer will only take place if the EU Commission has confirmed that the third country provides an adequate level of data protection, if an adequate level of data protection has been agreed upon with the data recipient (for example, through EU Standard Contractual Clauses), or if you have given us your consent to do so.
Your Data Protection Rights
You have the right to request, free of charge, information about the personal data stored about you (Art. 15(1) GDPR). In addition, provided the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and restriction of processing (Art. 18 GDPR) of your personal data, as well as the right to data portability (Art. 20 GDPR).
You have the right to withdraw your consent at any time with future effect if the data is processed on the basis of Article 6(1)(a) or Article 9(2)(a) of the GDPR. Please send your withdrawal to: info@haarlaender-gmbh.com.
You have the right to object to the processing of your personal data pursuant to Article 21 of the GDPR if the data is processed on the basis of Article 6(1)(e) or (f) of the GDPR. Please send your objection to: info@haarlaender-gmbh.com.
In addition, you have the right to file a complaint with a data protection supervisory authority. The competent authority is the data protection supervisory authority of the federal state in which you reside, in which the data controller is headquartered, or in which the data protection violation occurred.
You can contact our data protection officer at datenschutz süd GmbH, Wörthstraße 15, 97082 Würzburg,
email: office@datenschutz-sued.de, phone: 0931 30 49 76-0.
When submitting inquiries to our Data Protection Officer, please specify the data controller listed above.
Privacy Notice
We are pleased that you are visiting our website. Below, we would like to inform you about how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).
Data Controller
The entity named in the legal notice is responsible for the data processing described below.
Usage Data
When you visit our website, so-called usage data is temporarily logged on our web server for statistical purposes to help us improve the quality of our website. This data set consists of:
• the name and address of the requested content,
• the date and time of the request,
• the amount of data transferred,
• the access status (content transferred, content not found),
• a description of the web browser and operating system used,
• the referral link indicating which page you came from to reach ours,
The legal basis for processing usage data is Article 6(1)(f) of the GDPR. The processing is carried out in the legitimate interest of providing the website’s content and ensuring a display optimized for the device and browser.
Storage of the IP Address for Security Purposes
In addition, we store the full IP address transmitted by your web browser strictly for the specified purpose for a period of seven days, in the legitimate interest of being able to detect, contain, and eliminate attacks on our websites. After this period expires, we delete or anonymize the IP address. The legal basis for this processing is Article 6(1)(f) of the GDPR.
Essential Cookies
We use cookies on our websites that are necessary for using our websites.
Cookies are small text files that are stored on your device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond the individual session.
We do not use these necessary cookies for analytics, tracking, or advertising purposes.
In some cases, these cookies contain only information about specific settings and are not personally identifiable. They may also be necessary to enable user navigation, security, and the proper functioning of the site.
We use these cookies based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
You can configure your browser to notify you when cookies are set. You can also delete them at any time via the appropriate browser settings and prevent new cookies from being set. Please note that our websites may then not be displayed in full, and some features may no longer be technically available.
Product Inquiry Form
You have the option to contact us via our product inquiry form. To use our contact form, we first need you to provide the information marked as required fields.
We use this information on the basis of Article 6(1)(b) of the GDPR to respond to your inquiry.
In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not required to contact us. We process your voluntary information based on your consent.
Your data will be processed solely for the purpose of responding to your inquiry. We will delete your data once it is no longer necessary and provided there are no legal retention requirements to the contrary. This is typically the case immediately after your inquiry has been processed.
To the extent that your data submitted via the contact form is processed on the basis of Art. 6(1)(f) of the GDPR, you may object to the processing at any time. In addition, you may withdraw your consent to the processing of the voluntary information at any time. To do so, please contact us at the email address listed in the legal notice.
When you visit our social media pages, data relating to you is processed. We would therefore like to inform you below, in accordance with Article 13 of the General Data Protection Regulation (GDPR), about how we handle your data and your resulting rights.
We operate a social media page on LinkedIn: https://www.linkedin.com/company/haarländer-gmbh
The data you provide on our social media pages—such as usernames, comments, videos, images, likes, public posts, etc.—is published by the social media platform and is never processed by us for any other purpose. We reserve the right to delete content only if necessary. If applicable, we may share your content on our page—if this is a feature of the social media platform—and communicate with you via the social media platform.
If you submit a request to us on the social media platform, we may, depending on the content, also refer you to other secure communication channels that guarantee confidentiality. For example, you may at any time send your requests to the address listed in the legal notice or info@haarlaender-gmbh.com.
The choice of the appropriate communication channel is your responsibility.
The legal basis for the aforementioned processing of your data is Article 6(1)(f) of the GDPR. Data processing is carried out in the legitimate interest of conducting public relations activities for our company and being able to communicate with you.
For some of the processing activities, we share responsibility with the social media platform operator. Accordingly, we have entered into the necessary agreement in accordance with Article 26 of the GDPR, provided that the social media platform operator allows for this.
LinkedIn:
https://www.linkedin.com/static?key=privacy_policy
https://legal.linkedin.com/pages-joint-controller-addendum
The key elements of joint responsibility are outlined in the following section.
Statistics (Insights)
The social media platforms we use regularly generate statistics (Insights) based on usage data that contains information about your interaction with our social media page. We have no control over the generation or provision of these statistics and cannot prevent them.
We process the aforementioned information (statistics) pursuant to Article 6(1)(f) of the GDPR in our legitimate interest to evaluate the use of our social media pages and to improve our content in a way that is tailored to our target audience.
We also use the social media platforms described to display targeted advertising.
To do so, we use target audience definitions provided to us by the social media operator. We use only anonymous target audience definitions — that is, we define characteristics based, for example, on general demographic information, behavior, interests, and connections. The social media platform operator uses these to display advertisements to its users accordingly. The legal basis for this is the consent that the social media platform operator has obtained from its users.
If you wish to revoke this consent, please use the revocation options provided by the social media platform operator, as the social media platform operator is responsible for this processing.
We, or the operator of the social media platform, also use publicly available data to define target groups. The legal basis for this processing is then Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is to define the target group as accurately as possible. We never use sensitive categories of personal data listed in Articles 9 and 10 of the GDPR (e.g., political opinions, sexual orientation) for target group definition.
We do not use location data to define target audiences. We do not disclose any personal data to the operator of the social media platform for the purpose of defining target audiences.
Data Processing by the Social Media Platform Operator
The social media platform operator uses web tracking methods. This web tracking may occur regardless of whether you are logged in or registered with the social media platform.
We would therefore like to point out that it cannot be ruled out that the social media platform operator may use and analyze your profile and behavioral data for its own purposes. We have no influence over the processing of your data by the social media platform operator. Please keep this in mind when using the social media platform.
For more information on data processing by the social media platform operator, privacy settings, and other options for objecting, please refer to the operator’s privacy policy.
Newsletter
If you give us your consent, we will include individual tracking pixels in our newsletters that allow us to determine when the newsletter sent to you has been accessed or opened.
If you wish to revoke your consent, please use the link provided in every newsletter to unsubscribe or adjust your consent settings.
Direct Marketing
If we receive your email address in connection with the sale of a product or service, we will use that address for direct marketing of our own similar products or services, provided you have not objected to such processing. When collecting your email address and each time we use it, we clearly state that you may object to this use at any time without incurring any costs other than the transmission costs according to standard rates.
This use is based on Article 6(1)(f) of the GDPR and is in the interest of promoting the sale of our goods or services. You can easily object, for example, by clicking the unsubscribe link included in every email.
Retention Period
Unless we have already provided specific information regarding the retention period, we delete personal data when it is no longer necessary for the aforementioned processing purposes and no legitimate interests or other (legal) grounds for retention preclude such deletion.
Other Data Processors
We share your data with service providers in the context of data processing pursuant to Art. 28 of the GDPR, who assist us in operating our websites and the associated processes. These include, for example, hosting providers. Our service providers are strictly bound by our instructions and are contractually obligated accordingly.
Below, we list the data processors with whom we collaborate, unless we have already done so in the preceding text of this Privacy Policy. If data may be processed outside the EU or the EEA in this context, we will inform you of this in the table below.
| Processor | Purpose | Adequate level of data protection |
|---|---|---|
| F7 Media GmbH Humboldtstr. 67a, 22083 Hamburg |
Web hosting and support | Processing only within the EU/EEA |
| Sendinblue GmbH Köpenicker Straße 126 10179 Berlin |
Provision of newsletter software | Processing only within the EU/EEA |
| seowerk GmbH Proviantbachstr. 1 1/5 86153 Augsburg |
Support and management of the SEO strategy | Processing only within the EU/EEA |
Your Rights as a Data Subject
When your personal data is processed, the GDPR grants you, as a data subject, certain rights:
Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and to receive the information specified in detail in Art. 15 of the GDPR.
Right to Rectification (Art. 16 GDPR)
You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.
Right to erasure (Art. 17 GDPR)
You have the right to request that personal data concerning you be erased without undue delay, provided that one of the grounds listed in detail in Article 17 of the GDPR applies. Right to Restriction of Processing (Art. 18 GDPR) You have the right to request the restriction of processing if one of the conditions listed in Article 18 of the GDPR is met, e.g., if you have objected to the processing, for the duration of the review by the controller.
Right to Data Portability (Art. 20 GDPR)
In certain cases, as specified in detail in Article 20 of the GDPR, you have the right to receive the
personal data concerning you in a structured, commonly used, and machine-readable format, or to
request that this data be transmitted to a third party.
Right to Withdraw Consent (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled under Article 7(3) of the GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal takes effect only for the future. Processing that took place prior to the withdrawal is not affected.
Right to Object (Art. 21 GDPR)
If data is collected on the basis of Article 6(1)(f) of the GDPR (data processing to safeguard legitimate interests) or on the basis of Article 6(1)(e) of the GDPR (data processing to safeguard the public interest or in the exercise of official authority), you have the right, for reasons arising from your particular situation, to object to the processing at any time. We will then no longer process the personal data unless there are demonstrable compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to File a Complaint with a Supervisory Authority (Art. 77 GDPR)
Pursuant to Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. In particular, you may exercise this right to lodge a complaint with a supervisory authority in the Member State of your
habitual residence, your place of work, or the location of the alleged infringement.
Exercising Your Rights
Unless otherwise specified above, please contact the entity listed in the legal notice to exercise your rights as a data subject.
Contact Information for the Data Protection Officer
Our external Data Protection Officer is available to provide you with information regarding data protection at the following contact details:
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Website: https://www.dsn-group.de/
Email: office@datenschutz-sued.de
If you contact our data protection officer, please also specify the responsible entity listed in the legal notice.
