Obligation to provide information as per article 13 GDPR for our clients, suppliers, service providers and prospective clients

The controller’s name and con­tact details (Art. 13 (1) lit. a GDPR) 

Blanc und Fis­ch­er IT Ser­vices GmbH
Blanc-und-Fis­ch­er-Platz 1-3
75038 Oberderdingen
E-Mail: info(at)blanc-fischer.com

The Data Pro­tec­tion Officer’s con­tact details and of the Data Pro­tec­tion Team (Art. 13 (1) lit. b GDPR))

If you have any ques­tions regard­ing data pro­tec­tion, you can con­tact our data pro­tec­tion team at the e-mail address datenschutz(at)blanc-fischer.com. Our data pro­tec­tion offi­cer can be reached by post or e-mail at the fol­low­ing con­tact details:

Blanc und Fis­ch­er IT Ser­vices GmbH
attn. Data Pro­tec­tion Officer
Blanc-und-Fis­ch­er-Platz 1-3
75038 Oberderdingen
E-Mail: datenschutzbeauftragter(at)blanc-fischer.com

Infor­ma­tion for clients (B2B) and prospec­tive clients

The pur­pose and legal basis of data pro­cess­ing (Art. 13 (1) lit. c GDPR)

  1. Han­dling and pro­cess­ing of enquiries from prospec­tive clients (Art. 6 (1) lit. f GDPR)
  2. Sanc­tion lists checks (Art. 6 (1) lit. c GDPR in con­junc­tion with Direc­tive (EC) No. 2580/2001 against cer­tain per­sons and enti­ties with a view to com­bat­ing ter­ror­ism and Reg­u­la­tion (EC) No. 881/2002 against Osama bin Laden, Al-Qae­da and the Taliban)
  3. Quote prepa­ra­tion for prospec­tive clients (Art. 6 (1) lit. b and f GDPR)
  4. Con­clu­sion of sales con­tracts (Art. 6 (1) lit. b and f GDPR)
  5. Com­pli­ance with legal oblig­a­tions (Art. 6 (1) lit. c GDPR)
  6. Order pro­cess­ing and deliv­ery (Art. 6 (1) lit. b GDPR)
  7. Han­dling of com­plaints (Art. 6 (1) lit. b GDPR)
  8. Imple­men­ta­tion of mea­sures to pro­mote sales (Art. 6 (1) lit. f GDPR)
  9. Ser­vice provider sup­port for com­pa­ny process­es (Art. 28 GDPR)
  10. Direct adver­tis­ing via e-mail col­lect­ed dur­ing the pur­chase of our goods and/or ser­vices
    (Art. 6 para. 1 b and f). There is a right to object at any time to pro­cess­ing for direct mar­ket­ing (Art. 21 (2) DSGVO)
  11. Elec­tron­ic sign­ing of con­tracts and other doc­u­ments (Art. 6 (1) lit. b GDPR)

Inter­ests pur­sued by the con­troller when weigh­ing up inter­ests (Art. 13 (1) lit. d GDPR)

Applies to pur­pos­es 1, 3, 4, 8 and 10:

  • Form of direct marketing
  • Stor­age of data relat­ing to poten­tial clients and part­ners for acqui­si­tion measures
  • Use of cred­it his­to­ry data to ensure against pay­ment defaults.
  • Asser­tion of claims and defence in the event of legal disputes
  • Guar­an­tee of IT secu­ri­ty and the company’s IT operations
  • Pre­ven­tion of crim­i­nal offences
  • Mea­sures to man­age busi­ness and devel­op ser­vices and prod­ucts further
  • Recip­i­ents or cat­e­gories of recip­i­ents of personal data (Art. 13 (1) lit. e GDPR)

    Author­i­ties, banks, audi­tors, soft­ware man­u­fac­tur­ers, affil­i­at­ed com­pa­nies, dis­pos­al ser­vice providers, cred­it agen­cies or data processor.

    Trans­fer to third coun­tries (Art. 13 (1) lit. f GDPR)

    There is no data trans­fer to third countries.

    Stor­age peri­od as per statu­to­ry oblig­a­tion to retain data (Art. 13 (2) lit. a GDPR)

    Personal data are gen­er­al­ly erased with­in ten years of the con­trac­tu­al rela­tion­ship ter­mi­nat­ing or ear­li­er if a prospec­tive client does not become an actu­al client.

    Right to request access, rec­ti­fi­ca­tion, era­sure, restric­tion of pro­cess­ing and data porta­bil­i­ty, and the right to object (Art. 13 (2) lit. b GDPR)

    As a data sub­ject, you have the right at all times to request access to (Art. 15 GDPR) and rec­ti­fi­ca­tion (Art. 16 GDPR) or era­sure of your personal data (Art. 17 GDPR), restric­tion of their pro­cess­ing (Art. 18 GDPR) and the right to data porta­bil­i­ty (Art. 20 GDPR). Please con­tact the con­troller using the indi­cat­ed con­tact details if you wish to exer­cise such rights.

    Right to object (Art. 21 (1) GDPR)

    Inso­far as the pro­cess­ing of your data is car­ried out for the pro­tec­tion of legit­i­mate inter­ests (pur­pose 1, 3, 4 and 8), you have the right to object to this pro­cess­ing at any time under our spec­i­fied con­tact details if rea­sons arise from your par­tic­u­lar sit­u­a­tion that con­flict with this data pro­cess­ing. We will then stop this pro­cess­ing unless it serves over­rid­ing inter­ests wor­thy of pro­tec­tion on our part.

    Right to object to direct mar­ket­ing (Art. 21 (2) GDPR

    Inso­far as the pro­cess­ing of your data relates to direct adver­tis­ing (pur­pose 10), you have the right to object to this pro­cess­ing at any time using our con­tact details provided.

    Right to lodge a com­plaint (Art. 13 (2) lit. d GDPR)

    As a data sub­ject, you are enti­tled to lodge a com­plaint, e.g. to the State Offi­cer for Data Pri­va­cy and Free­dom of Infor­ma­tion in Baden-Würt­tem­berg. You can obtain a list of the other super­vi­so­ry author­i­ties and their con­tact details via the fol­low­ing links:

    https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html or

    https://www.bfdi.bund.de/DE/Service/Anschriften/Europa/Europa-node.html

    Exis­tence of a require­ment to pro­vide personal data (Art. 13 (2) lit. e GDPR

    The col­lect­ed data are required to han­dle enquiries from poten­tial clients, pre­pare quotes, con­clude sales con­tracts and car­ry out busi­ness operations.

    Infor­ma­tion for sup­pli­ers and ser­vice providers

    The pur­pose and legal basis of data pro­cess­ing (Art. 13 (1) lit. c GDPR)

    • Pur­chase and han­dling of sup­port ser­vices to ful­fil com­pa­ny pur­pos­es
      (Art. 6 (1) lit. b and f GDPR)
    • Com­pli­ance with legal oblig­a­tions (Art. 6 (1) lit. c GDPR)
    • Send­ing of infor­ma­tion mate­r­i­al (Art. 6 (1) lit. f GDPR)
    • Elec­tron­ic sign­ing of con­tracts and other doc­u­ments (Art. 6 (1) lit. b GDPR)

    Inter­ests pur­sued by the con­troller when weigh­ing up inter­ests (Art. 13 (1) lit. d GDPR)

  • Asser­tion of claims and defence in the event of legal disputes 
  • Guar­an­tee of IT secu­ri­ty and the company’s IT operations 
  • Pre­ven­tion of crim­i­nal offences 
  • Mea­sures to man­age busi­ness and devel­op ser­vices and prod­ucts further
  • Recip­i­ents or cat­e­gories of recip­i­ents of personal data (Art. 13 (1) lit. e GDPR)

    Author­i­ties, banks, audi­tors, lawyers, affil­i­at­ed com­pa­nies, dis­pos­al ser­vice providers, cred­it agen­cies or data processor.

    Trans­fer to third coun­tries (Art. 13 (1) lit. f GDPR)

    There is no data trans­fer to third countries.

    Stor­age peri­od as per statu­to­ry oblig­a­tion to retain data (Art. 13 (2) lit. a GDPR)

    Personal data are gen­er­al­ly erased with­in ten years of the employ­ment con­tract ter­mi­nat­ing unless, in excep­tion­al cas­es, there is a longer statu­to­ry stor­age peri­od or an employ­ee revokes storage.

    Right to request access, rec­ti­fi­ca­tion, era­sure, restric­tion of pro­cess­ing and data porta­bil­i­ty, and the right to object (Art. 13 (2) lit. b GDPR)

    As a data sub­ject, you have the right at all times to request access to (Art. 15 GDPR) and rec­ti­fi­ca­tion (Art. 16 GDPR) or era­sure of your personal data (Art. 17 GDPR), restric­tion of their pro­cess­ing (Art. 18 GDPR) and the right to data porta­bil­i­ty (Art. 20 GDPR). Please con­tact the con­troller using the indi­cat­ed con­tact details if you wish to exer­cise such rights.

    Right to object (Art. 21 (1) GDPR)

    Inso­far as the pro­cess­ing of your data is car­ried out to pro­tect legit­i­mate inter­ests, you have the right to object to this pro­cess­ing at any time using our con­tact details pro­vid­ed if rea­sons arise from your par­tic­u­lar sit­u­a­tion that con­flict with this data pro­cess­ing. We will then stop this pro­cess­ing unless it serves over­rid­ing inter­ests wor­thy of pro­tec­tion on our part.

    Right to lodge a com­plaint (Art. 13 (2) lit. d GDPR)

    As a data sub­ject, you are enti­tled to lodge a com­plaint, e.g. to the State Offi­cer for Data Pri­va­cy and Free­dom of Infor­ma­tion in Baden-Würt­tem­berg. You can obtain a list of the other super­vi­so­ry author­i­ties and their con­tact details via the fol­low­ing links:

    https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html or

    https://www.bfdi.bund.de/DE/Service/Anschriften/Europa/Europa-node.html

    Exis­tence of a require­ment to pro­vide personal data (Art. 13 (2) lit. e GDPR

    The col­lect­ed data are required for con­clud­ing and ful­fill­ing the con­trac­tu­al relationship.