Onlineshop

Data Protection Policy for Business Partners

1. What information does this page provide for you?

LiftEquip GmbH Elevator Components ("we") is in the process of initiating or executing a contractual relationship with you or your employer/client in the context of our business activities (sale of elevators and elevator components).

We ensure that we comply with the requirements of applicable data protection laws. In the following, we will give you a detailed overview of how we handle your data and rights.

2. Who is responsible for the data processing and who is the data protection officer?

The Controller of the data processing is:

LiftEquip GmbH Elevator Components
Bernhäuser Straße 45, 73765 Neuhausen a.d.F.
kontakt@liftequip.de

Our data protection officer can be reached at:

Der Datenschutzbeauftragte
LiftEquip GmbH Elevator Components
Bernhäuser Straße 45, 73765 Neuhausen a.d.F.
DPO(at)tkelevator(dot)com


3. Scope and amendments to this privacy statement.

a. This data protection notice applies to the processing of personal data of our customers / contractual partners / business partners or their employees at LiftEquip GmbH.;
b. We reserve the right to amend this Privacy Notice from time to time in order to adapt it to future changes in relation to the collection and processing of personal data.


4. Which data categories do we use and where do they come from?

The categories of data processed include, in particular:

  • Surname, first name and, if applicable, salutation, title
  • Contact details (telephone number, fax number, e-mail address, address)
  • Function title/position designation, if applicable

If our contractual relationship exists with you, we collect this data from you ourselves. If you are not a contractual partner yourself - for example, an employee of a business partner - we receive the data either from you or from your employer or client.

5. Who receives your data?

Your data will be processed within LiftEquip GmbH Elevator Components by the employees involved in the initiation/implementation of the business relationship and the execution of the respective business processes.

Furthermore, the following recipients may receive your data:

  • Public bodies due to legal regulations (e.g. tax authorities)
  • External contractors (service providers) in the context of commissioned data processing
  • Central offices within our group of companies, insofar as central processes (e.g. sanction list control, central contract management) require this and a transfer is permitted for legitimate interest or order processing takes place
  • Third parties such as credit institutions, debt collection service providers and credit agencies – provided that a transfer is permissible for legitimate interest or for the performance of a contract.


6. What are the purposes and on what legal basis are your data processed?

We process personal data primarily for the fulfilment of contractual obligations (Art. 6 para. 1 lit. b GDPR), more precisely for the purpose of initiating, executing or fulfilling a contract. These include, for example, placing orders, internal sales work, shipping and paying for goods or contract negotiations.

If you are not a contractual partner yourself – such as an employee of a business partner – the processing for the same purposes is carried out as a legitimate interest in accordance with Art. 6 (1) (f) GDPR. We are in the process of initiating or executing a contractual relationship with your employer/client in the context of our business activities. Based on your work for your employer/client, we process your personal data for this purpose.

We also process personal data to the extent necessary to comply with legal requirements (Art. 6 para. 1 lit. c GDPR) for the following purposes:

  • Compliance with legal retention obligations
  • Compliance with legal reporting obligations

In addition, we process personal data to safeguard the following legitimate interests (Art. 6 para. 1 lit. f GDPR):

  • Maintenance of business relationships with existing customers and suppliers
  • Implementation of events (e.g. admission control)
  • Assertion of legal claims and defence in legal disputes
  • Inclusion in our contact database, maintaining contact after business contact (e.g. after providing your business card)
  • Direct marketing to customers or employees of customers (e.g. information about products and events)

In addition, we may process personal data for the processing of which we have been granted consent (Art. 6 para. 1 lit. a GDPR). We collect these separately.

Automated decision-making that could have legal effects on you or similarly significantly affect you does not take place.


7. How long will your data be stored?

We process your personal data for as long as it is necessary for the purposes set out above. After the termination of the contractual relationship, your data will be stored as long as we are legally obliged to do so. This regularly results from legal obligations to provide evidence and to retain data, which are regulated in the Commercial Code and the Tax Code, among other things. The storage periods are then up to ten years. In addition, it may be necessary for personal data to be retained for the time during which claims can be made against us (statutory limitation period of three to thirty years).


8. Are you obliged to provide your data?

There is no legal obligation to provide your data. However, without processing your personal data, we are not in a position to carry out the necessary pre-contractual measures or the contractual relationship with you or your employer/client.


9. Which data protection rights can you claim as the person affected?

You have the right to request information about the data stored about you. In addition, under certain conditions, you can request the correction or deletion of your data. You may also have a right to restriction of the processing of your data as well as a right to release the data you have provided in a structured, commonly used and machine-readable format, provided that this does not affect the rights and freedoms of other persons.

Right to object

We process your data on the basis of a legitimate interest. You may object to this processing on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

To exercise these rights, please contact the controller or data protection officer mentioned in section 2.

10. Where can you complain?

You have the option of making a complaint to the above-mentioned data protection officer or to a data protection supervisory authority. The data protection supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf

Tel.: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de

Processing status: 16.05.2024