For suppliers

Data protection information for suppliers

as per Chapters 13, 14 and 21 of the General Data Protection Regulation (DSGVO)

Data protection is very important for us. We describe below how we process your data and what your rights are.

  1. Who is responsible for data processing and who can you contact?

    groninger & Co. GmbH
    Hofäckerstraße 9
    74564 Crailsheim
    07951 495-0
    info@groninger.de

  2. Contact information for the data protection officer

    daniel.voigtlaender@mso.de

  3. Objectives for processing and legal basis

    Your personal data are processed in accordance with the provisions of the General Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and other relevant data protection regulations. The processing and usage of specific data depends on the agreed or desired service. You can find additional details and supplements regarding the purposes of processing in our contractual documentation, forms, informed consent form and the other information (e.g. on the web site or the business terms and conditions).

    1. Consent (Art. 6 Sec. 1 Part a DSGVO)

      Falls Sie uns eine Einwilligung zur Verarbeitung von personenbezogenen Daten erteilt haben, ist die jeweilige Einwilligung Rechtsgrundlage für die dort genannte Verarbeitung. Sie können Einwilligungen jederzeit mit Wirkung für die Zukunft widerrufen.

    2. Compliance with contractual obligations (Art. 6 Sec. 1 Part b DSGVO)

      Wir verarbeiten Ihre personenbezogenen Daten zur Durchführung unserer Verträge mit Ihnen, insbesondere im Rahmen unserer Bestellbearbeitung und Dienstleistungsinanspruchnahme. Weiterhin werden Ihre personenbezogenen Daten zur Durchführung von Maßnahmen und Tätigkeiten im Rahmen von vorvertraglichen Beziehungen, verarbeitet.

    3. Fulfillment of legal obligations (Art. 6 Sec. 1 c DSGVO)

      Wir verarbeiten Ihre personenbezogenen Daten, wenn dies zur Erfüllung von rechtlichen Verpflichtungen notwendig ist (z.B. Handels-, Steuergesetze). Weiterhin verarbeiten wir Ihre Daten ggf. zur Identitätsprüfung, Abgleiche mit europäischen und internationalen Antiterrorlisten, die Erfüllung steuerrechtlicher Kontroll- und Meldepflichten sowie die Archivierung von Daten zu Zwecken des Datenschutzes und der Datensicherheit sowie der Prüfung durch Steuer- und andere Behörden. Darüber hinaus kann die Offenlegung personenbezogener Daten im Rahmen von behördlichen/gerichtlichen Maßnahmen zu Zwecken der Beweiserhebung, Strafverfolgung oder Durchsetzung zivilrechtlicher Ansprüche erforderlich werden.

    4. Authorized interest by us or third parties (Art. 6 Sec. 1 f DSGVO)

      We may also use your personal data on the basis of a balancing of interests for preservation of the authorized interest of us or third parties. This has the following purposes:

      • for the procurement of information and data exchange with credit agencies, if this goes beyond our business risk.
      • for the restricted storage of your data if deletion is not possible due to the specific type of storage or is only possible with a disproportionate effort and expense.
      • for comparison with European and international anti-terror lists, if this goes beyond the legal obligations.
      • for the enrichment of our data by the use or research of publicly accessible data.
      • for statistical evaluations or for market analyses.
      • for enforcement of legal claims and defense in legal disputes that are not immediately associated with the contractual relationship.
      • for ensuring and maintaining our domiciliary rights by corresponding actions (e.g. CCTV monitoring).

      We also process personal data from public sources (e.g. Internet, media, press, commercial and association registries, population registries, records of debtors, land registries).

  4. Categories of personal data that we process

    The following data are processed:

    • personal data (name, citizenship, profession/industry and similar data)
    • contact information (address, email address, telephone number and similar data)
    • payment/credit confirmation for bank and credit cards
    • information on your financial situation (credit ratings, i.e. data used for the evaluation of the business risk)
    • supplier history

    We also process personal data from public sources (e.g. internet, media, press, commercial and association registries, population registries, records of debtors, land registries).

  5. Who receives your data?

    We forward your personal data within our company to the sections that require the data to fulfill their contractual and statutory obligations and to implement our authorized interest.

    The following departments may also receive your data:

    • processing services that we appoint (Art. 28 DSGVO) particularly in the following fields
      g. IT services, logistics and print services, external computer centers, support/maintenance of IT applications, archiving, file processing, data destruction, purchasing/procurement, mail services, marketing, risk management, auditing service, banks, printers or companies for data disposal, courier services, logistics
    • public services and institutions on submission of a statutory or official obligation under which we are required to provide information, reporting or forwarding of data or forwarding the data is in the public interest

    offices and institutions based on our authorized interest or the authorized interest of the third party for the purposes listed in section 3.5 (e.g. to authorities, credit agencies, collection agencies, law firms, courts, assessors, companies in the same group and committees and inspection authorities)

  6. Transfer of your data to another country or an international organization

    Data are not processed outside the EU or the EEA.

  7. How long do we store your data?

    We process your personal data to the extent required for the duration of our business relationship; this also includes the acquisition and processing of a contract.

    In addition, we are subject to various retention and documentation obligations, which among others are specified by the German Commercial Code (HGB) and the tax code (AO). The specified periods for retention and documentation are up to ten years beyond the end of the business relationship or the precontract legal relationship.

    Ultimately the retention period is also based on the statutory limitation periods, which for example according to §§ 195 ff. of the German Civil Code (BGB) are generally three years, but also in some cases may extend up to thirty years.

  8. To what extent is there automatic decision making in the specific case (including profiling)?

    We do not use a purely automatic decision-making process in accordance with Article 22 DSGVO. If we do use this process in specific cases, we will inform you separately if this is required by law.

  9. Your privacy rights

    You have the right disclosure under Art. 15 DSGVO, the right to correction under Art. 16 DSGVO, the right of deletion under Art. 17 DSGVO, the right to restrict processing under Art. 18 DSGVO and the right to data transferability under Art. 20 DSGVO. There is also a right of appeal to a privacy authority (Art. 77 DSGVO). According to Article 21 DSGVO you have a fundamental right to contest the processing of personal data by us. However, the right to contest only applies to very specific circumstances in your personal situation which may be in conflict with rights of our company.
    If you wish to take advantage of one of these rights, please contact our data protection officer (daniel.voigtlaender@mso.de).

  10. Scope of your obligations to provide your data to us

    Sie brauchen nur diejenigen Daten bereitstellen, die für die Aufnahme und Durchführung einer Geschäftsbeziehung oder für ein vorvertragliches Verhältnis mit uns erforderlich sind oder zu deren Erhebung wir gesetzlich verpflichtet sind. Ohne diese Daten werden wir in der Regel nicht in der Lage sein, den Vertrag zu schließen oder auszuführen. Dies kann sich auch auf später im Rahmen der Geschäftsbeziehung erforderliche Daten beziehen. Sofern wir darüber hinaus Daten von Ihnen erbitten, werden Sie auf die Freiwilligkeit der Angaben gesondert hingewiesen.

  11. Information on your right of objection Art. 21 DSGVO

    You have the right at any time to lodge an objection to the processing of your data that was conducted based on Art. 6 Sec. 1 f DSGVO (data processing based on a balancing interests) or Art. 6 Sec. 1 e DSGVO (data processing in the public interest) if there are reasons for the objection arising from your specific situation. This also applies for profiling based on this provision under the terms of Art. 4 No. 4 DSGVO.

    If you lodge an objection, we will cease to process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is used for enforcement, exercising or defense of legal claims.

    The objection can be lodged by letter at the address listed in section 1.

  12. Your right of appeal to the applicable supervisory authority

    You have a right of appeal to the data protection authority (Art. 77 DSGVO). The data protection regulator responsible for us is:

    The state officer for data protection and freedom of information
    Königstrasse 10 a
    70173 Stuttgart