2. data processing of persons in the business environment

2.1 Data processing in accordance with Art. 13 GDPR

We process the data that various people provide to us through their own information, for example in the context of an inquiry by e-mail, for the initiation and conclusion of a contract or a business relationship.

2.2 Data processing in accordance with Art. 14 GDPR

In addition, we process data of persons who may be part of a contractual relationship, which we have legitimately received in the context of information from third parties (e.g. managing directors provide us with the data of their employees).

2.3 Persons concerned

We process the following data from interested parties: Company, name of the contact person and professional contact and address data.
We process the following data from customers: Company, title and names of contact persons, professional address data and contact details, bank details, contract data.
We process the following data from suppliers and business partners: Company, title and names of contact persons, professional address data and contact details, bank details, contract data.

2.4 Forwarding of data

We only pass on personal data to third parties if this is necessary for the purpose of contract processing and fulfillment or due to legal regulations.

2.5 Retention/deletion of data

1. expiry of contractual obligations: If there are contractual provisions that stipulate how long personal data must be stored, the controller shall ensure that these deadlines are met. Once these periods have expired, the data will be deleted or anonymized by the controller.

2. Withdrawal of consent: If a person withdraws their consent to the processing of their personal data, the controller shall erase this data unless there is another legal basis for the processing.

3. Expiry of legal obligations: In some cases, there may be exceptions that not only allow, but even require the controller to continue to retain personal data even after contractual time limits have expired or consent has been withdrawn. This may be the case if there are statutory deadlines that require the retention of personal data for a defined period of time, such as the storage of tax or accounting records. Once these statutory periods have expired, the controller also ensures that the data is anonymized or deleted.

2.6 Contact by e-mail

When you contact us by email, the data you provide will be stored by us in order to answer your questions. We delete the data arising in this context after processing is no longer necessary or restrict processing if there are statutory retention obligations.
Legal basis: Art. 6 para. 1 lit. f GDPR

2.7 Publication of the names of authors

We are legally obliged to disclose the names of the authors of image data (photos or videos) each time image data is published. We automatically delete this personal data as soon as we stop using the image data.

2.8 Legal bases

The legal basis for data processing is
- contract initiation and fulfillment pursuant to Art. 6 para. 1 lit. b GDPR.
- legal obligations pursuant to Art. 6 para. 1 lit. c GDPR (e.g. statutory retention and documentation obligations, publication obligations under copyright law).
- legitimate interests of our company within the meaning of Art. 6 para. 1 lit. f GDPR (e.g. use of software)
- Art. 6 para. 1 lit. a GDPR when obtaining consent (e.g. when processing image data or for advertising purposes).