Information to be provided where personal data are collected from suppliers and business partners in accordance with Article 13 of the EU General Data Protection Regulation (GDPR)
1. Name and contact data of the controller
Research Institute of Automotive Engineering and Vehicle Engines Stuttgart
Pfaffenwaldring 12
70569 Stuttgart
Tel.: +49 711 685-65888
e-mail: info@fkfs.de
2. Contact data of the Data Protection Officer
DataCo GmbH
Dachauer Str. 65
80335 München
e-mail: datenschutz@dataguard.de
3. Purpose and legal basis for processing
Purpose of the processing:
Your personal data will be collected as part of our business relationship for the setting up and fulfillment of our contractual obligations towards our business partners, for example, for:
- setting up a contract
- contract fulfillment
- correspondence
- invoicing/administration
- entry in the customer and supplier database (legitimate interest)
- credit screening (legitimate interest)
Legal basis for processing:
Your data will be processed for the purposes of setting up or fulfillment of a contract, in accordance with point (b) S.1 of Article 6(1) of the GDPR.
Your data will be processed in order to comply with the legal obligations resulting from the business relationship, in accordance with point (c) of Article 6(1) of the GDPR.
Your data will be processed if necessary for our legitimate interests, in accordance with point (f) of Article 6(1) of the GDPR. We have a legitimate interest in processing the data for conducting the business relationship, for example, to carry out credit checks.
4. Receivers or categories of receivers of the personal data
Within our organization, the following positions and departments receive the personal data they need for the above-stated purposes.
- Management board
- Technical departments
In addition, we sometimes make use of various service providers and will transmit your personal data to other trustworthy recipients. These could be, for example:
- Commissioned data processors
- IT service providers
- Government authorities
- Tax advisors
- Data protection officers
- Other business partners
5. Transfer of personal data to a third country
There are no plans to transmit your personal data to a third country / an international organization.
6. Duration of the storage of your personal data
After the controller has collected your data, it will be stored for as long as is necessary to comply with the legal retention periods as per section 257 of the German Commercial Code (HGB) and section 147 of the German fiscal code (AO) for the fulfillment of the relevant task.
7. Rights of the data subject
You may exercise the following rights as laid down in the GDPR:
If your personal data is processed, you have the right to obtain access to your stored personal data, from the controller (Art. 15 GDPR).
If the personal data being processed is incorrect, you have the right to rectification (Art. 16 GDPR).
Where the legal conditions are fulfilled, you can demand the deletion or restriction of processing of your data. You can also formally object to the processing of your data. (Art. 17, 18 and 21 GDPR).
If you have given your consent to the processing of your data – or a contract for the data processing exists and the data processing is carried out by automated means – you also have the right to data portability (Art. 20 GDPR).
You continue to have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).