Introduction

This document serves to inform you as a business contact of the beeline Group (see for the corporations to which this Privacy Notice is applicable Section 1 below) about the processing of your personal data.

Personal Data

Personal Data means any information that can be related to you. This also includes information that can only be related to you indirectly, for example by assigning it to an identifier such as a name, an ID Number, location data or an online identifier. Identifiable is also a person who can be identified on the basis of one or more specific characteristics which are an expression of the physical, physiological, genetic, psychological, economic, and cultural or social identity of that natural person.

Overview

This Privacy Notice consists of a general part (Sections 1 and 2), in which general information about the processing of personal data by the beeline Group are provided.

In Section 2.c you will be informed about your rights.
 

1. Scope of Application; Responsible entity for your data

This Privacy Notice is applicable for the processing of your personal data by

In the following, the term “beeline” (without a Suffix for a specific entity) does only refer to the beeline entity (or entities) which

• has concluded an agreement with your company/the company you work

• has contacted you within the frame of discussing business opportunities or in any other context

• has received your contact information during a fair or any other business event

• has obtained a declaration of consent from you

Only this specific entity (or these entities) is (are) responsible within the meaning of data protection law with respect to your business contract data. This specific entity (or these entities) is (are) addressed as “controller” by the GDPR.
 

2.  Contact details of the controller and the DPO

a) Contact details of the data controller

b) Contact details of the data protection officer

The contact details of each data protection officer are the following:

DataProtectionOffice@beeline-group.com

3. Which Data is beeline processing?

In the normal course of customer relationship and the contractual business, beeline will process the following types of personal information:

• Personal CRM information, such as your name, date of birth, gender;
• Business contact information, such as business e-mail address, business postal address;
• Further information on your position in your company and activities with respect to beeline;
• Information needed for compliance and risk management, including quality assessments of the products and services of your company.
• If you access the beeline intranet, your login credentials (based on your e-mail address) will be processed by beeline. Furthermore, log files will be processed (but however not referred to you) and statistical analytics of the usage of the intranet will be conducted.

The following data are hereinafter referred to as “business contact data”.
 

4. What does beeline do with the Data?

In the normal course of customer relationship and the contractual business, beeline will conduct the following processing activities:

• Business contact data is processed in order to conclude, execute and terminate B2B agreements with other companies;
• Business contact data is stored by beeline in beeline’s CRM system and processed to establish and maintain a business relationship with you and your company;
• Business contact data may be processed for the purposes of internal reporting;
• Business contact data is processed within the frame of supplier management;
• Business contact data is processed for the purpose of compliance and risk management, including quality assessments of the products and services of your company.
   

5. General Information

c) Your Rights

On request, you have the right to obtain free information on your stored personal data.

Additionally, you have the right to obtain the rectification of inaccurate personal data, the right to obtain a restriction of excessively processing of personal data as well as the right to obtain the erasure of unlawful processed personal data or data which is stored too long (as far as there are no legal obligations to store the data). Furthermore, you have the right to receive your personal data, which you have provided to beeline. The data will be given to you (or a third party you name), in a structured, commonly used and machine-readable format (right to data portability).

Please see also your right to object the data processing in the section below (d).

In order to exercise your rights you can write an e-mail to DataProtectionOffice@beeline-group.com

d) General Information about the legal Basis of all Processes below

The processing of your personal data by beeline is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by beeline, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. beeline's legitimate interest consists in the use and maintenance of the contact details of contractual partners or potential future partners. Furthermore beeline's legitimate interest consists in statistical analysis of the usage of its intranet.

You can object to this data processing for marketing purposes at any time without giving any reason.

Furthermore you can generally object to this data if there are reasons which exist in your particular situation and which speak against the data processing. In order to do so you can write an e-mail to the data protection officer:

DataProtectionOffice@beeline-group.com
 

e) General Information about beeline GmbH and Microsoft as a Recipients of Data

The IT system of beeline in which personnel data are processed is hosted by the beeline GmbH, Grünstraße 1, 51063 Köln. In this context, beeline GmbH does only carry out data processing activities on behalf and according to the instructions of beeline.

beeline uses office 365 which is hosted by Microsoft AG which is hosted by Microsoft AG in data centers in Amsterdam (Amsterdam Microsoft Azure Datacenter: Oudezijds Achterburgwal 1921, 1012 DX Amsterdam, Niederlande) and Dublin (Dublin Microsoft Azure Datacenter:   29-30 O'Connell Street Lower, North City, Dublin, Irland) (The data will not be transferred outside the EU according to the agreement between beeline GmbH and Microsoft).
 

f) General Information about Storage Period

Data of business contacts are generally only deleted if you object to the further processing.

All personal data of business partners that were processed within the frame of the conclusion and the execution of an agreement are stored according to the tax- and accounting law of each country as follows:

• Germany: 10 Years
• France: 10 Years
• Austria: 7 Years
• Czech Republic: 10 Years
• Netherlands: 7 Years
• Belgium: 7 Years
• Luxembourg: 10 Years
• Poland: 6 Years
• Hungary: 8 Years

Additionally, in some processes deviation storage periods are mentioned.
 

a) Information according to Art, 13 (2) lit. e GDPR:

The provision of your business contact data is not a statutory or a contractual requirement, or a strict requirement necessary to enter into a contract/a business relationship. You are not obliged to provide the personal data. There are no consequences, if you fail to provide personal data. However, using this contact data facilitates the business relationship between beeline and your company/your employer.