Dear suppliers and service providers,

with the following text we fulfil our duty to inform you under data-protection law and would like to explain transparently how we handle your personal data.

Name and contact details of the controller, contact details of the data protection officer, rights of data subjects, right to data portability, right to revoke consent, right to lodge a complaint with the supervisory authority, automated decision-making, change of purpose, and contact for open questions or complaints follow the same structure as in the previous section (Privacy Policy — Customers & Prospects). The parts that differ for suppliers and service providers are listed below.

Purpose of data collection

We require your personal data for the following reasons:

• Requesting individual quotations for work or services
• Conclusion of a service or work contract or fulfilment of an order
• Questions regarding work, services, or products provided, including handling of complaint procedures
• Settlement of invoices

Legal basis

We process your personal data on the basis of Article 6(1)(b) GDPR.

Legitimate interests of the controller

In order to be able to receive contractually agreed services or, naturally, to request an individual quotation, we require a minimum amount of personal data. We always observe the principle of data minimisation and do not collect any personal data that we do not strictly require under section 3 of this privacy policy.

Internal and external transfer of your personal data

Your personal data is only shared internally for the purpose of performing contractual obligations or related tasks in connection with the activities listed in section 3. External transfer of your personal data may take place under the following circumstances:

• Forwarding your contact details to coordinate several contractors with one another, in the event that another service provider or supplier is engaged to perform the contractual obligations we have agreed with you
• Engagement of support services in which access to your personal data is necessary or at least cannot be completely ruled out. These include, for example, IT support services, services related to invoice settlement, or the use of tax-advisory services.
• Transfer of your personal data on the basis of statutory obligations

All further provisions (data subject rights, third-country transfers, storage period, right of complaint, etc.) correspond to those listed in section 15 of this document (Privacy Policy — Customers & Prospects).