Data Protection Information for Suppliers
according to Articles 13, 14 and 21 of the German General Data Protection Regulations [Datenschutz-Grundverordnung - DSGVO]
We take data protection seriously. The text below provides information about how we process your data and about your rights.
1. Who is responsible for data processing and whom can you contact?
International Bilingual School Munich gGmbH
Fürstenrieder Str. 267
2. Contact information for the Data Protection Officer
3. Processing purposes and legal basis
Your personal data will be processed in line with the provisions of the German General Data Protection Regulations [Datenschutz-Grundverordnung – DSGVO], the German Federal Data Protection Act [Bundesdatenschutzgesetz - BDSG] and other relevant data protection regulations. The way in which individual data is processed and used will depend on the service agreed or applied for. You can obtain more details and supplementary information about the purposes for which data is processed from our contractual documentation, forms, declarations of consent and other information we make available to you (for example on the website or in our terms and conditions of business).
3.1 Consent (DSGVO Article 6, Paragraph 1, Letter a)
If you have given us consent to process personal data, the consent in question forms the legal basis for the processing mentioned therein. You can revoke consents with effect for the future at any time.
3.2 Fulfilment of contractual obligations (DSGVO Article 6, Paragraph 1, Letter b)
We process your personal data in order to fulfil our contracts with you, especially within the framework of our order processing and the use of our services. Your personal data are furthermore used to implement measures and activities within the framework of relationships prior to any contract.
3.3 Fulfilment of legal obligations (DSGVO Article 6, Paragraph 1 c)
We process your personal data when it is necessary in order to fulfil our legal obligations (e.g. commercial or fiscal laws).
Categories of personal data we process
We process the following data:
· Personal data (name, nationality, profession/industry and comparable data)
· Contact data (address, e-mail address, telephone number and comparable data)
· Payment/confirmation of cover with bank cards and credit cards
· Information about your financial situation (information of creditworthiness, i.e. data to assess financial risk), bank details
4. Wer erhält Ihre Daten?
5. Transfer of your data to a foreign country or to an international organization
Data is not processed outside the EU or the EEA.
6. How long do we store your data?
As far as required, we process your personal data for the duration of our business relationship – this also covers preparation and conclusion of a contract.
Beyond this, we are subject to various obligations regarding retention of records and documentation arising from the German Commercial Code [Handelsgesetzbuch – HGB], the tax code [Abgabenordnung – AO] and German income tax law [Einkommensteuergesetz – EStG] among others, each including the more detailed legal regulations enacted in this regard. The periods for retaining records and documentation specified there are up to ten years beyond the end of the business relationship/the legal relationship preceding the contract.
In the final analysis, retention time is also determined in accordance with legal expiry dates which, for example according to §§ 195 ff. of the German Civil Code [Bürgerliches Gesetzbuch – BGB], are generally three years but in certain cases, may be up to thirty years.
7. Your data protection rights
DSGVO Article 15 gives you the right to obtain information, DSGVO Article 16 gives you the right to correct that information, DSGVO Article 17 gives you the right to have data deleted, DSGVO Article 18 gives you the right to restricted processing and DSGVO Article 20 gives you the right to the portability of data. You also have the right to make a complaint to a regulatory authority for data protection (DSGVO Article 77). DSGVO Article 21 essentially gives you the right to object to our processing your personal data. However, you only have this right to object if your personal situation involves very particular circumstances, and we may have rights which conflict with your right to object. If you want to pursue one of these rights, please contact our Data Protection Officer firstname.lastname@example.org.
8. Scope of your obligations to provide us with your data
ou only need to provide the data we require to commence and execute a business relationship or a relationship preceding a contract or data we are legally obliged to collect. Without these data, we will not normally be in a position to conclude the contract or execute it. This may also relate to data subsequently required within the framework of the business relationship. Insofar as we request further data from you, you will be informed separately that the provision of such details is voluntary.
9. Your right to complain to the competent regulatory authority
You have the right to complain to the regulatory authority for data protection (DSGVO Article 77). The regulatory authority with competence for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)