Data protection information for business customers
We, GreenTec Dialysis GmbH, take the protection of personal data and its confidential treatment very seriously. We therefore hereby inform you about the processing of your personal data in the context of the business relationship with you or your employer and the rights to which you are entitled. Your personal data will be processed exclusively within the framework of the applicable statutory provisions of data protection law, in particular the General Data Protection Regulation (hereinafter "GDPR") and the Federal Data Protection Act ("BDSG").
I Who is responsible for data processing?
GreenTec Dialysis GmbH
Langer Anger 7-9
69115 Heidelberg
Mail: info@greentecdialysis.com
Phone: +49 6221 4165990
II What is the subject of data protection?
The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as name, postal address, e-mail address or telephone number.
III Which of my personal data is processed?
As part of the business relationship with you or your employer, we only process your personal data that is related to the business relationship. This can be in detail:
- Contact details, including your name, e-mail address and telephone number
- Communication data
- User data
- Contract data
- Technical data of the devices and systems
IV What purposes are pursued with the processing of my personal data and on what legal basis is this carried out?
In the following, we provide you with an overview of the purposes and legal bases of the processing of your personal data in the context of our business relationship with you:
1. data processing for the purposes of contract fulfilment within the scope of the business relationship
We process your personal data for the preparation and implementation of the business relationship. The purposes depend on the specific contract and include in particular
- Preparation, conclusion and processing of contracts
- Communication with contact persons of our business partners
- Preparation of quotations, order confirmations and invoices
- Provision of support services
Data processing is carried out on the basis of Art. 6(1)(b) GDPR if a business relationship exists or is to be entered into with you personally. However, if you are acting on behalf of a third party, in particular your employer, the data processing is carried out on the basis of Art. 6 (1) (f) GDPR; our legitimate interests lie in the pursuit of the above-mentioned purposes.
We delete the data when it is no longer required for the purposes pursued by us and no other legal basis, in particular statutory or contractual retention periods, intervene.
2. fulfilment of legal obligations
We may also process your personal data in order to fulfil legal obligations, e.g. those arising from commercial, tax, financial or criminal law. The purposes of the processing result from the respective statutory provisions. Obligation. As a rule, processing is carried out to comply with state control and information obligations.
In this respect, data processing is carried out on the basis of Art. 6 (1) (c) GDPR.
We delete the data once the legal obligation no longer applies, provided that no other legal bases, in particular statutory or contractual retention periods, intervene.
V Is my personal data also collected from third parties?
We mainly process the personal data that we receive directly from you as part of the business relationship. In some constellations, we also obtain your personal data from third parties, for example:
- From our business partners or from your business partners or your employer's business partners
- If applicable, from your employer
If necessary, we will inform you of this in more detail in a separate form.
VI Do I have to provide my personal data?
As part of the business relationship, you must provide the personal data that is necessary for the preparation and execution of the business relationship and the fulfilment of the associated contractual or legal obligations or that we are legally obliged to process. Without this data, we may not be able to fulfil the business relationship.
VII Who has access to my personal data and which recipients receive it?
Within our company, only those departments and employees working there have access to your personal data who absolutely require such access to fulfil their functions or tasks.
We only pass on your personal data to external recipients if there is a legal justification for doing so or if you have consented to this. External recipients may be
- Processors: Service providers that we use for the provision of HR services or who are entrusted with the maintenance of our IT systems. These processors are carefully selected and regularly checked by us to ensure that your personal data is in good hands. The service providers may only process your personal data for the purposes specified by us.
- Public authorities: Authorities and state institutions, such as public prosecutors' offices, courts or tax authorities, to which we may have to transfer personal data in individual cases.
- Private bodies: Private bodies to which we transfer your personal data on the basis of a legal provision or your consent, for example lawyers or auditors.
VIII Is a transfer of my personal data to third countries intended?
Your personal data will not be transferred to third countries as part of the business relationship.
IX How long will my personal data be stored?
The storage period of your personal data can be found in the respective chapter on data processing under Section IV.
X What rights do I have as a data subject?
You have the following rights regarding the processing of your personal data:
1. right to information
You have the right to obtain confirmation from us as to whether or not we are processing personal data concerning you. If this is the case, you have the right to information about your personal data and to further information regarding the processing.
2. right of rectification
You have the right to request the correction of your incorrect personal data and to have incomplete personal data completed.
3. right to erasure ("right to be forgotten")
Under certain circumstances, you have the right to request that we erase your personal data. This right exists, for example, if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed or if the personal data has been processed unlawfully.
4. restriction of processing
Under certain circumstances, you have the right to request that we restrict the processing of your personal data. In this case, we will only store the personal data for which you have given your consent or for which the GDPR permits processing. For example, you may have the right to restrict processing if you have disputed the accuracy of your personal data.
5. data portability
If you have provided us with personal data on the basis of a contract or consent, you may, if the legal requirements are met, request that you receive the personal data you have provided in a structured, commonly used and machine-readable format or that we transmit it to another controller.
6. revocation of consent
If you have given us your consent to process your personal data, you can revoke this at any time with effect for the future. This does not affect the legality of the processing of your personal data until you withdraw your consent.
7. right of objection
Individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on a balancing of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Right to object to the processing of data for direct marketing purposes
You have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object to the processing, your personal data will no longer be processed for these purposes.
8. right of appeal to the supervisory authority
In addition, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates applicable law.
XI. Who can I contact if I have questions or to assert my rights as a data subject?
If you have any questions regarding the processing of your personal data or the assertion of your rights as a data subject, you can contact us free of charge. Please use our contact details under Section I. No. 1. To withdraw your consent, you can also always use the same contact method that you used when submitting the declaration of consent.
GreenTec Dialysis GmbH, as at 1 June 2024