Dear customer, dear business partner,

The protection of your personal data is important to us. We act in accordance with the data protection laws of each country where we operate. 

This data protection notice informs you about the processing of personal data in the context of a business relationship with us as well as your rights in connection with this data processing. Please also make the data protection information available to your employees.
 

1. Responsible person:

We are responsible for the processing of your personal data:

CREMER OLEO GmbH & Co. KG

Glockengiesserwall 3

20095 Hamburg 

2. Data Protection Officer:

You can contact our data protection officer at the above postal address, with the addition ‘To the data protection officer’ or at the E-Mail-Adress:

Datenschutz@cremer.de

3. What data do we process?

We process personal data that you voluntarily provide to us as part of our business relationship. This includes the following data or categories of data:

• Master data (e.g. title, surname, first name, email address, telephone and fax number, address)
• Bankdata (e.g. IBAN, BIC)
• Tax number
• Business transaction data
• Data generated in the course of the business relationship

We do not process any personal data that we receive from third parties.

4. For what purpose do we process your data and on what legal basis?

We use your data for the initiation, conclusion and fulfilment of the contract, as well as for invoicing and the administration of payments made or received. In addition, we use your data for accounting processes and use the communication data provided by you for contract-related communication. The legal basis for this processing is Art. 6 para. 1 lit. b GDPR. We also use your data to inform you about our products/services to the extent permitted by law.

If we contact you by post, the processing is based on the legal basis of Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in direct marketing. We will always inform you by telephone or e-mail with your consent on the basis of Art. 6 para. 1 lit. a GDPR. For advertising to existing customers, feedback requests and press accreditation, the legal basis in each case is the legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interests include our advertising interests, organisational interests and our desire to continuously improve our products, range and service. In addition, we process your data to fulfil legal obligations (e.g. regulatory requirements, commercial and tax law retention and verification obligations, Art. 6 para. 1 sentence 1 lit. c GDPR).

5. Who receives the data?

Your data will be passed on to the responsible employees within our company for the aforementioned purposes (Art. 6 para. 1 sentence 1 lit. b GDPR). Data will only be passed on to third parties outside our company if this is necessary for contract processing or billing, if you have given your consent or if there is a legal basis or obligation.

Insofar as we use the services of third parties (so-called processors) to carry out and handle processing operations, the provisions of the GDPR are complied with. Service providers who support us in providing our services to you are

• Hosting-Provider
• E-Mail-Provider
• IT-Service Provider
• Service provider for data destruction
• HR-Data Provider
• Finance-Data Provider
• Tax-Data Provider
• CMS- Data Provider
• Credit assessment service provider
• Marketingpartner
• Cloud services and software (SaaS) provider
   

We pass on personal data to the following third parties who process personal data under their own responsibility (so-called controllers, cf. Art. 4 No. 7 GDPR) within the scope of legal admissibility and necessity:

• Auditor
• Authorities
• Tax consultant

6. Storage of the data

We only process your personal data for as long as is necessary to fulfil the respective processing purpose.

In addition, we are subject to various retention and documentation obligations arising from the German Commercial Code (HGB) or the German Fiscal Code (AO), among others. These can last up to 10 full years.

Finally, the storage period is also determined by the statutory limitation periods, which can be up to thirty years in accordance with Sections 195 et seq. of the German Civil Code (BGB), for example, whereby the regular limitation period is three years.

7. Your Rights

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. To exercise the aforementioned rights, you can contact the offices listed under point 1.

If you have given us your consent to data processing, you can revoke this at any time without any formal requirements. To do so, you can contact the office named in section 1.

If we process your data to protect legitimate interests, you can object to this processing at any time for reasons arising from your particular situation. To do so, you can contact the office named in section 1.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).