Privacy Policy for Business Partners
FAQ
Data Controller
The controller responsible for processing your personal data is Biofidus AG, Gütersloher Str. 54, 33649 Bielefeld, Germany. You can reach Biofidus AG by email at info@biofidus.com or by phone at +49 (0)521 32936340.
Data Protection Officer
You can contact our Data Protection Officer at datenschutz@biofidus.de.
Purposes of Processing
We process your personal data primarily for the performance and administration of our contractual relationship. This includes fulfilling contractual obligations, handling invoices, and communicating with you.
Legal Basis for Processing
We process your personal data on the following legal bases under the GDPR:
Performance of a contract (Art. 6(1)(b) GDPR) for the execution and handling of the contractual relationship.
Compliance with legal obligations (Art. 6(1)(c) GDPR in conjunction with Art. 39 GDPR).
Categories of Personal Data Processed
Depending on the specific business relationship, we may process the following categories of personal data:
Identification and contact details such as first name, last name, business contact details, title and position.
Contract and billing information such as payment details and invoicing details.
Communication content such as emails, telephone calls, and business correspondence.
Business relationship history such as marketing and sales related information.
Other data that arises in the course of fulfilling our contractual and legal obligations.
Recipients and Access to Data
Within Biofidus AG, only those departments and individuals who require your data to meet contractual and legal obligations will have access. Depending on the purpose, your data may also be shared with external recipients such as processors including IT service providers, tax advisors, debt collection service providers, and public authorities such as the tax office and data protection supervisory authorities.
Your personal data is not transferred to third countries outside the European Union or the European Economic Area.
Storage Duration
We store your personal data for as long as necessary for the respective processing purpose. As a rule, we process your information for the duration of the entire business relationship, from initial contact and contract initiation, through performance, until termination of the contract, and until any interest in receiving information from your side has ended.
In addition, we retain your data in accordance with applicable statutory retention and documentation obligations, relevant warranty and limitation periods, and where required for legal disputes in which the data may be used as evidence, until such matters are fully resolved.
Requirement to Provide Data
If you do not provide the necessary information, we will not be able to conclude a contract with you.
Your Rights
Subject to the statutory requirements, you have the right to access information about whether and which of your personal data we process (Art. 15 GDPR), to request rectification of inaccurate or incomplete data (Art. 16 GDPR), to request erasure of your data unless overriding legitimate interests or legal obligations prevent deletion (Art. 17 GDPR), to request restriction of processing (Art. 18 GDPR), and to request data portability (Art. 20 GDPR).
To exercise your rights, please contact us at datenschutz@biofidus.de.
If you have given consent for specific processing activities, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.
If we process your data based on legitimate interests, you may object to this processing at any time in accordance with Art. 21 GDPR.
Automated Decision Making and Profiling
We do not use automated decision making or profiling for these processing activities.
Right to Lodge a Complaint
If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the competent supervisory authority. The responsible authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. You can reach the authority by phone at +49 (0)211 38424-0, by fax at +49 (0)211 38424-10, or by email at poststelle@ldi-nrw.de