Privacy statement for our client database

The party responsible for processing your data (also known as the data processing controller) is DB Engineering & Consulting GmbH, Part of DB E.C.O. Group, EUREF-Campus 14, Torgauer Str. 12-15, 10829 Berlin, Germany.

The appointed data protection officer is Dr. Marein Müller.

If you have any questions or suggestions on privacy as it relates to our client database, please e-mail our privacy team at:

datenschutz.db-ec@db-eco.com

We collect and process your personal data for the following purposes only:

To maintain client relationships and cultivate relationships with interested parties (customer relationship management [CRM]), with the aim of preparing and following up on offers.

We store the contact data provided by you and may also store contact data relating to you that is freely available. We collect the following data:

• Form of address
• Title
• First name
• Last name
• Position
• Responsibilities
• Work address
• Work landline phone number
• Work cell phone number
• E-mail address
• Source of data
• Date of processing
• Business relationship

If we request and receive your consent to process your personal data, this consent will constitute the legal basis for our data processing operations in accordance with Article 6 (1) a) of the EU General Data Protection Regulation (GDPR).

Where the processing of your personal data is necessary for the performance of a contract with you, the contract will provide the legal basis under Article 6 (1) b) GDPR. Article 6 (1) b) GDPR also applies to data processing operations that are necessary for carrying out precontractual measures, such as responding to inquiries about our products and services.

Where our company is under a legal obligation that requires us to process personal data, such as to comply with tax obligations, this processing will be based on Article 6 (1) c) GDPR.

To run our client database, we generally need to use data processors who act on our instructions, such as data center operators, providers of printing or shipping services and other external service providers involved in fulfilling contracts..

External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. The service providers follow our instructions; this is ensured by means of strict contractual provisions, technical and organizational measures, and additional monitoring.

We do not otherwise share your data unless you have provided your express consent, we are required to do so by a statutory provision, or the performance of contractual or precontractual measures requires us to do so.

Transfers of personal data to countries outside the European Union (EU) and the European Economic Area (EEA)

Due to our organizational structure and in order to offer you our full range of products and services, we would like to be able to grant our sales employees worldwide – and in particular those sales employees who have their place of work outside the European Union or the European Economic Area – access to your data in our client database.

We will always request your consent before transferring your data to countries outside the European Union or the European Economic Area.

We store your data only for as long as is necessary to fulfill the purpose for which the data was collected (such as for a contractual relationship).

For example, if we have a contractual relationship with you, we will store your data at least until such time as the contract is fully terminated. Thereafter, we will retain the data for the duration of applicable statutory retention periods.

If you have requested that we contact you, we will store your data for as long as is required for us to process your request. We have set our system to automatically delete your data after two years of inactivity. You will receive an automated e-mail 14 days before the two years expire, asking you whether you wish to allow us to retain your data in the database for a further two years. If you do not respond to the e-mail within 14 days, we will delete your data.

You can exercise your right to object to having your data processed at any time by following the directions in your privacy e-mail.

We do not use cookies.

Keeping your data secure is very important to us. We always store your data in encrypted form in our client database.

Please note that we do not use encryption in our e-mail communications.

• You can request information about the details of your personal data that we have stored.
• You can request the rectification, erasure and restriction of processing (blocking) of your personal data, provided that these actions are permitted by law, and provided that they do not prevent us from maintaining a contractual relationship that already exists with you.
• You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for DB Engineering & Consulting GmbH is Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt Moabit 59-61, 10555 Berlin, Germany. E-Mail: mailbox@datenschutz-berlin.de
• You have the right to data portability as regards the data that you have provided to us by means of a declaration of consent or based on a contract.