Privacy statement for our client database

The party responsible for processing your data (also known as the data processing controller) is DB Engineering & Consulting GmbH, Part of DB E.C.O. Group, EUREF-Campus 14, Torgauer Str. 12-15, 10829 Berlin, Germany.

The appointed data protection officer is Dr. Marein Müller.

If you have any questions or suggestions on privacy as it relates to our client database, please e-mail our privacy team at:

datenschutz.db-ec@db-eco.com

We collect and process your personal data for the following purposes only:

To maintain client relationships and cultivate relationships with interested parties (customer relationship management [CRM]), with the aim of preparing and following up on offers.

We store the contact data provided by you and may also store contact data relating to you that is freely available. We collect the following data:

• Form of address
• Title
• First name
• Last name
• Position
• Responsibilities
• Work address
• Work landline phone number
• Work cell phone number
• E-mail address
• Source of data
• Date of processing
• Business relationship

If we request and receive your consent to process your personal data, this consent will constitute the legal basis for our data processing operations in accordance with Article 6 (1) a) of the EU General Data Protection Regulation (GDPR).

Where the processing of your personal data is necessary for the performance of a contract with you, the contract will provide the legal basis under Article 6 (1) b) GDPR. Article 6 (1) b) GDPR also applies to data processing operations that are necessary for carrying out precontractual measures, such as responding to inquiries about our products and services.

Where our company is under a legal obligation that requires us to process personal data, such as to comply with tax obligations, this processing will be based on Article 6 (1) c) GDPR.

To run our client database, we generally need to use data processors who act on our instructions, such as data center operators, providers of printing or shipping services and other external service providers involved in fulfilling contracts..

External service providers who process data on our behalf are carefully selected by us and are subject to strict contractual obligations. The service providers follow our instructions; this is ensured by means of strict contractual provisions, technical and organizational measures, and additional monitoring.

We do not otherwise share your data unless you have provided your express consent, we are required to do so by a statutory provision, or the performance of contractual or precontractual measures requires us to do so.

Transfers of personal data to countries outside the European Union (EU) and the European Economic Area (EEA)

Due to our organizational structure and in order to offer you our full range of products and services, we would like to be able to grant our sales employees worldwide – and in particular those sales employees who have their place of work outside the European Union or the European Economic Area – access to your data in our client database.

We will always request your consent before transferring your data to countries outside the European Union or the European Economic Area.

We store your data only for as long as is necessary to fulfill the purpose for which the data was collected (such as for a contractual relationship).

For example, if we have a contractual relationship with you, we will store your data at least until such time as the contract is fully terminated. Thereafter, we will retain the data for the duration of applicable statutory retention periods.

If you have requested that we contact you, we will store your data for as long as is required for us to process your request. We have set our system to automatically delete your data after two years of inactivity. You will receive an automated e-mail 14 days before the two years expire, asking you whether you wish to allow us to retain your data in the database for a further two years. If you do not respond to the e-mail within 14 days, we will delete your data.

You can exercise your right to object to having your data processed at any time by following the directions in your privacy e-mail.

We do not use cookies.

Keeping your data secure is very important to us. We always store your data in encrypted form in our client database.

Please note that we do not use encryption in our e-mail communications.

• You may request information as to what personal data about you is being stored.
• You may request that your personal data be corrected, deleted or its processing restricted (blocked) provided this is permitted by law and possible in the existing contractual relationship.
• If you believe that the processing of personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority, in particular pursuant to Art. 77 (1) of the GDPR. The supervisory authority responsible for DB Engineering & Consulting GmbH, Part of DB E.C.O. Group is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany
• You have the right to portability of the data that you have provided to us based on a declaration of consent or a contract (data portability).
• Withdrawal of consent: If you have given us your consent to data processing (for example, your consent to receive a newsletter), you may withdraw it at any time by the same means you used to give consent. Any processing of your personal data that took place from the time at which you granted your consent to the time at which you withdrew it will still be considered to have been lawful.
• Right of objection: You can object to the data processing for reasons arising from your particular situation, if the data processing is based on our legitimate interests or is necessary for the performance of public tasks.
  If we process your data for the purpose of direct advertising, you may object to this promotional approach at any time with future effect.
• To exercise your rights, you may send a letter by post to: DB Engineering & Consulting GmbH, Part of DB E.C.O. Group, Customer Relationship Management, EUREF-Campus 14, 10829 Berlin, Germany. Alternatively, you may send an e-mail to the following address:  datenschutz.db-ec@db-eco.com