This data protection information for business partners informs you about the processing of your personal data at WFG Wellpappen Freigericht GmbH (hereinafter WFG).

Your personal data includes acc.
Art. 4 lit.
1 GDPR, your personal data includes all information that relates or can be related to your person, in particular by means of assignment to an identifier such as a name or an organization or customer number with which your person can be identified.

We provide this data protection information for business partners (“Notice“) in order to explain the data processing procedures in relation to our suppliers, customers and business partners (collectively, “Business Partners“) and their employees who are in contact with WFG.

Scope:

This notice applies if you are an independent business partner of WFG (e.g. consultant) or if you are an employee of a business partner acting on behalf of the business partner with WFG.

Categories of personal data and data sources:

WFG processes the following personal data from your company or from third parties (e.g. your superior, authorities or public resources):

• Personal data relating to independent business partners: Name, business contact information, services or products offered, contract information, communication content (such as emails or business letters), payment information, billing information, and business relationship history
• Personal data relating to employees of a business partner: name, business contact details, employer name, title/position and communication content (such as emails or business letters)

Data processing purposes, legal basis and consequences:

Your personal data will be processed for the purposes of fulfilling the contractual relationship with the business partner (including the fulfillment of contractual performance obligations, invoice processing, communication and compliance with legal requirements) for marketing and CRM activities and for fraud prevention.

WFG relies on the following legal bases for data processing:

• Fulfillment of the contractual relationship with the business partner (Art. 6 lit. b GDPR);

• Legitimate interest of WFG’s subsidiaries or third parties (e.g. government agencies or courts) (Art. 6 lit. f GDPR).
  The legitimate interest may in particular be the group-wide exchange of information, marketing and CRM activities, prevention of fraud, IT misuse, money laundering, operation of a whistleblower system, physical security, IT and network security, internal investigations or potential mergers and acquisition activities
• Consent (Art. 6 lit. a GDPR);
• Fulfillment of legal obligations (Art. 6 lit. c GDPR);

The provision of personal data is necessary for the conclusion and/or execution of the business partner contract and is voluntary.
However, if you do not provide this data, it could delay the business partner management and administrative processes or even make them impossible.

Recipient categories:

WFG may use service providers acting as processors to provide IT and other administrative support (e.g. service providers providing accounts payable support or IT hosting and maintenance support).
These service providers may have access to your personal data to the extent necessary to provide such services.

Any access to your personal data is limited to those persons who need the information to complete your activities.

WFG may disclose your personal data should this be requested or required by government authorities, courts, external authorities or similar third parties.

Retention period:

The personal data will be stored by WFG and our service providers for as long as necessary until our obligations are fulfilled.
The data will be secured for as long as necessary for the purpose in accordance with applicable data protection law.
Once WFG no longer needs the data to fulfill contractual or legal obligations, it will be removed from our systems and records and/or measures will be taken so that your personal data is properly anonymized so that it is no longer identifiable, unless we need to retain your personal data to comply with legal or regulatory obligations to which WFG is subject.
Z. For example, statutory retention periods, which are usually between 6 and 10 years, or we need to preserve evidence within the limitation period, which is usually 3 years but can be up to 30 years.

Automated decision making:

WFG does not carry out automated decision-making.

Your rights:

If you have given your consent to certain processing activities, you can withdraw this consent at any time with effect for the future.
This revocation will not affect the previous processing of data.

Under applicable data protection laws, you have the right to:
(a) to access your personal data;
b) request the rectification of your personal data
c) request the erasure of your personal data
d) to impose restrictions on the processing of your personal data
e) request the transfer of your personal data;
f) object to the processing of your personal data.
Please note that the above rights may be restricted by national law.

1. a) Right of access: You have the right to obtain confirmation from us as to whether we are processing your personal data and access to this data.
   The access information includes, among other things, the purpose of the processing, the categories of personal data, the data subjects and the recipients or categories of recipients.
   However, this is not an absolute right and the interests of other persons may restrict your right of access.
   You have the right to receive a copy of the personal data that is being processed.
   For further copies requested by you, we have the right to charge a reasonable fee for administrative costs.

1. b) Right to rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you.
   Depending on the purpose of the processing, you have the right to have incomplete personal data completed by means of a supplementary declaration.

1. c) Right to erasure (right to be forgotten): In certain circumstances, you have the right to erasure of personal data concerning you.

1. d) Right to restriction of processing: In certain circumstances, you have the right to obtain from us restriction of processing of your personal data.
   In these circumstances, the relevant data will be marked and only processed for a specific purpose.

1. e) Right to data portability: In certain circumstances, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit that data to another company without hindrance.

You also have the right to lodge a complaint with the competent supervisory authority.

Right to object pursuant to Art. 21 General Data Protection Regulation

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1).

Since WFG processes and uses your personal data primarily for the purposes of the contractual relationship with you, WFG has a legitimate interest in processing your data, which, however, will override your request for restriction.

If you have any questions regarding the notification or your rights, please contact:

E-mail: hinweisgeber@wfg-verpackung.de

You can reach the WFG’s data protection officer using the following contact details:

Vladimir Siemens

E-mail: siemens@ecoprotec.de
Tel: 05251 877888-355
Fax: 05251 877888-333
Mobile: 0151 4406412