Privacy Notice for German Customers

1. General Information

The protection of personal data is an important concern for us. Below, we inform our business customers about how we process personal data in the context of the business relationship in accordance with the General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person (e.g. contact person at the customer).

 

2. Controller

Uzin Utz SE

Dieselstraße 3

87079 Ulm

Phone: +49 731 4097-0

Email: de@uzin-utz.com

 

3. Purposes and Legal Bases of Data Processing

We process our customers’ personal data in particular for the following purposes:

• Initiation, execution, and termination of contractual relationships

• Communication with customers or the contact persons at the customer

• Order, delivery, and invoice processing

• Organization, execution, and tracking of deliveries

• Fulfilment of legal and tax obligations

• Safeguarding legitimate corporate interests (e.g. efficient logistics)

The processing of personal data is carried out on the basis of:

Art. 6 (1) (b) GDPR – Processing for the performance of a contract or in order to take steps prior to entering into a contract:

Data processing is carried out insofar as it is necessary for the initiation and execution of contracts for the procurement of goods and other services as well as contracts for the provision of services. The specific purposes pursued by the data processing result from the respective contractually agreed purposes for carrying out our business relationships.

Art. 6 (1) (f) GDPR – Legitimate interest in efficient business and delivery processing:

It may be necessary to process the personal data you provide beyond the actual performance of the contract. The legitimate interests in this context include, in particular:

• Business organization and commercial communication

• Measures for the further development of products

• Consultation of and data exchange with credit agencies to determine creditworthiness and the risk of payment default

• Examination and assertion of legal claims (e.g. in the context of claims settlement)

• Defense in legal disputes

Art. 6 (1) (c) GDPR – Compliance with legal obligations:

The purposes of data processing result, in individual cases, from legal requirements. These legal obligations include, for example, compliance with retention and identification obligations, such as those arising from regulations to prevent money laundering, tax control and reporting obligations, and data processing in the context of requests from public authorities.

 

4. Categories of Data Processed

In the context of the business relationship, we process in particular the following data:

• Personal and contact information (e.g. name, first name, email address, telephone number, fax number, function, position, department)

• Delivery and billing addresses

• Order, shipping, and tracking information (e.g. shipment number)

• Bank account and payment information

 

5. Shipment Tracking and Involvement of Shipping Service Providers

To handle deliveries, we work together with external shipping service providers.

The shipping service provider receives only those data necessary for performing the delivery (e.g. name, delivery address, shipment number, number of shipment units, weight, logistical parameters, delivery date, specific delivery service, telephone notification, hazardous goods information; depending on the service provider or the type of shipment, the data may vary).

As part of the shipping process, our customers receive an email from us with a link for shipment tracking.

This email with the link is sent by us as the responsible company.

Only when the customer actively clicks on the shipment tracking link does the customer’s device establish a connection to the shipment tracking service of the shipping provider. In this context, in particular the following data may be transmitted to and processed by the shipping provider: IP address; shipment number; where applicable, technical usage data (e.g. browser, time of access).

From this point onwards, the shipping service provider is independently responsible for further data processing.

Our processing is carried out on the basis of Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in transparent and efficient delivery).

Further information on data processing by the respective shipping service provider can be found in their privacy notices.

You can unsubscribe from shipment tracking notifications at any time via the unsubscribe link in the email.

GLS:
www.gls-pakete.de/datenschutzerklaerung

DHL:
activetracing.dhl.com/DatPublic/privacyNotice.do

Raben:
deutschland.raben-group.com/datenschutzerklarung

Gebrüder Weiss:
www.gw-world.com/de/datenschutzhinweis

Noerpel:
https://noerpel.de/metanavi/impressum-datenschutz

 

6. Recipients of the Data

Personal data is only disclosed to those recipients who require it to fulfil the purposes mentioned above, for example:

• Shipping and logistics service providers

• IT service providers (e.g. hosting, email dispatch)

• Tax and legal advisors

• Public authorities, where required by law

If we transfer your personal data to data recipients outside the European Economic Area (EEA), such transfer will only take place if an adequate level of data protection has been determined by the EU Commission for the third country, or if the special conditions of Art. 49 GDPR are met.

 

7. Storage Period

We store personal data only for as long as is necessary for the purposes mentioned above or as long as statutory retention periods exist. After these periods expire, the data will be deleted.

 

8. Rights of Data Subjects

Data subjects have the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to object (Art. 21 GDPR)

• Right to data portability (Art. 20 GDPR)

In addition, there is a right to lodge a complaint with a competent data protection supervisory authority.

 

9. Contact for Data Protection

If you have any questions about data protection or wish to exercise your rights, you can contact us at any time:

Data Protection Officer: Rebecca Schwegler

Dieselstraße 3

87079 Ulm

Phone: +49 731 4097-0

Email: datenschutz@uzin-utz.com