Privacy Notice for Business Customers and Suppliers
With the following information, we would like to give you an overview of how we process your personal data and of your rights under the General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”) and the German Federal Data Protection Act (“BDSG”).
This privacy notice applies to the personal data of persons with whom we enter into contractual or business relationships, as well as to the personal data of officers, managing directors, key account managers, and other employees of our contractual or business partners, which we process in connection with existing or prospective contractual and business relationships. This includes, among others, existing or potential suppliers, service providers, customers, or consultants, as well as existing or potential cooperation partners or other partner companies.
1. Controller and Data Protection Officer
azeti GmbH
Hovestraße 50
20539 Hamburg
Germany
You can reach our data protection officer at:
Sabine Thomas
Ing.-Büro Dr. Plesnik GmbH
Kaiserstraße 100
52134 Herzogenrath
Germany
https://www.datenschutz-ist-pflicht.de
Phone: +49 (0)241 149 46 98
E-mail: datenschutz@plesnik.de
2. Sources and Categories of Personal Data
We primarily process personal data that data subjects provide to us themselves in connection with contractual and business relationships, or that we receive from the respective contractual and business partners (e.g., from their colleagues with whom we are already in contact), for example in the course of processing an inquiry or an order. In addition, we process personal data that we collect from publicly available sources (such as commercial registers, the press, or the internet) or receive from third parties (e.g., credit agencies, business partners). We will provide separate notice of any collection of personal data from third-party sources.
Relevant personal data includes, in particular, personal details (such as name, first name, address, bank details, billing address, tax number/VAT ID) and other contact data (such as telephone number, email address). In addition, this may include contract or order data (e.g., revenue data, volume, planned quantities), data arising from the performance of our contractual obligations, information about your financial situation (e.g., creditworthiness data), data relating to you personally (e.g., business interests, occupation, industry, position, tasks and responsibilities), as well as other data comparable to the categories listed.
The scope of the data processed in relation to a person varies depending on the capacity in which that person acts vis-à-vis us, for example, the position they hold with the respective business partner.
3. Legal Bases, Purposes of Processing and Legitimate Interests
3.1 We process personal data for the following purposes and/or in pursuit of the following legitimate interests, in each case on the basis of the following legal bases:
| Purpose | Processing / legitimate interest | Legal basis |
|---|---|---|
| Preparation, performance, and execution of contractual and business relationships with you or your employer | Processing of personal data for the initiation, performance, and termination of contractual relationships with customers, prospective customers, suppliers, and other business partners. This includes, in particular, handling inquiries, preparing quotations, contract management, communication with contact persons, service delivery, support, invoicing, and payment processing. | Art. 6(1)(b) and (f) GDPR |
| Customer care — support for business partners | Maintaining and developing existing business relationships, handling support and service requests, communication with contact persons, and documentation of customer and supplier contacts to ensure efficient cooperation. | Art. 6(1)(f) GDPR |
| Optimization of our business processes | Processing of personal data to improve internal customer management business processes, the quality of our services, documentation, and the efficient organization and administration of our business operations. This also includes the use of suitable IT systems (e.g., CRM systems and, in particular, ticketing or project management systems). | Art. 6(1)(f) GDPR |
3.2 We also process your data to safeguard our legitimate interests (Art. 6(1)(f) GDPR) in asserting and defending legal claims and conducting market research.
3.3 Further processing of data takes place on the basis of legal requirements (Art. 6(1)(c) GDPR), for example, to comply with tax law and other statutory control and reporting obligations, as well as for audits by tax or other authorities, and to comply with statutory retention periods.
4. Recipients of Personal Data
Under certain circumstances, your personal data may be disclosed (beyond the cases already mentioned above) for the purposes stated above; specifically:
4.1 Where necessary to investigate or prosecute unlawful or fraudulent acts, personal data will be forwarded to our legal advisors, law enforcement authorities, and, where applicable, to injured third parties. This will only occur, however, where there are concrete indications of unlawful or fraudulent conduct. Disclosure may also take place where this serves to enforce contractual provisions between us and our contractual and business partners.
4.2 We are also legally obliged to provide information to certain public authorities upon request. These are, in particular, law enforcement authorities, authorities responsible for prosecuting regulatory offenses subject to fines, and tax authorities.
4.3 To the extent necessary for processing your inquiry or for the conclusion or performance of a contractual or business relationship with you, and in the case of centralized or outsourced corporate functions, your data may be disclosed to affiliated companies for the fulfillment of the purposes stated above.
4.4 We occasionally rely, for the fulfillment of the purposes described in this privacy notice or for the provision of our services, on contractually affiliated third-party companies or other cooperation partners as well as external service providers, which may be based outside the EU or the EEA, such as brokers, logistics companies, IT service providers, business consultants, and financial institutions. In such cases, information is disclosed to these companies or individuals to enable them to carry out further processing. Where these are entities located outside the EU or the EEA, we ensure an adequate level of data protection, for example, by entering into appropriate agreements with the data recipient.
4.5 In the course of the further development of our business, the structure of our company may change, for example through a change of legal form, or the establishment, acquisition, or sale of subsidiaries, business units, or parts thereof. In the event of such transactions, customer information will be disclosed together with the part of the business being transferred. For any disclosure of personal data to third parties within the scope described above, we ensure that it is carried out in accordance with this privacy notice and applicable data protection laws.
5. Duration of Processing
We process your personal data for the duration of your employment with one of our business partners, but no longer than until the definitive termination of the respective business relationship between us and your employer. We delete transaction-related information (e.g., relating to a specific contractual or order relationship) upon completion of the respective transaction, e.g., fulfillment of a supply contract, after a period of three years following the end of the respective calendar year, unless such data is subject to longer statutory retention obligations (such as the six- or ten-year retention period under Section 257 of the German Commercial Code (Handelsgesetzbuch)); in such cases, the data concerned will be blocked from any further processing.
6. Rights of Data Subjects
6.1 You have the right to obtain information at any time about the data stored concerning you. Where the respective requirements are met, you are also entitled to the following rights:
- Right to rectification: You have the right to have incorrect personal data concerning you corrected.
- Right to erasure: You may also request the erasure of your personal data, for example, where your data is no longer necessary for the purposes for which it was collected or otherwise processed.
- Right to restriction of processing: You further have the right to request the restriction of the processing of your personal data; in such a case, the data will be blocked from any further processing. This right exists, in particular, where the accuracy of the personal data is disputed between you and us.
- Right to data portability: Where we process your personal data for the performance of a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used, and machine-readable format, to the extent that you have provided us with the data.
- Right to withdraw consent: Where you have given us consent to process your personal data, you may withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent prior to its withdrawal.
- Right to object: You may also object to data processing for reasons arising from your particular situation. This applies, however, only in cases where we process data to fulfill a legitimate interest. If you can provide such reasons and we cannot demonstrate compelling legitimate grounds for the continued processing that override your interests, we will no longer process this data for the respective purpose.
6.2 If you wish to obtain information about the data stored concerning you, wish to exercise your other rights, or have questions regarding data protection at our company, you may contact us using the contact details provided above.
6.3 You further have the right to lodge a complaint with a supervisory authority at any time, in particular with a supervisory authority in the member state of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes data protection law.
7. Version and Amendment of this Privacy Notice
This privacy notice is current as of 29 June 2026.
The further development of our company may also affect how we handle personal data. We therefore reserve the right to amend this privacy notice in the future within the scope of applicable data protection laws and, where necessary, to adapt it to changed data processing practices. We will notify you separately of any material substantive changes.