Customer information on the use of personal data on initial collection in accordance with Article 13 and Article 21 of the General Data Protection Regulation (GDPR)

We take data protection seriously and hereby inform you how we process your data and what claims and rights you are entitled to under data protection regulations.

1. controller within the meaning of data protection law and contact details of the data protection officer

The controller within the meaning of data protection law is

Integer Solutions GmbH
Industriestrasse 4
61200 Wölfersheim
Phone: 0 60 36 - 90 557-0
Fax: 0 60 36 - 90 557-77

You can reach our data protection officer at our postal address with the addition "the data protection officer" or atdatenschutz@integer-solutions.com.

2 Purposes and legal basis on which we process your data

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection regulations. Which data is processed in detail and how it is used depends on the respective agreed service.

2.1 Purposes for the fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b)GDPR)

The processing of personal data takes place for the performance of our contracts with you and the execution of your orders as well as for the implementation of measures and activities in the context of pre-contractual relationships. In particular, the processing serves to prepare invoices in accordance with your orders and includes the services, measures and activities necessary for this.

2.2 Purposes in the context of a legitimate interest of us or third parties (Art. 6 para. 1 sentence 1 lit. f) GDPR)

In addition to the actual fulfillment of the contract or preliminary contract, we may process your data if it is necessary to protect our legitimate interests or those of third parties, in particular for the purposes of

• advertising, market and opinion research or address rental, provided you have not objected to the use of your data (only applies to entrepreneurs, within the meaning of Section 7 (3) UWG);
• obtaining information and exchanging data with credit agencies or debt collection agencies, insofar as this is covered by our legitimate interest;
• the enrichment of our data, including through the use or research of publicly accessible data;
• the limited storage of data if deletion is not possible or only possible with disproportionate effort due to the special type of storage.

We are subject to a variety of legal requirements (e.g. commercial and tax laws), but also regulatory or other official requirements. The purposes of processing may include identity and age verification, fraud and money laundering prevention, the prevention, combating and investigation of terrorist financing and criminal offenses that endanger assets, comparisons with European and international anti-terror lists, the fulfillment of tax control and reporting obligations and the archiving of data for the purposes of data protection and data security as well as audits by tax and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/judicial measures for the purposes of gathering evidence, criminal prosecution or the enforcement of civil law claims.

3. the categories of data processed by us, insofar as we do not receive data directly from you, and their origin

Insofar as this is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties (e.g. credit agencies). We also process personal data that we have legitimately taken, received or acquired from publicly accessible sources (e.g. telephone directories, commercial and association registers, etc.) and are permitted to process.

Recipients or categories of recipients of your data

Within our company, those internal departments or organizational units receive your data that require it to fulfil our contractual and legal obligations or as part of the processing and implementation of our legitimate interest. Your data will be passed on to external parties

• in connection with the processing of contracts;
• for the purpose of fulfilling legal requirements,
• on the basis of our legitimate interest or the legitimate interest of the third party for the purposes mentioned in section 2.2 (e.g. to authorities, credit agencies, debt collection agencies, lawyers, courts, experts, group companies and committees and supervisory bodies);
• if you have given us your consent to transfer your data to third parties.
  
  

We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract. In addition, we store data that must be retained due to commercial and tax regulations for 10 years. Other data for which no tax retention periods are applicable will be retained until the end of the regular limitation period (§§195, 199 BGB), although periods of up to 30 years may be applicable under certain circumstances. If the data are no longer required for the fulfillment of contractual or legal obligations and rights, they are regularly deleted, unless their - temporary - further processing is necessary to fulfill the purposes listed under section 2.2 for an overriding legitimate interest.

5. processing of your data in a third country or by an international organization

Data is transferred to bodies in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) if it is necessary for the execution of an order/contract from you, if it is required by law (e.g. tax reporting obligations), if it is in our or a third party's legitimate interest or if you have given us your consent. Your data may also be processed in a third country in connection with the involvement of service providers as part of order processing. If there is no decision by the EU Commission on an appropriate level of data protection in the country in question, we ensure that your rights and freedoms are adequately protected and guaranteed in accordance with EU data protection regulations by means of appropriate contracts.

6 Your data protection rights

You have the following rights vis-à-vis us with regard to your personal data:

• Right of access,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• right to data portability.

7 Payment processing

In order to process payments, we (the merchant) transmit the data required for this data (e.g. name, invoice amount, payment and transaction data, technical metadata such as IP address, date/time) to the payment service providers used. payment service provider.

The technical processing is carried out by vobapay GmbH, Frankfurter Straße 1, 64720 Michelstadt. Data protection information: https: //www.vobapay.de/datenschutz/

Credit card (VR Payment)

Processing takes place via VR Payment GmbH (acquirer), Platz der Republik, 60325 Frankfurt am Main. Transmitted data: Name, invoice amount, credit card details, e-mail address, IP address. Data protection information: https: //www.vr-payment.de/datenschutz-haftung-terminal-virtuellacquiring/

PayPal

When paying via PayPal, your payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Transmitted data: Name, address, invoice amount, e-mail address, IP address.

Data protection information:https://www.paypal.com/legalhub/paypal/privacy-full

Purchase by invoice / direct debit (Mondu)

Payment is processed by Mondu GmbH, Unter den Linden 16, 10117 Berlin, Germany. Berlin.

When using a Mondu payment method, the merchant assigns his payment claim to Mondu GmbH or its partner bank. Mondu GmbH or its partner bank. As part of the ordering process, the merchant transmits your data for the purpose of identity and credit check as well as contract processing to Mondu.

If you select purchase on account as a payment method, the merchant will first assign the claim to Mondu Financial Services B.V. first. This then transfers the to Mondu Capital S.à r.l. The purchase on account is processed by Mondu GmbH, sub is handled by Mondu GmbH, Unter den Linden 16, 10117 Berlin ("Mondu"). Mondu is responsible for this and also carries out a credit check.

To enable purchase on account, the merchant transmits the following data to Mondu:

First and last name

• e-mail address
• Billing and delivery address
• IP address as well as browser and device information
• Shopping cart number
• Invoice amount

Mondu checks your identity and creditworthiness. Mondu may also forward data to credit agencies (e.g. SCHUFA) and receive information from them about your solvency. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interest in checking solvency and fraud prevention).

On the basis of this check, Mondu decides whether to offer you purchase on account. is offered to you. If the check is successful, you will receive a confirmation email from Mondu. If the check is negative, you can choose another payment method.

Please note: Some Mondu service providers operate servers in the USA or other other countries outside the EU. In these cases, Mondu ensures that your data is data is protected there by suitable contractual regulations.

Your data will only be stored for as long as it is necessary for the processing of the purchase on account and then deleted.

Further information can be found in Mondu's privacy policy.https://www.mondu.ai/de/datenschutzhinweise/

8. credit agencies