Privacy notice for business partners

I. Name and address of the responsible person

The responsible person in the sense of the relevant data protection regulations is the:

Bilendo GmbH
Florian Kappert
Fürstenfelder Str. 9
80331 Munich
Phone: +49 (0)89 24413210 - 0
E-Mail: datenschutz@bilendo.de

The data protection officer of the responsible party is:

RA Wolfgang Steger
Am neuen Weg 21
82041 Oberhaching
Phone: 0178/7714857
E-Mail: steger@ra-steger.info

II. General information on data processing, categories of data processed

We always process personal data of our customers, suppliers and other contractual partners ("business partners") in compliance with the applicable provisions of data protection law.

We process personal data in the context of cooperation with our business partners for the following purposes:

• Business communication e.g. on products, services and projects,
• Organization, maintenance and management of the business relationship;
• Conduct customer surveys, marketing campaigns, market analysis, sweepstakes,
• Contests or similar actions and events;
• Maintaining and protecting the safety of our products and services, as well as our
• Websites, preventing and detecting security risks, fraudulent activity, or other
• Criminal acts or acts committed with intent to harm;
• Compliance with legal requirements (e.g., tax and commercial law retention requirements)
• As well as guidelines and industry standards; and
• Implementation of existing contracts and to assert, exercise, enforce and
• Defense of legal claims and
• Settlement of disputes.

For the aforementioned purposes, we process the following categories of personal data:

• Contact information, such as first and last name, business address, business phone number, business mobile phone number, business fax number, and business email address;
• Payment data, such as information required to process payment transactions or prevent fraud, including credit card information and card verification numbers;
• Other information whose processing is required in the context of a project or the handling of a contractual relationship with us, or which is provided voluntarily by our contacts, such as orders placed, inquiries made or project details;
• Information collected from publicly available sources, information databases, or credit reporting agencies.

Personal data is only processed for the above-mentioned purposes. These usually result from the fulfillment of our contractual obligations or to protect our overriding legitimate interests. Our legitimate interests are based on the implementation of our corporate purpose.

III. transmission and disclosure of personal data

We transmit personal data for the above purposes

• to other service providers, insofar as this is necessary to fulfill the above-mentioned purposes.
• Courts, regulatory agencies or law firms to the extent legally permitted and necessary to comply with applicable law or to assert, exercise or defend legal claims.
• Order processors, such as service providers for IT maintenance services. These service providers are bound by instructions to us as the responsible party and are contractually obligated to comply with the applicable data protection requirements.

To the extent that the recipients listed above are located in countries outside the European Economic Area ("Third Countries") where the applicable law does not ensure the same level of data protection as in your home country, we take measures to ensure appropriate and adequate safeguards to protect the personal data. For example, personal data will only be transferred by us to recipients in third countries if they are

(i) EU standard contractual clauses concluded with us as controller or
(ii) have introduced Binding Corporate Rules; or
(iii) recipients - located in the USA - are certified under the EU/US Privacy Shield.

IV. storage periods

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to apply if no explicit storage period is specified at the time of collection. A storage may also take place if this is required by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. responsible party is subject to. A blocking or deletion of the data also takes place, when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or performance of a contract. exists.

V. Miscellaneous, in particular your rights

Further information, in particular on your data subject rights as well as on the legal basis for the data processing carried out by us can be found on our homepage https://www.bilendo.de/en/data-privacy under the heading "Privacy Policy" as well as under https://www.bilendo.de/en/dsgvo.

---

You can find more information on the topic of data privacy and IT security in our Terms & Conditions and under Data Privacy.