Business Partners

This is a translation for convenience. The binding version is in German: Business Partners.

I. Name and address of the controller

The controller within the meaning of the relevant data protection regulations is:

Bilendo GmbH
Florian Kappert
Fürstenfelder Str. 9
80331 Munich
Phone: +49 (0)89 24413210-0
Email: datenschutz@bilendo.de

The controller's data protection officer is:

RA Wolfgang Steger
Am neuen Weg 21
82041 Oberhaching
Phone: 0178/7714857
Email: steger@ra-steger.info

II. General information on data processing, categories of data processed

We process personal data of our customers, suppliers and other contractual partners ("business partners") only in compliance with the applicable data protection provisions, for the following purposes:

Business communication, e.g. on products, services and projects
Organization, maintenance and management of the business relationship
Customer surveys, marketing campaigns, market analyses, sweepstakes, competitions or similar actions and events
Maintaining and protecting the security of our products, services and websites; preventing and detecting security risks, fraud or other criminal or harmful acts
Compliance with legal requirements (e.g. tax and commercial law retention obligations) as well as guidelines and industry standards
Performance of existing contracts and the assertion, exercise, enforcement and defense of legal claims, and the settlement of disputes

For these purposes we process the following categories of personal data:

Contact information, such as first and last name, business address, business phone/mobile/fax number and business email address
Payment data required to process payment transactions or prevent fraud, including credit card information and card verification numbers
Other information required in the context of a project or contractual relationship, or provided voluntarily by our contacts, such as orders, inquiries or project details
Information collected from publicly available sources, information databases, or credit reporting agencies

Personal data is processed only for the purposes above, based on the fulfillment of our contractual obligations or to protect our overriding legitimate interests, which arise from the pursuit of our corporate purpose.

III. Transmission and disclosure of personal data

We transmit personal data for the purposes above to:

Other service providers, insofar as necessary to fulfill the purposes above
Courts, regulatory agencies or law firms, to the extent legally permitted and necessary to comply with applicable law or to assert, exercise or defend legal claims
Processors, such as IT maintenance service providers, who are bound by our instructions and contractually obligated to comply with applicable data protection requirements

Where the recipients above are located in countries outside the European Economic Area ("third countries") whose applicable law does not ensure the same level of data protection as your home country, we take measures to ensure appropriate safeguards — transferring personal data only to recipients who (i) have concluded EU standard contractual clauses with us as controller, (ii) have adopted Binding Corporate Rules, or (iii) are certified, where based in the US, under an applicable EU/US data transfer framework.

IV. Storage periods

Personal data is deleted or blocked as soon as the purpose of storage ceases to apply, unless an explicit storage period was specified at the time of collection. Storage may continue where required by European or national law; a blocking or deletion also occurs once a legally prescribed storage period expires, unless further storage remains necessary for the conclusion or performance of a contract.

V. Other information, in particular your rights

Further information, in particular on your data subject rights and the legal basis for our data processing, can be found on our homepage under Data Privacy as well as under GDPR.

You can find more information on data privacy and IT security in our Terms & Conditions and under Data Privacy.