Privacy Notice for Business Partners and Suppliers
This Privacy Notice applies to individuals whose business contact details DLEGATE Solutions GmbH ("DLEGATE", "we", "us") processes in connection with a business relationship with your organisation as a supplier, vendor, or service provider, for example, invoicing, billing, account management, or other business contacts.
This notice is made publicly available in accordance with Art. 14(5)(b) GDPR, for cases in which providing this information directly to each individual concerned would involve disproportionate effort, in particular where DLEGATE has no direct relationship with, or contractual ability to reach, the individual concerned (e.g. contacts at suppliers operating under their own standard terms). Where DLEGATE has a direct contractual relationship with an individual (e.g. freelance contractors), this notice is provided directly in accordance with the applicable agreement.
1. Responsible Party (Controller)
The controller responsible for data processing under this Privacy Notice is:
DLEGATE Solutions GmbH
Kirchsteinstr. 17b
83661 Lenggries
Germany
Email: contact@dlegate.de
2. What We Process
We process business contact details relating to your organisation's personnel, including name, business email address, and other business contact details provided to us by you or your organisation, together with associated invoice and transaction data.
3. Why We Process This Data
We process this data to administer our contractual or business relationship with your organisation, to process invoices and payments, and to comply with statutory bookkeeping and tax retention obligations.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(c) GDPR (compliance with a legal obligation).
4. Recipients
This data may be shared with our accounting and invoicing service provider(s), and stored using our cloud-based document storage and collaboration service provider(s), each acting as processors on our behalf pursuant to Art. 28 GDPR.
5. Processing Location and International Transfers
This data is processed and stored primarily within the EU/EEA, including via our cloud-based document storage and accounting service providers. Where data is nonetheless transferred outside the EU/EEA, such transfers are protected by appropriate safeguards in accordance with Articles 44–49 GDPR.
6. Retention
Data is retained for the duration of the business relationship and thereafter in accordance with applicable statutory retention periods, typically up to ten (10) years for accounting records under German law.
7. Your Rights
Under the GDPR, you have the right to request access to your Personal Data in accordance with Article 15, the right to request rectification of inaccurate or incomplete Personal Data under Article 16, the right to request erasure of your Personal Data pursuant to Article 17, and the right to request restriction of processing in accordance with Article 18. Where processing is based on legitimate interests, you have the right to object to such processing pursuant to Article 21. In addition, you have the right to lodge a complaint with a competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
8. Changes to This Notice
We may update this notice from time to time to reflect legal, technical, or organisational changes. The current version is available here.
9. Contact
If you have questions about this Privacy Notice or our data processing practices, please contact:
DLEGATE Solutions GmbH
Email: contact@dlegate.de