Below, we provide you with information about the processing of your data in accordance with Articles 13 and 14 of the GDPR.
Identity of the Controller
EOS Holding GmbH
20099 Hamburg, Germany
Contact Details for the Data Protection Officer
Data Protection Officer for EOS Holding GmbH, Steindamm 71, 20099 Hamburg, Germany, or at firstname.lastname@example.org. When contacting us by email, please state “EOS Holding GmbH” (as controller for data processing) and the reason for your contact in the subject line.
Purposes of and Legal Basis for Processing
We process data from business owners or employees of companies for contract initiation and performance of the contract in accordance with Article 6(I)(b) of the GDPR.
We process data from contacts on the basis of our legitimate interests in processing for the purposes of direct advertising in accordance with Article 6(I)(f) of the GDPR.
Beyond that, we process data on the basis of our legitimate interests in asserting, exercising, or defending legal claims as well as for internal administrative purposes and uniform customer relationship management within the corporate group in accordance with Article (6)(I)(f) of the GDPR. We store these data within the scope of the statutory limitation periods or to the extent that and as long as corresponding processing takes place.
We process data to the extent that we are legally obligated to do so in accordance with Article 6(I)(c) of the GDPR.
Data Categories and Data Origin
We process the following categories of data: master data, address data, communication data, and contractual data. The data were transmitted to us by you or your company or taken from publicly accessible data sources.
We only transfer your data to other companies within the EOS Group, service providers (e.g., postal services, telecommunications), or contracted data processors to fulfill the above-mentioned processing purposes. In certain cases, we may be legally obligated to transmit your data to authorities, e.g., within the framework of tax laws.
As far as possible, we cooperate solely with European providers. If this is not possible in specific cases, e.g., because of the lack of an appropriate offering, we also use service providers with headquarters outside the European Union. In principle, data are stored and processed in data centers within the European Union. If, in exceptional cases, your data are processed outside the EU, EOS ensures that the provisions of Articles 44 ff. of the GDPR are complied with.
Duration of Storage
Personal data are processed until the above-mentioned purposes have been achieved in full. These also include obligations to provide evidence and statutory retention obligations pursuant to the German Fiscal Code (AO), the German Commercial Code (HGB), and the German Value Added Tax Act (UstG), among other things.
Rights of the Data Subject
If the legal requirements are met, you have the following rights in accordance with Articles 15 to 21 of the GDPR: rights to access, rectification, erasure, restriction of processing, and data portability.
In addition, if the legal requirements are met, you have the right to object to processing based on Article 6(I)(f) of the GDPR.
Right to Lodge a Complaint With a Supervisory Authority
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence or workplace or our company’s headquarters for this purpose. The competent supervisory authority for our company is as follows: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (The Hamburg Representative for Data Protection and Freedom of Information), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.