Privacy statement for our communication with business partners
In accordance with the EU General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG), this page informs you about the processing of your personal data for communication purposes.
Controller and data exchange within DF Group
The DF company with which you are in contact has the main responsibility for communication with you. Due to our corporate structure, an exchange within DF Group additionally takes place in the context of our legitimate interests, as described in the introduction.
Personal data is all information that refers to your person. We will process all your data that is required to communicate with you, in particular:
- first and last name, title and form of address
- professional contact details such as address, phone number, fax number and e-mail address
and possibly also:
- date of birth
- place of birth
- passport number
We collect these personal data
- primarily from you as the data subject;
- through information from third parties (banks, customer, agents), if applicable;
- through research from publicly accessible sources, if applicable.
Purposes of processing
- Communication with business partners about services, e.g. to process customer inquiries (Art 6 para. 1 lit. b, lit. f GDPR);
- contract initiation, contract execution and contract management (Art 6 para. 1 lit. b GDPR);
- customer service and contact maintenance where this is our legitimate interest (Art. 6 para. 1 lit. f GDPR);
- extrajudicial and judicial assertion of our own claims arising from our contractual relationship with you (Art. 6 para. 1 lit. b, c, f GDPR);
- Due to Counter-terrorism Regulations EC No. 2580/2001 and EC No. 881/2002, DF Deutsche Forfait AG and its subsidiaries are not allowed to enter into economic relationships with suspicious organizations and persons suspected of terrorism. To comply with the Regulation, we are obliged to screen all potential corporate clients against sanctions lists of persons suspected of terrorism (Art. 6 para. 1 lit. c GDPR).
Transmission to third parties and transfer to third countries
Because of the organizational structure of DF Deutsche Forfait AG, your personal data may be processed by subsidiaries as described in the introduction.
DF Deutsche Forfait will transmit personal data to banks where this is necessary for the fulfilment of a contract. Some of the receiving banks are situated in countries outside the EU (third countries).
In this case, we ensure an adequate level of data protection in the target country in compliance with Art 44 et seq. GDPR (mostly by signing standard contractual clauses with our contractual partners in third countries).
Erasure of personal data
We will store your personal data as long as we maintain a contractual relationship with you, have a legitimate interest in doing so or are obliged to do so (retention duty). After expiry of the respective periods we will delete your personal data unless we have legitimate interests in archiving and this interest is not overridden by your interest in erasure.
If we process your personal data, you have several rights under data protection legislation. You have the right
- to obtain information about the personal data stored, their origin, the purpose of the processing as well as the recipients or categories of recipients of the data (Art. 15 GDPR, Sec. 34 BDSG);
- to obtain from us the rectification, blocking (restriction of processing) or erasure of your personal data (Art. 16–18 GDPR, Sec. 35 BDSG);
- to request us to transmit your data to another controller (Art. 20 GDPR);
- to lodge a complaint with us or with a competent authority about the processing of your data (Art. 77 GDPR).
You may also object to the further processing of your data if we process your date because of legitimate interests (Art. 6 para. 1 s. 1 f) GDPR). Unless we process your data for marketing purposes, this requires grounds relating to your particular situation. In case of an objection, we will no longer process your personal data to which the objection refers from the time we receive your objection during the subsequent examination and delete it after completion of the examination provided that the objection is justified (Sec. 36 BDSG, Art. 21 GDPR).
If you have given us consent to the processing of your data (Art 6 para. 1 s. 1 a) GDPR, such consent may be withdrawn at any time; we will then no longer process your personal data unless we are legally entitled to do so. A lawful objection and a withdrawal of consent have no impact on past data processing processes.
For this and any other questions, please contact our Data Protection Officer.
Data Protection Officer of DF Deutsche Forfait Group
DF Deutsche Forfait GmbH
Ms Souad Koumbaz
Phone: +49 221 973760