Privacy Policy for B2B Customers and Potential Customers for Using the eDoc Webservice
Your privacy is important to us.
In the context of initiating and carrying out the contractual relationship with you, "personal data", i.e., data that allows conclusions to be drawn about a natural person, are also collected and processed by us. All personal data that we receive in the course of interaction with you as (potential) customers are stored and processed in compliance with applicable data protection laws, especially the General Data Protection Regulation (hereinafter referred to as "GDPR".
This privacy policy explains why and how we collect your personal data within the framework of the ZUGFeRD web service, how we process and protect it, and how long we store it.
Name and address of the controller responsible for processing
1. Name and contact details of the controller
Controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions with data protection character is:
bartolome röder AG
Ridlerstr. 11
80339 Munich
Germany
Tel.: ++49 (0) 89 211 11 848
E-Mail: info@br-ag.com
2. Purpose of data collection
We process your personal data to initiate and manage the customer relationship in order to provide you with our products and services without errors and to bill them.
3. Categories of Personal Data
For the purposes mentioned above, we collect and process the following personal data:
Contact Person
-
Identification Data: Name, email address, employer address, phone number of the contact person
-
Professional Information: employer, position, correspondence
Data When Using the ZUGFeRD Webservice:
Basic Data
-
MS Account ID of the service user (company)
-
Token: (service key to identify the service user)
-
Email: of the recipient of the monthly invoice
-
Outbound: activation flag
-
Inbound: activation flag
Transaction Data
-
ID: sequential number
-
MS Account ID of the service user (company)
-
Version: ZUGFeRD version of the transaction (to identify error sources in case of error)
-
Profile: ZUGFeRD profile of the transaction (to identify error sources in case of error)
-
Transaction date (to determine the billing month)
-
IP address of the service user
-
Error: error flag indicating if there was an error
-
Error Message: error message
-
Direction: direction of the transaction Inbound/Outbound - to identify error sources
4. Legal Basis for Processing
The legal basis for processing personal data related to a contractual or contract-like relationship is Art. 6 para. 1 sentence 1 lit. b GDPR. This also applies to processing necessary for pre-contractual measures.
The legal basis for storing the personal data of the contact person related to a contractual or contract-like relationship is Art. 6 para. 1 sentence 1 lit. f GDPR, insofar and as long as this is necessary for the business relationship with the B2B partner.
5. Recipients of Personal Data
For the purposes mentioned above, your personal data may be disclosed to third parties and possibly processed by them, such as private cloud computing service providers.
Employees, managers, and/or representatives of the aforementioned service providers or institutions and the specialized service providers they commission must respect the confidentiality of this data and may only use this information according to the company's instructions.
6. Security – Confidentiality
We use various security technologies as well as technical and organizational measures and procedures to ensure the confidentiality of your data and protect it from unauthorized access, misuse, alteration, unlawful or accidental destruction, and loss. Only our company and employees authorized for the purposes for which your data is collected have access to this data. These employees are obligated to respect your privacy and the confidentiality of your data.
Your personal data will not be transferred to countries outside the EEA without appropriate security measures.
7. Storage Duration
Data will be deleted as soon as it is no longer necessary for achieving the respective purpose of data collection. Statutory limitation periods of 2-3 years as well as, if applicable, commercial and tax retention periods of up to 10 years must be observed.
8. Your Rights
You have the right to contact the company at any time and request the following:
-
Information about the personal data we process about you,
-
Review or correction of your personal data;
-
Restriction of the processing of your personal data
-
Deletion of your personal data; if one of the reasons specified in Art. 17 GDPR applies, e.g., the data is no longer needed for the intended purposes for which it was collected or you withdraw your consent for the use of the data.
-
Withdrawal of your consent, especially if the use of your data is based on a separate consent.
-
Objection to the processing of your personal data carried out under Art. 6 para. 1 lit. e GDPR (data processing in the public interest) and Art. 6 para. 1 lit. f GDPR (data processing based on a balancing of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims. If your objection concerns direct marketing, you have a general right to object.
-
Receipt of your personal data in a structured, commonly used, and machine-readable format to transfer it to another controller ("right to data portability");
-
To initiate a complaint procedure with us if you believe we have not acted in accordance with data protection regulations; you may also file a complaint with the data protection supervisory authority.
If you wish to exercise your rights, you can contact us at the above contact details, preferably by email. info@br-ag.com
9. Changes
We reserve the right to adapt this privacy policy from time to time for the future within the framework of applicable privacy and data protection regulations.
Munich 01.11.2020
For more information, please visit: brAG eDoc App