Data protection information


for customers and interested parties

Data protection information for customers and interested parties

Dear customer, dear interested party,

You are interested in our company and our products. We are very pleased about that. We want (and must) use this information to draw your attention to data protection with regard to your data.

Our data protection declaration (to be found here: www.nabtesco.de/datenschutz/) refers to a large extent to our internet presence. We could certainly include the information obligation to collect personal data from customers and interested parties, but this would be detrimental to the overview. And this is not in our interest, and certainly not in yours.

Ultimately, it is about informing you about the collection of your personal data. Clear and understandable. We all don't have time, they say, not to read every data protection notice (but we would like to invite you to do so, data protection concerns us all and what is primarily important is not that someone, we, do something, but that is nothing unexpectedly surprising here).

But now in detail what and we process personal data, for what purpose, on what basis and what your rights are, in short, the duty to inform according to Article 13 GDPR.

Responsible and Data Protection Officer


Legal basis

A distinction must be made between you as a customer and you as an interested party.

We process your personal data for the execution of our contracts with you. Furthermore, this data is processed for the implementation of measures and activities within the framework of (pre)contractual relationships. The basis for this is Article 6 (1) (b). Furthermore, we have a legitimate interest to remain in contact with you for the purpose of contacting you by telephone, post or digital (e-mail), as well as for sending you advertising material in accordance with Article 6, paragraph 1, letter f.

We process your personal data for the implementation of pre-contractual measures on the basis of Article 6 (1) (b). Nevertheless, we have the legitimate interest to win you as a customer, therefore your data will also be used for the purpose of telephone, postal or digital (e-mail) contact, as well as for sending advertising material.

Which data we process

Your data provided by you. That would be a bit easy, in general this is the following data:

  • Customer
    Client master data 

    Personal data (business cards, e.g. name, first name, title, function)

    Contact details (address, e-mail address, mobile, landline number)

    Bank account

    Customer history
  • Interested party

    Personal data (surname, first name, occupation, if applicable: date of birth, place of birth, nationality, marital status)

    Contact details (address, e-mail address, mobile, landline number and similar data)

Under certain circumstances, we may use other personal data from customers and interested parties that were not collected directly from you. We can obtain further data via publicly accessible sources (social networks, Internet, media, press, commercial register, registration register, debtor register), as far as permissible.

If it is necessary for the provision of our services to interested parties, we process personal data that we have lawfully received from third parties (e.g. address publishers, credit agencies).

Obligation to provide data

Well, you as an interested party are interested in us and our products, you have given us your business card, for example. Without this information, which is required for the purposes, we cannot contact you.

As a customer you must provide personal data which is necessary for the establishment, execution and termination of the contractual relationship or which is required by law. Without this data it is not possible to conclude a contract or to carry out the tasks arising from the contract.

Who will now receive your data

Your data will only be passed on within our company to those areas that require this data to fulfil contractual and legal obligations, both for the implementation of our legitimate interests.

The following offices can receive your data remotely:

Contractors (according to Article 28 GDPR), IT service providers, logistics, courier services, printing services, external hosters and data centre operators, supporters in IT maintenance, archiving, document processing, accounting, controlling, document shredders, purchasing and procurement, marketing, website management, tax consultants, auditors, credit institutions, public bodies according to which we are obliged to provide information, report and pass on or a public interest exists, lawyers, collection companies, courts, experts, group companies. For customers, your data is also stored on a server of our Japanese parent company in Japan. The standard data protection clauses referred to in Article 46(2) shall apply.

Deletion of data

If necessary, we process your personal data for the duration of our business relationship, this also includes the initiation and processing of a contract.

In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the Tax Code (AO), among others. The periods for storage or documentation specified there are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship.

Ultimately, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB) can generally be three years, but in certain cases also up to thirty years.

Automatic decision making

Here we can keep it short: this does not take place (according to Article 22 GDPR).

Your rights as a data subject

You have the right to information about your personal data. Please contact the above contacts here. If the request for information is not made in writing or cannot be verified in any other way, you must expect us to make inquiries. Why? Well, we need to make sure you're the person you impersonate.

Also the correction, deletion or restriction is your right, as far as this is legally entitled to you.

You also have a right of objection against the processing within the framework of legal requirements. Should a right of objection be asserted against a processing which takes place on the basis of our weighing of interests, we will examine this carefully.

Last but not least, there is the right of data transferability within the framework of legal requirements.

Right of appeal

You can complain about us to the competent supervisory authority regarding the processing of your personal data.

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf

Back to privacy policy