Privacy Policy Diehl Group

Privacy policy for business partners and interested parties of the Diehl Group

In the following, we inform you about the processing of your personal data (hereinafter referred to simply as “Data”) by the group companies within the Diehl Group and your corresponding rights in this context. “We” refers to the group company which processes your data for its respective purposes.

Categories and source of data

We process the following data concerning you:

  • Your contact details, e.g. your first and last name, 
  • Name and address of the company for which you work, 
  • Your business phone number and your business email address,
  • Data concerning your professional activity, e.g. your role and position in the company and the department in which you work.

As a rule, we obtain your data directly from you, e.g. when establishing business relationships or during the ongoing contractual relationship.

Purpose and legal bases of data processing

We process your data primarily to carry out measures prior to entering into contracts, e.g. to prepare offers for products or services. We also carry out processing to fulfil contractual obligations, e.g. to perform, our services or to handle orders, jobs or payments. The legal basis is Art. 6 (1)(b) GDPR if you are a party to the contract yourself, otherwise it is Art. 6 (1)(f) GDPR. We also process your data if we have a legal obligation to carry out processing, e.g. due to tax law requirements. The legal basis in this case is Art. 6 (1)(c) GDPR. 

When entering into business relationships, we process your data in order to answer your questions, for instance concerning our products or services.

If you are already a customer, we process the data you provide in order to send you information about further services by email, for example. The legal basis is Art. 6 (1) Sentence 1 (f) GDPR. If you do not want this to occur, you can object to the use of your data for this purpose at any time. We will then no longer process your data for this purpose. 

Of course, the permission requirement under data protection law can also be fulfilled by your consent to data processing (Art. 6 (1)(a) GDPR). Before requesting your consent, we will clarify the purpose of data processing and your right to withdrawal pursuant to Art. 7 (3) GDPR.

Duration of data storage

As soon as your data is no longer necessary for the purposes outlined above or if you have withdrawn your consent, we will delete your data. Storage of data for longer periods will only occur in cases where we are obliged or entitled to do so. 

Data recipients / Categories of recipients

In our company, we ensure that only those departments and individuals receive your data who require this data in order to fulfil their contractual work obligations.

In many cases, service providers assist our departments in carrying out their work. We select these service providers carefully and contractually obligate them to observe the requirements of data protection law. 

Transfer to third countries / Intention of transfer to third countries

Transfer of data to third countries (outside the European Union or the European Economic Area) will only occur if this is necessary or legally required for the performance of the contractual relationship, or if you have granted us your consent in this regard.

Rights of the data subject

Your rights as a data subject are outlined in Articles 15 to 22 GDPR. 

According to these regulations, subject to particular conditions you have a right to 

  • Access to information (Art. 15 GDPR),
  • Rectification (Art. 16 GDPR),
  • Erasure (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Objection against processing (Art. 21 GDPR).

To assert these rights, please contact: datenschutz@diehl.com. The same applies if you have questions about data processing in our company or if you would like to withdraw your previously granted consent. You can also lodge a complaint against data processing with a supervisory authority for data processing.

If we process your data to preserve our legitimate interests, you can object to this processing at any time for reasons relating to your particular situation.

Then we will not continue to process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if processing is necessary for the assertion, exercise or defence of legal claims. 

Version: 7.12.2020