As a contractual partner of your company, we process the personal data with regard to you on the basis of our legitimate interest in preparing an offer and fulfilling the contracts on the basis of Art. 6 (1) (f) GDPR. Processing for the purpose of accounting and cost accounting as well as for the fulfilment of legal obligations (e.g. commercial and tax law) is based on Art. 6 para. 1 sentence 1 lit c GDPR. The business relationship is between us and your company. If you act as a natural person (e.g. as a sole trader or self-employed person), your data will be processed for the purpose of carrying out pre-contractual measures and fulfilling contracts on the legal basis of Art. 6 (1) (b) GDPR. On the basis of Art. 6 para. 1 lit b GDPR, your data will also be used to send transactional e-mails (e.g. emails for order processing or when a credit card has been declined or expired).
In the course of external requirements (e.g. in the context of customs/tax law), personal data about you may be compared with lists published by authorities.
As long as you are a customer of ours, we will send you an e-mail about 2 times a year asking you to update your customer data in order to remind you of your contractual obligation to update your company data.
The legal basis for data processing is Article 6 (1) (b) GDPR, as we have an interest in ensuring that your customer data is up-to-date, in particular so that we can reach you.
The data will no longer be processed for mailings to update customer data if you are no longer a customer of ours. After the expiry of the retention obligations under tax and company law, the winners' data will be deleted. This retention obligation is usually equivalent to 7 years.
Furthermore, data may also be processed for legitimate purposes in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, such as marketing (e.g. sending new products for the POS system), internal market research and marketing purposes, internal statistics (further information on this can be found under the item "Sending direct advertising via e-mail"). The legitimate interests lie in particular in the optimisation of processes and cost-effective allocation; in doing so, your interests, fundamental rights and freedoms will be duly taken into account.
If you have given us your consent to this or if we have provided you with appropriate information in the context of data collection in accordance with § 7 UWG (DE) / § 107 TKG (AT), we will use your data to send you information about products, services, events and other interesting facts about our company. You can object to this sending at any time with effect for the future.
The data you provide is necessary for the performance of the contractual relationship. Without this data, we cannot fulfil the contract concluded with your company.
Some of your personal data will be passed on to external service providers (e.g. tax consultants, legal advisors). In some cases, external IT service providers may access your data (within the framework of order processing in accordance with Article 28 GDPR). In this case, the service providers act in accordance with instructions, which was ensured by appropriate contracts. Some of these service providers are located outside the EU/EEA; those service providers ensure an appropriate level of data protection by concluding EU standard contractual clauses / binding corporate rules. The regulations are available here / you have the opportunity to obtain a copy of these regulations at any time here.
Your data will be kept for as long as is necessary for the respective purposes mentioned above. The data will be deleted at the latest after the termination of the contractual relationship and after the expiry of the statutory retention periods under civil, commercial and tax law.
We process personal data of our sales partners (in particular name, address and e-mail address) in order to inform them about changes to our sales partner contracts (including the contractual provisions for the ready2order sales partner program) and about discounts and promotions, for example, where the commission is changed. Furthermore, to send the partner all documents, messages, agreements and disclosures in connection with the sales partner contract (in particular invoices, credit notes, payment reminders, notices of termination, information on discounts and promotions) to the e-mail address last provided by the partner.
The legal basis for this is Art. 6 para. 1 lit. b GDPR (fulfillment of a contractual obligation) and alternatively Art. 6 para. 1 lit. f (legitimate interest) GDPR. Our legitimate interest in this case is direct advertising.
The data of the sales partners will be processed as long as ready2order has an upright contractual relationship with the sales partners (sales partner contract). If the data processing is based on legitimate interest, then until the contract with the sales partner is terminated or the sales partner objects to such a mailing (whichever is earlier).
The sales partners' data is also imported into our Salesforce instance. An adequacy decision (Data Privacy Framework) exists for the data transfer to the Salesforce instance (data transfer to Salesforce Inc., i.e. to the USA) and the service provider has registered for the Data Privacy Framework.
The information is generally sent by the shipping service provider Customer iO, a shipping platform of the provider Peaberry Software Inc, 9450 SW Gemini Dr., Suite 43920 Beaverton, Oregon 97008-7105, which acts as a processor and is contractually bound accordingly by the conclusion of the data processing agreement. An adequacy decision (Data Privacy Framework) exists for the transfer of data to the USA and the service provider has registered for the Data Privacy Framework. Information on the data protection provisions of the shipping service provider can be found at: https://customer.io/legal/privacy-policy/. The following personal data is transferred to the shipping service provider: Name and email address.
To ensure that you do not receive any further mailings from us in the future, we store your data internally in a blacklist. This is the only way to ensure that you do not receive any further mailings from us in the future. The legal basis for this is Article 21(3) in conjunction with Article 17(3)(b) and Article 6(1)(f) of the General Data Protection Regulation. If you wish your data to be deleted completely, you can inform us of this informally (e.g. by sending an email to [email protected]).
See below
See below
We process your personal data with regard to you in connection with the implementation of your application process and to examine your potential work-related employment. In doing so, we process the information provided by you for the purpose of a well-founded personnel decision on the basis of Art. 6 (1) sentence 1 I lit. b GDPR (esp. first name, last name, e-mail address, telephone, curriculum vitae, language skills). In addition, ratings are stored on the basis of objective, non-discriminatory criteria.
The data you provide is required to carry out the application process. Without this data, we will not be able to consider your application.
If you use the opportunity to apply with your LinkedIn profile, you instruct LinkedIn to transmit your data to us. Your transmitted data will be processed by us as described above. LinkedIn is responsible for the transmission. You can find information about this in LinkedIn's privacy policy at: https://de.linkedin.com/legal/privacy-policy
To collect the application data, we use a service provider (Greenhouse Software Inc.) who supports us in the process as part of order processing. In some cases, the external IT service provider can access your data. In all cases, the service providers are bound by instructions, which has been ensured by appropriate contracts. The service provider has concluded standard contractual clauses with us to secure any data transfers to third countries. In the case of data transfers to the USA on servers of Greenhouse Software Inc., there is also an adequacy decision (Data Privacy Framework) to which the service provider has submitted.
Your data will be kept for as long as necessary for the above-mentioned purposes of the personnel selection process. If you object to data processing during the personnel selection process, the data will be deleted – unless otherwise required by statutory retention obligations. Without your explicit consent, we will delete your personal data after 7 months from the end of the application process. Your data is stored on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR, as we need this data in order to be able to comply with the burden of proof under the Equal Treatment Act.
If you have given your consent to save your application for further job offers, your data will be stored for up to two years. Unsolicited applications will be stored until your revocation or up to two years at most and then deleted.
See below
We hereby inform you that, in accordance with Article 15 et seq. of the GDPR, you have the right to information about the personal data in question, as well as to rectification or deletion or restriction of processing or a right to object to processing and the right to data portability, subject to the conditions defined therein. In accordance with Article 77 of the GDPR, you also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you infringes this Regulation. If the processing is based on Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR (consent), you also have the right to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
You have the right to request information as to whether and to what extent your personal data is being processed (in particular the purpose of processing, recipients of the data, storage period, etc.).
You have the right to request the correction of your stored data if it is incorrect or incomplete. This includes the right to be completed by supplementary declarations or communications.
You have the right to request the erasure of your personal data. This is possible, for example, if the data is no longer required for the purposes for which it was collected or if the data must be deleted due to legal obligations. However, this right may be excluded in individual cases.
They have the right to have the processing of their personal data restricted. This is possible, for example, if your data is incorrectly recorded or the data processing is unlawful. In the event of restriction of processing, the data may only be processed in narrowly defined cases.
You have the right to demand the release of the data concerning you in a commonly used electronic, machine-readable data format to you or to a controller to be designated by you, if you have provided this data yourself.
For reasons arising from your particular situation, you have the right to object to the processing of personal data concerning you at any time with effect for the future, provided that the data processing is carried out to safeguard legitimate interests (cf. Art. 6 para. 1 lit. e), f) GDPR). In the event of your objection, we will check whether the legal requirements for the processing of your data are met and, if this is not the case, refrain from any further processing of your data.
You have the right to contact the competent supervisory authority of the Union or the Member States at any time in the event of any violations of data protection regulations.
Contact details of the competent supervisory authority:
Austrian Data Protection Authority: Barichgasse 40-42, 1030 Vienna, Tel +43 1 52 152-0, E-Mail: [email protected].
The continuous improvement of our processes from a data protection point of view is a particular concern for us. We therefore reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when new services are introduced. The new privacy policy will then apply to your return visit.