Data protection information for business partners of Roadsurfer GmbH

This data protection information for business partners informs you about the processing of your personal data at Roadsurfer GmbH, Winzerer Strasse 47D in 80797 Munich (hereinafter referred to as “Roadsurfer GmbH” or “we”).

Pursuant to Art. 4 lit. 1 of the EU General Data Protection Regulation (hereinafter referred to as “GDPR”), your personal data includes all information that relates or can be related to your person, in particular by reference to an identifier such as a name or to an organisation or customer number by which your person can be identified.

We provide this data protection information for business partners to explain, as a data controller, the data processing procedures relating to our customers, business partners and suppliers and, where applicable, their employees who are associated with Roadsurfer GmbH.

Scope

This information applies if you are an independent business partner of Roadsurfer GmbH or if you are an employee of a business partner acting on behalf of the business partner with Roadsurfer GmbH.

Roadsurfer GmbH processes the following personal data from you, your company or from third parties:

  • Personal data in relation to self-employed business partners: name, business contact details, services offered, contract information, communication content (such as emails or business letters), payment information, billing information and business relationship development.
  • Personal data relating to employees of a business partner: name, business contact details, name of employer, title / position and communication content (such as emails or business letters).

Data processing purposes, legal basis and consequences

Your personal data is processed for the purposes of fulfilling the contractual relationship with the business partner (including the fulfilment of contractual performance obligations, invoice processing, communication and legal compliance), for marketing and CRM activities and for fraud prevention purposes. Roadsurfer GmbH relies on the following legal bases with regard to data processing:

  • Consent (Art. 6 (1) lit. a GDPR);
  • Performance of the contractual relationship with the business partner (Art. 6 (1) lit. b GDPR);
  • Compliance with legal obligations (Art. 6 (1) lit. c GDPR);
  • The legitimate interest of Roadsurfer GmbH (Art. 6 (1) lit. f GDPR). Legitimate interests can include marketing and CRM activities, fraud prevention, physical security, IT and network security, and investigations.

The provision of personal data is necessary for the conclusion and/or implementation of the contractual relationship and is voluntary. If, however, this data is not provided, the business partner-management and administrative processes could be delayed or even made impossible.

Categories of recipients

Roadsurfer GmbH may use service providers who act as processors so that they can provide IT and other administrative support (e.g. service providers who offer IT hosting or maintenance support). These service providers may have access to your personal data insofar as this is necessary for the provision of such services. Any access to your personal data is restricted to the person who needs the information to carry out their work. Roadsurfer GmbH may disclose your personal data should this be requested or required by authorities, courts or similar third parties.

Storage period

The personal data will be stored by Roadsurfer GmbH and its service providers for as long as necessary until our obligations have been fulfilled. The data will be secured for as long as is necessary for the purpose in accordance with the GDPR. As soon as Roadsurfer GmbH no longer needs the data to fulfil contractual or legal obligations, it will be removed from our systems and records and/or measures will be taken so that your personal data is properly anonymised and can no longer be identifiable. The exception to this is where we need to retain your personal data to comply with statutory or regulatory obligations to which Roadsurfer GmbH is subject. These are, for example, legally prescribed storage periods resulting from the German Commercial Code or tax law, which are usually between 6 and 10 years, or we have to secure evidence within the limitation period, which is usually 3 years.

Your rights

If you have given your consent to certain processing activities, you can revoke this at any time with future effect. This revocation will not affect the previous processing of data. If you wish to exercise your right of revocation, simply send an email to datenschutz@roadsurfer.com

According to the applicable data protection laws, you have the following rights

  • Right of access, Art. 15 GDPR: You have the right of access to the stored personal data.
  • Right to rectification, Art. 16 GDPR: If you discover that inaccurate data about you is being processed, you can request rectification. Incomplete data must be completed taking into account the purpose of the processing.
  • Right to erasure, Art. 17 GDPR: You have the right to request the erasure of your data if certain grounds for erasure apply. This is particularly the case if they are no longer necessary for the purpose for which they were originally collected or processed.
  • Right to restrict processing, Art. 18 GDPR: You have the right to restrict the processing of your data. This means that your data will not be deleted but will be flagged to restrict its further processing or use.
  • Right to data portability, Art. 20 GDPR: You have the right to receive the personal data you have provided to Roadsurfer GmbH in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from Roadsurfer GmbH.
  • Right to object to unreasonable data processing, Art. 21 GDPR:
    The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out on the basis of Art. 6 (1) lit. e or f of the GDPR.

Since Roadsurfer GmbH processes and uses your personal data primarily for the purposes of the contractual relationship with you, Roadsurfer GmbH basically has a legitimate interest in processing your data, which, on the other hand, will override your restriction request. To exercise your rights, contact us using the contact details provided in the “Questions” section (see below).

Complaining to the supervisory authority about data protection violations

If you have any questions or concerns about the processing of your data, you can also contact the data protection authority in the Member State of your habitual residence or the data protection authority responsible for us:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) (Bavarian State Office for Data Protection Supervision); Promenade 18; 91522 Ansbach
Email: poststelle@lda.bayern.de

Automated decision-making/profiling

Roadsurfer GmbH does not carry out any automatic decision-making.

Data security

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Questions

You can contact the data protection officer at Roadsurfer GmbH at the following email address datenschutz@roadsurfer.com

You can find our general data protection information here.