In this privacy policy, we - the group of companies of ALVARA, would like to inform you - as a business partner or interested party - about the processing of your personal data within the scope of joint responsibility within the group of companies.

1. Name and contact details of the data controller

Within the group of companies, the processing of your personal data is carried out by the following controller:

If you have any questions or comments regarding the processing of your personal data, the data protection officer of ALVARA Holding GmbH will be happy to assist you as a central contact.

ALVARA Holding GmbH
Data Protection Officer
Querstraße 18
04103 Leipzig
Germany
Email: datenschutz@alvara.eu

However, you are free to contact any data protection officer or contact person of the group of companies.

2. Purpose and nature of the processing of your personal data

We process your personal data at the times and for the purposes described below.

2.1 General correspondence and pre-contractual relations

We process the following personal data in the context of general correspondence and pre-contractual relations, e.g. when you send us an enquiry using one of the contact forms or send an email:

• Company
• Salutation, first name, last name
• Address
• Telephone number, fax number
• Email address

And, if applicable, we process other personal data provided by you within the correspondence.

Your personal data will be processed for the following purposes:

• Processing your request
• Communication in the context of pre-contractual relations

The processing of your personal data is carried out on the legal basis of Art. 6 (1) (b) GDPR.

2.1.1 Long-term inclusion as a contact partner

If you consent as an interested party, we store the data described above for long-term contact maintenance. The processing of your personal data takes place on the legal basis of Art. 6 (1) (a) GDPR.

2.2 Exercise of existing business relationships

If we have a contractual business relationship with you, we regularly process the following personal data:

• Company
• Salutation, first name, last name
• Address
• Telephone number, fax number
• Email address

and, where applicable, other personal data provided by you when drawing up the contracts or within the framework of the contractual relationship.

The personal data is processed for the following purposes:

• Identification of the business partner
• Fulfilment of contractual obligations
• General correspondence within the scope of business relations
• Invoicing
• Project management
• Settlement of possible liability claims
• Assertion of any claims against you

The processing of your personal data is carried out on the legal basis of Art. 6 (1) (b) GDPR.

2.3 Marketing measures

We process the following personal data from you as part of our marketing measures, e.g. when you register for our newsletter or one of our events:

• Company
• Salutation, first name, last name
• Address
• Telephone number, fax number
• Email address

and optionally other personal data provided by you.

The personal data is processed for the following purposes:

• Sending the newsletter
• Structuring your participation in an event
• Providing and sending information on the Group's products, services, events and activities as part of direct marketing activities

The processing of your personal data as a business partner is carried out on the legal basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in informing business partners about current products and services of the group of companies.

The processing of your personal data as an interested party takes place on the legal basis of Art. 6 (1) (a) GDPR.

3. Shared responsibility

Within the framework of joint responsibility, the group of companies has concluded a joint responsibility agreement. You can read the essential information pursuant to Art. 26 (2) GDPR by clicking on the following link.

4. Disclosure of your personal data to third parties

We will only share your personal data with third parties if:

• You have given us specific consent in accordance with Art. 6. (1) (1) GDPR for the transfer of your personal data
• The disclosure is necessary on the basis of Art. 6 (1) (f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of the data
• We are legally obliged to disclose data pursuant to Art. 6 (1) (c) GDPR
• The disclosure is legally permissible and necessary for the processing of an existing or pending legal transaction in accordance with Art. 6 (1) (b) GDPR.

In all other cases, your personal data will not be passed on to third parties.

5. Duration of the storage of your personal data

Your personal data will be routinely deleted in accordance with elaborated deletion concepts after revocation of your consent, completion of the processing of your enquiry, termination of contractual business relations or pre-contractual discussions and after expiry of the statutory retention period.

6. Data subjects' rights

As a data subject, you have the right:

• In accordance with Art. 15 GDPR, the right receive information from us free of charge within the legal framework as to whether we process personal data about you. If this should be the case, you also have the right to request information about the data, their processing purpose, the recipients (in the case of data transfer) and their origin
• In accordance with Art. 16 GDPR, the right immediately demand the rectification of incorrect or incomplete personal data stored by us
• In accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless the processing is necessary on our part for the free expression of opinion and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims
• In accordance with Art. 18 GDPR, the right to request the restriction of the processing of your personal data if the accuracy of the personal data is disputed by you or the processing is unlawful, but you refuse erasure or the personal data is no longer required by us, but you need it to assert, exercise or defend legal claims or you have objected to the processing of your personal data pursuant to Art. 21 GDPR
• In accordance with Art. 20 GDPR, the right to receive your personal data processed by us in a structured, common and machine-readable format or to request the transfer of this same personal data to another controller
• In accordance with Art. 7 (3) GDPR, you may revoke your consent at any time. As a result, we may and will no longer process the personal data affected by this consent from the time of revocation
• In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority.

ALVARA Holding GmbH is at your disposal as a central contact point for the assertion of your data subject rights. However, you are free to contact any company in the group of companies.

Furthermore, the following supervisory authorities are responsible for the companies in the group of companies:

7. Right of objection

If your personal data is processed on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR or on the basis of consent granted pursuant to Art. 6 (1) (a) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that grounds for doing so arise from your particular situation.

You have a general right to object to the processing for direct advertising on the basis of Art. 6 (1) (f) GDPR, which is implemented directly by us without any special circumstances on your part.

In order to make use of your right to object in accordance with Art. 21 GDPR, it is sufficient, for example, to send an email to our aforementioned contact details.