Data protection information for customers, potential customers and suppliers of Leadec

This document provides information about the processing of your personal data by Leadec Holding BV & Co. KG and its affiliated companies* in accordance with Section 15 of the German Stock Corporation Act (AktG) and the rights to which you are entitled under data protection law.

Controller / data protection

The data controller is Leadec Holding BV & Co. KG or the respective affiliated company* with which you have a business relationship.

 

Contact information:

www.leadec-services.com

 

Contact for data protection:

dataprivacy.DE(at)leadec-services.com

 

Categories / origin of the data

Within the scope of the contractual relationship and for the purpose of entering into a contract, we may process the following personal data:

 

  • Contact information (e.g., first and last names of current and, if applicable, previous contacts, as well as honorifics, job title, company name, and address of the customer (employer), phone number with extension, cell phone number, and business email address)
  • Job-related data (e.g., role within the company, department)
  • Financial data (e.g., payment terms, purchase volume, bank account information, creditworthiness data, tax data (VAT ID))
  • Order processing data (e.g., order number, invoice number, invoice amount, invoice due date) 

We generally receive your personal data from you during the contract initiation process (e.g., initial contact at our trade show booth) or during the ongoing contractual relationship. In exceptional cases, your personal data may also be collected from other sources under certain circumstances. This includes ad hoc inquiries to credit bureaus for relevant information, particularly regarding creditworthiness, credit history, and checks against embargo lists. This may also include the content of your inquiry, attached documents, and any communication necessary for processing.

Purposes and legal basis for data processing

When processing your personal data, we always comply with the provisions of the EU GDPR, the BDSG, and other relevant legal regulations. 

 

As an industrial services specialist, we use your data exclusively to carry out pre-contractual measures (e.g., to prepare quotes for products or services), to fulfill contractual obligations (e.g., to perform our services, fulfill the supplier contract, or process orders, contracts, and payments) (Art. 6(1)(b) EU GDPR), to comply with legal obligations (e.g., due to tax regulations) (Art. 6(1)(c) EU GDPR), to offer products and services, and to strengthen customer relationships, which may also include analyses for marketing purposes and direct marketing.

Use of AI-based applications

We may also process personal data that you provide to us in connection with inquiries from customers, prospective customers, or suppliers using internal AI-supported applications. This serves, in particular, to support our employees in reviewing, structuring, summarizing, preliminarily assessing, and preparing responses to your inquiries, as well as in efficiently handling business processes. The final review and decision regarding the handling of your inquiry is generally carried out by Leadec employees. The legal basis, insofar as the processing is necessary for the initiation or performance of a contract, is Article 6(1)(b) of the EU GDPR. To the extent that the processing serves the efficient organization, quality assurance, and improvement of our business processes, it is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the EU GDPR.

 

Of course, your consent to data processing may also constitute a legal basis under data protection law (Article 6(1)(a) of the EU GDPR). Before you grant your consent, we will inform you of the purpose of the data processing and your right to withdraw consent under Article 7(3) of the EU GDPR. If the consent also relates to the processing of special categories of personal data pursuant to Article 9 of the EU GDPR, we will expressly notify you of this in advance.

 

Leadec Holding BV & Co. KG is also interested in maintaining our customer relationship with you and sending you information and offers regarding our products and services via email and/or mail. Therefore, we process your data to send you such information and offers (Art. 6(1)(f) EU GDPR).

 

Your personal data will be processed for the purpose of detecting criminal offenses only under the conditions set forth in Article 10 of the EU GDPR.

Data retention period

As soon as your data is no longer required for the purposes mentioned above or you have withdrawn your consent, we will delete it. Data will only be retained beyond the term of the contractual relationship in cases where we are obligated or authorized to do so. Regulations requiring us to retain data can be found, for example, in the German Commercial Code or the German Fiscal Code. This may result in a retention period of up to ten years. In addition, statutory limitation periods must be observed.

Recipients of the data / categories of recipients

Within our company, we ensure that only those departments and individuals who need your data to fulfill our contractual and legal obligations receive it. If we provide services for your company in multiple countries, your order-related data may be shared among the employees responsible for your account in order to improve the quality of our service. 

 

In certain cases, service providers (e.g., IT service providers, shipping service providers, financial service providers) support our specialized departments in fulfilling their tasks. The necessary data protection agreements have been concluded with all service providers.

 

To the extent that we use AI-based applications, IT service providers or providers of such applications may also be involved as data processors or other service providers. Processing takes place only to the extent necessary and on the basis of the relevant data protection agreements.

 

In addition, in cases required by law, we are obligated to disclose certain information to public authorities, such as tax authorities, law enforcement agencies, and customs authorities.

Transmission to third countries / purpose of transmission to third countries

Data transfers to third countries (outside the European Union or the European Economic Area) will only take place to the extent that this is necessary to fulfill the contractual or supplier relationship, is required by law, or if you have given us your consent to do so.

 

In this context, personal data is transferred both to external service providers and to group companies or affiliated companies within the corporate group, some of which are located outside the European Economic Area, e.g., in the U.S., Brazil, India, or China.

 

Compliance with data protection standards is primarily ensured through appropriate contractual arrangements under data protection law, such as EU Standard Contractual Clauses.

Rights of the data subjects

Your rights as a data subject are set forth in Articles 15–22 of the EU GDPR. 

 

These include: 

  • The right of access (Article 15 of the EU GDPR)
  • The right to rectification (Article 16 of the EU GDPR)
  • The right to erasure (Art. 17 of the EU GDPR)
  • The right to restriction of processing (Art. 18 EU GDPR)
  • The right to object to processing (Art. 21 EU GDPR)
  • The right to data portability (Art. 20 of the EU GDPR) 

To exercise these rights, please contact us within Germany at: dataprivacy.DE@leadec-services.com, indicating, if possible, whether you are associated with us, for example, as a job applicant, customer, or supplier. If you are located in another country, please contact the designated contact information* for your country. The same applies if you have questions about data processing at our company or wish to withdraw your consent. You may also file a complaint regarding data processing with a data protection supervisory authority.

 

If we process your data to protect legitimate interests, you may object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. 

 

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

 

If we process your personal data for the purpose of direct marketing, you have the right to object without providing a reason; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Obligation to provide data

To enter into or fulfill a contractual relationship, you are required to provide certain personal data. This is necessary for the establishment, performance, and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. It is not possible to perform the contract without the provision of this data.

Automated case-by-case decision-making

We do not use exclusively automated processing procedures, including profiling, that produce legal effects on you or similarly significantly affect you. AI-supported applications—to the extent they are used—are employed solely to assist in the preparation, structuring, or processing of transactions; a final assessment or decision is always made by Leadec employees.