Skip to main content

Data protection

Data protection information for business partner

1. Foreword 

The following information concerns the processing of personal data of our business partners. Business partners are, for example: suppliers, customers, contractors or other natural or legal persons with whom we have a contractual relationship or a contract initiation takes place.

2. Who is responsible for the data processing?

The responsible person is:

The person responsible for data processing (data controller) and his contact details can be found in the document (e. g. e-mail, offer, contract) from which reference was made to this document.

3. How do you contact our data protection officer?

Tel.: +49 40-32523-550
E-Mail: datenschutz@hur.com

4. Which data sources do we use?

We process personal data that we have received from business partners.

In addition, publicly accessible sources (e. g. commercial, land register, press, media, Internet) can be used for the collection and processing of personal data. This is done among other things to fulfil legal obligations (e. g. embargo regulations).

Personal data from other sources (e. g. Schufa information) may only be collected or processed with your consent.

5. Which data are processed?

In general we process e. g.:

  • first name, last name
  • contact details (address, phone number, e-mail etc.)
  • bank details
  • contract details
  • credit standing
  • pictures / photos
  • video surveillance
  • vehicle registration number


6. For what purpose do we process the data?

We process the above-mentioned personal data in compliance with the EU DSGVO and the Federal Data Protection Act (BDSG).

6.1. Data processing based on your consent

Article 6 para. 1 lit. a DSGVO

If you have given us your consent to process your personal data for specific purposes (e. g. advertising, data transfer), the legal processing will be carried out on this legal basis. The consent can be revoked at any time (for the future). A revocation can also be made for consents that were granted before the validity of the EU DSGVO.

6.2. Data processing for the fulfilment of contractual obligations

Article 6 para. 1 lit. b DSGVO

The processing of personal data is based on and for the fulfilment of a contract (verbal or written) that you have concluded with us. This also includes inquiries you make to us regarding the initiation of a contract.

6.3. Data processing to fulfil legal obligations

Article 6 para. 1 lit. c DSGVO

Data processing is carried out on the basis of a statutory or legal norm. These can be, for example, tax laws, money laundering laws or identity or age checks.

6.4. Data processing to protect the vital interests of the data subject or another natural person

Article 6 para. 1 lit. d DSGVO

In the event of accidents, for example, data may be collected or processed (without consent) if the data subject is no longer available and this data processing may be vital.

6.5. Data processing for the exercise of official authority

Article 6 para. 1 lit. e DSGVO

Data may be processed to perform a task in the public interest or in the exercise of official authority which has been entrusted to us.

6.6. Data processing on the basis of a legitimate interest of the data con-troller Article 6 para. 1 lit. f DSGVO

Beyond the aforementioned data processing, we process personal data to protect legitimate interests. These are for example:

  • securing IT security
  • public relations
  • market and opinion research
  • assertion of legal claims or defence in legal disputes
  • video surveillance for the protection of e. g. the householder's rights, collection of evidence
  • statistical evaluation
  • further development of products and ser-vices
  • business management


7. To whom will my data be passed?

Within our company or group of companies / our concern, those have access to your data that you need to fulfil your contractual or legal obligations.

Data is passed on within the framework of the legal provisions of the EU DSGVO, the BDSG and other national or European legal regulations.

For example, personal data is passed on to:

  • public authorities and institutions
  • investigative authorities
  • Parcel delivery / forwarding agencies
  • subcontractors
  • vicarious agents


If you have given us your consent to the transfer of data, data may also be passed on to this point.

8. Will data transferred to a third country?

The data processing takes place exclusively within the Federal Republic of Germany, the EU or another EEA country.

If data is processed in a third country (outside the EU or the EEA), the companies or institutions involved are obliged to comply with European data protection regulations.

9. How long will my data be stored?

The data will be processed or stored by us as long as it is necessary for the fulfilment of the purpose or legal obligations. The data will then be regularly deleted.

The data will not be deleted if legal retention periods prevent this or oppose it or if the data must be retained as evidence within the framework of a limitation period or if you have given us your consent for longer data storage.

10. What (data protection) rights do I have?

The data subject - i.e. the person whose data are processed - has the right to

  • information pursuant to Article 15 EU DSGVO,
  • correction of incorrect data under Article 16 EU DSGVO,
  • deletion in accordance with Article 17 EU DSGVO,
  • restriction of processing under Article 18 EU DSGVO,
  • data transferability according to Article 20 EU DSGVO,
  • opposition under Article 21 EU DSGVO,
  • revocation of consent according to Article 7 EU DSGVO and
  • complaint to a supervisory authority under Article 77 EU DSGVO.


If you have given us your consent to data processing, you can revoke this consent at any time. The revocation concerns only future data processing and cannot be applied to data processing already carried out.

If you wish to exercise your rights, please contact our data protection contact (see above).

11. Who is responsible for data processing?

For the establishment and execution of our contractual relationship, you must provide the data required for the execution and fulfillment of the contract or which is required for the fulfillment of legal requirements. Without this data it is usually not possible to conclude or execute a contract. If necessary, a contract must be terminated if the necessary data is not provided.

12. Does automated decision-making take place?

There is no automated decision-making.

13. Is profiling used?

No profiling takes place.