Privacy Policy

Last updated 28 September 2022

I. What personal data is processed

GOLDBECK processes personal data that we receive from you as a contractual partner. This data is supplemented by personal data that we obtain from publicly accessible sources, which notably include the commercial register, the press and the media. If you submit an offer in response to a call for tender by GOLDBECK and/or receive or place the order for the provision of services, or if you visit our home page, customer portal or supplier portal, we will collect and store the following information:

  • Title and full name
  • A valid email address
  • Address
  • Telephone number (landline and/or mobile phone)
  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Employer/position
  • Website
  • Business liability insurance
  • Tax ID
  • Account details
  • Other information required for our cooperation

II. Why your personal data is processed

We process your personal data so that we can:

  • Identify you as our contractual partner
  • Inform you about new projects and give you the opportunity to actively participate in tender processes
  • Send correspondence to you
  • Send invoices
  • Assert contractual and statutory legal claims, as well as establish a legal defence

III. Legal basis for data processing

Your personal data is processed in compliance with the regulations of the national data protection laws as well as the EU General Data Protection Regulation (EU GDPR), applying the following provisions:

Based on your consent pursuant to Art. 6, para. 1, lit. 1 (a) of the EU GDPR

Insofar as you have expressly or implicitly given GOLDBECK consent to process personal data for specific purposes, this processing is lawful on the basis of your consent. Any consent given can be revoked at any time. This also applies to the revocation of declarations of consent that were granted to GOLDBECK before the EU General Data Protection Regulation came into force, i.e. before 25 May 2018.

To fulfil contractual obligations pursuant to Art. 6, para. 1, lit. 1 (b) of the EU GDPR

Upon your request or after commissioning for a specific project or other delivery and service, the data agreement is made for the purposes stated under Section II and is necessary for the appropriate handling of the project and for the mutual fulfilment of obligations arising from the contract.

To protect the legitimate interests of GOLDBECK pursuant to Art. 6, para. 1 lit. (f) of the EU GDPR

Based on the contractual relationship already established between you and GOLDBECK in the past, GOLDBECK has a legitimate interest in processing and transmitting your personal data within the GOLDBECK Group for internal administrative purposes. The processing of your personal data is necessary to be able to continue to share calls for tender with you for potential projects and to continue our cooperation in the future.

To fulfil a legal obligation pursuant to Art. 6, para. 1, lit. 1 (c) of the EU GDPR

GOLDBECK processes your personal data for the fulfilment of legal obligations, e.g. for infection control for the purpose of implementing corresponding Covid measures.

IV. Your rights

As a data subject within the meaning of the Data Protection Act, you have the right:

To revocation (pursuant to Art. 7, para. 3 of the EU GDPR)

Once you have given your consent, you may revoke it from GOLDBECK at any time. From this point on, GOLDBECK may no longer continue to process your data based on this consent.

To information (in accordance with Art. 15 of the EU GDPR)

You can request information about your personal data processed by GOLDBECK. You may notably request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profilers and, if applicable, meaningful information about their details.

To rectification (pursuant to Art. 16 of the EU GDPR)

You can request the correction of any incorrect personal data or the completion of any incomplete personal data stored by GOLDBECK with immediate effect.

To deletion (in accordance with Art. 17 of the EU GDPR) ​​​​​​​

You may request the deletion of your personal data stored by GOLDBECK unless processing it is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise or defence of legal claims.

To restrict processing (pursuant to Art. 18 of the EU GDPR)

You may request the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data for our processing purposes, but you need it for the assertion, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 of the EU GDPR.

To data portability (pursuant to Art. 20 of the EU GDPR)

You have the right to receive your personal data that you have provided to GOLDBECK in a structured, conventional and machine-readable format or to request that it be transferred to another controller.

To complaint (pursuant to Art. 77 of the EU GDPR)

You can complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our company.

V. Right of objection according to Art. 21 of the EU GDPR

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6, para. 1, lit. 1 f) of the EU GDPR, you have the right to object to your personal data being processed pursuant to Art. 21 of the EU GDPR. This applies insofar as there are grounds for doing so that arise from your particular situation or the objection is made against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without the need to specify the particular situation.

If you wish to exercise your right to object, simply send an email to: widerspruch@goldbeck.de.

VI. Storage and deletion

Your personal data collected by GOLDBECK will be stored by us beyond the end of our business relationship for a period of 10 calendar years and then deleted, unless GOLDBECK is obliged to store the data for a longer period pursuant to Art. 6, para. 1, lit. 1 c) of the EU GDPR due to tax or commercial law retention and documentation obligations.

Furthermore, a longer retention period may be necessary for the preservation of evidence under national statutes of limitation.

VII. Disclosure of personal data by GOLDBECK

GOLDBECK will not disclose your personal data to third parties for purposes other than those listed below. GOLDBECK will only pass on your personal data to third parties:

  • if you have previously expressly consented to a transfer to third parties in accordance with Art. 6, para. 1, lit. 1 a) of the EU GDPR;
  • insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6, para. 1, lit. 1 b) of the EU GDPR;
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6, para. 1, lit. 1 c) of the EU GDPR.

If we work with commissioned data processors, we ensure by means of separate contracts (known as commissioned data processing agreements) that your data is protected by the processor in the same way as it is protected by us.

VIII. Transfer to other countries

As a matter of principle, data is not transferred to bodies in countries outside the EU. Transfers may take place under the following conditions, among others:

  • to certified recipients, in particular on the basis of Binding Corporate Rules (BCRS) or EU standard data protection clauses (SCCs) (Art. 45 and 47 of the EU GDPR);
  • based on UK Standard Contractual Clauses
  • based on the consent you have previously provided for this purpose (Art. 49 para. 1, item 1, lit. a) of the EU GDPR);
  • insofar as the transfer serves to initiate or fulfil a contract Art. 49 1, lit. 1 b) and Art. 49, para. 1, lit. 1 c) of the EU GDPR);
  • if this is necessary to assert, exercise or defend legal claims (Art. 49, para. 1, item 1, lit. e) of the EU GDPR).

IX. Protection

Communication with GOLDBECK by email is always encrypted, provided your server supports encryption.

X. Online presence in social media

GOLDBECK maintains an online presence within social networks and platforms to communicate with business partners, interested parties and users who are active in these channels and to keep them informed about our services. When launching each of these networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within these social networks and platforms, e.g. write posts and send messages via our online channels.

X. ePrivacy Regulation

When accessing our website for the first time, visitors have the option of either rejecting or consenting to the use of cookies. This is an active and autonomous decision. The setting can be adjusted at any time if the user wishes to change their decision in the future. This can be actioned by selecting ‘Data Protection’ in the black header on our website and editing the data protection settings again in the menu shown.

XI. Amendment of this Privacy Policy

This Privacy Policy was last updated on 3 December 2021 and is currently valid. It may become necessary to amend the Privacy Policy in the course of further developments to our website and the information it includes or to reflect changes in legal or official requirements.

The current Privacy Policy can be accessed and printed from our website at: https://www.indigo-invest.de

XII. Contact/Responsible body

This data protection information applies to data processing by GOLDBECK. The responsible body is:

GOLDBECK GmbH, Ummelner Straße 4-6, 33649 Bielefeld.

You can contact our Group Data Protection Officer at:

GOLDBECK GmbH
Group Data Protection Officer
Ummelner Straße 4-6
33649 Bielefeld
or at datenschutzbeauftragter@goldbeck.de