General Privacy Notice

Data Protection Information for Business Partners (B2B) pursuant to Art. 13, 14, and 21 GDPR

We, EXACT solutions GmbH, attach great importance to the protection of your personal data. With this data protection information, we inform our business partners (customers, suppliers, service providers, and interested parties) about the processing of their personal data within the scope of our B2B business relationships.

1. Data Controller
The controller responsible for data processing is:

EXACT solutions GmbH
Lustheide 85
51427 Bergisch Gladbach, Germany
Phone: +49 2204 9485 30
Email: info@exactsolutions.de

Legally represented by the Managing Director: Tobias Schwirten
If you have any questions regarding data protection, you may contact the management directly or send an email to compliance@exactsolutions.de.

2. Which Data We Process
We process personal data that we receive directly from you or through inquiries from your company in the context of our B2B business relationships. The processed data categories include in particular:

  • Contact Data: First and last name, business phone number, business email address.
  • Professional Data: Position in the company, department.
  • Business Data: Contract and billing data, the company’s payment details, documentation of customer or supplier history.

If we do not collect personal data directly from you, it generally originates from your company, ongoing business correspondence, trade fairs, or publicly accessible sources such as company websites or public directories.

3. Purposes and Legal Bases of Processing
We process your personal data to initiate, perform and manage our business relationships. If the processing is necessary for pre-contractual measures or the fulfillment of a contract with you, it is carried out on the basis of Art. 6(1)(b) GDPR. If the processing is necessary to fulfill legal obligations, in particular to comply with commercial and tax retention requirements as well as compliance requirements, it is carried out on the basis of Art. 6(1)(c) GDPR. If we process data of contact persons at customers, suppliers, or other business partners for ongoing communication, relationship management, documenting business processes, or providing information about our products and services, this is done on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient execution and maintenance of our business relationships, internal organization, and proper communication with our business partners. Providing your personal data is necessary for initiating and carrying out our business relationship. Without this data, we are generally unable to conclude or fulfill contracts with you.

4. Recipients of the Data
Within EXACT solutions, only those departments that require your data to fulfill our contractual and legal obligations (e.g., Sales, Purchasing, Accounting) will have access to it. Data will only be disclosed to external third parties if legally permitted and necessary. Possible recipients include:

  • IT and software service providers (e.g., for our ERP or CRM system), who act as processors strictly bound by our instructions.
  • Tax advisors, auditors, and banks.
  • Logistics companies and forwarding agents for the shipment of our products.

5. Duration of Data Storage
We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations. Once the data is no longer required for these purposes, it will be regularly deleted. Exceptions apply to data subject to legal retention periods (in particular §§ 147 of the German Fiscal Code (AO) and 257 of the German Commercial Code (HGB)). The specific storage duration depends in particular on the purpose of processing, statutory retention requirements, and statutory limitation periods.

6. Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request information about your data processed by us (Art. 15 GDPR).
  • Right to Rectification and Erasure: You can request the correction (Art. 16 GDPR) or the deletion (Art. 17 GDPR) of your data.
  • Right to Restriction of Processing and Data Portability: You have the right to restrict the processing of your data (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR).
  • Right to Object: If we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time (Art. 21 GDPR).
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

 

As of May 16, 2026

Scroll to TopWordPress Cookie Notice by Real Cookie Banner