for New Contacts within the Scope of Our Business Relationships

​

Responsibility for Data Processing 

green flexibility development gmbh 

Lohgässele 1 

87435 Kempten 

Deutschland  

​

Purpose of Data Processing 
We process your personal data in compliance with the applicable data protection regulations. 

We use your data to respond to inquiries, initiate contact and communication related to the respective matter, and to perform contractual obligations. 

Your data is stored and processed in our CRM/internal management systems, email programs, and office software. 

Access to your data is defined based on a role and authorization concept and is restricted to the group of individuals necessary for the respective purpose. 

 

Legal Basis for Processing 
The primary legal basis for processing your personal data is Art. 6(1)(b) GDPR. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract. 

Where appropriate, we may also base the processing on Art. 6(1)(f) GDPR. This allows us to process data on the basis of legitimate interest. We assume, for example, that processing for the purpose of communication is also in the interest of the data subject. This also includes the storage of your data in our CRM/internal systems. 

In specific cases, we rely on your consent pursuant to Art. 6(1)(a) GDPR. In such cases, your consent will be obtained separately. 

Furthermore, processing may take place due to legal obligations (Art. 6(1)(c) GDPR). 

 

Storage Duration or Criteria for Determining the Duration 
We retain the data provided to us only as long as necessary to fulfill the aforementioned purposes or as required by statutory retention obligations. 

For example, the retention period may derive from § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO). These regulations require every merchant to retain commercial books for 10 years and business correspondence (including contract-relevant emails) for 6 years. 
The retention period begins at the end of the calendar year in which the last entry was made or the document was received or sent. 

Once the respective purpose ceases to apply or the retention periods expire, your data will be routinely deleted or blocked in accordance with legal requirements. 

 

Disclosure of Your Data to Third Parties 
Your data is only disclosed to third parties within the framework of legal provisions. We only share your data if, for example, it is necessary for contractual purposes or if there is a legitimate interest in the economic and efficient operation of our business. 

If we engage subcontractors to provide our services, we take appropriate legal precautions and implement suitable technical and organizational measures to ensure the protection of personal data in accordance with legal requirements. 

In the context of IT support, the contracted service provider may have access to your data. A data processing agreement has been concluded with this provider to ensure data protection and to prohibit unauthorized disclosure to third parties. 

 

Data Transfer to a Third Country or International Organization 
Third countries are countries in which the GDPR does not apply directly. This generally includes all countries outside the EU or the European Economic Area. 

No data transfer to a third country or international organization takes place without a legal basis. 

Due to the use of Microsoft 365, we cannot entirely exclude the possibility that data may be transferred to a third country, despite servers being located in Germany. 

For data transfers to the United States: Since July 2023, an adequacy decision by the European Commission (Data Privacy Framework) is in place, which classifies the U.S. as a third country with a level of data protection comparable to that of the EU. This adequacy decision may now serve as the legal basis for data transfers to certified organizations in the U.S. 

According to the list of certified organizations published by the U.S. Department of Commerce, Microsoft Corporation is listed as a certified entity. 

 

Right of Withdrawal 
If processing is based on your consent, you have the right to withdraw your consent to the internal use of your data at any time with effect for the future. 
To do so, simply send an appropriate email to datenschutz@green-flexibility.com. Of course, you also have the option to submit your withdrawal in writing by post to the address provided for the controller, or to contact us by phone at +49 831 20693579. 

 

Information on Your Data Subject Rights 
You have the right to obtain information from us regarding the personal data we process about you (Art. 15 GDPR). You also have the right to request the rectification of incorrect personal data concerning you (Art. 16 GDPR). Where applicable, you may request the deletion of your personal data (Art. 17 GDPR) or the restriction of its processing (Art. 18 GDPR). 

In certain cases, you also have the right to data portability (Art. 20 GDPR). Additionally, you may object to the processing of your personal data under certain circumstances (Art. 21 GDPR). 

 

​

Contact Details of the Data Protection Officer 

Datenschutzkanzlei Lenz GmbH & Co. KG 

Sven Lenz 

Bahnhofstraße 50, D-87435 Kempten 

Telefon: +49 831 930653-00 

​

If you have any questions about data protection or other privacy-related concerns, you are welcome to contact our data protection team via email: datenschutz@green-flexibility.com 

 

Notice of the Right to Lodge a Complaint with a Supervisory Authority 
You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data is not lawful. 

​

The address of the supervisory authority responsible for our organization is:  

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) 

Promenade 27, 91522 Ansbach, Deutschland 

Telefon: +49 981 53-1300 

Telefax: +49 981 53-981300 

​

You can access the complaint form via the following link:https://www.lda.bayern.de/de/beschwerde.html 

​

Please note: A complaint can also be submitted to any data protection supervisory authority within the EU. 

 

Changes to Our Privacy Notice 
We reserve the right to amend our privacy notice at short notice to ensure it always complies with current legal requirements.