1. Who is responsible for processing your data and who can you contact about data protection?

G. Peter Reber Möbel-Logistik GmbH
Konrad-Nolte-Straße 10
D-76726 Germersheim
Phone (0 72 74) 94 94-0
Fax (0 72 74) 94 94-30
info@remove-this.reber-logistik.de

Reber Germersheim Speditions GmbH & Co. KG
Konrad-Nolte-Straße 10
D-76726 Germersheim
Phone (0 72 74) 94 94-0
Fax (0 72 74) 94 94-30
info@remove-this.reber-logistik.de

Reber Germersheim Logistik GmbH & Co. KG
Konrad-Nolte-Straße 10
D-76726 Germersheim
Phone (0 72 74) 94 94-0
Fax (0 72 74) 94 94-30
info@remove-this.reber-logistik.de

Reber Germersheim Intralogistik GmbH & Co. KG
Konrad-Nolte-Straße 10
D-76726 Germersheim
Phone (0 72 74) 94 94-0
Fax (0 72 74) 94 94-30
info@remove-this.reber-logistik.de

Reber Leipzig Logistik GmbH
Poststraße 2
D-04158 Leipzig
Phone (0341) 4 67 99-0
Fax (0341) 4 67 99-40
info@remove-this.reber-logistik.de

Reber Ohlweiler Logistik GmbH
Weinenweg 3
D-55469 Ohlweiler
Phone (0 72 74) 94 94-60
Fax (0 72 74) 94 94-69
info@remove-this.reber-logistik.de

Reber Melle Logistik GmbH & Co. KG
Spenger Straße 49
49328 Melle
Phone (05226) 984-0
Fax (05226) 984-130
info@remove-this.reber-logistik.de

Reber Alsfeld Logistik GmbH & Co. KG
Erich-Krause-Str. 1
D-36304 Alsfeld
Phone (0 66 31) 186 192
Fax (0 66 31) 186 310
info@remove-this.reber-logistik.de

Gressel Logistik GmbH & Co. KG
Robert-Bosch-Straße 31
D-91413 Neustadt / Aisch
Phone (0 91 61) 88 37 0
Fax (0 91 61) 88 37 37
info@remove-this.reber-logistik.de

Gressel Spedition GmbH & Co. KG
Robert-Bosch-Straße 31
D-91413 Neustadt / Aisch
Phone (0 91 61) 88 37 0
Fax (0 91 61) 88 37 37
info@remove-this.reber-logistik.de

Reber Spitzer Logistik GmbH & Co. KG
Konrad-Nolte-Straße 10
D-76726 Germersheim
Phone (0 72 74) 94 94-0
Fax (0 72 74) 94 94-30
info@remove-this.reber-logistik.de

You can contact our data protection officer Mr Stephan Blazy by post at the above address with the addition -Data Protection Officer- or by email at stephan.blazy@remove-this.gdpc.de.In our privacy policy (https://www.reber-logistik.de/datenschutz) you will find further information on the processing and protection of your data in our company.

2. Where does your data come from and what data is processed?

Insofar as you act as an end customer vis-à-vis REBER:

In particular, we process data that we have not received directly from you as a result of the business relationship, but from your direct contractual partner (e.g. the company from which you ordered the goods). This data is required for communication and contract processing with your direct contractual partner and with our company. It includes in particular:

•  Identification and contact details (e.g. first name and surname, address, email address, telephone number)
• Order and contract data (e.g. delivery data, customer number, floor plans, areas)
• Documentation data to be able to prove communication during the business relationship
• Other socio-demographic characteristics (e.g. occupation)-    IP address and Internet-related communication and connection data (if you have activated online shipment tracking for your delivery)
• Room floor plans and dimensional data (flat), if applicable, e.g. during assembly/installation and image documentation for inspection and approval.

For further information, please contact us using the contact details provided. In this context, you can also request details of the data processed and the purpose of the data processing, unless this information is already provided in the respective contract documents and terms and conditions.

Insofar as you act as a corporate customer or supplier vis-à-vis REBER:

We primarily process data that we receive directly from you on the basis of the business relationship and that is required in this regard for communication and contract processing. It includes in particular:

• Business identification and contact details (e.g. first name and surname of the contact person, business address, email address, telephone number, position in the company)
• Order and turnover data (e.g. account, IBAN, customer number)
• Documentation data to be able to prove communication during the business relationship
• Other socio-demographic characteristics (e.g. occupation)
• Tax data (e.g. tax number, tax identification number for the purpose of processing the order and fulfilling legal obligations, in particular vis-à-vis the tax authorities)
• Location data, if applicable

In addition, data about you or the company is also obtained from third parties and processed by us. For example, we regularly receive your data from your direct contractual partners who commission us with the delivery. In addition, we also receive your data from publicly accessible sources, in particular the Federal Gazette, commercial register, Creditsafe/Creditreform (credit agencies).

The categories of data originating from third parties are in particular:

• Name and business address of the managing directors and shareholders or other authorised representatives
• Data concerning creditworthiness, such as score values
• Data from commercial register extracts

3. What is your data used for and on what legal basis?

Data processing is carried out in order to fulfil the contractual and legal obligations in the provision of the respective services and contractual services. We process your personal data in compliance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and all other relevant laws (e.g. HGB, AO). In particular, we observe the principle of data minimisation, so that only the data specifically required for the relevant transaction or contract is processed and transmitted to us by your contractual partner.

a) For the fulfilment of contractual obligations and for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 sentence 1 b GDPR. Your personal data is mainly processed to fulfil the contract (delivery and service contract) with your contractual partner or with you directly. If you are acting as an end customer, this also includes contacting you for the purpose of agreeing a delivery date and forwarding the necessary delivery data to the relevant driver (of the subcontractor) as well as recording and forwarding complaints to your contractual partner or the contracted delivery company. By entering into a business relationship as a prospective corporate customer, supplier or business partner, we will store your contact details and information about business processes and communication with you and process them at least for the duration of the business relationship.

b) The further storage of your data after fulfilment of the contract is also based on a legal obligation within the meaning of Art. 6 para. 1 sentence 1 c GDPR. This includes the legal requirements of the German Fiscal Code and the German Commercial Code, within which we are obliged to process your personal data (e.g. invoice data and delivery notes). For deliveries 3    outside the EEA, your shipment data will be compared with the “EU terror lists” due to the necessary customs clearance on the basis of the European anti-terror regulations 2580/2001 and 881/2002 in order to ensure that no funds or other economic resources are made available for terrorist activity in the future.

c) Insofar as we deem it necessary, we also process your personal data in accordance with Art. 6 para. 1 sentence 1 f GDPR beyond the actual fulfilment of contractual obligations to protect our legitimate interests or the interests of third parties. However, this will only take place if our interests outweigh your conflicting interests. As a rule, we act on the basis of our own economic interests. Our legitimate interests in processing your personal data are in particular:

• Ensuring IT security and IT operations;
• Inclusion of other service providers and integration of these into the supply and service chain;
• Assertion of legal claims and defence in legal disputes and for the collection of debts, also in the context of appointing debt collection agencies;
• Measures for business management and further development of services;
• In the case of corporate customers, we have a legitimate interest in processing the data in order to carry out credit checks.

4. Will your data be passed on?

Within our company, access to your data is only granted to those departments that absolutely need it to fulfil their tasks. We may forward your data within the Reber Group to G. Peter Reber Möbel-Logistik GmbH for accounting or route planning purposes. Furthermore, our service providers and vicarious agents receive personal data for the aforementioned processing purposes if they maintain confidentiality and the transfer of data is otherwise based on one of the above-mentioned legal bases. We commission service providers, either temporarily or on a long term basis, for IT services, logistics, assembly, storage, telecommunications and sales.

As the end customer, it may be the case, particularly with regard to the delivery and assembly of your goods, that we as a company do not carry out the delivery and service directly ourselves, but that we use other (sub)contractors for this purpose. For information on the companies commissioned in your specific case, please refer to the contract documents or simply contact us with a corresponding request.

In all cases, the service providers and vicarious agents used only receive the data that is necessary and mandatory for the performance of individual tasks. In addition, these service providers and vicarious agents are obliged to strictly observe data protection and confidentiality with regard to the personal data they receive from us.

In exceptional cases, public bodies and institutions (e.g. customs authorities for the performance of customs acts on the basis of a granted authorisation, public prosecutor's office, police, regulatory authorities, for example in the case of authorised transports, supervisory authorities, tax office, etc.) may also receive personal data if there is a legal or official obligation/permission (Art. 6 para. 1 lit. c or lit. f GDPR).

If we pass on personal data to service providers outside the European Economic Area (EEA) as part of our business relationship, the data will generally only be passed on if the third country (such as Switzerland) has an adequate level of data protection confirmed by the EU Commission or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or agreement of the EU Commission's standard contractual clauses) are in place

5. How long will your data be stored?

As soon as your data is no longer required for the fulfilment of contractual, legal and internal processing purposes, it will be deleted, unless you have given us your consent for further storage (in this case, you will be informed specifically about the corresponding period as part of the respective consent) or we have a legitimate interest in (further) storage.

As a rule, however, we are obliged to retain personal data beyond the end of the contractual relationship for reasons of commercial and tax law. The period can be up to ten years. Reference is made to the relevant laws, in particular Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code.

If we require personal data and documents as evidence for the assertion, exercise or defence of legal claims, we will retain them depending on the respective limitation periods, whereby we restrict processing for other purposes. This also applies, for example, to the assertion and processing of warranty claims. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR.

6. Are you obliged to provide your data?

As part of our contractual relationship, you must provide the personal data required to fulfil the contractual relationship. Without this data, we will not be able to fulfil our contractual obligations.

7. What rights do you have vis-à-vis the REBER Group?

With regard to the processing of your personal data, you have various rights, in particular the right to information about the personal data stored by us (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR), in particular in the case of direct marketing. The restrictions of Sections 34 and 35 BDSG must be observed with regard to the right to information and the right to rectification.

You have the option of contacting the above-mentioned data protection officer or a data protection supervisory authority. Depending on the location of the Group company, you can find the data protection supervisory authority responsible for us at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften Links/addresses links-node.html