General Privacy Notice for Customers

We are committed to complying with statutory data protection provisions and strive to observe the principles of data avoidance and data minimization at all times.

1.1 The Data Controller

This Privacy Policy applies to data processing by:

foobar Agency GmbH
Ria-Burkei-Straße 25
81249 Munich

Phone: +49 89 244174840

⁠Email: datenschutz@foobar.agency

1.2 The Data Protection Officer

You can contact the Data Protection Officer of the Data Controller as follows:

SiDIT GmbH, www.sidit.de, Email: info@sidit.de

2.1 We generally process the following data about you:

• company name;
• title, first name, and last name of the designated contact persons;
• address (if different: billing address);
• a valid email address; phone number (landline and/or mobile);
• bank details.

We assign you a customer number in our system.

2.2 What do we process your data for (purpose of processing) and on what legal basis?

Below we inform you of the purposes for which, and the legal basis on which, we process your data.

2.2.1 To fulfil contractual obligations and/or carry out pre-contractual measures (Art. 6(1)(1)(b) GDPR)

We process your personal data to fulfil contractual obligations and/or carry out pre-contractual measures taken at your request, in particular: to perform the contract; to correspond with you; to issue invoices; to process warranty claims; to process any liability claims that may arise and to assert claims against you.

2.2.2 Based on your consent (Art. 6(1)(1)(a) GDPR)

Where you have given us consent to process personal data, that consent is the legal basis for the processing described therein.

This applies in particular to:

• collecting and storing additional personal data
• advertising contact by phone, email, or social media
• sending a newsletter.

You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal.

2.2.3 Based on a balancing of interests (Art. 6(1)(1)(f) GDPR)

We may also use your data on the basis of a balancing of interests to safeguard the legitimate interests of us or third parties, for example:

• maintaining an order history for future services
• customer advice, support, and sales
• general business management and further development of services and products
• advertising and market/opinion research
• anonymizing personal data for further development and quality management of our products/services
• anonymizing personal data for training machine learning models (AI training).

Our interest arises from these purposes and is otherwise economic in nature. Where possible and appropriate, we process your data in pseudonymized or anonymized form.

2.2.4 Based on legal requirements (Art. 6(1)(1)(c) GDPR)

We are subject to various legal obligations, such as statutory commercial retention and documentation obligations (under the German Commercial Code (HGB), Criminal Code (StGB), or Fiscal Code (AO)).

Disclosure of personal data is also a form of processing as described above; however, we want to inform you separately about disclosure to third parties. Protecting your personal data matters greatly to us, so we are especially careful when sharing it with third parties.

Your personal data is generally transferred to third parties for the following purposes:

• processors with whom we have concluded an agreement under Art. 28 GDPR
• shipping (e.g., shipping providers)
• payment (e.g., payment providers)
• accounting (e.g., tax advisors)
• legal disputes (e.g., lawyers)
• communication platforms (e.g., email, other messenger services)
• authorities, where applicable.

Data processing takes place exclusively within a member state of the EU or another state party to the EEA Agreement. Any transfer to a third country only occurs if the specific requirements of Art. 44 et seq. GDPR are met.

To optimize our processes and fulfil the purposes above, your personal data may be processed using artificial intelligence (AI) technologies, used in particular to:

• carry out data analyses
• generate forecasts
• make routine processes more efficient.

The AI used operates in accordance with GDPR principles. Any decisions with legal or similarly significant effects on you are never made by AI alone, but are supplemented by human intervention.

We will erase your personal data once it is no longer necessary for the purposes for which it was collected or otherwise processed, provided the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims.

You have the right:

• under Art. 7(3) GDPR to withdraw consent at any time
• under Art. 15 GDPR to request information about your personal data (purposes, categories of data, recipients, planned storage period, your rights, origin of data, automated decision-making incl. profiling)
• under Art. 16 GDPR to request rectification or completion of inaccurate data
• under Art. 17 GDPR to request erasure (subject to the same conditions as above)
• under Art. 18 GDPR to request restriction of processing under specified conditions
• under Art. 20 GDPR to receive your data in a structured, commonly used, machine-readable format or have it transferred to another controller
• and under Art. 77 GDPR to lodge a complaint with a supervisory authority — generally the one at your place of residence or work.

Where your personal data is processed on the basis of legitimate interests under Art. 6(1)(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing on grounds relating to your particular situation. To exercise this right, an email to datenschutz@foobar.agency is sufficient.