Information in accordance with Art. 13/14 of the EU General Data Protection Regulation (GDPR)
The purpose of this document is to inform you of the ways in which we process your data, in accordance with Art. 14 of the GDPR.
Responsible party:
EOS Field Services GmbH, Steindamm 71, 20099 Hamburg, Germany.
Contact information for the Data Protection Officer:
Data Protection Officer at EOS Field Services GmbH, Steindamm 71, 20099 Hamburg, Germany or datenschutz@eos-solutions.com.
Purpose of processing and legal basis:
Data processing is carried out for the purposes of processing contracts or for legal proceedings. In accordance with Art. 6(1)(b) of the GDPR, the processing of your data is required due to a delayed payment by you that is required for the fulfilment of a contract with the aforementioned creditor.
A further purpose of data processing is for the management of receivables in accordance with Art. 6(1)(f) of the GDPR, which also includes the data-based control of debt collection measures which has been optimised for you. Data processing is therefore required for the protection of our legitimate interests or those of a third party.
Data categories and data source:
We process the following categories of data:
Master data, communication data, contract data, data regarding receivables and, where necessary, payment information. The data from the above data categories will have been sent to us by the aforementioned creditor or by one of the recipients mentioned below.
Recipient:
Within the scope of the debt collection proceedings, we will forward your data to the aforementioned creditors and, if necessary, to the following categories of recipients, provided that this is necessary for the debt collection: Assignees, credit agencies, service providers, third-party debtors, registry offices, courts, bailiffs, lawyers.
Retention period:
After payment of the outstanding debt or termination of the debt collection proceedings, after three years we shall evaluate whether we still need your data and whether an exclusion of statutory retention periods is necessary.
Rights of the affected party
In accordance with Arts. 15–22 of the GDPR and where legal preconditions are met, you are entitled to the following rights: Right of access, rectification, deletion, restriction of processing and data portability.
You also have a right to object to processing in accordance with Art. 14(2)(c) and Art. 21 of the GDPR, based on Art. 6(1)(f) of the GDPR.
Right to lodge a complaint with a supervisory authority:
In accordance with Art. 77 of the GDPR, you also have the right to lodge a complaint with a supervisory authority. In general, you can appeal to the supervisory authority of your place of habitual residence, work or at our company headquarters.