Data protection information for interested parties and customers

Status: October 10th, 2025

Note: This page provides information about personal data that is stored in our systems. You can find the general privacy policy at: empolis.com/en/privacy/.

INFORMATION FOR INTERESTED PARTIES

We hereby inform you in accordance with the General Data Protection Regulation (GDPR), Art. 13/14:

Purposes for which the personal data are to be processed and the legal basis for the processing

Provision of information (website), fulfillment of pre-contractual services (acquisition), exercise of marketing and sales activities in accordance with DS-GVO, Art. 6, 1 a, b, c, and f.

Definition of legitimate interests

The object of the company is the development of software solutions for the holistic creation, management, analysis, intelligent processing, and provision of all information relevant to a core business process, regardless of source, format, nature, location and device. For this purpose, in addition to contractual and legal requirements, legitimate interests (GDPR, Art. 6, para. 1f, Art. 9, para. 2 f and Art 17, para. 3e) are pursued, in particular for the exercise of marketing and sales activities and for the assertion, exercise or defense of legal claims The following are collected: interested party data for contact management; in detail: surname, first name, title, address, company, telephone number, e-mail address, background of the inquiry (company size, capacity as partner or similar); if desired also: data on newsletter and webinar organization, product demo and marketing activities, feedback information (surveys). 

Recipients or categories of recipients of the personal data

Internal bodies, affiliated companies and service providers commissioned by us for the above-mentioned purposes.

Transfer of data to a third country

Empolis Information Management GmbH also uses tools from third countries. These are covered by data protection agreements (usually EU standard contractual clauses).

Retention period or criteria for determining this period

Data that you have provided to us in the course of an initial contact (trade fair or similar) is automatically deleted after 36 months, unless we have established business contact with each other in the meantime.
Data can be deleted immediately at any time on the basis of a revocation.

Data subject rights

You have the right to information about the data stored by us and also the right to correction, deletion, or restriction of processing. For this purpose, please contact the above-mentioned contacts.

Revocation of consent

If the processing is based on your consent, you can revoke it at any time. To do so, please contact the above-mentioned contacts. The processing carried out up to that point will remain lawful.

Right of appeal

If you do not agree with our procedures, you can complain to a supervisory authority.

Legal or contractual basis for the provision of your data

The data and data processing described are required for the performance of the agreed services.

Automated decision making including profiling

Does not take place.

Source (if data was not collected directly from the data subject)

Information on this will be provided separately in each individual case.

INFORMATION FOR CUSTOMERS

We hereby inform you in accordance with the General Data Protection Regulation (GDPR), Art. 13/14:

Purposes for which the personal data are to be processed and the legal basis for the processing

Fulfillment of contractual services, processing of orders incl. payment transactions, marketing and sales activities, according to DS-GVO, Art. 6, 1 a, b, f.

Definition of legitimate interests

The object of the company is the development of software solutions for the holistic creation, management, analysis, intelligent processing, and provision of all information relevant to a core business process, regardless of source, format, nature, location and device. For this purpose, in addition to contractual and legal requirements, legitimate interests (GDPR, Art. 6, para. 1f, Art. 9, para. 2 f and Art 17, para. 3e) are pursued, in particular for the exercise of marketing and sales activities and for the assertion, exercise or defense of legal claims The following are collected: interested party data for contact management; in detail: surname, first name, title, address, company, telephone number, e-mail address, background of the inquiry (company size, capacity as partner or similar); if desired also: data on newsletter and webinar organization, product demo and marketing activities, feedback information (surveys).

The object of the company is the development of software solutions for the holistic creation, management, analysis, intelligent processing and provision of all information relevant to a core business process, regardless of source, format, nature, location and device. For this purpose, in addition to contractual and legal requirements, legitimate interests (DS-GVO, Art. 6, para. 1f, Art. 9, para. 2 f and Art 17, para., 3 e) are pursued, in particular for the exercise of marketing and sales activities and for the assertion, exercise or defense of legal claims.   The following are collected: Customer data for contact management, in detail: Name, first name, title, address, company, telephone number, e-mail address, contract and project data (commercial, organizational, technical) for project management up to support, if desired also: data on newsletter and webinar organization, product demo and marketing activities, feedback information (surveys).

Recipients or categories of recipients of the personal data

Internal bodies, affiliated companies and commissioned service providers for the above-mentioned purposes. Public bodies on the basis of special legal provisions.

Transfer of data to a third country

Empolis Information Management GmbH also uses tools from third countries. These are covered by data protection agreements (usually EU standard contractual clauses).

Retention period or criteria for determining this period

Data that you have provided to us as part of our business relationship will be stored for the duration of this relationship, retained for a further 36 months and then deleted. In addition, commercially required data and documents are generally stored for 6 to 10 full calendar years. This is prescribed in detail by law.

Data subject rights

You have the right to information about the data stored by us and also the right to correction, deletion, or restriction of processing. For this purpose, please contact the above-mentioned contacts.

Revocation of consent

If the processing is based on your consent, you can revoke it at any time. To do so, please contact the above-mentioned contacts. The processing carried out up to that point will remain lawful.

Right of appeal

If you do not agree with our procedures, you can complain to a supervisory authority.

Legal or contractual basis for the provision of your data

Data is required for the performance of the agreed services or contracts. Further data is required for Empolis Information Management GmbH to fulfill its legal obligations.

Automated decision making including profiling

Does not take place.

Source (unless data has been collected directly from the data subject).

Does not take place.