Supplier administration

Purpose
The purpose is to manage supplier or business partner relationships.

Data Subject
The supplier or the business partner, including any employees employed with them.

Category of Personal Data
Personal data, including name, title, address, telephone number and e-mail address. As regard employees employed with the supplier or the business partner we process name, title, e-mail address and telephone number.

Legal Basis
The processing of personal data is necessary for the performance of the contract with the supplier or the business partner, or in order to take steps at the request of the supplier or the business partner prior to entering into the contract cf. General Data Protection Regulation article 6, paragraph 1, point b.

The processing is also necessary for compliance with legal obligations to which CURIA is subject, including section 10 of the Accounting Act, cf. General Data Protection Regulation article 6, paragraph 1, point c. Further, the processing is necessary in order for CURIA to pursue its legitimate interests in managing  our supplier or business partner relationship and to perform the contract with our supplier or business partner, cf. General Data Protection Regulation article 6, paragraph 1, point f. Note, that the data subject has the right to object against the processing, cf. General Data Protection Regulation article 21, paragraph 4.

Source
The supplier or business partner, including any employees employed with them.

Retention Period
The personal data is deleted after 6 years, calculated from the time of the supplier or the business partner relationship is terminated, unless specific circumstances require a shorter or a longer storage period.

Categories of recipients
We only transfer personal data to our auditors and to other professional advisors in certain cases, e.g. so that auditors can perform audits or so that we can receive professional advice. We also use external suppliers, such as IT suppliers, accountants, etc. which may receive personal data in connection with the assistance they provide to us. CURIA enters into data processing agreements with external suppliers which process personal data on behalf of CURIA in order to ensure that all necessary security measures are adopted.