The protection and security of personal data is an important concern of d&b. Therefore, d&b conducts its activities in accordance with the applicable laws for the protection of personal data and data security. This privacy policy informs you what information d&b collects, how d&b uses and safeguards it, and to whom d&b may share it.
With this information on data protection we would therefore like to inform you when we store which data and for what purpose we use it - naturally in compliance with the applicable data protection regulations.
Should you have any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officer, whose contact details you will find below.
The constant technological development, changes in our services or the legal situation as well as other reasons may require adjustments to our data protection information. We therefore reserve the right to change this data protection declaration at any time and ask you to inform yourself regularly about the current status.
Unless otherwise stated in the following sections, no personal data is collected, processed or used when using the SustainSymphony Portal.
The term personal data is defined in the German Federal Data Protection Act. According to this, these are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your real name, your address, your telephone number or your date of birth.
In the basic EU data protection regulation (DSGVO), personal data are defined as follows:
All information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of your personal data.
When processing your personal data to fulfil a contract between you and d&b solutions, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Personal data is only collected if you provide it voluntarily, for example to carry out an order, a survey, a competition or a registration for personalised services. There you will be informed about the intended purpose of processing and, if necessary, asked for your consent to storage.
The personal data collected within the framework of the SustainSymphony Portal will only be used without your consent for order processing or processing your enquiries and, if necessary, passed on to the responsible company. Only with your consent will your data be used in a centrally managed customer and prospective customer database managed under the responsibility of d&b solutions, and your data will be merged at d&b solutions. The use of this data is restricted to purposes of advertising and market and opinion research. You can revoke your consent at any time with effect for the future.
Your data is encrypted before transmission and processing in order to protect it from access by unauthorised persons. Please note that unencrypted e-mails are not transmitted with access protection.
Your data will not be sold, rented or made available to third parties in any other way than described here. Personal data will only be transferred to state institutions and authorities within the framework of mandatory national legislation. Our employees, agencies and dealers are bound by us to the strictest confidentiality.
To register for the SustainSymphony service, it is necessary to create a user account. When the user account is created, the following personal data is collected and processed:
The data is collected and processed on our behalf by
akaryon GmbH
Laurenzgasse 12, A-1050 Vienna, Austria
The purpose is creation of an user account for the SustainSymphony service. The legal basis for this is Art. 6 (1b) GDPR or alternatively Art. 6 (1a). If the user gives consent, the email address will be used for advertising. The legal basis in this case is Art. 6 (1a) GDPR. Processing of personal data outside the European Union does not take place.
When using the SystemSymphony Portal, following personal data is collected and processed:
The data is collected and processed on our behalf by
akaryon GmbH
Laurenzgasse 12, A-1050 Vienna, Austria
The purpose is usage of the SustainSymphony services, in particular the creation of a Carbon Footprint report. The legal basis for the usage is Art. 6 (1b) GDPR or alternatively Art. 6 (1f) GDPR. If the user gives consent, the email address will be used for advertising. The legal basis in this case is Art. 6 (1a) GDPR. Processing of personal data outside the European Union does not take place.
We use the open source map service "OpenStreetMaps" ("OSM") to provide geodata. The provider is the OpenStreetMap Foundation. OSM is used to make it easier to find locations that you record in the course of creating your carbon footprint in the SustainSymphony Portal. To use OSM, it is necessary to save the IP address of your device and the map material is loaded from an external server.
The use of OSM is in the interest of simplifying the use of the SustainSymphony portal and making it easier to find the locations you have specified in the portal; this constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR (legitimate interest in data processing).
Address and link to the privacy policy of the third-party provider:
OpenStreetMap Foundation CLG, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom
Information on the handling of personal data can be found in OSM's privacy policy at https://wiki.osmfoundation.org/wiki/Privacy_Policy
We will not transfer your data to third parties outside the d&b Group, unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have given your express prior consent to the transfer of your data. External service providers and partner companies only receive your data if this is necessary to process their request. In these cases, however, the scope of the transmitted data is limited to the required minimum. As far as our service providers come into contact with your personal data, we ensure that they comply with the regulations of the data protection laws in the same way. Please also note the respective data protection information of the providers. The respective service provider is responsible for the contents of external services, whereby we check the services within the scope of reasonability for compliance with legal requirements.
Your data will be passed on to service partners if they work on our behalf and support d&b solutions in the provision of their services.
Processing of your personal data by contracted service providers takes place within the scope of order processing in accordance with Art. 28 GDPR.
The aforementioned service providers only have access to such personal information as is necessary for the performance of their respective activities. These service providers are prohibited from disclosing your personal information or using it for other purposes, in particular for their own advertising purposes.
Where external service providers come into contact with your personal data, we have taken legal, technical and organisational measures and carried out regular checks to ensure that they also comply with the applicable data protection regulations.
Your personal data will not be passed on commercially to other companies.
d&b solutions uses technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
If your personal data are processed, you are affected within the meaning of the GDPR and you have the following rights against the controller:
This privacy policy is constantly being adapted in the course of the further development of the Internet or our offer. Changes will be announced on this page in due time. In order to keep up to date with the current status of our data usage regulations, this page should be accessed regularly.