Information for suppliers of the Article 13 GDPR


The following information is intended to give you an overview of the processing of your personal data by the Rhenus Group and the rights to which you are entitled under data protection law. In order to fulfil our duty to provide information in accordance with Article 13 GDPR, we would be pleased to provide you with our data protection information below:

The identity and the contact details of the controller:

Rhenus SE &Co. KG
Rhenus-Platz 1
59439 Holzwickede
Phone: +49 (0) 2301 29-0
E-Mail: [email protected] 

The contact details of the data protection officer:

- data protection officer -
Rhenus-Platz 1
59439 Holzwickede
E-Mail: [email protected] 

Purpose of processing and legal basis

The data received from you is processed by us only for the purposes for which we received or collected it. In particular, this can be done for the following purposes:

  • Communication
  • Answers to inquiries
  • Initiation and provision of services
  • Initiation and execution of contracts

Processing for other purposes can only be considered if the necessary legal requirements pursuant to Article 6 para. 4 GDPR have been met. Information obligations pursuant to Article 13 para. 3 and Article 14 para. 4 GDPR are of course observed.

The legal basis for the processing of personal data is in principle Article 6 GDPR, unless there are specific legal provisions. If personal data is processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.

In particular, the following options may be considered:

  • Article 6 para. 1 a) GDPR
  • Article 6 para. 1 b) GDPR
  • Article 6 para. 1 c) GDPR
  • Article 6 para. 1 f) GDPR

If processing is carried out on the basis of Article 6 para. 1 f) GDPR, the controller shall pursue the following legitimate interests of himself or third parties: Communication if the person concerned is not a direct party to the contract to be initiated or existing. If we process data on the basis of a weighing of interests, you as the data subject have the right to object to the processing of personal data in accordance with Article 21 GDPR.

Categories of personal data

If the controller does not collect your data directly from communication with you and you therefore know what data is involved, please note that the controller regularly processes the following categories of personal data:

  • Master data, such as first and last name, professional qualification
  • Contact data, such as address, telephone and fax number, e-mail address
  • Contents of communication
  • Information on the participants, including information on legal representatives and beneficial owners
  • Information on the facts of the case, including information on the personal and economic circumstances of the parties involved


Recipients of the personal data

  • Controller, in particular the employees of the specialist department
  • Processor, i.e. companies which, due to contractual obligations, treat your data exclusively in accordance with the instructions of the responsible party

Transfer of data to third countries and to an international organisation

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if this is permissible on the basis of a weighing of interests pursuant to Article 6 Para. 1 f) GDPR, if we are legally obliged to pass it on or if you have given your consent to this.

Where data is transferred to a third country outside the EU, an adequate level of data protection is ensured by the conclusion of EU standard contractual clauses and/or the recipient's participation in the so-called "Privacy Shield" and the technical and organisational measures taken by the third party with regard to data protection and data security.

Duration of storage

Personal data will only be stored by controller as long it is necessary to pursue the purpose for which it was processed. If the storage of the data is no longer necessary for the fulfilment of contractual or legal obligations and for the pursuit of legitimate interests, i.e. for the preservation of evidence or proof within the scope of the statutory limitation provisions, these will be deleted regularly.


Your rights as a data subject


Right of access
On request, we will inform you in writing or electronically whether and which personal data we have stored about you (Article 15 GDPR).

Right to rectification
You have the right to rectify (Article 16 GDPR) and/or complete the data vis-à-vis the data controller if the personal data processed concerning you are inaccurate or incomplete.

Right to erasure
You may request the person responsible to delete the personal data concerning you immediately (Article 17 GDPR).

Right to restriction of processing
You have the right to demand the restriction of the processing (Article 18 GDPR).

Right to data portability
You have the right to data portability (Article 20 GDPR). In other words, you have the right to receive your personal data in a machine-readable format.

Right of appeal to the supervisory authority
There is a right of appeal to a data protection supervisory authority. A list of the Germany supervisory authorities and their contact details can be found in the following link:

Revocation of consent
If you have given your consent to the collection or use of personal data and wish to revoke it, you can revoke it at any time with effect for the future by e-mail or letter.

Provision of personal data
As part of our business relationship, you must provide the personal information necessary to establish and conduct a business relationship and to fulfil the contractual obligations associated therewith, or which we are required by law to collect. Without this data we will normally have to refuse the conclusion of the contract or the execution of the order or will no longer be able to execute an existing contract and may have to terminate it.

Automated individual decision-making/profiling
An automated decision making (including profiling) does not take place with your data.

Information about your right of objection

1. Right of objection in individual cases
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Article 6 para. 1 e) GDPR (data processing in the public interest) and Article 6 para. 1 f) GDPR (data processing on the basis of a weighing of interests); this also applies to profiling based on this provision within the meaning of Article 4 para. 4 GDPR. If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims

2. Right to object to the processing of data for advertising purposes
In individual cases we process your personal data in order to operate direct advertising. You have the right at any time to object to the processing of your personal data for the purpose of such advertising; this also applies to profiling in so far as it is connected with such direct advertising.