SAP Silver Partner · DSAG Member · Solutions in the SAP Store

Data protection for customers, suppliers and interested parties

Information on the handling of your data  

An obligation arising from the General Data Protection Regulation. 

  1. Preliminary remark

The following points are intended to provide you with information about your data. The legislator has specified what information is required for this purpose. 

  1. What is personal data?

All information relating to an identified or identifiable person. A person is identifiable if he or she can be identified directly or indirectly. This can be done, for example, by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special features.  

  1. Basic information

3.1 Who is responsible for processing my data? 

The person responsible for data processing is 

Consult-SK Ltd. 
Simeonsplatz 2 
32423 Minden 

Phone:+49 (0) 571 7834 35 0 

Mail:info@consult-sk.de 

 

3.2 How can I contact you? 

Contact person: Mr. Marc Schütte   

Email: marc.schuette@consult-sk.de 

    

3.3 How can I contact the company's data protection officer? 

The data protection officer of our company is Mr. Carsten Bruns. The data protection officer can be reached as follows: 

SK-Consulting Group GmbH  

Osterweg 2; 32549 Bad Oeynhausen  

E-mail: datenschutz@sk-consulting.com 

  1. Further important information

4.1 Data processing (Why?) 

We process your data to fulfill the mutual obligations arising from the (possibly emerging)  

contractual relationship or to fulfill legal obligations. 

4.2 Why may we do this? 

Data protection law allows us (pursuant to Art. 6 para. 1 lit. b GDPR) to process data that is necessary for the performance of a contract or for the implementation of pre-contractual measures. If you voluntarily provide us with personal data beyond what is necessary, data protection law allows us to process this information on the basis of consent (pursuant to Art. 6 para. 1 lit. a GDPR). Data protection law also allows us to process your data in accordance with Art. 6 para. 1 lit. c GDPR if there is a legal obligation to do so. We may process your data if we have a legitimate interest (e.g. company security, securing our receivables, external presentation of the company) and your conflicting interest does not outweigh this (Art. 6 para. 1 lit. f GDPR). 

In order to inform our customers about products, goods and services as well as about the organization of (online) events and promotions, we also process their email addresses received in connection with a purchase of goods or services for advertising purposes until an objection to this processing is made in accordance with Art. 6 para. 1 lit. f GDPR (our legitimate economic interest) in conjunction with. § Section 7 para. 3, sentences 1 - 4 UWG.  

 

As part of business interactions with customers, interested parties and suppliers, we also use digital communication options such as the video conferencing tools "MS TEAMS" and "ZOOM". We process the following personal data in this context User data (name, pseudonym, user ID), meeting metadata (topic, participant IP addresses, device information), meeting content data: Text, audio and video data as well as any shared Documents. 

The purpose of using these services is to enable our business partners and us to meet virtually via these digital communication platforms in a fast, environmentally friendly and cost-efficient manner as part of our business activities, without having to visit one of the partners on site each time (especially if several meetings are required). 

When using the aforementioned applications, no audio or video recordings are made and any information received via the "chat" function (sending short messages) is deleted after 90 days. Your data will not be forwarded to third parties; system log data will be deleted after 7 days. 

The legal basis for processing your data "IP address" and "name" (as well as "image" if the camera is activated) in the context of an online meeting (virtual meeting) via one of the video conferencing tools described is based on your consent pursuant to Art. 6 para. 1 lit. a & f GDPR (consent of the data subject & legitimate interest of the controller) if you accept our offer or appointment proposal. The legal basis for the processing of the other data communicated during the online meetings is Article 6 (1) (b) GDPR (performance of a contract). 

4.3 Who can receive data from me? 

As part of the processing, your data may be transmitted to: 

  • Persons within our company who are directly involved in data processing (e.g.  

Distribution, Purchasing) 

  • Service providers who are contractually bound and obliged to maintain confidentiality and who perform sub-tasks of data processing as well as other external bodies (companies, authorities, credit agencies, etc.) if this is necessary.  

4.4 Will you transfer data from me to countries outside the European Union? 

This is not planned by us. An exception to this would only be conceivable if you were to initiate this or if it were necessary for the fulfillment of the contract. Legal basis: Art. 6 para. 1 lit. b GDPR, Art. 49 para. 1 lit. b GDPR. 

Furthermore, it cannot be ruled out that parts of your data may be transferred to a third country when using the above-mentioned video conferencing tools. 

4.5 How long will you store my data? 

We store your data for as long as we need it to achieve the purposes described above under 4.1. However, there are legal regulations (e.g. Section 147 of the German Fiscal Code) that require us to keep certain documents for six or ten years. After the retention period has expired, we delete data that is no longer required.  

4.6 Do I have to provide my data? 

In order to achieve the reasons set out in point 4.1, it is necessary for you to provide us with your personal data. 

This is absolutely necessary or legally required for the fulfillment of the contract with you. With  

We cannot fulfill the contract with you if the data is not provided.  

4.7 Automated decision making/ profiling 

There is no automated decision-making/profiling.  

  1. What rights do I have?

To exercise your rights as a data subject, please contact the office named under point 3.2. Requests that are submitted electronically are generally answered electronically.  

In accordance with Art. 15 GDPR, you have the right to Information about the personal data stored about you, including any recipients and the planned storage period. If incorrect personal data is processed, you have the right to the rectification of inaccurate personal data in accordance with Art. 16 GDPR. Correction to. If the legal requirements are met, you can use the Deletion or Restriction the processing (Art. 17 and 18 GDPR) and Contradiction object to the processing within the framework of the legal requirements (Art. 21 GDPR) and have the right to Data portability (Art. 20 GDPR). If the processing is based on consent (Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR), you can withdraw your consent at any time with effect for the future. revoked. If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 (1) GDPR. complain

Here you can download the information listed above:  https://consult-sk.com/wp-content/uploads/2025/07/CSK_Aktuell_Infopflicht-fuer-Kunden_Interessenten_Lieferanten_gem.-Art.-13-DSGVO_inkl.-werbl.-Ansprache-1.pdf

 

EN