Privacy policy

We would like to inform you below about the processing of personal data in the context of the use of our internet pages. According to Art. 4 of the General Data Protection Regulation (GDPR), “personal data” refers to all information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The legal basis for data protection can be found in the new Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR).

Responsible

Responsible for these internet pages is Mysupply Operations GmbH (Jungfernstieg 7, 20354 Hamburg). Further information about our company and the persons authorised to represent us can be found in our imprint of our website: https://www.mysupply.ai/imprint.

Legal bases for data processing

In order to be able to offer you our website and the services associated with it, we process personal data on the basis of the following legal principles:

consent (Art. 6 sec. 1 lit. a) GDPR)
for the performance of contracts (Art. 6 sec. 1 lit. b) GDPR)
on the basis of a balance of interests (Art. 6 sec. 1 lit. f) GDPR)
to fulfil a legal obligation (Art. 6 sec. 1 lit. c) GDPR)

We will refer to the relevant terms in connection with the respective processing, so that you can classify on what basis we process personal data.

If personal data is processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.

If we process data on the basis of weighing up of interests, you as the person concerned have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

Purpose of processing personal data

We process the data mentioned for the purpose of operating our website and for the fulfilment of contractual obligations towards our customers or for the protection of our legitimate interests. In the case of inquiries from you outside an active customer relationship, we process the data for the purposes of sales and advertising. You can object to the use of your personal data for advertising purposes at any time. You may object to the use of your personal data for advertising purposes at any time.

What data is being processed?

Access data

When you visit our website, personal data is processed in order to be able to display the contents of the website on your terminal device.

In order for the pages to be displayed in your browser, the IP address of your terminal device must be processed. Additional information about the browser of your terminal device is also processed. The data will also be used to identify errors on the websites and to be able to fix it.

We are obliged under data protection law, including the confidentiality and integrity of the IT systems to ensure processed personal data.

Data logged:

anonymized IP address of the calling computer (for a maximum of 5 days)
Operating system of the calling computer
Browser version of the calling computer
Name of the retrieved file
Date and time of retrieval
Amount of data transferred
Referencing URL

The anonymised IP address will be displayed after five days of all systems connected to the operation of the used on these websites.

The data will also be used to identify and correct errors on the internet pages.

Contact

We offer a contact form on our website, which will provide you with information on our products or services, or to make a contact with us in general. The ones we have required data to answer a request as a mandatory Marked. Information on other data fields is voluntary.

We need this information in order to process your request, to contact you correctly and to provide you with an answer. The data processing is carried out in the case of specific requests for the fulfilment of a contract or the initiation of the contract. In the case of general enquiries, processing is carried out on the basis of a balance of interests.

Enquiries received via the contact form of our website will be sent to us electronically to answer your request. In this context, other persons may also receive departments and, where applicable, third parties are aware of the form content you have sent.

The transmission of the form data over the Internet takes place via encrypted connections.
The processing of the data is carried out in accordance with Art. 1 lit. f) GDPR based on our legitimate interest in answering your enquiries. We delete the data as soon as the request is completed.

Registration function

If you wish to register as a supplier or a customer on our platform the data processed in the course of this registration will be used.

This data is: salutation, title, position, first name, last name, company, company form, VAT ID, commercial register no., authorized representative, position, industry affiliation, e-mail.

We process this data for the purpose of:
Mysupply: Mediation of suppliers and enquirers of procurement orders, mediation of contacts
Expertist: Mediation of suppliers and demanders of project orders, procurement of contacts
German Solar: Operation of a sales shop
Espresso Society: Operation of a retail shop

The processing of the data is carried out in accordance with Art. 1 lit. b) GDPR on the basis of a contract or a contract initiation. The storage period of the data depends on the legal retention periods in accordance with the HGB (German Commercial code) or AO (German Fiscal Code).

When you register on our site, we will also store the date and time of your registration. This serves as a safeguard on our part in the event that a third party misuses your data and registers with this data on our site without your knowledge. Your data will only be passed on to third parties after consent and/or in the case of participation in the negotiation process. There will be no comparison of the data collected in this way with data that may be collected by other components of our site.

Voluntary information

If you provide us with data voluntarily, e.g. in forms, and this data is not required for the fulfilment of our contractual obligations, we process this data on the justified assumption that the processing and use of this data is in your interest.

Recipients / Disclosure of Data

Data that you provide to us will only be passed on with your consent but not to third parties. In particular, your data will not be passed on to third parties for their advertising purposes.
However, we may use service providers for the operation of this website or for other products or services provided by us. It can therefore happen that a service provider gets knowledge of personal data. We select our service providers carefully – especially with regard to data protection and data security – and take all measures required by data protection law for permissible data processing.

Where is the data processed?

The data is processed exclusively on computer centers based in the Federal Republic of Germany.
Insofar as personal data is processed outside the European Union, this can be seen from the previous explanations.

Privacy notices for applicants

The following data is collected in connection with your application in our company:

Data collection of applicants

We process personal data that you have sent us in connection with your application in order to check your suitability for the position (or other open positions, if applicable) and to carry out the application procedure. The processing of applicant data is based on § 26 GDPR-new.

Period of data storage

Data relating to candidates applying for internal posts shall be deleted after six months in the event of a refusal, unless deletion would be contrary to any other legitimate interests of the controller.
If you have been accepted for a position during the application procedure, the data will be transferred to our personnel information system.
Data of applicants who apply for project-related positions remain stored in our applicant pool for the entire duration of the placement, as required for the respective task in compliance with the statutory retention periods.
Furthermore, your data will be deleted after two years, unless you have given us your consent for further storage.

Data transfer

A specially developed software solution is used for the application process. The applicant data is viewed by the personnel department after receipt of the application. Suitable applications are forwarded internally to the departmental managers responsible for the vacant position. The further procedure is then coordinated. Within the company, only those persons who need access to your data for the proper processing of our application procedure have access to your data.
We only collect, store and process the personal data you provide to the extent that is necessary to process inquiries or orders and you have given your prior consent to. You have the right to revoke your consent with the effect for the future at any time.
In order to provide you with the best possible support in your application efforts, we pass on your personal data to our affiliated companies to be able to check for other matching projects. Furthermore, your data will not be passed on to third parties without prior agreement. A transfer of data to third parties beyond the scope of your consent will only take place if we are obligated to do so due to mandatory legal regulations or if you yourself determine this.

Security

We take all necessary technical and organizational security measures to protect your personal data from loss and abuse. Your data is stored in a secure operating environment that is not accessible to the public. Your data is encrypted during transmission by so-called Transport Layers Security (TLS). This means that the communication between your computer and our servers takes place using a recognised encryption method.

Existence of automated decision making

As a responsible company, we avoid automatic decision making or profiling.

Data protection officer

We are not obliged to appoint a data protection officer. You can send questions about data protection to privacy-officer@mysupply.com by e-mail. For other purposes, the use of this e-mail address is expressly prohibited.

Your rights as a data subject

You have the right of access to the personal data concerning you. You can contact us for information at any time. In case of a request for information that is not made in writing, we ask for your understanding that we may require you to provide evidence that proves that you are the person you claim to be. Furthermore, you have the right to correction or deletion or to restriction of processing, as far as you are legally entitled to do so.
Finally, you have the right to object to data processing within the scope of the statutory provisions. The same applies to a right to data transferability. In particular, if you wish to assert your right to object to the processing of your data on the basis of a weighing of interests, you must expect that we will subject this to close scrutiny. We have carefully weighed up our interests here. So please read Art. 21 GDPR carefully and expect that we will also make inquiries about the “special situation” within the meaning of Art. 21 Para. 1 GDPR.
Finally, you also have a right to data transferability. Here too, this is only granted within the framework of the legal requirements.

Deletion of data

As a matter of principle, we delete personal data when there is no need for further storage. A requirement can exist in particular if the data is still needed to fulfil contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory storage obligations, deletion shall only be considered after the expiry of the respective storage obligation.

Right of appeal to a supervisory authority

You have the right to complain to a supervisory authority about the processing of your personal data by us. The responsible supervisory authority depends on the federal state of your residence, your work or the suspected violation.

Cookies

We use cookies on our Internet pages. By using cookies it is possible to optimize the website in the interest of the user and to provide user-friendly services. Cookies are small text files that are stored on your computer system. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit us. If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
In some cases, cookies are used to simplify the visit to the website by saving settings. Insofar as personal data is processed using individual cookies implemented by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b) GDPR either for the execution of the contract or in accordance with Art. 6 Para. 1 lit. f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit. In the case of cookies that are not necessary, but for the purpose of marketing measures and their tracking, cookies are processed on the basis of consent in accordance with Art. 1 letter a GDPR. This means that you must give your consent in advance to the processing and use of these cookies. For this purpose we use a so-called consensus management tool (often also called “cookie banner”), which allows you to change your decision.

The following cookies are used by us:

Cookie

Type

Purpose

Legal basis

Storage duration

Bordlabs-cookie

Essential cookie

Serves to store cookie settings

Art. 6 para 1 lit. f) GDPR

1 year

_pk_id

Essential cookie

Own cookie for website usage statistics via Matomo

Art. 6 para 1 lit. f) GDPR

1 month

_pk_ses

Essential cookie

Own cookie for website usage statistics via Matomo

Art. 6 para 1 lit. f) GDPR

session

_pk_ref

Essential cookie

Own cookie for website usage statistics via Matomo

Art. 6 para 1 lit. f) GDPR

6 months

NID

Third-Party-Marketing-Cookie; Google

Storage of the unique ID to assign preferred settings

Art. 6 para 1 lit. a) GDPR

6 months

IDE

Third-Party-Marketing-Cookie; Google DoubleClick

To register and report the user’s actions on the website after displaying or clicking on one of the provider’s ads, with the purpose of measuring the effectiveness of advertising and displaying targeted advertising for the user.

Art. 6 para 1 lit. a) GDPR

1 month

lang