EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG (hereinafter referred to as "we" or "EUROBAUSTOFF") operates the EUROBAUSTOFF Supplier Portal. Suppliers can log in to our Supplier Portal to send us invoice and article data, as well as retrieve information from the cooperative. We provide this Supplier Portal for these purposes. Respecting your personal rights is a given for us. Below you will find out how we handle your personal data in the Supplier Portal, which personal data is processed for which purposes in the Supplier Portal, and what rights you have in this regard.

1. Scope and Contact Information

This privacy policy applies to the Supplier Portal operated by EUROBAUSTOFF, which you can access at lieferantenportal.eurobaustoff.de (hereinafter referred to as the "Supplier Portal"). This privacy policy does not apply to other websites of EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG or the websites of other service providers to which the Supplier Portal may refer via a link.

The responsible party within the meaning of the EU General Data Protection Regulation (GDPR) is: EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG
Daimlerstraße 5d
76185 Karlsruhe
info@eurobaustoff.de
www.eurobaustoff.com

You can reach our data protection officer at datenschutz@eurobaustoff.de or by mail at the above address, c/o Data Protection Officer.

2. Obligation to Provide Data and Purpose of Processing

You are not obliged to use the Supplier Portal with regard to EUROBAUSTOFF. However, this obligation may arise from your employment relationship (employment contract) with your employer. If you do not provide the data, this may result in disadvantages for your employer as a supplier of EUROBAUSTOFF, as well as labor law consequences for you.

The processing of personal data is carried out for the purpose of handling cooperation with our suppliers at a centrally accessible online location.

3. Processing Your Registration Data

Through the Supplier Portal, we process the data you enter during registration and may update later. This includes your salutation, first name, last name, position, email address, and phone number.

The legal basis for processing your personal data in the Supplier Portal is derived from Art. 6 para. 1 lit. f GDPR and our legitimate interest in providing a Supplier Portal for cooperation with EUROBAUSTOFF.

Your data will be stored in the Supplier Portal as long as you use the Supplier Portal on behalf of our supplier, which is your employer. After that, it will be deleted. Due to technical reasons, individual data records in backups created regularly from the Supplier Portal data often cannot be deleted. Therefore, your data, which is deleted in the productive Supplier Portal, may remain in backups for up to ten (10) years.

Important Note: TYPO3 does not delete data records in the database but only marks them as deleted. This also applies to user data records.

4. Processing Portal Usage Data

We automatically collect and record the following data during each visit to the Supplier Portal:

• Country of origin
• Requesting domain
• Web browser used
• Operating system used
• Notification of successful and unsuccessful retrieval
• Entry and exit pages
• Transferred data volume
• Date and time of the request
• Name of the requested file
• IP address of the requesting computer

Our legitimate interest in operating and securing a Supplier Portal forms the legal basis for the processing (Art. 6 para. 1 lit. f GDPR).

The data is stored on our web server in log files by default. The storage duration for the IP address is four (4) weeks, after which it is automatically deleted. Note: The deletion of server logs after four weeks must be implemented.

5. Recipients of the Data

Recipients of your personal data processed in the Supplier Portal are EUROBAUSTOFF and our hosting service provider (our subsidiary Infokom GmbH).

No further transfer, sale, or other transmission of your personal data to third parties beyond Section 5.1a takes place.

6. Use of Cookies

In the Supplier Portal, we use so-called cookies. These are small text files stored on your device (PC, smartphone, tablet, etc.). There are cookies that are deleted from your drive (hard disk, solid-state disk, flash memory, etc.) immediately after the browser session ends (so-called session cookies); we do not currently use such session cookies. Other cookies remain longer on your device and allow us to recognize your device on your next visit (so-called permanent cookies).

6.1 Technically Necessary Cookies

We use session cookies resulting from the user login and a permanent cookie to store the consent decision. Both cookies are technically necessary. Without them, the login would not work, and the consent query would appear on every visit.

As soon as you visit the Supplier Portal, you receive a notice about the use of cookies. Regardless of this notice, the following functionally necessary cookies are set:

• cookie_consent: This cookie stores the confirmation of the cookie notice. It controls the display of the notice. No personal data is stored in the cookie.
• fe_typo_user: This is a session cookie that ensures the current connection with the server. An IP address for recognizing the visitor is not stored.

6.2 Cookie Consent Solution

Which cookies are set depends on the cookie consent solution. Ours is called "Mindshape Cookie Consent". The cookie to store the consent decision is called cookie_consent.

When you visit the Supplier Portal with a browser for the first time, you are prompted to make cookie settings. The same happens if you visit the Supplier Portal again later and it is systemically detected that no cookie settings for the Supplier Portal are present in your browser (e.g., because you have deleted cookies or are using a different browser). Depending on the selection you make in the cookie settings, only the functionally necessary essential cookies or also other cookies are stored on your device. For more information on which cookies we use, for how long, and for what purposes, please click on "https://lieferantenportal.eurobaustoff.de/datenschutz Edit Cookie Settings" in the Supplier Portal (see Section 6.5e).

We only store other than essential cookies on your device after you have previously consented to the use of such cookies in the cookie settings. You can withdraw your consent at any time with effect for the future by either clicking on "https://lieferantenportal.eurobaustoff.de/datenschutz Edit Cookie Settings" in the Supplier Portal, editing your cookie settings, and deselecting our cookies, or deleting the Supplier Portal cookies in your browser. The processing of your personal data, which we carried out based on your consent until your withdrawal, is not affected by the withdrawal and remains lawful.

If you use filters in your browser that process cookie consent solutions automatically, you may need to turn off such filters to display the cookie information and manually edit the cookie settings (e.g., withdraw given consents).

The legal basis for our use of functionally necessary essential cookies is our legitimate interest in making our Supplier Portal user-friendly and functional (Art. 6 para. 1 lit. f GDPR; § 25 para. 2 no. 2 TTDGS). For the use of additional cookies, your consent given in the cookie settings forms the legal basis (Art. 6 para. 1 lit. a GDPR; § 25 para. 1 TTDGS).

In the security settings of your browser, you can delete the stored cookies at any time, as well as restrict or prohibit the acceptance of cookies.

If you click on a link in the Supplier Portal, third-party cookies may be used without our intervention and without our express warning. You can also delete these stored cookies at any time in the security settings of your browser, as well as restrict or prohibit the acceptance of cookies.

7. Use of Matomo

In the Supplier Portal, we use the open-source web analytics service Matomo (formerly Piwik). Matomo is provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, contact@innocraft.com.

Matomo uses cookies as described in Section 6, which are stored on your computer and allow us to analyze your use of the Supplier Portal. The information generated by the cookies about your use of the Supplier Portal is stored on our server. Your IP address remains anonymized, so we cannot identify you as a user. Note: AnonymizeIP is activated.

You can withdraw your consent to the use of Matomo at any time with effect for the future as described in Section 6 by either clicking on "https://lieferantenportal.eurobaustoff.de/datenschutz Edit Cookie Settings" in the Supplier Portal or deleting the Supplier Portal cookies in your browser.

Note: Matomo data is deleted after 30 months an 3 days.

8. Your Rights as a Data Subject

As a data subject, you have various rights under the GDPR that you can exercise against us.

• Right to Information: You have the right to request information about your personal data processed by us at any time.
• Right to Rectification: You can request the correction of inaccurate or completion of your personal data stored by us.
• Right to Erasure: You can request the deletion of your personal data stored by us.
• Right to Restriction of Processing: You can request the restriction of the processing of your personal data.
• Right to Object: You have the right to object to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR at any time for reasons arising from your particular situation.
• Right to Data Portability: You have the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller.

To exercise your rights, you can contact us at any time. We have summarized our contact details at the beginning of this privacy policy for you.

Changes to this Privacy Policy

We reserve the right to change this privacy policy at any time with effect for the future. The current version of the privacy policy is always available on our Supplier Portal.