Protecting your personal data has the highest priority for us and is taken into account in all our business processes. The privacy statement below provides you with a detailed overview of how your personal data is processed.
"Personal data" means all information that relates to a natural person who has been or can be identified. This privacy statement explains the type and scope of collecting personal data as well as the purposes for which your personal data is collected at Daimler Truck Group and how we handle your data. In addition, you will learn about your rights regarding the processing of your personal data.
The following information applies to all natural persons whose personal data is stored in connection to the supplier business relationship (e.g. authorized representatives).
1. Who is responsible for processing my data, and whom can I contact with regard to data protection?
The data controller for the processing of personal data described below depends on your contracting partner, and may be:
Daimler Truck AG
Fasanenweg 10
70771 Leinfelden-Echterdingen
E-mail: procurement-dataprotection@daimlertruck.com
In addition, the aforementioned entities may be jointly responsible for certain processing of personal data.
The contact details for the Chief Data Privacy Officer are as follows:
Daimler Truck AG Chief Data Privacy Officer
HPC DTF2B
70745 Leinfelden-Echterdingen Deutschland
E-Mail: dataprivacy@daimlertruck.com
For any questions regarding the processing of reference requests or the use of personal data in connection with the reference request, please contact referenzanfragen@daimlertruck.com.
2. Where does my data come from and what data is processed?
We process personal data ("data") in accordance with the principles of data protection law only to the extent required and permitted to us under the applicable legal provisions, or to the extent we are obligated to engage in such processing.
2.1. General data from the business relationship
We process the data you provide to us as part of the reference request via the Daimler Truck Supplier Portal (Reference Request | Daimler Truck Supplier Portal). This data can be divided into mandatory and voluntary information:
Mandatory information:
- Name of the supplier, business address, and supplier number
- Contact details of the supplier’s representative, including first name, last name, business phone number, and email address
- Name of the responsible contacts in Purchasing, Technical, and Development departments at DTAG
- Duration of the business relationship between the supplier and DTAG
- Description of the reference request
Voluntary information:
- Upload of files
- Department of the contact person (Purchasing and responsible/technical department)
3. What are my data used for (purpose of processing) and what is the legal basis?
Any use of Daimler Truck as a customer reference requires an individual review by Daimler Truck AG. Approval can only be granted based on specific information regarding the planned publication. General or blanket approvals without detailed publication information are therefore not possible. The personal data will be collected and sent once to the following email address: referenzanfragen@daimlertruck.com. The data will not be stored on the Daimler Truck Supplier Portal. Further processing of the reference request will be carried out exclusively via email.
3.1. Processing with regards to the business relationship
We process your above-mentioned personal data as part of handling the submitted reference requests (Article 6(1)(b) GDPR). The legal bases for data processing are divided into mandatory and voluntary information. Voluntary information is processed based on your consent (Article 6(1)(a) GDPR). Mandatory information is processed insofar as it is necessary for the performance of a contract (Article 6(1)(b) GDPR).
3.2. Processing due to a legitimate interest
In addition, we process your personal data if required to safeguard the legitimate interests of Procurement units or third parties (Article 6 (1) lit. f GDPR). Managing the contractual relationship, we have a legitimate interest in processing data to conduct credit checks and pursue claims, including the use of collection companies.
4. Will my data be forwarded?
As part of the reference request process, personal data is shared within DTAG, including subsidiaries of the Daimler Truck Group. Processing is carried out solely for handling reference requests in order to protect our legitimate interests or to comply with legal requirements.
5. Will my data be sent to a third country or an international organization?
No.
6. How long will my data be stored?
The retention period for your personal data depends on the type of data and the respective purpose of processing. A distinction is made between mandatory and voluntary information. Mandatory information is stored for as long as we need it to process the reference requests.
Voluntary information is stored based on your consent (Article 6(1)(a) GDPR) and can be revoked at any time. In the event of a revocation, the affected data will be deleted without delay.
To request a revocation, you can contact us via email at procurement-dataprotection@daimlertruck.com.
7. What rights do I have as a data subject?
You have extensive rights regarding the processing of your personal data. It is our special concern to familiarize you with these rights:
- Right of access: You have a right to information regarding the data stored with us, especially regarding the purpose of the processing and the duration of the data storage (Article 15 GDPR).
- Right to rectification of inaccurate data: You have a right to demand from us the immediate correction of your personal data, should it be inaccurate (Article 16 GDPR).
- Right to erasure: You have the right to demand that we delete your personal data. The criteria allow you to demand the deletion of your personal data if we, for instance, no longer need the personal data for the purposes for which it was collected or otherwise processed, if we unlawfully process the data, or if you have rightfully objected to the use of your data, have revoked your consent to the same or there is a legal obligation to delete (Article 17 GDPR).
- Right to restriction of processing: You have the right to demand a restriction of the processing of your data. This right especially applies for the duration of the review if you have disputed the accuracy of your personal data, as well as in the case that, for an existing right to deletion, you request restricted processing instead of erasure. Furthermore, there will be restricted processing if the data is no longer required for our purposes, but you still need the data in order to assert, exercise or defend legal rights, as well as if the successful assertion of an objection is in dispute between you and us (Article 18 GDPR).
- Right to data portability: You have the right to receive the personal data you have provided us with in a structured, common, machine-readable format from us (Article 20 GDPR), provided said data has not already been deleted.
- Right of objection: You have the right, for reasons arising from your specific situation, to object at any time to the processing of personal data about you (Article 21 GDPR). We will no longer process your personal data unless we can prove compulsory, legitimate reasons for processing that outweigh your interests, rights and freedoms, or if the processing is required to assert, exercise or defend against legal claims.
If you wish to object to the processing of your personal data, send us an e-mail or send a written notice addressed to the aforementioned data controllers (under section 1).
8. Right to lodge a complaint with the supervisory authority
You have the option of contacting the data protection controller specified above or a data protection supervisory authority if you come to the conclusion that processing the personal data concerning your person violates the General Data Protection Regulation.