Privacy statement

This privacy policy informs you how DigiB (‘we’) collects and processes your personal data.

Contact details of the controller

You will find the respective data controller for each specific part of our website in the respective Imprint https://digib.com/contact-us/.
DigiB is an affiliated company of Brenntag. For data processing regarding marketing, sales and customer relations, as well as market-specific services in the individual markets, the respective national sales company of Brenntag are generally responsible. Contact details of Brenntag’s regional offices can be found on www.brenntag.com. You can also get in contact with them by using the contact details of your Brenntag business contact person.

Data collection, processing and purposes of use

When we do business with you or the company you work for, we collect and use your information as described in this policy. If not mentioned otherwise, we have received your data from you directly, your employer or from publicly available sources. We have set out below a description of the ways we use your personal data and for which purposes we process your data.

New customer contacts

We record your personal data to be able to provide you our services and products. We may collect and process your data such as your name and surname, business address, or business email address to execute the contract or your request. As we only do business with companies, we only process your business contact details.

Order delivery and contract fulfilment

We process personal data in order to process and deliver your order. This includes managing the payments, fees and charges, but also collecting and recovering money owed to us. In order to achieve this, we process your name, surname, business contact details like email and business address, financial, company bank account, and transaction information.

Business relationship

We want to maintain relationships with our potential or current customers, as well as all other business partners, suppliers and service providers we are working with or who are interested in our business. To manage this, we need to process your name, surname, and business contact details like email and business address and store it in our CRM system. We will also update our records constantly to be able to contact you.

Improving our products and services

Your feedback is crucial for improving our products and services. We may therefore ask you to leave a review or participate in a survey about our products and services. For this purpose, it is necessary to process your name, surname, and business contact details like your email and business address.

Prize draws and competition

To enable you to partake in a prize draw or competition, we process your prename, surname, and business contact details like your email and business address.

Newsletter

If you want to receive a newsletter from us, we will add you to the respective mailing list in compliance with the applicable law. To send you this newsletter we process your contact details, like prename, surname and email address. The newsletter is subscribed by, and with the help of, a double opt-in process, so that we can make sure that you are the right recipient. Double opt-in means that after filling in our form for signing in for our newsletter we will send you an e-mail to the email address you filled in. You need to follow the link to complete your subscription. The time and IP address of your confirmation will be stored in order to prove that you subscribed to the newsletter. Every time you receive our newsletter, there is the possibility to opt-out of our mailing list resulting in deletion of your personal data from our mailing list.

To serve personalized advertising to you, DigiB does not share your information with advertisers without your consent. DigiB allows advertisers to choose the characteristics of users who will see their advertisements, and DigiB may use any of the non-personally identifiable attributes DigiB has collected to select the appropriate audience for those advertisements. When you click on or otherwise interact with an advertisement, there is a possibility that the advertiser may place a cookie in your browser and that your attributes meet the criteria the advertiser selected.

Applicants

When you apply for a job on digib.com, we process your data for the purpose of our application procedure. We will always collect your name and contact details. We need this information to contact you during the application process.
If you provide us with your CV, portfolio and other relevant information, the data will only be used for the hiring purposes.
We may also collect your personal data from the publicly accessible sources (e.g. professional networks, if they are relevant for our hiring process.
Unless we expressly point this out or otherwise agreed, we do not use automated decision-making in the hiring process.

Legal bases of processing

We have set out below a description of the lawful bases we rely on when we process your data. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need more details about a specific lawful ground.
We process your data on the basis of a consent if you have given us your consent to process your data (e.g. for participation in a survey, for subscription to newsletters). Giving us your consent is always voluntarily. Furthermore, you may at any time withdraw your consent for future processing for that purpose. This has no influence on the lawfulness of processing activities in the past.
We process your data on the basis of a contract (e.g. employment contract), if we are in a contractual relationship with you or prior to enter into a contract.
We are entitled to process your data in case the processing of your personal data is necessary for the compliance with our legal obligations (e.g. for the retention of data).
We process personal data for the purposes of maintaining our legitimate interests. We process your data in order to do business with you. Therefore, we need to process the data necessary to deliver our products, provide our services and recording our business contacts. In addition, we also process data in order to maintain the functionality of our websites and IT systems. Besides our legitimate interests, we consider other aspects to ensure the balancing of interests required in each case, such as the type and nature of personal data, the technical measures of processing as well as the interest and the fundamental rights and freedoms of the respective data subject.

Cookies

Cookies are small text files that can be stored on your hard drive when you visit a website. These text files are generated by the web server with which you have connected via your web browser (e.g. Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, Apple Safari) and then sent to you. We use cookies on our websites, such as but not limited to cookies to document the frequency of visits to our websites.
Most web browsers are preset to automatically accept cookies. However, you may deactivate the creation and storage of cookies or set your web browser so that it notifies you as soon as cookies are intended to be sent. Please use the help function in the menu bar of your web browser or operating system for further guidance.
Please note that if cookies are deactivated, you may not be able to use the full functionality of our website.

Security

DigiB implements reasonable physical, technical and administrative security control to protect your Personal Data against loss, misuse, unauthorized access, disclosure, alteration or destruction. Your data will be stored in a secure operating environment.
However, DigiB cannot guarantee the security of information on or transmitted via the internet as it relies on the security of the system you have used in communication with DigiB systems. DigiB uses measures to enhance security, such as analyzing account behavior for fraudulent or otherwise anomalous behavior and attempts to encrypt that information to protect against eavesdropping.

Third parties that we work with

DigiB may share the information collected from you with third parties for further processing to provide a safe, efficient and customized experience. DigiB uses various ways to achieve this objective:
To the extent necessary to provide products, each entity of the affiliated Brenntag group may share your personal data within the affiliated group, but also with agents, contractors or partners of Brenntag in connection with services that these individuals or entities perform for or with Brenntag.
These agents, contractors or partners are restricted from using this data in any way other than to provide services for DigiB, or for the collaboration in which they and DigiB are engaged (e.g. some of our products are developed and marketed through joint agreements with other companies). DigiB may, for example, provide your information to agents, contractors or partners for hosting our databases, data processing or mailing you information that you requested.
Where data processing is to be carried out by agents, contractors or partners on behalf of DigiB, our contractors provide sufficient guarantees to implement appropriate technical and organizational measures in such a manner that data processing will meet the requirements of the data protection law.
In order to respond to legal requests and prevent harm DigiB reserves the right to share your data to respond to duly authorized data requests of governmental authorities, or where required by law. DigiB shall never sell your Personal Data to third parties, such as marketers, without your explicit consent. DigiB do not provide any personal data to “people finder,” “public directory” or “white pages” sites. The collection of personal data by — and the disclosure to — governmental institutions and authorities will be carried out only on the basis of specific legal provisions.
In the application process, we use the recruitment software Homerun to support our online hiring process. Homerun has its own privacy policy available and involves third-party tools which use cookies.

Your rights

DigiB shall honor your rights in accordance with legal obligations and subject to the exemptions defined in applicable laws and regulations.
These rights are:
1. Your right to access your Personal Data;
2. Your right to correct or amend or update your Personal Data;
3. Your right to be forgotten (right to erasure);
4. Your right to obtain Personal Data in a portable form (right to data portability);
5. Your right to restriction of processing, according to the regulation, and;
6. Your right not to be subject to a decision based solely on automated processing, including profiling.
7. Your right to withdraw your consent for future processing. This has no influence on the lawfulness of processing activities in the past.
You have the right to object to processing of your personal data for purposes of direct marketing without stating reasons. If we process your personal data for the purposes of our legitimate interests, you may object to such processing for reasons arising from your particular situation. We will then no longer process your personal data, unless we can prove compelling reasons for processing worthy of protection. This might override your interests, rights and freedoms or the processing serves the enforcement, exercise or defense of legal claims.
These rights are not exhaustive and may depend on certain legal conditions and exceptions.
If you wish to exercise any of these rights, please contact us: privacy@digib.com. You are also allowed to contact the Group Data Protection Officer (contact details below). We will respond to your request within 30 days after we received the request. After we received the request, we will give you further instructions in order to verify your identity in an appropriate manner. We handle your personal data carefully and want to be certain that we are providing information to the right person.
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work, or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the law.

Data transfer to third countries

DigiB may disclose personal data to overseas recipients after complying with applicable privacy legislation. DigiB may also store personal data in a ‘cloud’. In cases when DigiB needs to transmit your personal data, DigiB shall preferably transmit your data only within countries of the European Economic Area (EEA) and to or from countries that provide adequate protection, as confirmed by the European Commission. For more information, see European Commission, “Commission Decisions on the Adequacy of the Protection of Personal Data in Third Countries.”
In other cases, the transmission will be done preferably according to the requirements of applicable regulations with appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available or for as long it is legally required. Finally, if these options were not possible, the data transfers we have to make will be in accordance to the provisions of Article 49 GDPR, for example with the explicit consent of the data subject.

Automated decision-making, including profiling

DigiB does not use automated decision-making, including profiling in the meaning of Art. 4 No. 4 and 22 GDPR.

Deletion process

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal accounting or reporting requirements or due to other legal storage obligations or to defend possible legal claims.
In principle, your data will be stored and processed during the application process for as long as is necessary for the application. If the evaluation is positive, the data will be further processed in the personnel department. In the event of a negative evaluation by the decision-maker, your data will be stored for maximum 4 weeks after rejection in order to comply with legal requirements, and then deleted unless otherwise agreed with you.
If you have given us consent for retaining your personal data after rejection, we will save your data for potential future job-openings. In this case, we will retain the data for the maximum of 1 year before we delete it.

Contact details of the data protection officer

DigiB B.V. is an affiliated entity of Brenntag, which has appointed a Group Data Protection Officer who is located at the Brenntag Headquarters in Germany together with an international Team of Local Data Protection Coordinators, thus you can get in contact in the language of the respective region. For data protection questions at DigiB, please contact: privacy@digib.com.
You may also contact the Group Data Protection Officer directly:
Group Data Protection Officer,
Messeallee 11,
45131 Essen,
gdpo@brenntag.de

External references & links

DigiB’s websites may have links to other sites that are owned and maintained by other organizations. These links are outside DigiB’s scope and provided for the convenience and informational purposes only. They do not constitute any matter related to or sponsored by DigiB Please contact the external site for answers to questions regarding its content and their privacy settings & policy.

Last update on: 24th August, 2020