1. Scope and controller

This Privacy Notice applies to the processing of personal data of business contacts and representatives of customers, suppliers, and other contractual partners of Star Charge Europe GmbH (“Company”, “we”, “us”).

Controller

Star Charge Europe GmbH

Am Prime Parc 17, 3.OG

65479 Raunheim

Germany

[Dataprivacy.group@wbstar.com]

The Company processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws.

2. Categories of personal data

We process the following categories of personal data relating to business contacts and representatives of contractual partners:

• Name
• Job title / position
• Business contact details (e.g. business email address, business telephone number)
• Company / organization
• Business-related correspondence and communication content
• Contract-related information (to the extent it contains personal data)

We do not process sensitive personal data within the meaning of Article 9 GDPR in a B2B context.

3. Purposes of data processing and legal basis

Personal data of business contacts is processed for the following purposes:

• Establishment, performance, and management of business relationships
• Communication with customers, suppliers, and other contractual partners
• Contract initiation, execution, administration, and documentation
• Sales, consulting, and customer support activities
• Internal administration and organizational purposes
• Compliance with statutory, regulatory, and contractual obligations

The processing is based on the following legal bases under Article 6 GDPR:

• Article 6(1)(b) GDPR– performance of a contract or pre-contractual measures
• Article 6(1)(f) GDPR– legitimate interests, in particular business communication and relationship management
• Article 6(1)(c) GDPR– compliance with legal obligations (where applicable)

Where processing of personal data cannot be based on the legal grounds set out above, the Company will obtain the data subject’s consent in accordance with Article 6(1)(a) GDPR, where required.

4. Recipients of personal data

Personal data may be disclosed to:

• Internal departments responsible for sales, contract management, and administration
• Group companies, where necessary for internal administrative purposes
• External service providers acting as processors (e.g. IT or administrative service providers), subject to appropriate contractual safeguards.

5. International data transfers

Where personal data is transferred to recipients outside the European Union or the European Economic Area (in particular to group companies located in third countries), such transfers are carried out in accordance with the GDPR and are protected by appropriate safeguards, in particular adequacy decisions by the EU Commission pursuant to article 45 GDPR and/or EU Standard Contractual Clauses (SCCs) pursuant to Article 46 GDPR.

6. Retention periods

Personal data of business contacts is retained only for as long as necessary for the purposes described above or as required by applicable statutory retention obligations (e.g. tax, accounting or other legal requirements). Where no longer required, the data is deleted or anonymized in accordance with the Company’s internal deletion procedures. For more information please refer to our Deletion and Retention Policy.

7. Data subject rights

Business contacts have the following rights under the GDPR, subject to the statutory requirements:

• Right of access (Article 15 GDPR): You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification (Article 16 GDPR): You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure (Article 17 GDPR): Also known as the “right to be forgotten”, you may request deletion of your data where no longer necessary or where processing is based on consent and you withdraw it.
• Right to restriction of processing (Article 18 GDPR): You may request that processing of your data be limited under certain conditions.
• Right to data portability (Art. 20 GDPR): You can receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
• Right to object to processing based on legitimate interests (Article 21 GDPR): You can object to processing based on legitimate interests, especially for direct marketing purposes.
• Right to withdraw consent (Art. 7(3) GDPR): If processing is based on your consent, you can withdraw it at any time.
• Right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR): If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

Requests to exercise these rights can be addressed to the contact details set out above.

8. Obligation to provide data

The provision of personal data is generally necessary to establish and maintain a business relationship. Failure to provide such data may result in our inability to communicate with you or to enter into or perform a contractual relationship.

9. Privacy Notice update

This Privacy Notice may be updated from time to time to reflect changes in legal requirements or processing activities. The current version will be made available upon request.