Information for company representatives, who have been asked to register in order to attend a tender of SCHOTT.
Processing of your personal data by SCHOTT
Thank you for your inquiry. We take the protection of your data seriously and would therefore like to inform you in the following about our use of your personal data.
I. Name and address of the responsible party
SCHOTT AG is responsible for the careful handling of your personal data.
II. Name and address of the Data Protection Officer
Our Data Protection Officer is happy to answer your questions about your personal data.
III. Scope of processing of personal data
1. Purpose of data processing
Your personal data is stored by SCHOTT in our eProcurement System “Schott Procurement Office – SPO” to enable SCHOTT to systematically process tenders. It is collected, processed and used confidentially exclusively for processing your participation in the specific tenders that you were invited to join in accordance with the valid data protection regulations.
2. Legal basis for data processing
The legality of the processing results from Article 6 (1) lit. b GDPR, as this is necessary for the fulfillment or initiation of a contract.
IV. Recipients or categories of personal data
The recipients for the storage of your personal data may be the following parties:
- Members of the SCHOTT Purchasing organization, who invited you to the tender
- Members of the admin team of SPO and the system provider
- Employees of other departments of SCHOTT, as far as it is necessary for processing the tender.
- Service providers, who are involved as consultants in the tender.
V. Transfer of personal data to a third country or international organization
Your personal data will only be transmitted if this is necessary for the general contact inquiry (Article 49 (1) lit. b GDPR). SCHOTT will not transfer your personal data to an international organization.
VI. More information on SCHOTT’s processing of your personal data
SCHOTT will provide you with the following additional information at the time your personal data is collected in order to ensure fair and transparent processing:
1. Duration of storage
A systematic procedure for the removal of personal data is achieved through a deletion concept introduced for this purpose. The latter may be limited to the lawful removal of personal data or may also include databases without personal reference. Your personal data will be automatically deleted as soon as no interaction or modification of the data records has taken place with this data for three (3) years. Deletion is checked on a regular basis every year.
2. Your rights regarding the protection of your personal data
If your personal data is processed, you are affected by the GDPR and you have the following rights vis-à-vis SCHOTT:
2.1. Right to information
In principle, it is always up to you what personal data you make available to us.
Of course, you may also make use of your right under Article 15 GDPR and request confirmation from SCHOTT in writing, proving your identity, as to whether and what of your personal data we will process.
2.2. Right to correction
You have the right to review and correct all your personal data stored in our eProcurement system.
2.3. Right to deletion
You can, of course, request that we delete your personal data at any time. Your data will be automatically deleted from the system at the end of the retention periods mentioned under VI No. 1 above.
2.4. Right to limitation of processing
You also have the right, under the conditions of Article 18 GDPR, to apply for a restriction on the processing of your personal data.
3. The right of objection and rectification
As the data subject, you have the right to revoke the processing of your personal data at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation. You will, of course, be informed of this before giving your consent.
Revocation should be sent to the following address:
In the event of revocation, all of your personal data will be deleted upon receipt of the revocation declaration.
4. Right of appeal
Without prejudice to any other administrative or judicial remedy, you as the data subject shall have the right of appeal to a supervisory authority, particularly in the Member State where you reside, work or suspect an infringement of this regulation, should you consider the processing of your personal data contrary to the law.
5. Automated decision making including profiling
No automated decision making including profiling takes place in our eProcurement system.
You can find the handling of your personal data on our website here.