Processing of personal data


This data protection information pursuant to Art. 13 GDPR applies to the collection of personal data by afb Application Services AG with the exception of the collection of personal data via the websites of afb Application Services AG ( and This information therefore applies in particular to personal data communicated to afb Application Services AG by post, by telephone, by fax or by email.

Note: For the collection of personal data by afb Application Services AG via its websites ( and a separate data protection declaration of afb Application Services AG applies (



The responsibility for the processing of your personal data lies with

afb Application Services AG
Landsberger Straße 300
80687 München

Phone: +49 (89) 78000-0
Fax: +49 (89) 78000-590



afb Application Services AG
attn. Data Protection Officer
Landsberger Straße 300
80687 München

Phone: +49 (89) 78000-0
Fax: +49 (89) 78000-590



We collect, process and use personal data when you provide us with this data, and we are authorised to collect, use and process it based on your consent or on the basis of a legal requirement.

Personal data is any information that relates to an identified or identifiable natural person (hereinafter referred to as "data subject"). Personal data are:

Name, first name, occupation / position, employer, address, telephone number, marital status, date of birth, gender, e-mail address

The above-mentioned personal data will be processed for the following purposes:

  • communication on products, services and projects, e.g. to process inquiries or to create individualised offers
  • initiation, planning, execution and administration of the (contractual) business relationship between afb Application Services AG and its customers, suppliers and other business partners
  • invitation to events and specialist events, conducting surveys, marketing campaigns, market analyses or similar actions
  • providing advertising for new products and services (consent required)
  • maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity or other criminal or intentional acts
  • complying with legal requirements (such as safekeeping obligations stipulated by tax and commercial law) or existing obligations to conduct compliance screening (to prevent white-collar crime or money laundering)

The processing of personal data is necessary for the achievement of the above-mentioned purposes, including the execution of the (contractual) business relationship with the business partner. Legal basis for the data processing is – as far as not otherwise specified – Art. 6 (1) (b) and (f) of the GDPR or the expressly granted consent (article 6 (1) (a) of the GDPR) of our customers, suppliers and other business partners.

The data you submit to us will be treated confidentially. Your personal data will not be sold to third parties or otherwise marketed by us.

In principle, the data will not be made available to third parties for use, unless you have given your consent to this or we are legally entitled or obliged to pass on this data.

We transmit personal data to courts, tax authorities and regulators to the extent to which this is necessary and permitted by law in order to comply with applicable law or to assert, exercise or defend any legal claims. However, we take all measures to ensure appropriate and adequate safeguards for the protection of your personal information.



Insofar as no explicit retention period is specified during the collection (e.g. as part of a declaration of consent), the personal data are deleted insofar as these are no longer required to fulfil the purpose of the storage, unless there are statutory retention requirements (e.g. commercial and taxation retention requirements) against a deletion.



As a rule, personal data that you provide us with will only be processed by afb Application Services AG. However, in individual cases, fulfilling our tasks may require that we transfer the personal data stored about you to our service providers, tax authorities, other authorities.

Transmission to service providers in the United States will only occur if the purpose requires this, and then exclusively on the basis of the standard contractual clauses in the currently valid version, as well as in compliance with further guarantees. This ensures that your data will also be processed in compliance with data protection regulations in the USA.

Eine Übermittlung an Dienstleister in den USA erfolgt nur, wenn die Zweckfestlegung dies erfordert und sodann ausschließlich auf der Grundlage der Standardvertragsklauseln in der jeweils gültigen Fassung, sowie zusätzlich unter Einhaltung weiterer Garantien. Dies gewährleistet, dass Ihre Daten auch in den USA datenschutzkonform bearbeitet werden.



  • Right to information: According to Art. 15 GDPR you can obtain information about your personal data processed by us. You may also request that we provide you, free of charge, with a copy of the data that is the subject of the processing.

  • Right to rectification: If the information concerning you should no longer be correct, you can request a correction under Art. 16 GDPR. If your data is incomplete, you can request it to be completed.

  • Right to deletion: Under the terms of Art. 17 GDPR you may request the deletion of your personal data. We have also implemented technical measures to notify all recipients of your data, as well as third parties, about your request for deletion or for the right to rectification and restriction of processing, if we have disclosed or made public your data to them. All links, copies and replications of your personal data will be deleted. Your claim to cancellation depends, among other things, on whether the data concerning you are still needed by us to fulfil our statutory duties.

  • Right to restriction of processing: Within the framework of the provisions of Art. 18 GDPR you have the right to demand a limitation of the processing of the data concerning you.

  • Right to data portability: In addition, in accordance with Art. 20 GDPR you may request that you obtain the data you have provided to our company in a structured, common and machine-readable format and you have the right to transfer this data to another person responsible without interference from the person responsible to whom the data was provided.

  • Right to objection: According to Art. 21 GDPR you have the right, at any time, to object to the processing of data relating to you for reasons that arise from your particular situation. The revocation of consent does not make data processing in the past illegal. In addition, you are entitled to a right of objection at any time and with effect for the future (Art. 21. (2) GDPR) in respect of direct marketing as well as profiling in connection with advertising.

  • Revocation of consent: If the data processing is based on your consent, you also have the right to revoke your consent to data processing in accordance with Art. 7 (3) GDPR at any time, without giving reasons with effect for the future. The revocation of consent does not make data processing in the past illegal.

  • Right to appeal: If you believe that we have not complied with data protection regulations when processing your data, you can direct your complaint to us.

    The contact details of the data protection officer of our company: refer to III.

    You also have the right to complain to the relevant regulatory authority about the processing of data by our company.

    The data protection authority responsible for our company is:

    Landesamt für Datenschutzaufsicht
    Promenade 27 (Schloss)
    91522 Ansbach, Germany


Status of this information: 09.04.2020