Last updated: March 2022
Click here for SCHUFA Notification (according to Art. 14 GDPR).
Data privacy and data security for our contractual partners and for consumers have always had high priority for our company. For this reason the protection of your personal data during all our business processes is very important and of special concern to us. We respect personal privacy as a matter of course. As a rule our website can be used without the need for personal data to be entered. However, we may need your personal data to be able to provide our services. When we do this, we collect, process and use personal data to the extent allowed by law and necessary for handling or if you have given your consent.
In our function as controller we, SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany, take all the measures required by law to protect your personal data. You can contact our company data protection officer at the above address c/o Abteilung Datenschutz or by e-mail at email@example.com.
Whenever you visit our website the browser you are using on your terminal device automatically sends information to the server of our website which is then stored temporarily in a so-called log file. We have no influence over this. The following information is then recorded without any action on your part and is stored until it is erased automatically:
We use the IP address of your terminal device as well as the other data listed above for the following purposes:
The data are stored for a period of 31 days and then erased automatically. We also use so-called cookies, tracking tools and social media plug-ins for our website. The precise processes which are used and how your data are used are explained in detail in chapter 7.
We collect, process and use personal data to the extent that this is necessary to deal with your request. Personal data will be collected, processed and used by us to the extent necessary to process your request, for example to the extent necessary to process your request to initiate and conduct a conciliation procedure. We also use your personal data as part of this process to update our SCHUFA data inventory. More information about SCHUFA procedures can be found here.
We collect, process and use personal data as necessary to address your inquiry (such as to enable you to access the SCHUFA partner portal) and for the purpose of transferral into our CRM system or the user administration area of the SCHUFA4Business partner portal. We also use your data for webinar registration so we can contact you by postal mail, phone or e-mail regarding SCHUFA products and services of interest and products of our business partners. We additionally use your data gathered in this process to update the SCHUFA database. For further information on the SCHUFA process you will find here.
We collect, process and use personal data where this is necessary in order to provide information published by our company or to make contact with you as requested. We also use your data to inform you by e-mail or telephone about company innovations, such as by sending press releases. When we make contact with you we always bear in mind the relevance of our message and the key topic fields of your journalism.
In the framework of sweepstakes, we use your data to provide information to winners and to advertise our offers. Detailed information is available in any conditions of participation in each sweepstake.
We collect, process and use personal data to the extent that this is necessary to deal with your application and or to make contact with you as requested.
3.7.1 Advertising purposes of SCHUFA Holding AG and third parties
If you have entered into a contract with us or we have listed you as a prospective customer, we process your address data and the criteria of advertising selection on the basis of Art. 6 (1) a) or f) GDPR in order to send you such information and offers from us and other companies. If you do not wish this to happen, you can object to the use of your data for advertising purposes at any time.
3.7.2 Use of data for market research and opinion polling
We also process your data for market research and opinion polling purposes. We use such data exclusively in anonymized form for statistical purposes and only for SCHUFA Holding AG. The answers you provide in surveys are not disclosed to third parties or published. We do not store answers to our survey questions with your e-mail address or with any other personal data. You have the right to object to the use of data for all or certain market research and opinion polling purposes at any time without incurring any other than basic rate charges for the telecommunication costs involved. A text message sent to the following contact data (e.g. by e-mail, fax, letter) is sufficient for this purpose. You will also, of course, find an unsubscribe link in all survey e-mails.
3.7.3 Right to object
You have the right to object to the use of your personal data for all or certain advertising purposes at any time without incurring any other than basic rate charges for the telecommunication costs involved. A text message sent to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany or to firstname.lastname@example.org or by telephone on +49 (0)234 9761200 or by fax to +49 (0)611 9278359 is sufficient for this purpose.
If you object, the relevant contact address will be locked to prevent it being used for further advertising-related data processing. We point out that, in exceptional cases, advertising material may still be sent after you have lodged your objection. This is technically due to the required lead time for advertisements and does not mean that we are not responding to your objection. We appreciate your understanding in this matter.
SCHUFA processes personal data on the basis of the provisions of the General Data Protection Regulation (including with the assistance of service providers). The basis for processing is Art. 6 (1) a) GDPR (consent) and Art. 6 (1) b) and f) GDPR where processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract or if processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interest of fundamental rights and freedoms of the data subject which require protection of personal data. Processing operations carried out by SCHUFA within the scope of a legal obligation to which it is subject are carried out in accordance with Art. 6(1)(c) GDPR. We process your address data and criteria for advertising selection on the basis of Art. 6 (1) f) GDPR in order to be able to send you information and offers from us and other companies. If you do not wish this to happen, you can object to the use of your data for advertising purposes at any time. You can withdraw your consent to SCHUFA at any time. This also applies to consent given before the GDPR came into effect. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to such withdrawal.
Personal data, such as name (possibly also including previous names which may be notified on separate application), first name, date of birth, place of birth, address, previous addresses and communication data, official identification data.
Webinars are open to companies which are not yet SCHUFA partners. (special events for interested parties)
All information which you provide to us by making entries on these websites is stored on a server located in a country in the European Union (EU) and is redirected to the responsible functions within the company where your inquiries and wishes are processed. If your personal data are used to update the SCHUFA data inventory, these data are also made available to contract partners within the framework of SCHUFA’s services. More information about SCHUFA procedures can be found here.
The service providers we use may also receive data from us to fulfil stipulated purposes. Such service providers may be companies which fall within the categories of IT services, printing services, marketing, sales or telecommunications.
When conducting conciliation proceedings, we send all required personal data to the SCHUFA ombudsman.
Cookies are small files created automatically by your browser which are stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your terminal device and do not contain viruses, Trojans or any other malware. Information is stored in the cookie in connection with the specific terminal device used.
We recommend that you log out completely after using computers that are configured to accept cookies and which are also used by other people.
You can check the cookies we use and manage the consent you may have given to us at any time quickly and simply here.
We usually only store your data for as long as this is necessary for the purpose for which the data are being processed (e.g. handling the matter which is of concern to you or meeting statutory retention periods).
We store data for the purpose of carrying out the contract until the statutory or, where applicable, contractual guarantee and warranty rights have expired. Upon expiry of this period, we retain the information required under commercial and tax law relating to the contractual relationship for the periods stipulated by law. During this period (usually 10 years from the time at which the contract is made) the data are processed again solely for the purpose of inspection by tax authorities.
We store data collected for the purpose of registration on SCHUFA4Business until the account is deactivated. The user can deactivate his/her account, but accounts are automatically deactivated after 120 days if the user does not visit the portal in the meanwhile, and also upon termination of the contract. The user’s personal data is then erased one year from the date of deactivation of his/her account.
As a rule, all data associated with conducting conciliation procedures is stored for up to 10 years.
The period for which we store data for advertising purposes is not subject to rigid principles and is based on whether storage is required for advertising purposes or not. We adhere to the principle that data for advertising use is erased four years after the contract is terminated or four years after the end of marketing efforts. Objections to advertising are not erased.
We store data which we process during the recruitment process for up to six months after the end of the application process.
In special well-founded cases, we store data for longer periods of time as well, for example if they are required by a public authority or if the data are required for legal reasons, e.g. as evidence in a court case.
We transmit your data to recipient contractual and business partners based in other third countries (insofar as a corresponding appropriateness decision of the European Commission exists for these or standard contractual clauses have been agreed, which can be viewed at www.schufa.de). When conducting conciliation procedures, no personal data collected as part of any such procedure is transferred to third countries. SCHUFA is also subject to the powers of intervention held by state agencies.
In addition to your right to withdraw your consent to us you also have the following rights, subject to the legal requirements in each case:
SCHUFA has set up a private customer service centre to deal with your concerns which can be contacted in writing at SCHUFA Holding AG, Privatkunden ServiceCenter, Postfach 10 34 41, 50474 Cologne, Germany, or by telephone on +49 (0)611 92780 and by using an online contact form. You can also contact the supervisory authority which is responsible for SCHUFA: the Hessian Commissioner for Data Protection and Freedom of Information.
Where the requirements stated in Art. 21 (1) GDPR apply, you can object to data processing on grounds relating to the data subject’s particular situation (e.g. women’s refuge, witness protection). Objection may be made informally and for example be sent to SCHUFA Holding AG, Privatkunden ServiceCenter, Postfach 10 34 41, 50474 Cologne, Germany.
The above general right to object applies to all the processing purposes in this data privacy information subject to processing on the basis of Art. 6 (1) f) GDPR. In contrast to the special right of objection to the processing of data for advertising purposes, we are only required by the GDPR to implement such a general objection if grounds of overriding importance are given (e.g. potential risk to life or health). You can also contact the supervisory authority which is responsible for SCHUFA: the Hessian Commissioner for Data Protection and Freedom of Information.
All the data transmitted by you personally are transmitted using the generally customary and secure SSL (Secure Socket Layer) standard. SSL is a secure and tried-and-tested standard which, for example, is also used for online banking. One of the distinguishing features of a secure SSL connection is the “s” at the end of http (i.e. https://. . .) in your browser’s address bar or the lock symbol at the bottom of your browser.