Privacy notice for prospective customers, business partners and customers
The following information is intended to provide you with an overview of how Proxima Fusion GmbH (hereinafter referred to as “we” or “Proxima Fusion”) processes your personal data and your rights under the General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”) and the German Federal Data Protection Act (“BDSG”).
This privacy notice applies to the personal data of individuals with whom we enter into contractual or business relationships, as well as to the bodies, managing directors, key account managers or other employees of our contractual or business partners, which we process in the context of existing or prospective contractual and business relationships. These include, among others, existing or potential suppliers, service providers, customers or consultants, as well as existing or potential cooperation partners or other partner companies.
The entity responsible for the data processing described in this privacy notice within the meaning of Article 4(7) of the GDPR is:
Proxima Fusion GmbH
Flößergasse 2
81369 Munich
Germany
You can contact our Data Protection Officer at:
MAMS Consulting GmbH
z. Hd. Datenschutzbeauftragter / Attn. Data Protection Officer
Landsberger Str. 155, 80687 München
Mail: datenschutz@pri-com.de
www.pri-com.de
Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’). We primarily process personal data that data subjects themselves provide to us within the framework of contractual and business relationships, or that we receive from the respective contractual and business partners (e.g. from your colleagues with whom we are already in contact), for example when processing an enquiry or an order. We also process personal data that we collect from publicly available sources (such as commercial registers, the press and the internet) or receive from third parties (e.g. business partners). Personal data that we have not collected directly from you originates in particular from the following sources:
Relevant personal data includes, in particular, personal details (such as surname, first name, address, business bank details, billing address, tax number/VAT ID) and other contact details (such as business telephone number, mobile number, or email address). In addition, this may also include contract or order data arising from the fulfilment of our contractual obligations, and further data relating to you (e.g. business interests, profession, industry, or positions). The scope of the data processed in relation to a person varies depending on the capacity in which the person deals with us, such as the position they hold with the relevant business partner.
We process personal data for the following purposes or to pursue the following legitimate interests, in each case on the basis of the following legal grounds:
While processing your personal data, we may share your personal data with the following recipients. We will only share your personal data to recipients if you have granted your consent or if this is permitted by law.
Recipients of your personal data include, in particular:
Under certain circumstances (beyond the cases already mentioned above), your personal data may be disclosed for the purposes set out above; specifically:
We are also legally obliged to provide information to certain public authorities upon request. These are primarily law enforcement agencies, authorities that prosecute administrative offences punishable by fines, and the tax authorities.
Occasionally, in order to fulfil the purposes described in this privacy notice or to provide our services, we may rely on contractually affiliated third-party companies or other cooperation partners, as well as external service providers, some of whom may be based outside the EU or the EEA, such as logistics companies, IT service providers, business and financial consultants, and financial institutions. In such cases, information is passed on to these recipients to enable them to process it further. Where these recipients are located outside the EU or the EEA, we ensure an adequate level of data protection, for example by entering into appropriate contracts and implementing technical measures with the data recipient.
As part of the further development of our business, the structure of our company may change through a change in legal form, or the establishment, purchase or sale of subsidiaries, business units or parts of the business. In such transactions, customer information is transferred together with the part of the business being transferred. Whenever personal data is disclosed to third parties to the extent described above, we ensure that this is done in accordance with this privacy policy and the relevant data protection laws.
We delete personal data when it is no longer required (see the purposes set out above). We take appropriate measures to ensure that your data is processed and retained in accordance with the following principles:
The retention period is also linked to the duration of your employment with one of our business partners, but not beyond the final termination of the relevant business relationship between us and your employer. We delete transaction-related information (such as that relating to a specific contractual or commission-based relationship) upon completion of the relevant transaction, e.g. fulfilment of a supply contract, with a retention period of three years following the end of the relevant calendar year, unless these are subject to longer statutory retention obligations (such as the six- or ten-year retention period pursuant to Section 257 German Commercial Code); in such cases, data concerned will be blocked for further processing. Furthermore, we store your data on the basis of legal requirements (e.g. commercial or tax law requirements); in these cases, we delete the data upon expiry of the statutory time limits.
In principle, your personal data collected and generated during the provision of relevant products and services is stored on our servers within the European Union. As the providers of certain software solutions or cloud services offer their products and/or services on the basis of available resources and servers worldwide, your personal data may be transferred to or accessed from jurisdictions outside the European Union and the European Economic Area.
Hence, your personal data might be transferred or accessed to/from the US. With regard to the transfer of personal data to the US, there is an adequacy decision by the European Commission on the EU-US Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en).
Our operators of products and/or services are certified under the DPF, meaning that the standard level of protection under the GDPR applies to such transfers. You can view provider’s certifications under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
To ensure appropriate safeguards for the protection of the transfer and processing of personal data outside the EU, the transfer of data to and processing by our service providers is also carried out on the basis of appropriate safeguards in accordance with Article 46 et seq. GDPR, in particular through the conclusion of so-called standard data protection clauses in accordance with Article 46(2)(c) GDPR.
If you contact us by telephone, the telephone number from which you call us, the time and the duration of the call will be processed.
If you send us an email, the user’s personal data transmitted with the email will be stored. The data will be used exclusively for the purpose of processing the correspondence. Your personal data is stored for the purpose of dealing with the matter raised in your communication and, if necessary, contacting you. The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. Our legitimate interest lies in responding appropriately to contact enquiries. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data sent by email, this is the case once the relevant conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
You have the right to obtain information about the data stored about you at any time. Provided the relevant conditions are met, you are also entitled to the following rights:
If you wish to obtain information about the data stored about you, wish to exercise your other rights, or have any questions regarding data protection, you may contact us using the contact details provided above.
You also have the right to lodge a complaint with a supervisory authority at any time, in particular with a supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection regulations. The supervisory authority responsible for us is the following authority:
Bavarian State Office for Data Protection Supervision
Postal address:
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de
The ongoing development of our company may also affect how we handle personal data. We therefore reserve the right to amend this privacy notice in future in accordance with applicable data protection laws and, where necessary, to adapt it to changes in data processing practices. Previous versions of this privacy notice can be requested through the contact channels mentioned above.
Version: March 2026