Skip to content
b2bkartei.de
  • Company data
  • Countries
  • Pricing
  • Guides
  • Contact
  • DeutschEnglishFrançaisPolskiTürkçe
Send request
  • Deutsch
  • English
  • Français
  • Polski
  • Türkçe
Send request
Home › Data subject rights
⚠️ DRAFT – legal review pending; not in force

This document has not yet been reviewed by a lawyer and is not in force. Passages marked [[ ERGÄNZEN: … ]] are to be completed by the operator or by the lawyer.

Information for people whose data is contained in the company database

Version:
October 2026 (draft)
Scope:
Information under Art. 14 GDPR (data not collected from you)
Controller:
Martin Adamec, company identification number (IČO) 19552319

You do not want to be listed in the company database? You can object to the processing at any time (Art. 21 GDPR) – using the form on the Objection page or by email to info@b2bkartei.de. Details in section 10.

Contents

  1. Who this information is for
  2. Controller
  3. Categories of data
  4. Sources
  5. Purposes
  6. Legal basis and balancing of interests
  7. Recipients
  8. Transfers to third countries
  9. Storage period
  10. Your rights, in particular the right to object
  11. Right to lodge a complaint
  12. How this information is provided
  13. Changes

1. Who this information is for

b2bkartei.de compiles company databases and supplies exports from them to businesses (German company database, exports per request; Czech company database; other countries on request). Information about businesses is only personal data if it relates to a natural person. This information is therefore addressed to:

  • sole traders, freelancers and self-employed tradespeople whose company name, address and contact details relate to them as a person;
  • owners, managing directors and other authorised representatives who are named in a register or in a legal notice (Impressum);
  • contact persons whose name or personal contact details (for example an email address containing first name and surname) a business has published.

For visitors to this website, prospective customers and customers, the privacy policy applies.

2. Controller

Martin Adamec (sole trader)
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
Company identification number (IČO): 19552319
Email: info@b2bkartei.de · Phone: +420 720 950 900

On the data protection officer, see the privacy policy, section 13.

3. Categories of data

For each record, we process the following where available in the sources:

Identification and register data
Company name (for sole traders often the person’s name), legal form, register court and register number, VAT identification number where published; for the Czech Republic additionally the company identification number (IČO), founding date, VAT registration, flagging as an unreliable VAT payer and opened insolvency proceedings.
Address
Business address as published in the register or in the legal notice, and the federal state or region and district derived from it. For sole traders, the business address may be the same as the home address.
Published contact details
Phone number, email address and website address that the business has published itself.
Activity
Industry, economic activity (WZ or NACE code) and a short description of the activity from publicly accessible pages.
Authorised representatives
Names of owners, managing directors and other authorised representatives, where published in the register or in the legal notice. [[ ERGÄNZEN: bestätigen, ob Namen von Vertretungsberechtigten in Exporte übernommen werden ]]

We do not process special categories of personal data (Art. 9 GDPR) or data relating to criminal convictions (Art. 10 GDPR). [[ ERGÄNZEN: bestätigen, dass Geburtsdaten und Wohnanschriften von Vertretungsberechtigten aus Registern nicht übernommen werden ]]

4. Sources

All data comes from publicly accessible sources. A detailed description is on the page Data sources and methodology.

Germany (exports per request)

The sources of the German dataset have not yet been finalised; they are being legally reviewed before any data is collected. Possible sources are details that businesses publish themselves (legal notice details under § 5 DDG, company websites). The commercial register and the company register can be inspected entry by entry under § 9 HGB; we do not plan any bulk transfer of register data without a legal basis. [[ ERGÄNZEN: Quellen des deutschen Datensatzes nach Abschluss der rechtlichen Prüfung abschließend nennen ]]

Note for the legal review (remove before publication): § 9(1) HGB permits inspection of the commercial register “for information purposes by means of individual retrievals”; this applies accordingly to the company register (§ 9(6) HGB), and § 52 HRV requires retrieval individually per register sheet. The register portal’s terms of use prohibit systematic retrievals for building parallel full or partial registers and limit retrievals to 60 per hour; the company register’s terms of use contain a corresponding prohibition. It needs to be clarified from which sources register details (register court, register number, authorised representatives) can lawfully be obtained and whether legal notice details may be collected on a large scale. Section 3 and this section must then be adjusted accordingly.

Czech Republic

  • ARES, Administrative Register of Economic Entities (ares.gov.cz);
  • Commercial and trade registers (or.justice.cz, rzp.gov.cz);
  • VAT payer register (adisspr.mfcr.cz);
  • Insolvency register ISIR (isir.justice.cz);
  • Company websites: contact details that businesses publish themselves.

On request, we will tell you which source the details in your record come from.

5. Purposes

We process the data to build and maintain company databases and to provide businesses with exports from them for business purposes (B2B), in particular for initiating business contacts by phone or post, maintaining customer data (CRM) and market analysis. We do not offer the data for email marketing; our customers are contractually obliged to comply with § 7 UWG (§ 7 of the Terms).

We do not create personality profiles, do not evaluate personal characteristics and do not take automated decisions within the meaning of Art. 22 GDPR.

6. Legal basis and balancing of interests

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest and that of our customers lies in providing and using information about businesses for business-to-business dealings; recital 47 GDPR recognises that direct marketing can also be a legitimate interest.

When balancing this against your interests, we take into account in particular:

  • The data concerns your business activity, not your private life.
  • It is publicly accessible; its publication is partly required by law (registers, legal notice duty under § 5 DDG) or was made by you yourself for business contact purposes.
  • We do not process special categories of personal data and do not create profiles.
  • Safeguards: this information, a simple objection procedure, a suppression list preventing re-inclusion after an objection, and the contractual obligation of customers to comply with data protection and competition law, including the prohibition of email marketing without consent.

[[ ERGÄNZEN: schriftliche Interessenabwägung dokumentieren; Hinweis, ob sie auf Anfrage zur Verfügung gestellt wird ]]

7. Recipients

  • Business customers (entrepreneurs) who acquire an export. They process the data as controllers in their own right, need their own legal basis and are themselves obliged to inform you.
  • Processors, in particular the provider of our server (Hostinger International Ltd., Larnaca, Cyprus), on the basis of contracts under Art. 28 GDPR.

If you have received advertising from a business, that business is responsible for contacting you; please (also) address your objection to the advertising to that business.

8. Transfers to third countries

We process the data within the European Union. [[ ERGÄNZEN: ob Exporte an Kunden außerhalb der EU/des EWR (z. B. Schweiz, Vereinigtes Königreich) geliefert werden; ggf. Angemessenheitsbeschluss oder Garantie nach Art. 46 DSGVO ]]

9. Storage period

We store a record as long as the business is listed as active in the sources and the record is necessary for the stated purpose. If a business is no longer listed as active in the sources, we delete the personal details [[ ERGÄNZEN: Löschfrist nach Wegfall in der Quelle ]].

After a justified objection, we delete the record. To prevent the data from being added again during a later update from the sources, we store on a suppression list only the features required for this purpose (for example register number, phone number or email address) [[ ERGÄNZEN: Speicherdauer der Sperrliste ]].

10. Your rights, in particular the right to object

Right to object (Art. 21 GDPR): you can object to the processing of your data at any time. Where the processing serves direct marketing, you do not have to give reasons for your objection, and we will no longer process your data for this purpose afterwards (Art. 21(2) and (3) GDPR). Otherwise, you can object on grounds relating to your particular situation; we will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21(1) GDPR).

The easiest way is the form on the Objection page; informally also by email to info@b2bkartei.de or by post to the address in section 2.

In addition, subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR). The right to data portability (Art. 20 GDPR) does not apply to processing under Art. 6(1)(f) GDPR.

We notify rectifications, erasures and restrictions to the customers to whom we previously supplied your data, unless this proves impossible or involves disproportionate effort (Art. 19 GDPR). [[ ERGÄNZEN: Verfahren der Mitteilung an Kunden bestätigen ]]

We reply without undue delay, at the latest within one month; in complex cases the deadline may be extended by two months, of which we will inform you within the first month (Art. 12(3) GDPR). If there are reasonable doubts about your identity, we may request additional information (Art. 12(6) GDPR). If there are errors in an official source, we correct our record; a permanent correction also requires a change at the body that keeps the register.

11. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The lead authority is the Czech data protection authority Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, Czech Republic (uoou.gov.cz). You can also contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement; in Germany, the data protection authority of your federal state.

12. How this information is provided

The company databases comprise a very large number of records collected from public sources and not from the data subjects. In our assessment, notifying each data subject individually would involve disproportionate effort. We therefore provide this information publicly on this website under Art. 14(5)(b) GDPR and take the safeguards listed in section 6. On request, we provide you with the information on your record individually.

Note for the legal review (remove before publication): supervisory authorities interpret the exemption under Art. 14(5)(b) GDPR narrowly; it requires a documented balancing of effort against intrusion. To our knowledge, the Polish supervisory authority UODO objected in 2019 to a comparable business model of a business information provider because data subjects with known contact details had not been notified individually; the decision should be checked in the original. It also needs to be checked when the information must be provided under Art. 14(3)(c) GDPR (at the latest on first disclosure to customers) and whether at least the persons with a published email address must be notified.

13. Changes

We adapt this information when the sources, scope or purposes of processing or the legal situation change. The version published at b2bkartei.de/betroffenenrechte/ applies.

Version: October 2026 (draft)

b2bkartei.de

Company data for B2B sales: German company database by 15 industries – 3,543,865 businesses per Destatis (2024), exports on request. Other EU countries and further countries on request.

Product

  • Company addresses Germany by industry
  • Export and sample file (CSV, Excel)
  • EU and other countries (on request)
  • Pricing: how the price is set
  • Company databases compared

Information

  • Data sources and methodology
  • Data inventory
  • Business statistics (Destatis, Eurostat)
  • Buying company addresses: what to check
  • B2B cold outreach and § 7 UWG
  • Commercial register: public data
  • WZ 2008: industry codes
  • Guides (blog)
  • About us
  • Contact
  • RSS feed

Contact

  • info@b2bkartei.de

  • +420 720 950 900

  • IČO 19552319

Legal notice · Terms · Privacy · Data subject rights · Objection

© 2026 b2bkartei.de

Operator: Martin Adamec, Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic · Company ID (IČO) 19552319 · All prices are final prices.