Privacy Policy for the Utilization of the GetMyInvoices Thunderbird Add-on

Provided by fino data services GmbH

§ 1 Preamble

This Privacy Statement by fino data services would like to inform you as the customer/contracting authority as to which of your personal data will be collected and processed by us as order processor/responsible party during the utilization of our fino service (hereinafter called “service”) in accordance with the General Data Protection Regulations.

This data protection information concerns the processing of personal or person-related data of the following affected parties:

Customers and the customers’ employees, e.g. when these are set up as persons authorized to access

• Our customers’ customers (B2B/B2C)
• Our customers’ suppliers/business partners
• Our customers’ cooperation partners

§ 2 Where does your data originate, and which data is processed?

We primarily process the personal data you provide to us during the utilization of GetMyInvoices, and which are required for the performance of our service.

§ 3 Processing purpose and legal foundation

3.1 - THE DATA DEPOSITED OR ENTERED BY YOU WILL BE COLLECTED AND USED FOR THE PURPOSE OF OPERATING GETMYINVOICES AND IN ACCORDANCE WITH ART. 6 (1) B GDPR, AND TO FULFIL THE EXISTING SERVICE CONTRACT BETWEEN YOU AND US IN ACCORDANCE WITH OUR GENERAL TERMS AND CONDITIONS. FURTHER DATA PROCESSING PURPOSES ALSO ARISE FROM THE EXISTING SERVICE CONTRACT AS WELL AS FROM THE GENERAL TERMS AND CONDITIONS AND CONCRETIZE THIS PRIVACY STATEMENT.

3.2 - COLLECTION AND PROCESSING IN THE COURSE OF OUR CONTRACTUAL/BUSINESS RELATIONSHIP AS USER OF GMI

(A) WE PROCESS DATA BELONGING TO OUR CONTRACT- AND BUSINESS PARTNERS, E.G., EXISTING AND PROSPECTIVE CUSTOMERS (COLLECTIVELY CALLED “CONTRACT PARTNERS”) IN THE COURSE OF CONTRACTUAL AND COMPARABLE LEGAL RELATIONSHIPS (E.G., ORDER MANAGEMENT CONTRACT) AS WELL AS ANY RELATED MEASURES, AND DURING COMMUNICATIONS WITH THE CONTRACT PARTNERS (OR PRE-CONTRACTUAL), E.G., TO REPLY TO QUERIES.

(B) WE PROCESS THIS DATA TO FULFIL OUR CONTRACTUAL OBLIGATIONS (SEE OUR SCOPE OF FUNCTIONS OF PROVIDED SERVICES/PRODUCTS ON HTTPS://WWW.GETMYINVOICES.COM/), TO SECURE OUR RIGHTS, AND TO THE PURPOSE OF ADMINISTRATIVE TASKS AND BUSINESS ORGANISATION RELATING TO THIS INFORMATION. WE PASS ON THE CONTRACT PARTNER’S DATA TO THIRD PARTIES WITHIN IN THE FRAMEWORK OF APPLICABLE LEGISLATION ONLY INSOFAR THIS IS REQUIRED IN REGARD TO THE PREVIOUSLY MENTIONED PURPOSES, OR TO FULFIL ANY LEGAL OBLIGATIONS, OR WITH THE CONTRACT PARTNER’S CONSENT (E.G., TO INVOLVED TELECOMMUNICATIONS-, TRANSPORT-, OR OTHER SERVICE PROVIDERS AS WELL AS SUB-CONTRACTORS, BANKS, TAX- AND LEGAL CONSULTANTS, PAYMENT SERVICE PROVIDERS OR TAX AUTHORITIES). IN ACCORDANCE WITH THIS PRIVACY STATEMENT, THE CONTRACT PARTNER WILL BE NOTIFIED ABOUT ANY FURTHER MANNERS OF PROCESSING, E.G., FOR MARKETING PURPOSES.

§ 4 Collection and usage of company- and personal data

4.1 - ALL DATA IS COLLECTED IN COMPLIANCE WITH THE PRINCIPLES OF DATA AVOIDANCE AND DATA MINIMIZATION. YOU ARE NOT OBLIGATED, NEITHER LEGALLY NOR CONTRACTUALLY, TO TRANSMIT YOUR PERSONAL DATA TO US. INSOFAR YOU DECIDE AGAINST DATA ENTRY/DATA TRANSMISSION, WE WILL BE PARTLY OR FULLY UNABLE TO PERFORM YOUR ORDER OR THE REQUIRED SERVICE.

4.2 - THE GETMYINVOICES MOZILLA THUNDERBIRD ADD-ON ALLOWS YOU TO EASILY UPLOAD ATTACHED PDF INVOICES FROM EMAILS TO YOUR REGISTERED GETMYINVOICES ACCOUNT AND TO ANY OF YOUR CONNECTED GETMYINVOICES ACCOUNTS. THE THUNDERBIRD ADD-ON FURTHER ALLOWS YOU TO SAVE EMAIL INVOICES TO YOUR GETMYINVOICES ACCOUNT, CONVERTING AN EMAIL INVOICE TO AN HTML VERSION AND ALSO ARCHIVING THE ORIGINAL .EML FILE FOR COMPLIANCE.

4.3 - THE PLUGIN ONLY WORKS WITH A REGISTERED GETMYINVOICES.COM ACCOUNT AND HAS TO BE LINKED TO YOUR GETMYINVOICES ACCOUNT MANUALLY WITH AN INSTALLATION CODE. DATA TRANSMISSION FROM THE ADD-ON IS EITHER USER-INITIATED MANUALLY OR AUTOMATIONS ARE MANUALLY CONFIGURED REQUIRING YOUR INTENT TO TRANSMIT DATA TO GETMYINVOICES.COM.

4.4 - WHEN INSTALLING THE GETMYINVOICES THUNDERBIRD ADD-ON, YOU CONSENT TO PROVIDE THE ADD-ON THE MINIMALLY NEEDED PERMISSIONS:

(A) ACCESS YOUR DATA FOR API.GETMYINVOICES.COM
(B) READ YOUR EMAIL MESSAGES AND MARK OR TAG THEM
(C) DISPLAY NOTIFICATIONS TO YOU
(D) ACCESS BROWSER TABS

THESE THUNDERBIRD PERMISSIONS ARE REQUIRED TO PROVIDE OUR SERVICE AND CORE FUNCTIONALITY IN THE ADD-ON.

4.5 - DATA THE ADD-ON COLLECTS AND TRANSMITS

(A) PDF ATTACHMENTS FROM E-MAILS THAT YOU MANUALLY UPLOAD TO YOUR GETMYINVOICES.COM ACCOUNT OR CONFIGURE TO BE AUTOMATICALLY UPLOADED.

(B) EMAILS YOU MANUALLY UPLOAD TO OR CONFIGURE TO BE AUTOMATICALLY UPLOADED TO YOUR GETMYINVOICES.COM ACCOUNT. HTML AND .EML DATA OF THE SELECTED EMAIL IS SENT TO AND STORED IN YOUR GETMYINVOICES ACCOUNT.

(C) BUG REPORT INFORMATION:

(I) YOUR NAME (OPTIONAL)
(II) YOUR EMAIL ADDRESS (MANDATORY)
(III) ANYTHING YOU CHOOSE TO SHARE AS THE DESCRIPTION OF THE BUG (MANDATORY)
(IV) ATTACHMENTS YOU PROVIDE AND VERSION INFORMATION

§ 5 Encrypted transmission of personal data

The entire data traffic between your browser or device and the server using this service is encrypted. To this end, a modern transmission protocol – TLS Protocol (Transport Layer Security Protocol) – is used. This ensures that all data is transmitted encrypted and protected from manipulation and access by third parties on the transmission route.

§ 6 Rights of the affected persons

6.1 - REGARDING THE PROCESSING OF YOUR PERSONAL DATA, YOU HAVE NUMEROUS RIGHTS, PARTICULARLY THE RIGHTS TO DISCLOSURE ABOUT THE PERSONAL DATA STORED BY US (ART. 15 GDPR), CORRECTION (ART. 16 GDPR), DELETION (ART. 17 GDPR), PROCESSING RESTRICTION (ART. 18 GDPR), DATA PORTABILITY (ART. 20 GDPR) UND OBJECTION TO PROCESSING (ART. 21 GDPR), ESPECIALLY IN CASE OF DIRECT MARKETING.

6.2 - IN THIS CONTEXT, PLEASE GET IN TOUCH WITH US USING THE CONTACT OPTIONS LISTED IN THE IMPRINT OR DIRECTLY WITH OUR DATA PROTECTION OFFICER.

6.3 - FURTHERMORE, THE RIGHT OF APPEAL WITH THE RESPONSIBLE DATA PROTECTION AUTHORITY EXISTS (ART. 77 GDPR), TO WHICH WE PARTICULARLY REFER. THE DATA PROTECTION AUTHORITY RESPONSIBLE FOR OUR COMPANY CAN BE REACHED UNDER THE FOLLOWING CONTACT INFORMATION:

DER HESSISCHE BEAUFTRAGTE FÜR DATENSCHUTZ UND INFORMATIONSFREIHEIT

(THE HESSIAN OFFICER FOR DATA PROTECTION AND FREEDOM OF INFORMATION)

POSTBOX 3163

65021 WIESBADEN

TELEPHONE: +49 611 1408 – 0

PLEASE REFER TO THE CONTACT OPTIONS LISTED IN THE IMPRINT.

6.4 - FURTHER INFORMATION REGARDING DATA PROCESSING DURING THE UTILIZATION OF OUR PRODUCT “GETMYINVOICES” CAN BE FOUND – APART FROM THE PRIVACY STATEMENT ON OUR HOMEPAGE – IN THE ORDER PROCESSING CONTRACT YOU SIGNED WITH US, AS WELL AS ON BASIS OF THE CONTRACT PROCESSING RELATIONSHIP WITHIN THE FRAMEWORK OF THE INSTRUCTIONS GIVEN TO US BY YOU.

6.5 - FOR ANY QUERIES BEYOND THIS POINT REGARDING THE PROCESSING OF YOUR PERSONAL DATA IN A GIVEN INDIVIDUAL CASE, PLEASE CONTACT US OR OUR COMPANY’S DATA PROTECTION OFFICER UNDER THE CONTACT DETAILS GIVEN ABOVE; WE WILL BE DELIGHTED TO FURNISH YOU WITH MORE INFORMATION!


Kassel, 28 March 2024.