Information pursuant to Art. 14 GDPR
Below we inform you about the processing of your data in connection with our “B2B Christmas 2026” campaign:
1. Controller
Soulhouse GmbH, Schlüterstraße 86, 20251 Hamburg, Germany, represented by Benjamin Schroeter, Rozalla Tapper, Henning Stitz; email: firmen@soulhouse.me.
2. Data protection officer
You can reach our data protection officer at: Data Protection Officer of Soulhouse GmbH, c/o Fritz & Mark Legal Rechtsanwaltsgesellschaft mbH, Bernhard-Ernst-Str. 12, 48155 Münster, Germany, email: dsb.soulhouse@fum-legal.de
3. Where we obtained your data
We did not collect your data from you directly; instead, we compiled it manually from publicly accessible sources. (Main) sources used:
Company websites, the Gelbe Seiten business directory (Yellow Pages), LinkedIn, publications, social media.
We have not purchased or rented any addresses and have not used any automated methods (scraping).
4. What data we process
Salutation, first and last name, title (if applicable), position or department, name and business address of your company, as well as the source and date of our research. If you respond to our letter, we additionally process the data you provide to us in doing so (e.g. email address, telephone number, content of your inquiry or order).
5. What we use your data for and on what legal basis
a) Sending our offer by post (direct marketing). The legal basis is Art. 6(1)(1)(f) GDPR. Our legitimate interest lies in making companies aware of our products and services.
b) Handling your questions and responses. If you contact us, we process your data in order to answer your inquiry and to take steps prior to entering into a contract (Art. 6(1)(1)(b) GDPR) or on the basis of our legitimate interest in communicating with prospective customers (Art. 6(1)(1)(f) GDPR).
c) Implementing an objection. If you object to advertising, we store your name, your company and your address in a suppression list so that we do not contact you again (Art. 6(1)(1)(c) in conjunction with Art. 21(3) GDPR).
6. Who receives your data
For printing, enveloping and dispatch, we use an external professional printing company as well as Deutsche Post and UPS as processors pursuant to Art. 28 GDPR. These service providers are contractually bound by our instructions. We do not pass on your data to third parties for their own purposes and do not engage in address trading.
7. Transfer to countries outside the EU / EEA
Your data is not transferred to countries outside the European Union or the European Economic Area.
8. How long we store your data
Until the end of the campaign, at the latest 24 months after dispatch, unless you contact us.
Documentation of proof / legal defence: source and date of collection, as well as this information in the version valid at the time of dispatch, for up to three years after the end of the campaign (limitation period for possible claims, Section 195 of the German Civil Code, BGB).
9. Your rights
You have the right to obtain from us information about the data stored about you (Art. 15 GDPR), to have inaccurate data rectified (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), as well as the right to object described in section 10 (Art. 21). As a rule, there is no right to data portability (Art. 20) for the processing described here, as it is based neither on consent nor on a contract. To exercise your rights, an informal message to the postal or email address stated in section 1 is sufficient. If we have reasonable doubts about your identity, we may request additional information.
10. Your right to object (Art. 21 GDPR)
Objection to direct marketing: You may object to the processing of your data for direct marketing purposes at any time and without giving reasons. We will then no longer process your data for these purposes and will not contact you again for advertising purposes.
Objection on grounds relating to your particular situation: Insofar as we process your data on the basis of Art. 6(1)(1)(f) GDPR, you may also object to other processing on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Please send your objection informally to the postal or email address stated in section 1. You will not incur any costs other than the transmission costs according to the basic rates.
11. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information), Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
12. No automated decision-making, no profiling
We do not make decisions based solely on automated processing (Art. 22 GDPR) and do not create profiles. Recipients were selected manually on the basis of industry and position.