List of external recipients

to whom personal data may be disclosed for risk checks 

For purposes of conducting risk checks, your data may be shared with the following external recipients. Risk checks include credit and fraud prevention checks and identity verification. 

CRIF GmbH

Seat country: Austria

Purpose of the data processing: Credit and identity check

Please note that payment history and address data are only transmitted to CRIF GmbH for customers with a billing address in Austria.
We would like to point out that payment experience data, in particular on undisputed claims and claims that remain unpaid after they become due, as well as address data will be transmitted to CRIF GmbH, Rothschildplatz 3/Top 3.06.B, 1020 Vienna for lawful use within the scope of their business licenses in accordance with Section 151 (address publishers), Section 152 (credit agencies on credit relationships) and Section 153 (services in automatic data processing and information technology) of the Trade Regulation Act 1994 (Gewerbeordnung 1994). In addition, information received from CRIF GmbH is used to check your identity and creditworthiness. You can find more information at www.crif.at/datenschutz.

CRIF GmbH, Ndl. Karlsruhe

Seat country: Germany

Purpose of the data processing: Credit and identity check

Status of the recipient and, if applicable, information pursuant to Art. 13, 14 of the EU General Data Protection Regulation (GDPR) on the data processing taking place at the external recipient: Controller, https://www.crif.de/datenschutz   

SCHUFA Holding AG

Seat country: Germany

Purpose of the data processing: Credit and identity check

Status of the recipient and, if applicable, information pursuant to Art. 13, 14 of the EU General Data Protection Regulation (GDPR) on the data processing taking place at the external recipient: Controller, https://www.schufa.de/global/datenschutz-dsgvo 

infoscore Consumer Data GmbH - Experian Group

Seat country: Germany

Purpose of the data processing: Credit and identity check

Status of the recipient and, if applicable, information pursuant to Art. 13, 14 of the EU General Data Protection Regulation (GDPR) on the data processing taking place at the external recipient: Controller, https://www.experian.de/content/dam/noindex/emea/germany/informationsblatt-art-14.pdf   

CoPro Consumer Protect GmbH

Seat country: Germany

Purpose of the data processing: Credit and identity check, fraud prevention

Status of the recipient and, if applicable, information pursuant to Art. 13, 14 of the EU General Data Protection Regulation (GDPR) on the data processing taking place at the external recipient: Controller, https://consumer-protect.de/

LexisNexis Risk Solutions Europe Limited

Seat country: Ireland

Purpose of the data processing: Fraud prevention

Status of the recipient and, if applicable, information pursuant to Art. 13, 14 of the EU General Data Protection Regulation (GDPR) on the data processing taking place at the external recipient: Processor

Risk.Ident GmbH

Seat country: Germany

Purpose of the data processing: Fraud prevention

Status of the recipient and, if applicable, information pursuant to Art. 13, 14 of the EU General Data Protection Regulation (GDPR) on the data processing taking place at the external recipient: Processor