Privacy Notice
Website Privacy Notice
Protecting your privacy when processing personal data is important to us and is something we take into account with great care in our business processes. We therefore provide you below with information on how we process your personal data and on your rights under applicable data protection law.
I. Name and Contact Details of the Controller
The controller responsible for the processing of personal data is:
Ralph Mermagen
Franz-Lohe-Str. 19
53129 Bonn
Germany
Tel.: +49 (0)228 91 27-217
Email: mermagen@tak.de
II. Contact Details of the Data Protection Officer
You can contact our Data Protection Officer at:
Stefan Laing
Franz-Lohe-Str. 21
53129 Bonn
Germany
Tel.: +49 (0)228 91 27-0
Email: datenschutzbeauftragter@tak.de
III. General Information on Data Processing
1. Purpose of Processing Personal Data
Where you provide us with personal data, we use such data exclusively for the technical administration of our websites and to fulfil your requests and requirements, generally for the purpose of responding to your enquiry.
2. Legal Basis for the Processing of Personal Data
Where we obtain your consent to the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for such processing.
Where the processing of personal data is necessary for the performance of a contract to which you are a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies where processing is necessary in order to take steps at your request prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms, Article 6(1)(f) GDPR serves as the legal basis.
3. Recipients or Categories of Recipients of Personal Data
Within Akademie des Deutschen Kraftfahrzeuggewerbes GmbH (TAK), access to your personal data is limited to those departments and functions that require the data in order to fulfil your requests and requirements. Service providers and other contractors engaged by us may also receive data for these purposes.
We do not disclose or otherwise transfer your personal data to third parties unless:
this is necessary for the performance of a contract. For example, when products are ordered, it may be necessary to provide our suppliers with your address and order details;
this is necessary for billing purposes; or
you have given your prior consent.
4. Retention Period
Your personal data will be erased or otherwise restricted from processing as soon as the purpose for which it was stored no longer applies.
Data may be retained for a longer period where this is required by European or national legislation, including EU regulations, national laws or other provisions to which we are subject.
The data will also be erased or restricted from processing once any retention period prescribed by such provisions expires, unless continued storage is necessary for entering into or performing a contract.
IV. Specific Processing Activities
1. Provision of the Website and Creation of Log Files
a) Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the device accessing the website.
The following data may be collected:
information about the browser type and version used;
the user's operating system;
the user's IP address;
the date and time of access;
websites from which the user's system accessed our website; and
websites accessed by the user's system via our website.
These data are also stored in our system's log files. The data are not stored together with other personal data relating to the user.
b) Legal Basis for Data Processing
The legal basis for the temporary storage of the data and log files is Article 6(1)(f) GDPR.
c) Purpose of Data Processing
Temporary storage of the IP address by the system is necessary in order to deliver the website to the user's device. For this purpose, the user's IP address must remain stored for the duration of the session.
The data are stored in log files in order to ensure the proper functioning of the website. The data also help us optimise the website and ensure the security of our information technology systems.
The data collected in this context are not analysed for marketing purposes.
These purposes also constitute our legitimate interest in the processing of personal data within the meaning of Article 6(1)(f) GDPR.
d) Retention Period
The data are erased as soon as they are no longer required for the purpose for which they were collected.
Where data are collected for the purpose of providing the website, this is the case once the relevant session has ended.
Where data are stored in log files, they will be erased after no more than 30 days.
e) Right to Object and Options for Removal
The collection of data for the purpose of providing the website and the storage of data in log files are technically necessary for the operation of the website. Accordingly, users cannot opt out of this processing while using the website.
2. Use of Cookies
a) Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user's device.
When a user accesses a website, a cookie may be stored on the user's operating system. A cookie contains a characteristic string of characters that enables the browser to be recognised when the website is accessed again.
We use cookies to enable the proper functioning and usability of our website. Some elements of our website require the browser to be recognised even after the user moves to another page.
Our websites use session cookies that store information required for the technical management of a session in your browser. These session data are used solely for technical purposes and are deleted no later than when you close your browser.
b) Legal Basis for Data Processing
The legal basis for the processing of personal data using cookies is Article 6(1)(f) GDPR. Our legitimate interest is described under section c) below.
c) Purpose of Data Processing
Technically necessary cookies are used to make websites easier to use. Certain functions of our website cannot be provided without the use of cookies. These functions require the browser to be recognised after the user moves to another page.
We require cookies for the following purposes:
website navigation; and
recognition of a successful login, where applicable.
User data collected through technically necessary cookies are not used to create user profiles.
d) Retention Period and Options to Object or Remove Cookies
Cookies are stored on the user's device and transmitted from the device to our website. As a user, you therefore have control over the use of cookies.
You can disable or restrict the transmission of cookies by changing your internet browser settings. Cookies that have already been stored can be deleted at any time. Depending on your browser settings, this may also be done automatically.
If cookies are disabled for our website, some website functions may no longer be fully available.
3. Newsletter
a) Description and Scope of Data Processing
Our website offers you the option of subscribing to a free newsletter. When you register for the newsletter, the data entered in the registration form are transmitted to us.
The following data are collected:
email address;
optionally, name, position and address.
In addition, the following data are collected during the registration process:
the IP address of the device used to register;
the date and time of registration;
the IP address of the device used to confirm the subscription via the link in the opt-in email; and
the date and time of confirmation.
As part of the registration process, we obtain your consent to the processing of these data and refer you to this Privacy Notice.
b) Legal Basis for Data Processing
Where the user has given consent, the legal basis for processing data following registration for the newsletter is Article 6(1)(a) GDPR.
c) Purpose of Data Processing
The user's email address is collected in order to deliver the newsletter.
Any other personal data collected during the registration process are used to prevent misuse of the service or misuse of the email address provided.
d) Retention Period
The data are erased as soon as they are no longer required for the purpose for which they were collected.
The user's email address and opt-in confirmation are therefore stored for as long as the newsletter subscription remains active.
Other personal data collected during the registration process are generally erased after 30 days.
e) Withdrawal and Unsubscription
The data subject may unsubscribe from the newsletter at any time. Each newsletter contains an appropriate unsubscribe link for this purpose.
Unsubscribing also enables you to withdraw your consent to the processing of the personal data collected during the registration process.
4. Contact Form and Contact by Email
a) Description and Scope of Data Processing
Our website provides a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the form are transmitted to us and stored.
For the contact form, these data are:
email address;
your message; and
optionally, your name.
For callback requests, these data are:
telephone number;
email address;
your name; and
your message.
When a message is submitted, the following data are also stored:
the user's IP address; and
the date and time the page was accessed.
As part of the submission process, we obtain your consent to the processing of these data and refer you to this Privacy Notice.
Alternatively, you may contact us using the email address provided. In this case, the personal data transmitted with your email will be stored.
The data are not disclosed to third parties in this context. They are used exclusively for handling and responding to the communication.
b) Legal Basis for Data Processing
Where consent has been given, the legal basis for the processing of the data is Article 6(1)(a) GDPR.
The legal basis for processing personal data transmitted by email is Article 6(1)(f) GDPR.
Where the purpose of the email correspondence is to enter into a contract, Article 6(1)(b) GDPR additionally serves as the legal basis for processing.
c) Purpose of Data Processing
Personal data submitted through the contact form are processed solely for the purpose of handling your enquiry.
Where contact is made by email, this also constitutes our legitimate interest in processing the data.
Any additional personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
d) Retention Period
The data are erased as soon as they are no longer required for the purpose for which they were collected.
For personal data submitted through the contact form or transmitted by email, this is generally the case once the relevant communication with the user has been concluded.
The communication is deemed to have been concluded where the circumstances indicate that the matter in question has been finally resolved.
Any additional personal data collected during the submission process will be erased no later than 30 days after collection.
e) Withdrawal, Objection and Erasure
You may withdraw your consent to the processing of your personal data at any time.
If you contact us by email, you may object at any time to the continued storage of your personal data. In such a case, the communication cannot be continued.
Personal data stored in connection with the relevant communication will then be erased, subject to any applicable statutory retention obligations.
V. Your Rights
You have:
the right of access under Article 15 GDPR;
the right to rectification under Article 16 GDPR;
the right to erasure under Article 17 GDPR;
the right to restriction of processing under Article 18 GDPR;
the right to data portability under Article 20 GDPR; and
the right to object under Article 21 GDPR.
You may withdraw any consent you have given to the processing of personal data at any time.
Please note that withdrawal of consent takes effect only for the future. It does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
To exercise your rights, please contact us using any of the contact details provided in Sections I and II above.
If you believe that the processing of your personal data infringes applicable data protection law or otherwise violates your rights under data protection law, you also have the right to lodge a complaint with a competent supervisory authority.
VI. Are You Required to Provide Personal Data?
You are required to provide the personal data that are necessary to establish and perform our business relationship and that we require in order to process the relevant order.
If you do not provide the required data, we will generally be unable to enter into a contract with you or carry out the relevant order. We may also be unable to continue performing an existing contract and may therefore have to terminate it.