Last update: 04/03/2020
Section 1: Information on the collection of personal data
(1) We provide information in the following on the collection of personal data during the use of our website (germanautolabs.com). Personal data are all data that relate to you personally, such as your name, address, email addresses and user behavior.
(2) The controller, as defined by Art. 4, para. 7 of the EU General Data Protection Regulation (GDPR), is Holger G. Weiss, German Auto Labs GAL GmbH, Köpenicker Straße 154a, 10997 Berlin, Email: firstname.lastname@example.org(see our imprint). You can contact our data protection officer at email@example.com via our postal address by including “Data Protection Officer” in the address.
(3) When you contact us by email, chat, telephone, or via a contact form, we will store the data you share with us (your email address and possibly your name and phone number) in order to respond to your questions as well as to be able to provide you with the best possible service in the future.
(4) In the event that we commission service providers for individual functions of our website or would like to use your data for commercial purposes, we will inform you of the relevant procedures in detail below. We will also specify the criteria that have been established for determining the storage period.
Section 2: Your rights
(1) You have the following rights regarding our use of the personal data that relates to you:
– The right to information
– The right to rectification and deletion
– The right to restriction of processing
– The right to object to the processing
– The right to data portability
(2) In addition, you have the right to file a complaint with a data protection supervisory authority concerning our processing of your personal data.
Berliner Beauftragte für Datenschutz und Informationsfreiheit [Berlin Data Protection and Freedom of Information Commissioners]
Address: Friedrichstr. 219, 10969 Berlin
Visitor entrance: Puttkamerstr. 16-18
Telephone: +49 30 13889-0
Section 3: Collection of personal data when visiting our website
(1) When the website is used for purely informational purposes, i.e., when you do not register or otherwise share information with us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we must collect the following data that are technically required to display our website and to ensure its stability and security (legal basis: Art. 6, para. 1, no. 1 (f) of the GDPR):
– IP address
– Date and time of the request
– Time zone difference with respect to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status codes
– The volume of data transmitted in each case
– Website from which the request is sent
– Operating system and its interface
– Language and version of the browser software
(2) In addition to the aforementioned data, cookies will be stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and allocated to the browser used by you and are used to forward certain information to the site that installed the cookie (in this case by us). Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website more user-friendly and effective.
a) This website uses the following types of cookies, the scope and function of which are explained below:
– Transient cookies (see b)
– Persistent cookies (see c)
b) Transient cookies are automatically deleted when you close your browser. These particularly include session cookies. Session cookies store what is called a session ID with which the various requests made by your browser are allocated to a collective session. This allows your computer to be recognized again when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a predetermined period of time that may vary between cookies. You can delete the cookies at any time in your browser’s security settings.
d) Your browser settings can be configured according to your wishes. For example, you can reject the acceptance of third-party cookies or all cookies. Please note that if you do this, you may not be able to use all of the functions of this website.
(4) Cookies from third-party providers
a) In order to improve our website as well as for economic interests, such as reminding interested website visitors of our offers (remarketing), we use third-party cookies as described below:
- Facebook (Analytics, Remarketing, behavioral targeting, data collection and online surveys)
- Google Maps widget (Displaying content from external platforms)
- Google Tag Manager (Tag Management)
- Google Analytics (Analytics)
- LinkedIn (Analytics, Remarketing and behavioral targeting)
- Mailchimp widget (Newsletter, Interaction with data collection platform)
- Webflow (Platform services and hosting)
- Youtube video widget (Displaying content from external platforms)
b) When you visit our website, we notify you of our use of the described third-party cookies. An option for preventing these cookies from being stored on your computer can be found in your browser’s settings (legal basis: Art. 6, para. 1 (f) of the GDPR).
Section 4: Additional functions and services on our website
(1) Aside from the purely informational use of our website, we offer various services that you can use if interested. For this purpose, you must generally provide additional personal data, which we use in order to provide the relevant service and to which the aforementioned principles of data processing apply.
(2) We sometimes use external service providers to process your data. These external service providers have been carefully selected and commissioned, they are bound to our instructions and they are monitored on a regular basis.
(3) Furthermore, we may transfer your personal data to third parties when we offer sales promotions, sweepstakes, contracts, or similar services together with partners. Additional information will be provided when you share your personal data, and it can also be found at the bottom of the description of the offer.
(4) Insofar as our service providers are registered in a state outside of the European Economic Area (EEA), we will inform you of the consequences of these circumstances in the description of the offer.
Section 5: Objecting or withdrawing consent to the processing of your data
(1) If you have consented to the processing of your data, you may withdraw your consent at any time. Such a withdrawal of consent will affect the reliability of the processing of your data after you have sent us the declaration of your withdrawal.
(2) To the extent that we process your data on the basis of a balance of interests, you may object to the processing of your data. This is the case, if the processing is not specifically necessary for the fulfillment of a contract, which is indicated by us in each case in the following description of functions. When submitting such an objection, please explain the reasons why we should not process your personal data in the manner implemented by us. In the event of a justified objection, we will review the facts and either cease/adapt the processing of your data or demonstrate our compelling legitimate grounds, on the basis of which we will continue to process the data.
(3) Of course, you may object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can notify us of your objection to advertising using the following contact information:via email: firstname.lastname@example.org via our postal address by including “Advertising Objection” in the address: German Auto Labs GAL GmbH, Köpenicker Strasse 154a, 10997 Berlin.
Section 6: Newsletter
(1) With your consent, you can subscribe to our newsletter, which we use to inform you of our current interesting offers. The advertised goods and services are specified in the declaration of consent.
(2) For the subscription to our newsletter, we use what is known as the double-opt-in procedure. This means that, after you subscribe, we will send an email to the email address provided asking you to confirm that you would like to receive the newsletter. If you do not confirm your subscription, then your information will be blocked and automatically deleted after one month. Moreover, we will store the times of the subscription and confirmation as well as the IP address you used in each case. The purpose of this procedure is to verify your subscription and to be able to detect a possible abuse of your personal data.
(3) Your email address is the only information required to send you the newsletter. Providing additional, separately marked data is voluntary; such data will be used to address you personally. After we receive your confirmation, we will store your email address for the purpose of sending the newsletter. Legal basis: Art. 6, para. 1, no. 1 (a) of the GDPR.
(4) You may withdraw your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your withdrawal by clicking on the link provided in every newsletter email by sending an email to email@example.com, or by sending a message via the contact information provided in the imprint.
(5) Please note that we evaluate your user behavior when you receive the newsletter. For this evaluation, the emails we send contain what are known as web beacons or tracking pixels, which are one-pixel image files that are stored on our website. In conducting evaluations, we combine the data mentioned in Section 3 and the web beacons with your email address and individual ID. We use the data obtained in this way to create a user profile so that we can tailor the newsletter to your individual interests. In doing so, we record when you read our newsletter and which links you click within the newsletter to draw conclusions about your personal interests. We combine these data with actions you take on our website.
You can object to this tracking at any time by clicking on the separate link provided in each email or by notifying us via another contact option. The information will be stored for as long as you subscribe to the newsletter. After you unsubscribe, we store the data anonymously and in a purely statistical form.
(6) Passing of data to Salesforce: Salesforce.com, Inc. (usually abbreviated as SF or SFDC) is an American cloud-based software company headquartered in San Francisco, California. Salesforce is the primary enterprise offering within the Salesforce platform. It provides companies with an interface for case management and task management, and a system for automatically routing and escalating important events. The Salesforce customer portal provides customers the ability to track their own cases, includes a social networking plug-in that enables the user to join the conversation about their company on social networking Web sites, provides analytical tools and other services including email alert, Google search, and access to customers' entitlement and contracts. For our marketing purposes, the personal data which is retrieved when siging up for our newsletter is passed over to Salesforce, where it is viewed and managed by our marketing, sales and service teams. More information about Salesforce’s privacy practices can be read at https://www.salesforce.com/in/company/privacy/.
Section 7: Online Advertising
(1) We use the “LinkedIn Insight Tag” of LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA (“LinkedIn”) on our website. It helps us with in-depth campaign reporting and insights about our website visitors. It can also be used to track conversions, retarget website visitors, and unlock additional insights about members interacting with our ads on LinkedIn.
(2) The LinkedIn Insight Tag enables the collection of data regarding members’ visits to our website, including the URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. This data is encrypted, the IP addresses are truncated, and members’ direct identifiers are removed within seven days in order to make the data pseudonymous. This remaining, pseudonymized data is then deleted within 90 days.
(3) LinkedIn does not share personal data with us, it only provides aggregated reports about the website audience and ad performance. LinkedIn also provides retargeting for website visitors, enabling us to show personalized ads off our website by using this data, but without identifying the member. LinkedIn members can control the use of their personal data for advertising purposes through their account settings. All this in accordance with LinkedIn terms and cookie policies.
(1) In addition, our website uses the “Custom Audiences” remarketing tool of Facebook Inc. (“Facebook”). With this tool, interest-related ads (“Facebook Ads”) can be displayed to users of the website when they visit the social network Facebook or other websites that also use this tool. Our objective in using this tool is to display ads that are of interest to you and to thereby make our website more interesting for you.
(2) As a result of the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and the further use of the data that are collected by Facebook as a result of using this tool and are therefore providing you with the information at our disposal: the use of Facebook Custom Audiences means that Facebook receives the information that you have visited the corresponding page of our website or have clicked on one of our ads. If you are registered with a service provided by Facebook, Facebook can allocate your visit to your account. Even if you are not registered with Facebook or are not logged into your account, it is possible that the provider will recognize and store your IP address as well as other identifying factors.
(3) The “Facebook Custom Audiences” tool can be deactivated [here and] at https://www.facebook.com/settings/?tab=ads#_if you are a registered user.
(4) Legal basis for the processing of your data: Art. 6, para. 1, no. 1 (f) of the GDPR. Additional information on data processing by Facebook can be found at https://www.facebook.com/about/privacy.
3. A/B Testing
(1) This website also analyzes user behavior by means of A/B testing. This means that we may display our website with slightly varying content depending on the profile that has been assigned to a user. In this way, we can analyze and regularly improve our website and make it more interesting for you as a user. Legal basis for the A/B testing: Art. 6, para. 1, no. 1 (f) of the GDPR.
3. YouTube Videos
(1) Our website integrates YouTube videos that are stored at http://www.YouTube.com and can be played directly on our website.
(2) When you visit our website, YouTube receives the information that you visited the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this Policy are transmitted. This occurs regardless of whether you have logged into a user account provided by YouTube or do not have a user account. When you are logged into Google, your data will be directly allocated to your account. If you do not want your data to be allocated to your profile in YouTube, you must log out before clicking the button. YouTube stores your data as a user profile and uses them for the purposes of advertising, market research, and/or to adapt its website to your needs. Such an evaluation is conducted, in particular (and even for users who are not logged in), to display appropriate advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles; you must contact YouTube if you wish to exercise this right.
4. Google Maps
(1) We use the service of Google Maps on our website. This allows us to display interactive maps directly on the website and to provide you with the convenient use of the map function.
(2) When you visit our website, Google receives the information that you visited the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this Policy are transmitted. This occurs regardless of whether you have logged into a user account provided by Google or do not have a user account. When you are logged into Google, your data will be directly allocated to your account. If you do not want your data to be allocated to your profile in Google, you must log out before clicking the button. Google stores your data as a user profile and uses them for the purposes of advertising, market research, and/or to adapt its website to your needs. Such an evaluation is conducted, in particular (and even for users who are not logged in), to display appropriate advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles; you must contact Google if you wish to exercise this right.
5. Google Tag Manager
● Google Analytics
● LinkedIn Conversion Pixel
● Facebook Conversion Pixels
Section 8: Application for Jobs
Our website offers the opportunity to apply for employment, either via a job advertisement published on our side, or as speculative application. If you make use of these possibilities by providing your personal data, including contact details, experiences, roles, etc. or provide (solicited or unsolicited) special categories of personal data (see Section 7), the information inserted in the application form or otherwise provided (e.g., by you including it in a resume) will be transmitted to Personio as data controller. With regard to the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR. We store this personal data only for internal use to handle your application. We will delete your personal data on completion of the application process if further retention is not required for the establishment, exercise or defence of legal claims occurring out of the application process, or unless this personal data are required for the formation of or performance under a contract.
Please be aware that application forms will be provided and managed by Personio GmbH, Rundfunkplatz 4, 80335 München, Germany, www.personio.com (“Personio”) as our service provider. The personal data you provide will thus be collected and stored on our behalf by Personio and shared with the respective Personio entity(ies) processing your application. See https://www.personio.com/data-security/ for more information.
At your registration on the job application portal, your IP-address and date and time of your registration will be collected. This allows us to prevent misuse of our services. The legal basis for this processing is Art. 6(1)(f) GDPR.