Data protection at Automotive Safety Technologies GmbH The protection of your personal data is very important to us. For this reason, we handle your information responsibly in all data processing procedures and take into account the legal requirements of data protection, in particular the provisions of the EU General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG).
1.0 Scope
This data protection declaration gives you an overview of the following information in particular:
– Which of your data is processed via our websites (hereinafter also referred to as "offer")?? – In what way, to what extent, for what purposes and on what legal basis is this data used?? – What security measures are taken to protect your data?? – How can you object to individual data processing via our websites?? – How can you obtain information about the information disclosed to us and, if applicable. Other data subject rights you are entitled to assert against us?
2.0 Who is your contact person (responsible person) for your data protection concerns??
Is the responsible party in the sense of the data protection regulations for all data processing processes carried out via our offer:
Automotive Safety Technologies GmbH Lilienthalstraße 11 85080 Gaimersheim, Germany
Phone: +49 841 89 95000 Fax: +49 841 89 8491999
Www.Astech-auto.En
Inquiries about data protection as well as the assertion of data subject rights (cf.Further down in this data protection declaration) we ask to be sent to the attention of our data protection officer to the address mentioned above.
3.0 What is the legal basis for data processing on our websites??
Insofar as we obtain your consent for the processing of personal data, Article 6 (1) lit. A DSGVO as legal basis.
When processing personal data that is necessary for the performance of a contract to which you as the data subject are a party, Article 6(1)(1) applies. B DSGVO as legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which we are subject as the responsible party, Article 6 (1) lit. C DSGVO as legal basis.
In the event that vital interests of you or another natural person require the processing of personal data, Article 6(1) lit. D DSGVO as legal basis.
If the processing is necessary to protect a legitimate interest of us or a third party and your interests, fundamental rights and freedoms as a data subject do not outweigh the former interest, Article 6 (1) lit. F DSGVO as legal basis for processing.
The relevant legal basis for the respective processing can be found in the corresponding section of this privacy policy.
4.0 Which technical access data/server log files are collected and stored when using our offer?? We (resp. Our webspace provider) are collecting. Save your data about each access to the offer (so-called server log files or. System and usage data). The access data include:
Name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, your operating system, referrer URL (the previously visited page), IP address and the requesting provider. Legal basis for the storage of this data. The log files is Article 6 paragraph 1 lit. F DSGVO.
We use the log data only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications. These purposes are also our legitimate interest in data processing according to Article 6 (1) lit. F DLC. An evaluation for marketing purposes does not take place in this context.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after 3 months at the latest. A storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. The collection of data to provide the website. The storage of data in log files is mandatory for the operation of the website. Therefore, there is no possibility for you to object.
5.0 How do we handle your personal data when you use our offer??
Personal data is information that can be used to determine a person, i.E. Information that can be traced back to a person. This includes your name, e-mail address or telephone number. But also data about preferences, hobbies, memberships or which websites have been viewed by someone count as personal data.
Personal data will only be collected, used and passed on if this is permitted by law or if you consent to the collection and use of the data.
We would like to point out that, by order of the competent authority, we are entitled in individual cases to provide information about data insofar as this is necessary for the purposes of criminal prosecution, for the prevention of danger by the police authorities of the federal states, for the fulfillment of the statutory tasks of the federal and state authorities for the protection of the constitution, the Federal Intelligence Service or the Military Counter-Intelligence Service or for the enforcement of intellectual property rights. The legal basis for this is Article 6 (1) lit. C DSGVO.
6.0 Contact
When contacting us (for example, by contact form or e-mail), your information will be stored for the purpose of processing the request and in the event that follow-up questions arise.
The legal basis for the processing of data transmitted via the contact form or in the course of sending an e-mail is Article 6, paragraph 1lit. F DS-GVO. If the purpose of contacting you is to conclude a contract, the additional legal basis for the processing is Article 6 (1) lit. B DSGVO.
The processing of personal data from the contact serves us solely for the processing of the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. This includes the following data:
Date/time of contact, IP address, surname, first name, address, mail address.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when the respective conversation with the user has ended. The conversation has ended when the circumstances indicate that the matter in question has been conclusively clarified. Additional personal data collected during the sending process will be deleted after a period of 90 days at the latest.
Right of objection
The user has the possibility at any time to object to the processing of his personal data to the above mentioned address. In such a case, the conversation can not be continued. All personal data stored in the course of contacting you will be deleted in this case.
7.0 What security measures have we taken to protect your data??
We maintain current technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from third parties gaining knowledge. These will be adapted to the current state of the art in each case.
Our Offer's databases are protected by physical, technical, and procedural measures that limit access to the information to specifically authorized individuals in accordance with this Privacy Policy. The information system of our site is located behind a software firewall to prevent access from other networks connected to the Internet. Only employees and agents who need this information to perform a specific task are granted access to personal information. Employees and agents are trained in security and privacy practices.
Standardized SSL encryption technology is used when collecting and transmitting data via our offer.
In the case of communication by e-mail, complete data security cannot be guaranteed.
8.0 Use of cookies: What does this mean for my data??
We do not use cookies.
9.0 Use of analysis tools: What happens to my data in the process?
No analysis tools are used.
10.0 What rights are you entitled to as a data subject?
If your personal data is processed, you are the data subject i.S.D. DSGVO and you are entitled to the following rights against the controller:
10.1 information, correction, restriction of processing and deletion.
You have the right at any time to free information about the data concerning you. Your personal data stored by us, its origin and recipients, as well as the purpose of data processing through our websites. In addition, you have the right to rectification, deletion and restriction of the processing of your personal data, provided that the legal requirements for this are met.
10.2 Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us as the responsible party, in a structured, common and machine-readable format. We can fulfill this right by providing a csv export of the customer data processed about you. You may also request that we send it to a third party.
10.3 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients by the person in charge.
10.4 Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1) lit. E or lit. F DSGVO, this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.
10.5 Revocability of declarations of consent under data protection law
In addition, you can revoke your consent at any time with effect for the future by contacting us using the contact details below.
10.6 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the EU General Data Protection Regulation.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
All information requests, requests for information, the exercise of other data subject rights or objections to data processing can be sent to our data protection officer at the above address.
DATA SUBJECT RIGHTS
Here you can find more information on how to exercise your data protection rights.
1. European Data Protection Regulation (EU GDPR)
The European General Data Protection Regulation (EU-DSGVO or engl. General Data Protection Regulation (GDPR)) is a European regulation for the protection of natural persons with regard to the processing of personal data. Personal data means any information relating to an identified or identifiable natural person (data subject). This new regulation enters into force on 25.05.2018 in force in all European member states.
As a result, for data subjects u.A. The following relevant rights vis-à-vis Automotive Safety Technologies GmbH:
The right to (i) data access, (ii) data transfer, (iii) data erasure, (iv) data rectification, (v) withdrawal of consent, and (vi) restriction of processing.
2. Data subject rights: Groups of data subjects
In order to ensure a transparent presentation of the requested data and targeted processing of your request, a distinction is made between the following groups of data subjects:
(former) employees of Automotive Safety Technologies GmbH, relatives of an employee, applicants, suppliers and service providers, or. Business partners and their employees or visitors. Persons in general traffic.
We ask that you always send your request to us by mail so that we can ensure proper authentication and identification of the person making the request.
The rights of the data subjects are as follows in accordance with Art. 15 to 21 EU GDPR as follows:
You have the right to (i) data disclosure. This includes information about the data stored about you by Automotive Safety Technologies GmbH and the scope of the data processing and transfer carried out by Automotive Safety Technologies GmbH, as well as a copy of the personal data stored about you.
If you make use of your right to data information, you will receive from us information about the data that Automotive Safety Technologies GmbH has stored about you as the person concerned. We will send you this information exclusively by mail.
You have the right to (ii) data transfer. Insofar as we automatically process your personal data provided by you on the basis of your consent or a contract with you (including your employment contract), you have the right to receive the data in a structured, common and machine-readable format. You may transfer this data to another data controller without hindrance by Automotive Safety Technologies GmbH. You also have the right to obtain that the personal data be transferred directly from Automotive Safety Technologies GmbH to another controller, to the extent technically feasible and provided that this does not adversely affect the rights and freedoms of others.
If you exercise your right to data transfer, you will receive the data that Automotive Safety Technologies GmbH has stored about you as a data subject in a machine-readable format. This information incl. We will send you a description of how to download your data by mail only.
You have the right to (iii) data deletion. This means the immediate deletion of your personal data stored by Automotive Safety Technologies GmbH, provided that the legal requirements are met. If we have disclosed your data to third parties, we will inform them of the deletion, insofar as this is required by law.
Please note that your right to erasure is subject to restrictions. For example, you must or. We are not allowed to delete any data that we have to retain due to legal retention periods. Data that we need for the assertion, exercise or defense of legal claims are also excluded from your right of deletion.
If you exercise your right to data deletion, all of your personal data will be immediately and irrevocably deleted from the systems of Automotive Safety Technologies GmbH, unless we are entitled to further processing or you have given us permission to do so. Are obligated.
You have the right to (iv) data correction. This means the immediate correction and/or completion of your personal data stored by Automotive Safety Technologies GmbH.
If you exercise your right to correct data, we will make the requested changes in all our systems. We will send you confirmation of this by mail only.
You have the right to (v) revocation of consent declarations. If you have given your consent to the processing of your personal data, you may revoke this consent at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
If you exercise your right to revoke consent, you revoke all declarations of consent that you have given to Automotive Safety Technologies GmbH. All personal data processed on the basis of your declarations of consent will then be immediately and irrevocably deleted from the systems of Automotive Safety Technologies GmbH, unless we are entitled to further processing or. Are obligated. An example of such an obligation is the performance of a contract to which the data subject is a party.
You have the right to (vi) restriction of processing. This means that under certain circumstances you can request the restriction of processing (d.H. Request the marking of stored personal data with the aim of restricting their future processing). Data will be marked accordingly and, apart from your storage, will only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the EU or an EU member state.
If you exercise your right to restrict processing, we will block your personal data in accordance with the legal requirements. The confirmation of this will be sent to you by mail only.
3. Process flow for data subject requests
Upon receipt of your postal request, the GDPR request form will be sent to you. If you have made several requests at the same time, they will be processed as follows:
1. Data deletion, 2. Restriction of processing, 3. Revocation of all declarations of consent, 4. Data transfer/data information, 5. Data correction.
We would like to point out that the request exclusively concerns Automotive Safety Technologies GmbH. Additional personal data may also be held by third parties, for example by a partner of Automotive Safety Technologies GmbH. Declarations of consent to third parties must be revoked there.
Upon receipt of your signed GDPR request form by Automotive Safety Technologies GmbH, the request will be processed in a timely manner. A feedback, if necessary incl. Data, will be delivered exclusively by mail. We ask for your understanding in this case.
If you would like to exercise your data protection rights as a data subject of another group, we ask you to contact us by mail.
Automotive Safety Technologies GmbH Privacy Lilienthalstr. 11 85080 Gaimersheim
4. Data protection officer
Contact details of our company data protection officer:
Automotive Safety Technologies GmbH Data Protection Officer Lilienthalstr. 11 85080 Gaimersheim
5. Templates
Note: Please send these templates to us only if you have been requested to do so by us.
Power of attorney: You need a power of attorney if you are not requesting on their behalf. The data subject can authorize you using the enclosed power of attorney to exercise the desired data subject right on your behalf.