PRIVACY POLICY ON THE USE OF THIS WEBSITE
With this privacy policy, we would like to inform you on what basis and for what purposes we process personal data that we collect from you during your use of this website or that you provide to us.
Please note further privacy statements about our processing of customer data.
Your data will be processed and stored by us in accordance with applicable data protection laws, in particular the General Data Protection Regulation and the Federal Data Protection Act, and only to the extent necessary.
We have taken technical and organizational measures to ensure that the data protection regulations are observed by both us and our service providers. Nevertheless, internet-based data transmissions can generally have security gaps, and absolute protection cannot therefore be guaranteed. For this reason, users are free to transmit personal data to us via alternative means, e.g. by post.
1. Who is responsible for data processing and who can I contact?
The controller within the meaning of the General Data Protection Regulation (GDPR) and the service provider within the meaning of the Telemedia Act (TMG) is:
Weber Automobile GmbH
Martin-Luther-King-Str. 10
63452 Hanau
06181-9809-0
06181-9809-31
axel.weber@weberautomobile.de
In addition:
We have appointed a data protection officer. You can contact them using the details above or at:
Data Protection Officer:
Dr. phil. Philipp Bert
TÜV SÜD Akademie GmbH
Data Protection Consulting Services
Westendstraße 160
80339 Munich
Phone: + 49 (0) 6151-600-399
Mobile: +49 (0)151 70650133
philipp.bert@tuvsud.com
2. What data do we collect and process and for what purposes?
2.1 Data you provide to us in general inquiries
When you send us inquiries, we may process your name, contact details (e.g., telephone number, email address, and postal address), as well as any other information you provide when filling out forms or other data fields on our website.
This includes information you provide when you send us an inquiry via the general contact form or when you provide us with feedback.
We process this data in the context of our legitimate interest in processing your inquiries and, if necessary, contacting you (Article 6 (1) (f) GDPR).
2.2. Data you provide to us when you enquire about specific offers
For inquiries regarding workshop appointments, trade-ins, test drives, a vehicle we offer, etc., we also process the additional information and offer data you provide in the form.
This is done to fulfill a contract to which you are a party or to carry out pre-contractual measures (Article 6 (1) (b) GDPR).
2.3 Data that you provide to us with your consent for marketing and communication purposes
If you give us your consent to process your contact and vehicle data for marketing and communication purposes, Art. 6 (1) (a) GDPR serves as the legal basis for processing your personal data.
2.4. Data we process for direct marketing purposes
In connection with the sale of a product or service to you, we may process your postal contact details outside of the existence of a specific consent within the scope of our legitimate interest according to Art. 6 (1) (f) GDPR in order to occasionally send you information about new products and services in this way.
Under the legal requirements of Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), we are also entitled to use the email address you provided when placing a binding order for a product or service for direct advertising of our own, similar goods or services.
2.5 General data we collect when you use this website
When you visit our website, a series of general data is collected and stored in log files. This may include the browser types and versions used, the operating system used by the accessing system, the website from which an accessing device reaches our website (so-called referrers), the resources you access (individual websites with offers), the date and time of access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing device and other similar data and information. When using this general data, we do not draw any conclusions about the data subject.
We process this data within the scope of our legitimate interests pursuant to Art. 6 (1) (f) GDPR in order to correctly deliver the content of our website, adapt the presentation of the content of our website to your device, ensure the long-term functionality of our website and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.
We also evaluate this pseudonymously collected data for statistical purposes, but also to increase data protection and data security, ultimately ensuring an adequate level of protection for the personal data we process. The pseudonymous data in the server log files are stored separately from all personal data provided by a data subject.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended. IP addresses are generally deleted no later than 90 days after they are collected. Storage beyond this period is possible. In this case, the users' IP addresses are distorted so that they can no longer be assigned to the calling client, unless their further retention is necessary for evidentiary purposes.
2.6. Third-party services (plugins and embedded functions and content)
We integrate functional and content elements into our online offering that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example, map services or videos (hereinafter collectively referred to as "content").Integration always requires that the third-party providers of this content process the user's IP address, since without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content or functions. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, the time of visit and other information about the use of our online offering, as well as be linked to such information from other sources.
If we ask users for their consent to the use of third-party providers, the legal basis for the processing of data is consent (Art. 6 (1) (a) GDPR). Otherwise, user data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services) (Art. 6 (1) (f) GDPR). In this context, we would also like to draw your attention to the information on the use of cookies in this data protection declaration.
2.6.1.Google Maps
We integrate maps from the "Google Maps" service provided by Google. You can activate this service in the cookie settings or by clicking on the map to use an interactive map. The data processed for this purpose may include, in particular, users' IP addresses and location data, which, however, will not be collected without their consent (usually done through their mobile device settings).
The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Website: https://cloud.google.com/maps-platform;
Privacy Policy: https://policies.google.com/privacy;
Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated.
By loading the resource, you also consent, in accordance with Art. 49 (1) (a) GDPR, to your data being processed in the USA. The European Court of Justice considers the USA to be a country with an inadequate level of data protection by EU standards. In particular, there is a risk that your data could be processed by US authorities for control and monitoring purposes, possibly without legal recourse.
By using Google Maps, you as a user enter into a direct user relationship with Google.
2.6.2.Vimeo
Our website uses embedded Vimeo videos.
You can activate this service in the cookie settings or by clicking on the placeholder image to display the video. To do this, your browser establishes a direct connection to the Vimeo servers. The content of the Vimeo video is transmitted by Vimeo directly to your browser, which integrates it into the website. We have no influence on the extent of the data that Vimeo collects when the video is made available, but we assume that your IP address is also recorded. The purpose and scope of the data collection and the further processing and use of the data by Vimeo, as well as your rights and setting options for protecting your privacy, can be found in Vimeo's privacy policy. If you are a registered user with Vimeo and do not want Vimeo to collect data about you via our website and link it to your member data stored by Vimeo, you must log out of Vimeo before visiting our website.
The service provider, and therefore the recipient, is Vimeo, Inc. 555 West 18th Street New York, New York 10011, USA
Website: https://www.vimeo.com;
Privacy Policy: https://vimeo.com/privacy
By loading the resource, you also consent, in accordance with Art. 49 (1) (a) GDPR, to your data being processed in the USA. The European Court of Justice considers the USA to be a country with an inadequate level of data protection by EU standards. In particular, there is a risk that your data could be processed by US authorities for control and monitoring purposes, possibly without legal recourse.
2.6.3.YouTube
Our website uses embedded YouTube videos.
You can activate this service in the cookie settings or by clicking on the placeholder image to display the video. To do this, your browser establishes a direct connection to the YouTube servers. The content of the YouTube video is transmitted from YouTube directly to your browser, which integrates it into the website. We have no influence on the extent of the data that YouTube collects when the video is made available, but we assume that your IP address is also recorded. The purpose and scope of the data collection and the further processing and use of the data by YouTube, as well as your rights and setting options for protecting your privacy, can be found in YouTube's privacy policy. If you are a registered user with YouTube and do not want YouTube to collect data about you via our website and link it to your member data stored on YouTube, you must log out of YouTube before visiting our website.
The service provider, and therefore the recipient, is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
Website: https://www.google.com;
Privacy Policy: https://policies.google.com/privacy;
Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated.
By loading the resource, you also consent, in accordance with Art. 49 (1) (a) GDPR, to your data being processed in the USA. The European Court of Justice considers the USA to be a country with an inadequate level of data protection by EU standards. In particular, there is a risk that your data could be processed by US authorities for control and monitoring purposes, possibly without legal recourse.
2.7. Data we process using your device (e.g. cookies)
We and our partners store and/or access information on your device, e.g., unique identifiers in cookies, to process personal data. This may involve storing information that is transferred from our web server or third-party web servers to users' web browsers and stored there for later retrieval. This primarily serves to make our offering more user-friendly and effective, to measure its reach, and to offer certain basic functions.
You can access and manage your preferences here and access summary information about the individual cookie processing and, in particular, change related settings or revoke your individual consents.
2.7.1 Cookie- or device-related other data processing types
For example, we use "session cookies," which are only stored for the duration of the current visit to our website, or use the local storage (e.g. to enable the use of functions). In doing so, a randomly generated unique identification number, a so-called session ID, is regularly stored in order to assign multiple requests from a user to the session. Cookies can also contain information about their origin and storage period, as well as information about settings, preferences, the device and usage. Session cookies are deleted when you have finished using our online offering, for example by logging out or closing the browser. In contrast, some cookies or information remain stored in the browser's local storage for a predefined period in order to use the information stored there for repeated visits.
2.7.2. Technically necessary cookies used (category: necessary cookies)
The Klaro cookie consent management tool sets a cookie to manage and retain your consent. It is stored for a period of five months.
In addition, session cookies or local storage are used to provide the vehicle comparison functions. Typically, the following data is processed on your device.
- Storage of the vehicle codes of the vehicles saved by the user for comparison
- Saving the parameters and results of a search to deliver results faster
- Saving the links of the detail page of a selected or found vehicle
2.7.3. Cookies and scripts used based on your consent (Category: Statistics/Marketing)
If you have given your consent, the following services will use certain cookies or similar technologies such as tracking pixels and scripts to collect data for the following purposes.
We use the web analytics service Google Analytics for usage analysis and reach measurement (example cookie names: ga, _gat, _gid). Google Ireland Ltd. receives the data as a third party. The information stored in cookies is stored for a maximum of 24 months.
The service provider, and therefore the recipient, is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
website: https://www.google.com;
privacy policy: https://policies.google.com/privacy;
We use the web analysis service Modix Analytics (Piwik) for usage analysis and reach measurement (example cookie names: _pk_id.xxxxx, _pk_ses.xxxxx). Modix GmbH is the recipient of the data and our processor. The information stored in cookies is stored for a maximum of 13 months.
We also carry out retargeting for advertising purposes, subject to your consent. Relevant cookies or similar technologies such as scripts and pixels may be set via our website by our advertising partner adform and its partners. They may be used by these companies to create a profile of your interests and show you relevant advertising on other websites, particularly about Honda vehicles. They work by uniquely identifying your browser and device. Ads may be shown to you based on the content you view, the application you use, your approximate location or your device type. For this purpose, your user profile is marketed to different advertising interested parties using real-time bidding. The storage period for the information stored in cookies is a maximum of 2 months.
The service provider, and one of the recipients, is Adform A/S, Silkegade 3B, ST. & 1., 1113 Copenhagen, Denmark.
Website: https://www.adform.com;
Privacy Policy: https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/
When using the aforementioned services, our partners typically process the following data about your device and your use of this website
- IP address
- Date and time of visit
- Usage data
- Click path
- App updates
- Browser information
- Device information
- JavaScript support
- Visited pages
- Referrer URL
- Downloads
- Location information
By loading the Google Analytics and Adform ReTargeting/Tracking resource, you simultaneously consent, in accordance with Art. 49 (1) (a) GDPR, to your data being processed in the USA. The European Court of Justice considers the USA to be a country with an inadequate level of data protection by EU standards. In particular, there is a risk that your data could be processed by US authorities for control and monitoring purposes, possibly without legal recourse.
3. How long do we store your data?
The data stored by us is deleted as soon as it is no longer required for its intended purpose and there are no statutory retention periods that prevent deletion. If user data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.According to legal requirements, documents relevant for taxation are typically retained for 6 years in accordance with Section 257 Para. 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with Section 147 Para. 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
4. Other recipients?
In addition to service providers acting on our behalf, we may also disclose your personal data to third parties if we are required to disclose or share your personal data in order to comply with a legal obligation or to protect the rights, property, or safety of ourselves, our customers, or third parties.Service providers we engage may receive personal data in the course of fulfilling their contract if they meet special confidentiality requirements and are contractually obligated to do so. These may include, for example, companies in the following categories: IT helpdesk, IT hosting and maintenance, and telecommunications providers. In particular, Modix GmbH, which provides and maintains this website, is worth mentioning.
5. Is there an obligation to provide data?
As part of our contractual relationship, you must provide the personal data necessary for its initiation, implementation, and fulfillment of the associated contractual obligations, or you are legally obligated to collect such data. Without this data, we will generally have to refuse to conclude a contract. For this purpose, we have marked mandatory fields on the forms accordingly.
6. What rights do you have?
Every person affected by our personal data processing has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR, and the right to data portability pursuant to Article 20 GDPR. The restrictions set out in Sections 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right to information and the right to erasure. Furthermore, there is a right to lodge a complaint with the data protection supervisory authority responsible for us pursuant to Article 77 GDPR in conjunction with Section 19 of the German Federal Data Protection Act (BDSG).
6.1 Information about your right of objection under Article 21 GDPR
6.1.1. Case-specific right of objection
You have the right to object at any time to the processing of personal data concerning you which is based on Article 6 (1) (f) GDPR (data processing on the basis of a balance of interests), for reasons arising from your particular situation.
In individual cases, we also process your personal data for direct marketing purposes. You then also have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If
you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. In cases of direct marketing by e-mail, you can revoke your consent to receive it at any time without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to the contact details mentioned above (e.g. email, fax, letter) is sufficient for this purpose.
6.1.2. Revocation of consent given
The data subject may revoke the consent given to us at any time. Revoking the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
6.1.3. Exercise of objection or revocation of consent granted
The objection can be made informally and can be sent to us by telephone or email, for example by using our contact form .
7. Links to third-party websites
Our website may contain links to and from the websites of our partners and other providers, to which this Privacy Policy does not apply.When you visit a website of these third parties, their privacy policies and terms of use apply accordingly.