Thank you for visiting our website and for your interest in our company and our offers. Despite careful supervision, we are not liable for external links to third-party content as we have neither initiated the transmission of this information nor chosen or changed the recipients of this information or the information itself.
The protection of your personal data that is collected, processed and used when you visit our website is important to us and is governed by legal provisions which you can find more about by visiting sites such as www.bfdi.bund.de/EN.
The following information explains what information we record when you visit our website and how this information is used:
WHEN WE COLLECT AND STORE PERSONAL DATA AND HOW AND WHY WE USE IT
a) When you visit our website
Whenever a customer (or any other user) visits our website, information is sent automatically to the server of our website by the internet browser used on the customer’s end device (computer, laptop, tablet, smartphone, etc.). This information is temporarily stored in a log file.
The following data is recorded without any action on your part and is stored until it is automatically erased:
- IP address of the computer making the request, device ID or individual device identifier, and device type
- name of the file accessed and the volume of data transferred as well as the date and time it was accessed
- notification of successful access
- requesting domain
- description of the type of internet browser used and possibly the operating system of your end device and the name of your access provider
- your browser history data and your standard weblog information
- location data, including location data from your mobile device Please note that most mobile devices allow you to control or deactivate the use of location services via the settings menu.
We have a legitimate interest in accordance with Article 6 (1) sentence (1) letter (f) GDPR in collecting this data for the following purposes: Ensuring a connection is established smoothly and that the website is easy to use, evaluating the system security and stability and for other administrative purposes.
Under no circumstances do we use the data we collect to deduce information about you.
b) When we conclude a contractual relationship
When we conclude a contractual relationship on our website, we ask you for the following personal data:
- your personal details such as name, email, address and telephone number
- other personal data which we are legally obliged or entitled to record and process and which we need to be able to authenticate and identify you and to review the data collected by us.
We process the data specified above in order to conclude the contractual relationship. The data is processed on the basis of Article 6 (1) letter (b) GDPR. The storage period is limited to the purpose of the contract and, if applicable, legal and contractual document retention obligations.
c) For enquiries via the service portal
You can enter enquiries about the vehicle in our service portal. The following data is collected and processed in the service portal:
- VIN / serial number
- Is the vehicle registered?
- Date of first registration
- Contact details:
- Contact person
- House number
- Reason for enquiry
- Description of the warranty service // Description of the problem
- Cost estimate (scan / PDF)
- Costs of the CT
- Scan of vehicle registration document
- Scan of maintenance booklet
- Pictures / videos of the problem
- Part numbers of the spare parts // Description of the spare parts
The data is collected and processed using the "Jira" software (service management). The Jira software is a product of
Atlassian Germany GmbH
Your data is processed in the "Atlassian Cloud". Your data is stored by "Atlassian Germany GmbH" in "AWS data centres" in Frankfurt a. M. in Germany. In the case of warranty and goodwill, the aforementioned data will be processed to process the contractual relationship. The data is processed on the basis of Art. 6 para. 1 lit. b GDPR. The storage period is 10 years. In all other cases in which you use the "service portal", it is used to receive enquiries (e.g. for spare parts) from you. The data is processed on the basis of Art. 6 para. 1 lit. f GDPR. The storage period is limited to the processing of your enquiry and, if applicable, statutory and contractual retention obligations.
TRANSFER OF PERSONAL DATA
We do not transfer your data to third parties for any purposes other than those listed below.
We transfer your data to third parties only if:
- you have given your explicit consent for us to do so (in accordance with Article 6 (1) sentence (1) letter (a) GDPR)
- this is necessary to conclude a contractual relationship with you (Article 6 (1) letter (b) GDPR)
- there is a legal obligation to do so (Article 6 (1) letter (c) GDPR)
- the transfer is necessary for the establishment, exercise or defence of legal claims and there are no reasons to assume that you have an overriding legitimate interest in the non-disclosure of your data (Article 6 (1) sentence (1) letter (f) GDPR).
However, in these cases, the extent of the data transferred is limited to the required minimum.
Our data protection provisions are in accordance with the applicable data protection regulations and the data is processed only in the Federal Republic of Germany, the European Union or other countries with appropriate levels of data protection (e.g. Switzerland). We do not and do not intend to transfer data to third countries.
DATA TRANSFER TO THIRD COUNTRIES
In the context of a transfer of personal data to an organisation or a company in a non-EEA country, a so-called "third country" (non-member state of the European Economic Area (EEA) including the European Union) or a contract processing by companies there, this always takes place on the above-mentioned basis. To ensure data protection-friendly processing, we only include companies that are subject to a certified data protection level or assure us of this standard via officially published standard contracts (EU standard contract clauses).
RIGHTS OF THE DATA SUBJECT
We will happily inform you upon request whether we have stored personal data concerning you and, where that is the case, what data that is (Article 15 GDPR), and in particular of the purpose of the processing, the category of the personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure or restriction of processing of personal data or to object to such processing, the right to lodge a complaint, the source of your data where it is not collected by us, and the existence of automated decision-making, including profiling.
You also have the right to have your potentially inaccurate personal data rectified and the right to have incomplete personal data completed (Article 16 GDPR).
In addition, you have the right to obtain from us the restriction of processing of your data, provided that the relevant legal requirements apply (Article 18 GDPR).
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to request that this data be transferred to another controller (Article 20 GDPR).
You also have the ‘right to be forgotten’, which means you can obtain from us the erasure of your personal data, provided that the relevant legal requirements apply (Article 17 GDPR).
Irrespective of this, we will automatically erase your personal data if the purpose of the data collection no longer applies or if the data has been processed unlawfully.
You have the right under Article 7 (3) GDPR to withdraw your previously given consent from us at any time. This will mean that we will not be allowed to process your data in the future as we will no longer have your consent to do so.
You also have the right to object to the processing of your personal data, provided that the right to object is provided for by law. We will also automatically erase your personal data in the event of an effective withdrawal of consent (Article 21 GDPR).
To exercise your right to withdraw consent or your right to object, you must simply send an email to: firstname.lastname@example.org.
In the event of violations of data protection regulations, you have the option of lodging a complaint to the State Data Protection and Freedom-of-Information Officer: Lautenschlagerstraße 20, 70173 Stuttgart, Germany,
email: email@example.com, www.baden-wuerttemberg.datenschutz.de
INTEGRATION OF SERVICES FROM THIRD-PARTY COMPANIES
Our website uses services from third-party companies in order to make the website more efficient. In order to maximise privacy, we have integrated as few services as possible, which are listed below. In order to ensure that basic services can be provided, at least the user’s IP address is used. In special cases, the services may use tracking pixels or cookies.
DURATION OF THE DATA STORAGE
We store the data we have collected for as long as is necessary for carrying out contracts that have been agreed with us or until you exercise your right to erasure or your right to transfer the data to another company.
In order to optimise the usability of our website, we use temporary cookies that are stored on your end device for a specified period of time. If you return to our website in order to make use of our services, it will automatically recognise that you have already visited the site and remember which information and settings you submitted so that you do not have to input these again.
|Analytics / Marketing cookie
ONLINE MARKETING / ANALYSIS TOOL
We use tracking measures on the basis of Article 6 (1) sentence (1) letter (f) GDPR and Section 15 (3) of the German Telemedia Act (Telemediengesetz). We use tracking measures to ensure our website is designed to meet the needs of users and is continually optimised. We also use tracking measures in order to compile statistics on the use of our website and to evaluate and optimise our website. These interests are considered legitimate within the meaning of the aforementioned provision.
This website uses the open source web analytics service Matomo. Matomo uses technologies that enable cross-page recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymized before storage.
With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. This allows us to find out, among other things, when which page views were made and from which region they come. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
CleverReach newsletter service
You can sign up to receive our newsletter via your email to keep up to date with our latest products and services if you agree to receive the newsletter. The legal basis for the processing of this information is Article 6 (1) sentence (1) letter (a) GDPR. We will store your email address for as long as you are signed up to our newsletter.
This service uses the double opt-in process. You will receive an email with a link to confirm that you are the owner of that email account and that you would like to receive updates via our email service. If you do not confirm your subscription within 96 hours of receiving the email request for confirmation, the personal data you provided will not be processed and will be erased.
You can unsubscribe from the newsletter by clicking on the link provided in every issue.
Plug-ins for the Twitter social network are integrated on our website. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Clicking on the LinkedIn button establishes a connection to the LinkedIn servers. LinkedIn transfers the content of the plug-in directly to your browser, which integrates the content into the website. LinkedIn is thereby informed that you have visited our website.
If you are signed in to your LinkedIn account, your visit to our website can be directly attributed to your profile by clicking on the LinkedIn button. Even if you do not have a profile, the possibility that LinkedIn will store your IP address cannot be ruled out.
Our website uses social plug-ins (‘plug-ins’) from the facebook.com social network, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA (‘Facebook’). If you open our website with the plug-in, it will establish a direct connection with the Facebook servers. This will inform Facebook that you have visited the site.
If you are signed in to your Facebook account, your visit to our website can be directly attributed to your profile by clicking on the plug-in. Even if you do not have a profile, the possibility that Facebook will store your IP address cannot be ruled out.
The purpose and extent of the data that Facebook collects, processes and uses and your rights in this respect and the settings available to protect your privacy can be found in Facebook’s privacy notice (https://www.facebook.com/about/privacy/).
If you have a Facebook account and do not want Facebook to collect data about you via our website and to link this data with your account data stored on Facebook, you must log out of Facebook before visiting our site and delete the relevant Facebook cookies. It is also possible to block Facebook social plug-ins with browser add-ons such as the ‘Facebook blocker’.
Plug-ins for the Instagram social network (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) are integrated on our website. The Instagram plug-in is indicated by the Instagram button on our website. If you click on the Instagram button whilst you are signed in to your Instagram account, you can link the content of our website to your Instagram profile. This allows Instagram to attribute your visit to our website to your user account.
We endeavour to implement all the necessary technical and organisational security measures to store your personal data such that it is not accessible to third parties or to the public. Should you wish to contact us via email, please be advised that we cannot fully guarantee the confidentiality of the information transferred using this communication method. We therefore recommend that you send us confidential information by post only.
Last updated April 2022
NAME AND CONTACT DETAILS FOR THE DATA PROCESSING CONTROLLER
This data protection information applies to data processing carried out by:
Cenntro Automotive Europe GmbH (vormals TROPOS MOTORS EUROPE GmbH), Heitkampsfeld 20, 44652 Herne, Germany
Data protection officer: