Privacy statement and consent on data use

 

General notes

The goal of data protection and also our goal as WABCOWÜRTH Workshop Services GmbH is to handle personal data in such a way that the personal rights of the individual are protected.

To ensure the fulfillment of this objective, entities responsible for the processing of personal data are obliged to comply with the regulations from the EU legislation (Data Protection Regulation - GDPR) as well as the national laws on data protection.

Personal data may only be collected and processed if this is expressly permitted by the GDPR or another law. Essential basic principles of the GDPR are

• Lawfulness of processing, fairness of processing, transparency
• Earmarking
• Data minimization
• Accuracy of data processing
• Memory limitation and deletion concepts
• Integrity and confidentiality

Acting responsibly when handling personal data, as well as the risk-conscious use of IT systems and applications, are further central objectives WABCOWÜRTH Workshop Services GmbH

All personal data collected by WABCOWÜRTH Workshop Services GmbH will be stored and processed exclusively for your individual support, for the preparation and fulfillment of contracts, out of legitimate interest, for compliance with legal obligations, the transmission of product information or the submission of service offers as well as for order processing or with the consent of the person concerned.

Information obligations of the controller and rights of the data subject

Responsible entity

WABCOWÜRTH Workshop Services GmbH

Schliffenstraße 22

74653 Künzelsau-Gaisbach

Phone: +49 7940 981863-0

E-mail: info@wabcowuerth.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Contact details of the data protection officer
E-Mail: datenschutz@wabcowuerth.com

Purpose of the data collection, processing or use

We are specialists in the field of multi-brand diagnostics, windshield calibration systems and air conditioning service equipment and offer our customers suitable diagnostic solutions for motor vehicles, trailers, vans or buses. Together with our customers we create an individual package of hardware, software, hotline and training. Personal data is collected, processed or used to fulfill this corporate purpose or supporting secondary purposes, such as customer consulting or the further development of technical diagnostic solutions for our customers.

The collection, processing or use of personal data is carried out to fulfill this corporate purpose or supporting secondary purposes, such as customer advisory service

How do we collect your data?

Your data is collected on the one hand by you providing it to us. This can be, for example, data that you enter in a contact form or communicate when preparing an offer. The provision of data is voluntary and is subject to your decision.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). The collection of this data takes place automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior. Data that is collected personally from you and not via the website is used to create the customer number, order processing, but also for your support and the sending of newsletters, offers and service offers.

Groups of persons concerned and related data or data categories

The affected groups of people are

• current employees,
• former employees,
• Applicants,
• Interested parties,
• Customers,
• Suppliers,
• Service provider and
• other business partners.

The relevant data includes all personal data required to fulfill the respective purpose.

Legal basis

Processing of personal data is only lawful if permitted by law, i.e. if there is a legal basis, or if the person has consented.

Personal data is processed in our company only in accordance with the statutory provisions. These are usually,

• if there is consent to the processing of the personal data (Art. 6 para. 1 lit. a GDPR),
• if personal data must be processed in order to fulfill a contract or initiate a contract (Art. 6 para. 1 lit. b GDPR),
• if the processing of personal data is necessary to comply with a legal obligation (Art. 6 para. 1 lit. c GDPR) or
• if we process personal data on the basis of a legitimate interest or on the basis of a legitimate interest of a third party (Art. 6 para. 1 lit. f GDPR).

Specificity on the legal basis of data processing for contractual purposes

WABCOWÜRTH Workshop Services GmbH directs its offer primarily to tradesmen. Therefore, when processing personal data for contractual purposes, the legal basis is, unless otherwise specified in the individual case,

1. if you are a registered trader or freelancer, Art. 6 para. 1 lit. b GDPR, the data processing is for the purpose of implementing the contract or pre-contractual measures with the data subject; or

2. if you act as an employee of a company, e.g. as an employee in purchasing, Art. 6 (1) lit. f GDPR, the legitimate interest of WABCOWÜRTH Workshop Services GmbH. The legitimate interest of WABCOWÜRTH Workshop Services GmbH in this case is the sale of its own goods and services, which is based in particular on entrepreneurial freedom and professional freedom.

In the following, for the sake of simplicity, we will refer only to "data processing for contractual purposes".

Potential recipients in the event of data transfer

The potential recipients of transferred personal data are

• public bodies, if a legal obligation exists
• service providers and other business partners, insofar as it is necessary to fulfill the respective purpose and a legal provision permits or requires this or the data subject has consented.

Planned data transfer to third countries

Should it become necessary to transfer data to third countries, this shall be done exclusively for the conclusion or fulfillment of contracts - insofar as this does not conflict with the interests of the data subject worthy of protection - taking into account all requirements under data protection law. If, where applicable, there is an intention to transfer the personal data to a third country or an international organization, the data transfer shall take place on the basis of an adequacy decision. Should a data transfer nevertheless take place, we refer to the fact that suitable guarantees or binding internal data protection regulations exist, or that a strict standard is always applied in favor of the data subject when weighing up the interests of the data subjects and the contracting parties.

Standard period for the deletion of data

The deletion of personal data is carried out in accordance with the respective applicable legal or contractual regulations for data deletion, taking into account legal or contractual retention obligations. Such legal obligations result, among others, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods specified there for storage or documentation are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship.

Furthermore, other statutory provisions may require a longer retention period, such as the preservation of evidence within the scope of statutory limitation provisions. In this context, the regular statute of limitations is three years; in certain cases, however, statutes of limitations of up to 30 years or, in individual cases, even longer than this period may be applicable.

The deletion of personal data that is not subject to a legal or contractual obligation to retain or delete takes place immediately after it has become dispensable for the fulfillment of the respective purpose.

Your rights regarding data protection (Art. 12 ff GDPR)

The data subject has various rights with regard to data protection. These rights are explained below. The above contact details can be used to exercise these rights.

Right of access (Art. 15), rectification (Art. 16), restriction of processing (Art. 18) and erasure (Art. 17)

Within the framework of the applicable legal provisions, you have the right at any time to free information about the personal data stored by the responsible party and concerning you, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data.

Right of objection (Art. 21 GDPR)

Every data subject has the right to object to the processing of his or her data if the data processing is based on Art. 6 (1) f GDPR or for direct marketing purposes. In the event of an objection to the processing of your personal data, we will examine your objection on a case-by-case basis. If we are required by data protection law to delete your personal data due to your objection, we will delete your data taking into account legal retention obligations. The objection does not affect the permissibility of the processing that took place until the objection.

Right to information

Every data subject has the right to know whether the provision of the personal data is required by law or by contract or is necessary for the conclusion of a contract, whether the data subject is obliged to provide the personal data, and what the possible consequences of not providing the personal data would be.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of complaint to the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Use of your data for (direct) marketing purposes

Irrespective of your subscription to our newsletter, we may use your data, in particular your e-mail address, for (direct) marketing purposes. We will use your data for this purpose only if you have not objected to it. We hereby inform you, as well as whenever you contact us, that you can object to the use of your data for (direct) marketing purposes at any time without incurring any costs other than the transmission costs at the basic rates.

You can contact us at any time at the above address with regard to this and other questions on the subject of data protection.

If you would like to know which personal data we have stored and to whom we have transferred which data, we will be happy to provide you with this information in the form of a - free - written self-disclosure. We hope you will understand that, for reasons of data protection, we are not permitted to provide any information by telephone, as it is not possible to clearly identify you over the phone.

Data collection on our website / cookies / analysis tools/ plugins

We process your data in the data centers of Würth IT GmbH, Drillberg 6, 97980 Bad Mergentheim (hereinafter "Würth IT"). The services of Würth IT are used to provide our services. We have concluded an order processing contract with Würth IT.

For more information on how Würth IT handles personal data, please refer to the data privacy statement at https://www.wuerth-it.com/en/it/datenschutz.php

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Server log files

We automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The legal basis for data processing is Article 6 para. 1 lit. f GDPR, § 25 para. 2 no. 2 TTDSG. As the website operator, we have a legitimate interest in the correct presentation of the website and in ensuring the secure operation of the website.

The data processed in connection with the collection of server log files will be stored for as long as necessary for the aforementioned purposes.

Analysis tools

WABCOWUERTH web analysis based on Matomo / Piwik

We use functions of our own web analytics service based on the open source software Matomo (PIWIK PRO) for statistical evaluation about the use of our website. The web application is operated on our web hosting service provider's own servers, so the data is not shared with third parties.

The following data is collected: the type and version of browser you use, the operating system you use, your country of origin, the date and time of the server request, the number of visits, the time you spend on the website and the pages you visit.

IP anonymization

We have activated the IP anonymization function. This means that your IP address is shortened by us before it is stored.

Storage duration

web analytics cookie 12 months

Legal basis

The processing of data for statistical evaluation of our website is based on Art. 6 para. 1 lit. a GDPR, your consent in the consent banner. In addition, we have a legitimate interest to evaluate the use of our online offer in order to compile reports on website activities and to provide further services related to website and internet use (Art. 6 para. 1 lit. f GDPR).

Objection to data collection

If you have consented to anonymized data collection, you can revoke this consent at any time with effect for the future by using the

Change Cookie Settings

Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested are stored on the basis of Art. 6 (1) lit. b GDPR. Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these are treated separately in this privacy policy.

Cookie Page

"Do Not Track" settings

You can also control the storage of cookies through the "Do Not Track" (DNT) settings in your Internet browser. Depending on the browser, the DNT is either a setting in the program settings or a so-called plug-in or add-on. When activated, the browser signals that tracking measures of this tool are not desired without your explicit consent. If the setting is activated, the tracking functions of this tool are anonymized on our part. Please note that the procedure for activating DNT differs depending on the Internet browser used.

Please note that changing the cookie setting does not automatically delete cookies already set in your browser. If necessary, please delete the cookies you no longer want manually via your browser settings.

Plugins and Tools

Friendly Captcha

Friendly Captcha

We use Friendly Captcha (hereinafter "Friendly Captcha") on our website. Provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.

Friendly Captcha is intended to check whether the data entry on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, Friendly Captcha analyzes the behavior of the website visitor based on various characteristics. Friendly Captcha evaluates various information for the analysis (e.g. anonymized IP address, referrer, visit time, etc.). For more information, please visit: https://friendlycaptcha.com/legal/privacy-end-users/.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.

Conclusion of a contract for order processing

We have concluded a contract with Friendly Captcha GmbH pursuant to Art. 28 (3) GDPR, in which we obligate Friendly Captcha GmbH to protect our customers' data and not to disclose it to third parties.

Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function comfortably. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of Google Maps may also involve the transmission of personal data to the servers of Google LLC. in the USA. For the transmission of personal data to Google LLC. based in the USA, Google LLC. has concluded so-called standard contractual clauses of the Commission of the European Union with us. These can be viewed here: https://business.safety.google/intl/en/adsprocessorterms/

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment to your profile at Google, you must log out of your Google account before calling up a map. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

The legal basis for data processing by WABCOWÜRTH Workshop Services GmbH is Art. 6 para. 1 lit. a GDPR, your consent. You can revoke your consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Further information on Google Maps and Google's privacy policy can be found at:

• https://www.google.com/intl/de/policies/privacy/ (General Google Privacy Statement)
• https://policies.google.com/terms?hl=de#toc-software (Terms of Use Google Services)

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

YouTube

We have integrated YouTube videos into our online offering, which are stored on www.youtube.com and can be played directly from our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA. For the transmission of personal data to Google LLC. based in the USA, Google LLC. has concluded so-called standard contractual clauses of the Commission of the European Union with us. These can be viewed here: https://privacy.google.com/businesses/processorterms/

These are all integrated in "extended data protection mode", which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos, data is transmitted. We have no influence on this data transmission. You will be explicitly informed again before transmission that a transmission of your data to YouTube takes place during playback. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not wish to be associated with your YouTube profile, you must log out of your Google account before playing the video. YouTube stores your data as user profiles and uses them for the purpose of advertising, market research and / or tailored design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The legal basis for data processing by WOW! Würth Online World GmbH is Art. 6 para. 1 lit. a GDPR, your consent. You can revoke your consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Further information on YouTube and Google's privacy policy can be found at:

• https://www.google.com/intl/de/policies/privacy/ (General Google Privacy Statement)
• https://policies.google.com/terms?hl=de#toc-software (Terms of Use Google Services)
• https://www.youtube.com/static?gl=DE&template=terms&hl=de (Terms of Use YouTube)

Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

Category of the transmitted data

• Your request
• Company name
• Name, first name, contact person
• E-mail address
• Phone
• Your message

The processing of the data entered in the contact form is based on our legitimate interest to have contact with you, our customers, and to improve our quality of advice. (Art. 6 para. 1 lit. f GDPR).

The data you enter in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). An exception to this may be legal storage obligations.

Raffle

If you participate in the competition, we will process the e-mail address you provide.

The legal basis for this information is Art. 6 para.1 lit. a GDPR, your consent. In addition, the fulfillment of contractual purposes on our part: determination and notification of the winner of the competition and for sending the prize (GDPR Art. 6 para. 1 lit. b).

The participant data will be deleted by us after the end of the competition or after the winner has been determined, at the latest after 60 days.

Online survey

Online surveys conducted by WABCOWÜRTH Workshop Services GmbH as the responsible party are carried out via the LamaPoll platform.

Participation in the surveys is voluntary and is carried out via an external link of the processor Lamano GmbH & Co.KG and their platform LamaPoll.

Lamano GmbH & Co.KG has its registered office in Germany. We have concluded an order processing agreement with Lamano GmbH & Co.KG.

LamaPoll's privacy policy can be viewed at https://www.lamapoll.de/Support/Datenschutz

LamaPoll can process the IP addresses to prevent multiple participation in the survey. For this purpose a cryptographic hash value is calculated. A "backward operation" is not possible. The check whether an IP address has already participated in a survey is done by matching the hash value of the IP to be checked with the previously determined hash value. The determined hash value is stored for checking, but these cannot be assigned to a specific result data set or participant.

When answering a survey, a session cookie is set for the participant. The session cookie is used to recognize an ongoing participation and to provide a smooth flow of the survey (correct questions, pages and submitted answers as well as assignment of the current participation). Deletion takes place when the browser is closed.

The processing of the data provided is based on our legitimate interest to determine the satisfaction with our products and services and to improve our quality (Art. 6 para. 1 lit. f GDPR).

Newsletter

Newsletter

With the WABCOWÜRTH Workshop Services GmbH newsletter we inform you regularly by e-mail about our current offers, promotions and service.

For the creation and sending of our newsletter, as well as the management of the data (registration, unsubscription, storage of recipients) we use the program of the online marketing service provider CleverReach GmbH & Co. KG. We have concluded an order processing contract with CleverReach GmbH & Co. KG, in which we oblige CleverReach to protect our customers' data and not to pass it on to third parties.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. This verification procedure is called double opt-in. After a registration for the newsletter, an e-mail is sent to the specified recipient address, which must then be confirmed. If the confirmation is not received, the registration to the newsletter will be deleted. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for registration) remains unaffected by this.

For the purpose of analysis, the emails sent with CleverReach contain a so-called "tracking pixel", which connects to CleverReach's servers when the email is opened. In this way, it can be determined whether a newsletter message has been opened.

Furthermore, with the help of CleverReach, we can determine whether and which links in the newsletter message are clicked. All links in the email are so-called tracking links, with which your clicks can be counted.

The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

Data processing of customer data

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or amendment of the contract (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

This data is used to create a customer account, to process your order, but also for your support and to send you newsletters, offers and services.

The collected customer data will be deleted after termination of the business relationship. Statutory retention periods remain unaffected.

The affected groups of people are

• current employees,
• former employees,
• Applicants,
• Interested parties,
• Customers,
• Suppliers,
• Service provider and
• other business partners.

To register you as a customer with us we need:

• Company name with legal form (e.g. GmbH)
• Company headquarters (street, house number, postal code, city)
• Name and first name of the contact person
• Phone number

You can voluntarily provide us with the following data:

• E-mail address - note, however, that this is mandatory for information in case of news and updates on the diagnostic system.
• Fax
• If applicable, different invoice address and delivery address
• Cell phone

Data transmission upon conclusion of the contract

We transmit personal data to third parties only if this is necessary in the context of the contract and a legal regulation permits or requires this or the person concerned has consented. For example, to the companies entrusted with the delivery of the goods, service providers and business partners or the credit institution entrusted with the processing of payments and, in the case of outstanding accounts with us, to debt collection companies. A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

In the event of a leasing inquiry, we will send the data required for the leasing inquiry to our leasing partners, Grenke AG Heilbronn or Würth Leasing GmbH & Co.KG, exclusively and only with your consent.

You can find the Grenke AG data protection declaration at: https://www.grenke.de/datenschutz-grenke-ag

You can find the Würth-Leasing data protection declaration at: https://www.wuerth-leasing.de/datenschutz

Of course, leasing inquiries can also be handled through leasing companies and / or banks of your choice.

Data transmission for service and service requests / orders

When contacting our service or hotline team (by phone or e-mail), the transmitted contact data for the current inquiry as well as other transmitted processes may be used to forward the inquiry to the responsible internal department or, in the case of a repair or complaint, to the respective supplier or to the repair company commissioned by us. This is to ensure the proper handling of these business transactions and to guarantee a faster processing of the customer inquiry.

The processing of the data you provide in this context is based on our legitimate interest to accelerate and further optimize our process flows for our customers (Art. 6 para. 1 lit. f GDPR).

The personal data processed in this context will be stored for the duration in which you are in a business relationship with us or until you request us to delete it. Legal storage obligations remain unaffected.

Data processing for applications

In accordance with the requirements of Articles 13 and 14 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data provided by you as part of the application process and, if applicable, collected by us, and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.

Purposes and legal bases of processing

We process your personal data in accordance with the provisions of the European General Data Protection Regulation and the German Federal Data Protection Act, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Article 88 GDPR in conjunction with Section 26 BDSG and, if applicable, Article 6 (1) lit. b GDPR for the initiation or implementation of contractual relationships.

Furthermore, we may process your personal data if this is necessary for the fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR) or for the defense of asserted legal claims against us. The legal basis for this is Art. 6 (1) lit. f GDPR. The legitimate interest is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG). If you give us express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time, with effect for the future

If an employment relationship arises between you and us, we may, in accordance with Art. 88 GDPR in conjunction with § 26 BDSG-neu, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).

Categories of personal data

We only process data that is related to your application. This may be general personal data (name, address, contact details, etc.), information on your professional qualifications and school education, information on further professional training and, if applicable, other data that you provide to us in connection with your application.

Data sources

We process personal data that we receive from you by mail or email in the course of contacting you or your application, or that you send to us via online job portals.

Recipient of the data

We only pass on your personal data within our company to those persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interests. Data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations or if we have your consent.

Duration of data storage

We store your personal data as long as this is necessary for the decision on your application. Your application documents with the personal data will be deleted a maximum of six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We store your personal data beyond this only insofar as this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

If an employment relationship, apprenticeship or trainee relationship is established following the application process, your data will initially continue to be stored insofar as this is necessary and permissible and will then be transferred to the personnel file.

If applicable, you will receive an invitation to join our talent pool following the application process. This will allow us to continue to consider you in our selection of applicants for suitable vacancies in the future. If we have your consent to do so, we will store your application data in our talent pool in accordance with your consent or any future consent.

Social networks

We operate profiles on social networks to present our company and to communicate with customers and interested parties. In the following, we will inform you about the associated processing activities.

Data processing for presentation and communication

Social networks enable us to present our company to persons who have an account with the social network (hereinafter "users") and to all visitors to our profiles without an account with the social network (hereinafter "guests"). Furthermore, customers and interested parties can contact us via this profile. Our profiles and posts are generally viewable by users and guests (hereinafter users and guests are collectively referred to as "visitors"). If you comment on our posts or send us a message, this data is stored by the social network and is visible to us. We may respond to your comment or message. For posts, your comment and our response may still be viewable by all users of the social network or by all visitors.

Data processing for statistical and promotional purposes

If you call up our profile, the social network can store and evaluate your call-up as well as all further interactions by you on the website of the social network. This data is made available to the profile owners as statistics and processed by the social networks for advertising purposes, among other things.

If you have an account with the social network and are logged in when you visit our profile, the provider of the social network can link your interactions with our profile with your account data and process them. However, it is also possible that data about your interactions with our profile will be stored by the social network for the duration of your visit and processed for further purposes if you are not logged in there or do not have an account. In this case, an assignment can be made, for example, through the use of cookies, small files that are stored on your terminal device, or in connection with your IP address.

As a rule, data processing follows the purpose of creating an interest profile of the visitor and using these profiles for advertising purposes. If a person calls up certain web pages, information about this call is evaluated and the provider assigns interests to the visitor. Based on the assigned interests, advertisements are displayed to the visitor. Interest-based advertisements can be displayed by the provider both within and outside the web pages of the social network.

Categories of affected persons

People who access our profile on the respective social network (both users with an account with the social network provider and visitors without an account).

Assertion of your rights as a data subject

For information requests or to exercise your other rights as a data subject, we recommend that you contact the provider directly, as only the provider has full access to the data processed in connection with a call to our profile or interaction with us on the social network. The contact information of the social networks on the exercise of your rights as a data subject can be found in the section "Information on the social networks used by us". In the case of data processing where there is joint responsibility between the social network provider and us, you also have the right to exercise your rights as a data subject against us. In such a case, we will forward your request to the social network insofar as the request concerns data or processing activities that are processed by the social network.

For more information on the processing activities of the social networks and the existing objection options, please refer to the respective providers.

Facebook information

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland (nachfolgend „Facebook“)

Website: https://de-de.facebook.com/

Form for contacting the Facebook data protection officer: https://www.facebook.com/help/contact/540977946302970

Facebook Data Policy: https://de-de.facebook.com/policy.php

Our profile: https://www.facebook.com/wabcowuerth?fref=ts)

Instagram information

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

Website: https://www.instagram.com/

Privacy policy: https://help.instagram.com/519522125107875

Our profile: https://www.instagram.com/wabcowuerth_workshop_services/channel/

Categories of personal data processed when visiting our profile on Facebook

• Technical information about the end device: operating system, information about the browser used, IP address, further information about the end device and the Internet connection.
• Contact details: if applicable, information on the user's account
• Interaction data: Information about visited profiles, clicked links, date and time of interaction, further interactions of the visitor.

For more information on the data processed, please visit: https://www.facebook.com/legal/terms/page_controller_addendum

Shared responsibility for the processing of Page Insights data

We have entered into a joint responsibility agreement with Facebook, which applies to the processing of data in connection with our profile on Facebook (so-called "Page") for the purpose of providing the profile and the statistical evaluation of the interactions of visitors to our profile. This agreement specifies which obligations in connection with data processing are to be fulfilled either by Facebook or by us and which party is responsible in each case for the individual processing activities.

Agreement on joint responsibility for data processing for Page Insights between Facebook and us as the owner of a profile on Facebook in accordance with Art. 26 GDPR: https://www.facebook.com/legal/terms/page_controller_addendum

More information about the processing of Page Insights data: https://www.facebook.com/legal/terms/information_about_page_insights_data

Purposes and legal basis

• Presentation of our company, legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR). The processing for this purpose is based on the legitimate interests of the company. Specifically, the interest in maintaining the corporate culture and public relations of the company. These interests are derived from our right to entrepreneurial freedom and professional freedom.
• Communication with customers and interested parties, legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR. The processing of data in messages or comments on Facebook is based on our legitimate interests to offer customers and interested parties an easy way to contact us and to improve our quality of advice. These interests are derived from our right to entrepreneurial freedom and professional freedom.
• Statistical purposes, legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR. The processing of data for statistical purposes in connection with Page Insights is based, insofar as we are jointly responsible for the processing with Facebook, on our legitimate interest in improving the quality of our consulting services. This interest is derived from our right to entrepreneurial freedom and professional freedom.

Insofar as Facebook carries out further processing activities or processes data for statistical or advertising purposes, Facebook is the controller and the processing may be based on other legal bases. For more information, please refer to the "Facebook Data Policy".

Processor of Facebook

The use of Facebook may also result in the transfer of personal data to Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA in the USA. For the transmission of personal data to Facebook Inc. with headquarters in the USA, Facebook Inc. uses so-called standard contractual clauses of the Commission of the European Union. A copy of the standard contractual clauses used can be requested here: https://www.facebook.com/help/566994660333381?ref=dp

Opposition options

If you would like to object to processing by Facebook, you can find options for objecting to different processing activities under this link: https://www.facebook.com/help/contact/367438723733209?no_redirect

For your account on Facebook, you can manage the advertising settings yourself under the following link and, for example, deactivate interest-based advertising: https://www.facebook.com/settings?tab=ads

If you do not have a Facebook account, you can deactivate interest-based online advertising for participating websites at the following link: https://www.youronlinechoices.com/de/praferenzmanagement/

Right of appeal

You have the right to file a complaint with the competent supervisory authority. You can find out which supervisory authority is responsible in this data protection notice under the item "Right of complaint to the competent supervisory authority". With regard to processing in connection with our profile on Facebook, you can also contact the Irish Data Protection Commission. You can find the contact information of the Irish Data Protection Commission at: https://www.dataprotection.ie/en/contact/how-contact-us#

LinkedIn information

Provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA

Website: https://www.linkedin.com/

Privacy policy: https://www.linkedin.com/legal/privacy-policy

Our profile: https://www.linkedin.com/company/wabcow%C3%BCrth-workshop-services-gmbh/

Information on XING:

Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg; Deutschland

Website: https://www.xing.com

Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

Our profile: https://www.xing.com/pages/wabcowurthworkshopservicesgmbh

Disclaimer

The data protection declaration of WABCOWÜRTH Workshop Services GmbH does not apply to applications, products, services, websites or social media functions of third parties which can be accessed via links that we provide for information purposes. When you use these links, you leave the WABCOWÜRTH Workshop Services GmbH website, so there is a possibility that information about you may be collected or disclosed here by third parties. WABCOWÜRTH Workshop Services GmbH has no control over third-party Web sites and does not endorse or make any representations about them, or their privacy practices. We encourage you to review the privacy statements of each and every Web site you choose to interact with before you allow them to collect, use or share your personal information.

Status: September 2023