Datos de Webasto
Privacidad

1. Controller

1.1 Webasto SE ("Webasto"), Kraillinger Straße 5, 82131 Stockdorf, Germany, is responsible within the meaning of Art. 4 No. 7 of the General Data Protection Regulation ("GDPR").
 

1.2 For more information about us, please see our legal notice. You can contact our Group Data Protection Officer (GDPO) at dataprotection@webasto.com or by telephone on +49 (89) 8 57 94 - 0.

2. General information

The following statement gives you an overview of what type of personal data is processed, for what purpose, to what extent and on what legal basis. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In addition, we will inform you about your rights vis-à-vis us as the controller.

3. Data processing on this website

3.1 When using this website for information purposes only, we automatically collect and store information from you as a website visitor that your browser transmits to us in the server log files.

• IP address
• Date and time of the request
• Time zone different to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/ http status code
• Amount of data transferred in each case
• Referrer URL (the previously visited page)
• Requesting provider
• Website from which the request comes
• Browser type/version, operating system and its interface
• Language and version of the browser software

3.2 The legal basis for the collection and temporary storage is Art. 6 para. 1 lit. f GDPR. Our overriding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR is to display this website to you and to ensure its stability and security. The data is technically necessary for this. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your computer. The data is collected and stored in log files in order to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation and delivery of the website. Consequently, the user has no option to object.

3.3 The data is transferred to our host Adobe Systems Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland as a processor and stored on servers in the European Union.

3.4 They are deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after 12 months at the latest.

3.5 Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries. If the connection is encrypted, the address line of the browser changes from "http://" to "https://". A lock symbol appears in the browser line. If SSL encryption is activated, the data that is transmitted cannot be read by third parties.

4. Further data processing on our website

In addition to the collection and storage of log files, our website processes further personal data from you as a website visitor. You can find out below what this data is, for what purposes, to what extent and on what legal basis we process it.

4.1 Consent Management Tool (Usercentrics)

4.1.1 Webasto uses the Consent Management Tool from the provider Usercentrics to implement your usage preferences according to your wishes.

4.1.2 The Consent Management Tool collects the following data:

• Opt-in and opt-out data
• Referring URL
• User agent
• User settings
• Consent ID
• Date of consent
• Type of consent
• Version of the template
• Language of the banner
• IP address
• Geographical location

4.1.3 The legal basis for the processing of personal data using the Consent Management Tool is the fulfillment of a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.

4.1.4 The data is stored and processed by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, on our behalf in the European Union.

4.1.5 Your data will be processed for this purpose for as long as is necessary to achieve the purpose, but generally for no longer than 14 months.

4.1.6 You can find more information on processing and data protection at Usercentrics on the Usercentrics website https://usercentrics.com/de/datenschutzerklaerung.

4.2 Content management, web analytics and hosting (Adobe Experience Cloud)

4.2.1 Webasto uses the Adobe Experience Cloud, a system from Adobe for creating, managing, analyzing and hosting websites. This includes the following tools, among others:

• Adobe Experience Manager (including Adobe Dynamic Media and Adobe Experience Platform Data Collection): Webasto uses these tools as a content management solution and for hosting the website in order to create, manage and maintain the website, mobile applications and forms. In addition, analysis, marketing and advertising tags used there are managed. Your data is processed to troubleshoot and optimize the website and to ensure the security of the systems.
• Adobe Audience Manager (including Adobe Experience Cloud Identity Service and Adobe Advertising): We use these tools for customer management and user analysis. Data processing is carried out in order to efficiently process contact and support requests from customers and potential customers and to optimize customer service. We analyze the use of our website in order to correct errors and optimize the website, as well as to ensure the security of our systems. Among other things, we use session management for this purpose. Users with multiple sessions can thus be identified. This serves to check and verify identity. We also use the tools to manage and optimize our marketing measures.
• Adobe Analytics: The tool enables real-time analysis of the website and marketing across all marketing channels. For this purpose, user flows and their behavior are evaluated. In addition to optimizing our marketing measures, this data processing also serves to ensure the security and optimization of the website, as well as to optimize user-friendliness.

4.2.2 The following data is collected:

• Usage data
• IP address
• Information on the content
• Content or placed advertising
• Geographical location

The Adobe Audience Manager tool also processes the following data:

• Device information
• HTTP header
• Referring URL
• Browser information
• Data provided via forms on the website
• Search query when the user clicks on the link to this page
• User preferences
• Online identifiers and cookie identifiers

The Adobe Analytics tool also processes the following additional data:

• Success rates of advertising campaigns
• Click path
• Clicked advertising
• Date and time of the visit
• Information that users provide in forms on this website
• ISP/Connection speed
• Items added to the shopping cart
• Name of the website
• Personal information provided by the user outside the services
• Product information, such as colors, prices, styles and photos
• Purchase activity
• Usage data
• Whether the user has clicked on a link, an image or a text
• Whether the user has downloaded a file, an image or something else

4.2.3 The legal basis for data processing in the context of hosting, presentation, administration and optimization of our website (content management) is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our overriding legitimate interest lies in the optimization of our online offering and our website, in particular in providing a technically optimized, user-friendly and needs-based website and ensuring the security and performance of our systems.

4.2.4 The legal basis for data processing in the context of the Adobe Analytics and Adobe Audience Manager tools and if information is stored on your end device during processing or information is accessed on your end device without this being absolutely necessary is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you have given your consent, we process data to regularly analyze and improve our website. We can use the statistics obtained to improve our offer and make it more interesting for visitors. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. The easiest way to revoke your consent is to call up the cookie banner again at or click on the "Unsubscribe" button at www.adobe.com/de/privacy/opt-out.html.

4.2.5 The data is stored and processed in the European Union. The processing is carried out on our behalf by Adobe Systems Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland.

4.2.6 We process your personal data for these purposes (i) until you withdraw your consent with effect for the future or (ii) for as long as this is necessary to achieve the purpose, but generally no longer than 14 months.

4.2.7 You can find more information on processing and data protection at Adobe on the Adobe website: www.adobe.com/de/privacy/policy.html.

5. Contact us

5.1 A contact form is available on our website, which can be used to contact us electronically. There is also an e-mail address for contact requests. If you use this option, the data you enter will be transmitted to us and stored. We process the personal data solely for the purpose of managing and responding to the contact, for example to answer questions and send information about services. In addition, the processing serves to prevent misuse of the contact form and to ensure the security of our information technology systems. The data is used exclusively for processing the contact. We use the ClickDimensions tool and a CRM system from Microsoft 365 for Sales for this purpose.

5.2 The following data is collected when you contact us via the contact form:

• Salutation
• Title
• First name
• Last name
• Company
• Address
• E-mail address
• Phone number
• Type of request
• Your message to us
• Interest in (product, product group, business unit, sales, support, technical support)
• City
• Zip Code
• Country

The following data is also stored at the time the message is sent:

• IP address
• Browser information
• Usage data
• Date and time of the visit
• Pages accessed
• Device information
• Demographic data

5.3 The legal basis for the processing is Art. 6 para. 1 lit. f GDPR in conjunction with Art. 45 GDPR. It is our overriding legitimate interest to respond to your inquiries when you contact us and to ensure the security of our information technology systems. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR in conjunction with Art. 45 GDPR.

5.4 When contacting us via the e-mail address provided, the personal data transmitted with the e-mail, such as e-mail, name and message content, will be stored. The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR in conjunction with Art. Art. 45 GDPR. Section 5.3 also applies.

5.5 The data is processed and stored in our CRM system on our behalf by ClickDimensions LCC, 5901 Peachtree Dunwoody Road, NE, Suite C370, Atlanta, GA 30328, USA and Microsoft Corporation Dept. 551, Volume Licensing 6880 Sierra Center Partway Reno, Nevada 89511, USA. The two processors store and process the data in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Clickdimensions and Microsoft have certified themselves in accordance with the TADPF and have thus undertaken to comply with European data protection principles.

5.6 Your personal data will be processed for as long as is necessary to achieve the purpose, but generally no longer than 14 months.

5.7 You can find more information on processing and data protection at ClickDimensions and Microsoft on the websites of the two providers https://clickdimensions.com/about/privacy-policy/ and https://learn.microsoft.com/de-de/dynamics365/sales/privacy-notice.

6. Cookies on this website

Furthermore, cookies are stored on your device when you use our website. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and that send us certain information when you use or revisit our website. Cookies contain characteristic character strings that enable the browser to be uniquely identified when the website is called up again. Cookies cannot execute programs or transfer viruses to your computer. You can find more information on the cookies set and data processing in our cookie policy, which you can access via the footer or the following link. 

7. Webasto in the social media

7.1 In addition to this website, we are also present on various social media to inform you about our services and communicate via the platforms if you are interested. We are currently represented on YouTube, Xing, LinkedIn, Facebook and Instagram. Our profiles can be accessed via the links on the website.

7.2 We process data via our social media profiles when comments or direct messages are sent to us on the platforms. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. It is our overriding legitimate interest to respond to your inquiries if you contact us. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

7.3 As soon as you access our social media profile in the respective network, the terms and conditions and data processing guidelines of the respective service providers apply. On the pages of the respective service providers, your personal data may be processed by them, over which we have no influence.

7.4 The purpose and scope of data collection as well as the provisions on the use of personal data by the respective platform can be found in the data protection provisions of the respective service provider, e.g.

• YouTube: https://www.youtube.com/privacy/
• Xing: https://privacy.xing.com/de/datenschutzerklaerung
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• Facebook: https://www.facebook.com/privacy/policy
• Instagram: https://privacycenter.instagram.com/policy/

8. Recipients, processors and other controllers

8.1 As described in this data protection information, we sometimes work together with other companies in order to be able to use or offer certain functions and services. These are either processors with whom we have concluded a contract for order processing in accordance with Art. 28 GDPR or other controllers with whom we have also concluded appropriate contracts.

8.2 In addition to the processors specified in this data protection information, we also work with other processors (e.g. technical service providers, waste disposal companies, payment service providers, IT service providers, agencies) and other controllers (e.g. consultants, Webasto Group companies).

8.3 The other processors process and store the data on our behalf in the EU. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our overriding legitimate interest lies in the provision and optimization of our service. The data is only stored for as long as this is necessary to achieve the purpose.

8.4 If we disclose your personal data to other controllers who process the personal data not on our instructions but for their own purposes, this will only be done for specific purposes. The transfer of your personal data to these other controllers takes place for the fulfillment of the contract in accordance with Art. 6 para. 1 lit. b GDPR or on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR to make our operations efficient. Consultants in legal or tax matters are obliged to maintain special confidentiality and secrecy due to their professional status.

8.5 Otherwise, we only transfer your personal data to other data controllers if and insofar as this is required by law in order to enforce legal claims or to investigate or prevent suspected or actual unlawful circumstances on the basis of Art. 6 para. 1 lit. c GDPR.

8.6 If your personal data is transferred to locations outside the European Economic Area (EEA), we implement the legally required standards and security mechanisms and the requirements of Art. 44 et seq. GDPR.

9. Duration of processing

Your data will only be processed for as long as is necessary to achieve the purpose. In addition, we only store personal data for the assertion of or defense against legal claims or as long as there are legal obligations to store it.

10. Your rights

Please address any requests for personal data to the e-mail address or address given in this privacy policy or in the legal notice of our website.

10.1 Right to information: As we only collect data from and about you to the extent described above, we only have information about you from the use of our website if you have contacted us and provided us with the relevant information. In accordance with Art. 15 GDPR, you can assert your right to information free of charge in writing or by e-mail to us (see imprint or section 1.). In addition, under the conditions set out in Art. 20 GDPR, you are entitled to receive the personal data concerning you that has been stored in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from us.

10.2 Right to revoke the declaration of consent under data protection law: If the processing of your data is based on your consent, you have the right to revoke this consent at any time in accordance with Art. 7 para. 3 GDPR. The revocation does not affect the legality of the processing carried out up to that point. You can declare your revocation in writing or by e-mail.

10.3 Right to rectification: If your personal data is incorrect, you have the right to request its rectification (Art. 16 GDPR).

10.4 Right to restriction of processing: Under the conditions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.

10.5 Right to erasure: Under the conditions set out in Art. 17 GDPR, you have the right to request the erasure of personal data concerning you. This is the case, for example, if you withdraw your consent or if the data is no longer required for the purposes for which it was collected.

10.6 Right to lodge a complaint: If you are of the opinion that the processing of your personal data violates data protection regulations, you have the option of contacting us or lodging a complaint with the supervisory authority responsible for us:

Bavarian State Office for Data Protection Supervision

Promenade 18, 91522 Ansbach

Phone: +49 (0) 981 180093-0

Fax: +49 (0) 981 180093-800

E-mail: poststelle@lda.bayern.de

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

10.7 Right of objection: In addition, in accordance with Art. 21 (1) GDPR, you have the right to object to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR on grounds relating to your particular situation. We will comply with your aforementioned rights insofar as the legal requirements for asserting the rights are met, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Our privacy policy may change from time to time. This also includes further developments due to changes in our business as well as adjustments due to changes in the legal situation and/or due to the implementation of new technologies or services on the website. We will publish any corresponding updates to the privacy policy on this page.

If you have any further questions that our privacy policy could not answer, please send an e-mail to the following address dataprotection@webasto.com.