Datenschutz
Data Protection
Welcome to the DEKRA Website www.dekra.com. We appreciate your interest in our company. Protection of the personal data you entrust to us is a priority for us, and we want you to feel safe and secure when you visit our website or use our online offers.
It is important to us that you are fully informed about the personal data that we collect when you use our online offers and services, and are familiar with how we use them.
Wherever DEKRA processes personal data, such processing is carried out for the purposes defined in this data privacy statement.
Processing of personal data
Responsible Authority
DEKRA Automobil GmbH
Handwerkstr. 15
70565 Stuttgart
DEKRA e.V.
Handwerkstr. 15
70565 Stuttgart
Visiting our website
We record and save your computer's IP address in order to send the contents of our website visited by you to your computer (e.g. texts, pictures, and files provided for downloading, etc.) (cf. Art. 6 (1) lit. b GDPR). We also process these data to identify and pursue any misuse. Legal basis in this case is Art. 6 (1) lit. f GDPR. In this context, our legitimate interest in data processing is to ensure the due functioning of our website and the business transacted via the Website.
Other purposes
We also process personal data that you provide voluntarily, e.g. when you make an inquiry or online appointment, or when you order information material or newsletters. Legal basis in this case is Art. 6 (1) lit. b GDPR. The data processed by us in this context include the data of customers, employees, and suppliers to the extent necessary for the purposes specified within the scope of this data privacy statement.
In as far as we process your data as described above for the purpose of accepting and processing your inquiry, appointment, or (newsletter) order, you are contractually bound to make these data available to us. We are unable to process your request without the data.
Where you have given your consent to the processing of personal data (cf. Art. 6 (1) lit. a GDPR), you can withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent up to the time of withdrawal of consent.
Transfer to third parties
We generally transfer your data to the relevant DEKRA company where it is processed to deliver the service and support you requested.
This means that information may also be processed by other legal entities of the DEKRA Group. However, such processing is limited to the extent required for the purposes defined in this data privacy statement or to which the other legal entity acting as a service provider / processor has to follow the instructions given by the controller.
These service providers / processors are bound by instructions. Given this, they are subject to our requirements, which include processing of your data exclusively in line with our instructions and in compliance with the applicable Data Protection Act. In particular, they are contractually bound to treat your data with strict confidentiality, and are not permitted to process data for other purposes than the ones agreed.
Data transfer to the data processor is effected on the basis of Art. 28 (1) GDPR.
We will not sell your data to third parties or otherwise share them for commercial purposes.
Beyond the above, we will transfer your personal data to prosecution authorities and, if applicable, damaged third parties without your explicit consent where this is necessary for clarifying illegal use of our services or for legal prosecution. However, such a transfer will only take place if there is concrete evidence of illegal conduct or misuse. Transfer of your data may also take place where this contributes to enforcing the conditions of use or other agreements. We are also under legal obligation to provide information to certain public bodies on request. These comprise prosecution authorities, authorities prosecuting offences punishable by a fine, and financial authorities.
The transfer of these data is based on our legitimate interest in fighting misuse, prosecuting criminal acts, and securing, asserting, and enforcing claims unless our interests are overridden by your rights and interests in the protection of your personal data, Art. 6 (1) lit. f GDPR.
Intended data transfer to third countries
At present, data transfer to third countries is not planned. Otherwise we will establish the required legal conditions. In particular, you will be informed of the respective recipients or categories of recipients of the personal data in line with the legal requirements.
Security
DEKRA takes appropriate technical and organizational measures to protect any personal data you provide to DEKRA from accidental or intentional manipulation, loss, destruction, or access by unauthorized parties. This also applies to any external services purchased. We verify the effectiveness of our data protection measures and continuously improve them in line with technological development. Any personal data entered are encrypted during transfer using a secure encryption process.
Anonymized website tracking
To align this website better to our customers’ needs, we analyze how our customers interact with the site. We anonymize your IP address (and possibly similar information exchanged with our site by your computer or device during standard Internet use) and then use it to analyze data such as the pages at https://www.dekra.com/ by your browser and your computer. Again, we use cookies for this purpose. Our cookie contains only one unique number by which we can re-identify you on our websites––but not, however, on third-party websites. We use the stored data for statistical purposes only. In particular, the IP address will not be associated with any individual user. The data will not be shared with third parties.
Use of Google Universal Analytics
This website uses Google Universal Analytics, a web analysis service offered by Google Inc. ("Google"). Google Universal Analytics uses ‘cookies,’ text files stored on your computer, to help us analyze how you use our website. The information generated by the cookie about your use of this website (including your IP address) is transferred to Google servers in the USA and saved there.
We have activated IP anonymization on this website, so that the IP address of users within EU Member States or other States party to the Agreement on the European Economic Area will be truncated by Google beforehand. Only in exceptional cases is the full IP address sent to Google servers in the USA and truncated there. On behalf of the website provider, Google will use this information for the purpose of analyzing your use of the website, compiling reports on website activity, and providing us with other services relating to website activity and internet usage. Google will not associate the IP address transmitted by your browser within the operations of Google Universal Analytics with any other data held by Google. You may prevent cookies from being installed by selecting the appropriate settings on your browser. However, please note that in this case you may not be able to use the full range of functions of this website. Furthermore, you can prevent Google from collecting and using the data regarding your use of the website generated by the cookies (including your IP address) by downloading and installing the browser plugin from the following link http://tools.google.com/dlpage/gaoptout?hl=en.
Click on the link below to prevent collection of your data by Google Universal Analytics. By clicking on this link, you will set an opt-out cookie which prevents your data from being tracked when you visit this website in the future. Disable Google Analytics
For more detailed information on the conditions of use and data privacy, go to http://www.google.com/analytics/terms/de.html and/or http://www.google.de/privacy.html.
Please note that this website uses Google Universal Analytics with the code extension “anonymizeIp” to ensure anonymized recording of IP addresses (known as IP masking) and exclude direct personal references.
Mouseflow
This website uses Mouseflow, a web analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. The purpose of data processing is to analyse this website and its visitors.
For this purpose, data is collected and stored for marketing and optimisation purposes. From this data, user profiles can be created under a pseudonym. Cookies may be used for this purpose. With the web analysis tool Mouseflow, randomly selected individual visits (only with anonymised IP address) are recorded. This creates a log of mouse movements and clicks with the intention of randomly replaying individual website visits and deriving potential improvements for the website from this. The data collected with Mouseflow will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.
The processing is carried out on the basis of Art. 6 (1) f) DSGVO from the legitimate interest in direct customer communication and in the design of the website in line with requirements.
You have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) f DSGVO for reasons arising from your particular situation. To do so, you can deactivate a recording on all websites that use Mouseflow globally for the browser you are currently using at the following link: https://mouseflow.de/opt-out/
Deletion of data
Standard periods for deletion of data
Legislation has defined numerous data storage periods and obligations. At the end of these periods, the relevant data will be routinely deleted. Data that are not affected by the above storage periods and obligations are deleted or anonymized as soon as the purposes defined in this data privacy statement no longer apply. Unless this data privacy statement includes other deviating provisions for data storage, we will store any data we collect for as long as they are required for the above purposes for which they were collected.
Other data use and deletion of data
Any further processing or use of your personal data will generally only be carried out to the extent permitted on the basis of a legal regulation or where you have consented to data processing or data use. In the case of further processing for other purposes than the ones for which the data were originally collected, we will inform you about these other services and provide you with all other significant information before further processing.
Rights concerning the processing of personal data
Right of access
On request, you have the right to obtain information from us about the personal data concerning you and processed by us, to the extent defined in Art. 15 GDPR. You can send your request either by mail or email to the addresses given below.
Right to rectification
You have the right to require us to rectify any inaccurate personal data concerning you without undue delay (Art. 16 GDPR). For this purpose, please contact the address given below.
Right to deletion
Right to deletion
Where the legal reasons defined in Art. 17 GDPR apply, you have the right to immediate deletion (“right to be forgotten”) of personal data concerning you. These legal reasons include: the personal data are no longer necessary for the purposes for which they were processed, or you withdraw your consent, and there are no other legal grounds for processing; the data subject objects to the processing (and there are no overriding legitimate grounds for processing––does not apply to objections to direct advertising). To assert your above right, please contact the contact address given below.
Right to restriction of processing
If the criteria defined in Art. 18 GDPR are fulfilled, you have the right to restriction of processing as established in the above article of the GDPR. According to this article, restriction of processing may be called for in particular if processing is unlawful and the data subject opposes deletion of the personal data and requests the restriction of their use instead, or if the data subject has objected to processing according to Art. 21 (1) GDPR as long as it is unclear whether our legitimate interest overrides the interest of the data subject. To assert your above right, please contact the contact address given below.
Right to data portability
You have the right to data portability as defined in Art. 20 GDPR. This means you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another controller, such as another service provider. Prerequisite is that processing is based on consent or a contract, and is carried out using automated means. To assert your above right, please contact the contact address given below.
Right to object
You have the right to object at any time under Art. 21 GDPR to processing of personal data concerning you which is based on Art 6 (1) lit. e or f GDPR, on grounds relating to your particular situation. We will desist from processing your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms, or unless processing is for the establishment, exercise, or defense of legal claims. To assert your above right, please contact the contact address given below.
Right to file a complaint with a supervisory authority
If you think that processing of personal data concerning you and carried out by us is unlawful or impermissible, you have the right to file a complaint with the supervisory authority responsible for us. You can contact this authority at:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Address:
Königstrasse 10 a
70173 Stuttgart
Mailing address:
Postfach 10 29 32
70025 Stuttgart
Tel.: 0711/615541-0
FAX: 0711/615541-15
E-Mail: poststelle@lfdi.bwl.de
Amendment of this data privacy statement
In case an update requires an adaptation of this Privacy Policy, we therefore reserve the right to amend the current Privacy Policy. The current version is dated May 25, 2018.
Data Protection Officer
Please address any questions regarding the processing of your personal data, requests for information, applications, or complaints directly to our data protection officer, who will be happy to be of service.
If you have any questions or suggestions in accordance to data protection at DEKRA, please contact our data protection officer:
Data protection officer of DEKRA Automobil GmbH
Handwerkstr. 15
70565 Stuttgart
If you have a query or tips about data protection at DEKRA, please send an email to datenschutz.automobil@dekra.com
If you wish to make use of your right to information on the personal data we process on your behalf, please send an email to datenschutzauskunft@dekra.com
