Privacy Policy
The following privacy notice applies to the use of the website store.alko-tech.com (hereinafter the “Website”).
1. General information on data protection
AL-KO Vehicle Technology collects, uses and discloses personal data only if this is permitted by law or if you have demonstrably given your consent.
Personal data is data by which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.
We adhere to the principles for the processing of personal data in accordance with Art. 5 GDPR. Your data is processed on the basis of lawfulness, fair processing and transparency:
for specified, explicit and legitimate purposes,
limited to what is necessary for the purposes of processing (“data minimization”),
accurate and, where necessary, kept up to date,
kept only for as long as necessary for the purposes for which it is processed, and
including appropriate safeguards to ensure the security of personal data.
If we use external service providers to fulfil our business processes, they receive data to the extent necessary in accordance with Art. 28 GDPR. Please understand that we do not disclose individual service providers as a matter of course. However, your data protection rights are fully ensured in accordance with the requirements for processing on behalf.
2. General information on IT security
AL-KO Vehicle Technology takes extensive precautions to ensure the security of your personal data. In doing so, we follow ISO/IEC 27001 and have established technical and organizational measures that protect your data against loss of integrity, availability and confidentiality.
Further information on the processing of your personal data can be found in the respective privacy policy.
Your AL-KO Vehicle Technology
Version: 30/04/2019
3. Information pursuant to Article 13 GDPR for website visitors
When you use this Website, various personal data are collected. As the operator of these pages, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. However, we would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
3.1 Controller
The controller responsible for data processing on this Website is:
AL-KO KOBER LTD
South Warwickshire Business Park
Southam
Warwickshire
CV47 0AL
E-mail: mail.uk@alko-tech.com
3.2 Scope of data collection on our Website
Your data is collected, on the one hand, when you provide it to us. This may, for example, be data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the Website. This is mainly technical data (e.g. Internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our Website.
3.3 Purpose and legal basis for processing personal data
Some of the data is collected to ensure error-free provision of the Website. Other data may be used to analyze your user behavior.
Processing based on your consent (Art. 6(1)(a) GDPR)
If we have obtained your consent to process personal data for specific purposes (e.g. to receive personalized advertising, for identification), processing is lawful on this basis. Consent that has been given may be withdrawn at any time. This also applies to the withdrawal of declarations of consent that you gave us prior to the applicability of the GDPR from 25 May 2018. The withdrawal of consent takes effect for the future and does not affect the lawfulness of data processed until the withdrawal.
Processing based on legitimate interests (Art. 6(1)(f) GDPR)
We process your data in a permissible manner to safeguard our legitimate interests. This includes using your personal data in order to:
inform you about our products and services,
carry out measures to improve and develop services and products in order to offer you customer-specific communication and optimized services,
assert legal claims and defend ourselves in legal disputes,
investigate or prevent criminal offences,
use your data in anonymized form for analysis purposes.
If we intend to process your personal data for a purpose not previously stated, we will inform you in advance in accordance with statutory provisions.
Processing for the purpose of initiating and performing a contract (Art. 6(1)(b) GDPR)
Further personal data such as your name, address, telephone number or e-mail address is not collected when you visit the Website unless you voluntarily provide this information, e.g. to receive a contractual offer. Your information is stored in order to process and handle your enquiry.
3.5 Recipients of data / disclosure of data / third countries
Your data may be disclosed to technical service providers supporting us (e.g. website maintenance providers) for the provision of this Website and for the purposes stated above. We carefully select such providers and have concluded a data processing agreement with them. Disclosure of your data to other third parties and transfer to third countries otherwise takes place only if expressly indicated in this privacy policy or if we are legally obliged to do so.
3.6 Data retention period
We store your personal data for the purposes mentioned above. Your data is processed for the first time from the time it is collected, insofar as you or a third party provides it to us. We delete personal data you have provided to us when the contractual relationship with you has ended or you withdraw your consent and all mutual claims have been fulfilled, and there are no other statutory retention obligations or legal grounds justifying storage.
With Google Analytics, we use the option to limit the storage duration of your data to 26 months.
3.7 Data subject rights / Your rights
Every data subject has the right to:
access pursuant to Art. 15 GDPR,
rectification pursuant to Art. 16 GDPR,
erasure pursuant to Art. 17 GDPR,
restriction of processing pursuant to Art. 18 GDPR,
data portability pursuant to Art. 20 GDPR, and
to object to processing pursuant to Art. 21 GDPR, within the limits of statutory provisions.
Restrictions pursuant to §§ 34 and 35 BDSG apply to the right of access and the right to erasure.
3.7.1 Right to object
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).
3.7.2 Right to withdraw consent
If you have given us separate consent for data processing, you may withdraw this consent at any time in accordance with Art. 7(3) GDPR. Such withdrawal does not affect the lawfulness of processing carried out on the basis of the consent up to the time of withdrawal.
3.7.3 Right to object in specific cases and to direct marketing (Art. 21 GDPR)
If we process personal data about you for direct marketing purposes, you may object to this processing pursuant to Art. 21(2) and (3) GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.
3.7.4 Right to lodge a complaint with the competent supervisory authority
If you believe that the processing of personal data relating to you violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
3.8 Contact for data protection
If you have questions about the collection, processing or use of your personal data, requests for information, rectification, blocking or deletion of data, or the withdrawal of consent you have given, please contact dataprotection@alko-tech.com or contact us using the contact details above.
You may withdraw consent at any time in whole or in part. Please send your withdrawal by e-mail to dataprotection@alko-tech.com or to our address.
3.9 Analytics tools and tools from third-party providers
When you visit our Website, your browsing behavior may be statistically evaluated. This is done primarily using cookies and so-called analytics programs. The analysis of your browsing behavior is generally anonymous; your browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools.
3.9.1 Cookies
Cookies are small text files that are stored on your computer and saved by your browser. Cookies help to make our services more user-friendly, effective and secure. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept cookies, or exclude the acceptance of cookies in certain cases or generally. If cookies are not accepted, the functionality of our Website may be limited. Cookies that are necessary to carry out the electronic communication process or to provide certain functions you require are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.
3.9.2 Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
browser type and browser version,
operating system used,
referrer URL,
host name of the accessing computer,
time of the server request,
IP address.
These data are not merged with other data sources. The collection of these data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its Website — this requires the collection of server log files.
3.9.2 Contacting us
If you contact us (e.g. by e-mail), we store your information to process your enquiry and in case follow-up questions arise. We store and use further personal data only if you consent to this or if it is legally permitted without specific consent.
If you send us enquiries via the contact form, the information from the enquiry form, including the contact details you provide there, will be temporarily stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The processing of the data entered into the contact form is therefore carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). When you use our contact form, your data is stored on our server. If you do not want your data to be stored, you can withdraw your consent to the storage of your data at any time by sending an informal e-mail to dataprotection@alko-tech.com or by written notification to Alois Kober GmbH, Ichenhauser Str. 14, 89359 Kötz.
In addition, the personal data that you have consented to provide as part of contacting us via the contact form is stored via Jotform Inc., 111 Pine St. Suite 1815, San Francisco, CA 94111, USA (“Jotform”). When you use our contact form, your data is stored on the Jotform server. If you do not want your data to be stored by Jotform, you can withdraw your consent to the storage of your data at any time by sending an informal e-mail to dataprotection@alko-tech.com or by written notification to Alois Kober GmbH, Ichenhauser Str. 14, 89359 Kötz.
3.9.3 Conclusion of a data processing agreement
We have concluded a data processing agreement with Jotform and fully implement the strict requirements of the German data protection authorities when using Jotform.
3.10 Analytics tools and advertising
3.10.1 Google Analytics
This Website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the Website. The information generated by the cookie about your use of this Website is generally transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analytics tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.
3.10.2 IP anonymization
We have activated the IP anonymization function on this Website. As a result, your IP address is shortened by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this Website, Google will use this information to evaluate your use of the Website, to compile reports on Website activity and to provide further services related to Website and Internet usage to the Website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
3.10.3 Objection to data collection
You can prevent the storage of all cookies by setting your browser software accordingly. However, please note that in this case you may not be able to use all functions of this and other websites to their full extent. You can also prevent the transmission of the data generated by the cookie and related to your use of the Website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
We also offer you the option of disabling the collection of Website usage data for this Website by clicking the following link: Disable data collection by Google Analytics for this Website. In this case, a special opt-out cookie is set that prevents the future collection of your usage data when you visit this Website.
3.10.4 Processing on behalf
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
3.10.5 Demographic features in Google Analytics
This Website uses the “demographic features” function of Google Analytics. This allows reports to be created containing statements about the age, gender and interests of Website visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers. This data cannot be attributed to a specific person. You can disable this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described under “Objection to data collection”.
3.10.6 Storage period
Data stored by Google at user and event level that is linked to cookies, user IDs (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 26 months. Details can be found at the following link:
https://support.google.com/analytics/answer/7667196?hl=de
3.10.7 Google AdWords and Google Conversion Tracking
This Website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this Website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.
Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that can be used to personally identify users. If you do not want to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. More information about Google AdWords and Google conversion tracking can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this Website may be limited.
3.10.8 Google Tag Manager
Google Tag Manager is a solution from Google Inc. that enables marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool ensures that other tags are triggered, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager.
3.10.9 Meta Pixel
Our Website uses the Facebook visitor action pixel for conversion measurement, provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
This enables the behavior of Website visitors to be tracked after they have been redirected to the provider’s Website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and enables future advertising measures to be optimized. The data collected is anonymous to us as the operator of this Website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook’s data usage policy. This enables Facebook to place ads on Facebook pages as well as outside Facebook. We, as the Website operator, cannot influence this use of data.
The use of the Facebook pixel is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures including social media. Further information on protecting your privacy can be found in Facebook’s privacy notice:
https://de-de.facebook.com/about/privacy/
You can also deactivate the remarketing function “Custom Audiences” in the ad settings at:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
To do so, you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/
3.10.10 CleverReach
This Website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, MĂĽhlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organize and analyze newsletter distribution. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on CleverReach servers in Germany and/or Ireland.
Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. This can include analyzing how many recipients opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our Website) occurred after clicking on the link in the newsletter. Further information on data analysis by CleverReach newsletters can be found at:
https://www.cleverreach.com/de/funktionen/reporting-und-tracking/
Data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time as described above by unsubscribing from the newsletter. If you do not want analysis by CleverReach, you must unsubscribe from the newsletter.
The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers and from CleverReach’s servers after unsubscribing. Data stored by us for other purposes remains unaffected. For details, please refer to CleverReach’s privacy policy:
https://www.cleverreach.com/de/datenschutz/
3.10.11 Conclusion of a data processing agreement
We have concluded a data processing agreement with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.
4. Information pursuant to Article 13 GDPR for customers
We hereby inform you as our customer about the processing of your personal data by AL-KO Vehicle Technology and about the rights to which you are entitled under data protection law.
4.1 Controller
The controller responsible for data processing is:
The controller responsible for data processing on this Website is:
AL-KO KOBER LTD
South Warwickshire Business Park
Southam
Warwickshire
CV47 0AL
mail.uk@alko-tech.com
4.2 Scope and purpose of processing
We process your data only if processing is permitted by law or if we have obtained your consent to data processing. We collect, store and process your data for the entire processing of your purchase, including any subsequent warranty claims, for our service services, and for technical administration. Relevant personal data includes names, address data and telecommunications data. In addition, this may also include enquiry, quotation and order data, data arising from the fulfilment of our contractual obligations, documentation data, and other data comparable with the categories mentioned.
This data is collected:
to perform the contractual relationship,
for correspondence with you,
to handle any liability claims that may exist and to assert any claims against you.
4.3 Legal basis for processing
Processing for the purpose of performing the contract or pre-contractual measures (Art. 6(1)(b) GDPR)
The processing of your personal data is carried out primarily for the purpose of proper performance of the contractual relationship.
Processing based on your consent (Art. 6(1)(a) GDPR)
If we have obtained your consent to process personal data for specific purposes (e.g. submission of an offer), processing is lawful on this basis. Consent that has been given may be withdrawn at any time. This also applies to the withdrawal of declarations of consent that you gave us prior to the applicability of the GDPR on 25 May 2018. The withdrawal of consent takes effect for the future and does not affect the lawfulness of data processed until the withdrawal.
Processing based on legitimate interests (Art. 6(1)(f) GDPR)
We process your data in a permissible manner to safeguard our legitimate interests. This includes using your personal data in order to:
assert legal claims and defend ourselves in legal disputes,
investigate or prevent criminal offences.
If we intend to process your personal data for a purpose not previously stated, we will inform you in advance in accordance with statutory provisions.
4.4 Data retention period
We will store/retain your data for as long as it is needed for our business purposes and, beyond that, in accordance with statutory retention, documentation and limitation periods.
4.5 Recipients of data
Within AL-KO Vehicle Technology, those departments and employees receive access to your personal data that require it to fulfil our contractual and statutory obligations or to safeguard legitimate interests. In addition, service providers and agents engaged by us may receive data for these purposes. We may disclose information about you only if legal provisions require this, you have consented, we are authorized by law to provide information or disclose data, and/or processors commissioned by us equally guarantee compliance with confidentiality as well as the requirements of the GDPR and the German Federal Data Protection Act.
Your personal data will only be disclosed or otherwise transmitted to third parties if this is necessary for contract processing or billing or if you have previously consented. In the course of order processing, for example, the service providers used by us (e.g. carriers, logistics providers, banks) receive the necessary data for order and contract processing.
The data disclosed may be used by our service providers only to fulfil their task. For your order we require your correct name, address and payment data. We require your e-mail address so that we can confirm receipt of your order and communicate with you. We also use it for your identification (customer login). You will also receive your order and shipping confirmation via your e-mail address. Your personal data will be deleted provided that no statutory retention obligations conflict with this and if you have asserted a right to deletion, if the data is no longer necessary for the purpose pursued with the storage, or if its storage is otherwise unlawful.
Under these conditions, the following recipients may receive data:
affiliated companies of AL-KO Vehicle Technology,
service providers & service providers,
credit agencies,
public bodies to fulfil statutory notification obligations, e.g. tax authorities, social security institutions, law enforcement,
banks, credit card companies, payment service providers,
IT service providers,
data disposal companies,
auditing firms,
debt collection service providers,
website management service providers,
insurance companies,
transport and logistics service providers.
4.6 Transfer of data to recipients outside the EEA
Data is transferred to countries outside the EU/EEA only insofar as this is necessary for the performance of contracts with customers, suppliers and service partners (e.g. procurement of materials, production, logistics), you have given us consent, or within the framework of processing on behalf. Data is also exchanged with affiliated companies of AL-KO Vehicle Technology in third countries.
If service providers are used in third countries, they are also obligated — in addition to written instructions — to comply with the level of data protection in the EU by agreeing to the EU Standard Contractual Clauses. Corresponding contractual agreements exist with affiliated companies of AL-KO Vehicle Technology.
4.7 Data subject rights / Your rights
Every data subject has the right to:
access pursuant to Art. 15 GDPR,
rectification pursuant to Art. 16 GDPR,
erasure pursuant to Art. 17 GDPR,
restriction of processing pursuant to Art. 18 GDPR,
data portability pursuant to Art. 20 GDPR, and
to object to processing pursuant to Art. 21 GDPR, within the limits of statutory provisions.
Restrictions pursuant to §§ 34 and 35 BDSG apply to the right of access and the right to erasure.
4.7.1 Right to object
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).
4.7.2 Right to withdraw consent
If you have given us separate consent for data processing, you may withdraw this consent at any time in accordance with Art. 7(3) GDPR. Such withdrawal does not affect the lawfulness of processing carried out on the basis of the consent up to the time of withdrawal.
4.7.3 Right to object in specific cases and to direct marketing (Art. 21 GDPR)
If we process personal data about you for direct marketing purposes, you may object to this processing pursuant to Art. 21(2) and (3) GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.
4.7.4 Right to lodge a complaint with the competent supervisory authority
If you believe that the processing of personal data relating to you violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
4.8 Contact for data protection
If you have questions about the collection, processing or use of your personal data, requests for information, rectification, blocking or deletion of data, or the withdrawal of consent you have given, please contact dataprotection@alko-tech.com or contact us using the contact details above.
You may withdraw consent at any time in whole or in part. Please send your withdrawal by e-mail to dataprotection@alko-tech.com or to our address.
5. Customer account
Orders may be placed as a guest or by creating a customer account. If you register on our Website, we will set up a password-protected direct access to the master data stored by us (customer account). Here you can view data about your completed, open and recently shipped orders and manage your data. You undertake to keep your personal access data confidential and not to make it accessible to any unauthorized third party. We accept no liability for passwords used abusively unless we are responsible for the misuse.
6. Disclosure of personal data
We disclose your personal data to third parties exclusively to the service partners involved in contract processing, such as the transport service provider commissioned with delivery and the credit institution commissioned with payment matters.
7. Payment service providers
7.1 Mollie B.V.
If you choose one of the payment methods offered by the payment service provider Mollie, payment processing is carried out via Mollie B.V., to whom we transmit the information you provide during the ordering process together with information about your order (name, address, possibly IBAN, possibly BIC, invoice amount, currency and possibly transaction number). Your data is transmitted pursuant to Art. 6(1)(b) GDPR exclusively for the purpose of payment processing with Mollie B.V. Your data will be transmitted only insofar as this is actually necessary to process the payment.
7.2 PayPal
PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal enables online payments to be initiated to third parties or payments to be received. PayPal also provides trustee functions and buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.Ă r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If you choose to pay via PayPal, you will be redirected directly to PayPal at the end of the ordering process. Your data will be transmitted to PayPal automatically. By selecting this payment option, you consent to the transmission of personal data required for payment processing.
The transfer is carried out pursuant to Art. 6(1)(b) GDPR and only insofar as this is necessary for payment processing. The personal data transmitted to PayPal generally includes first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. Personal data related to the respective order is also necessary for the processing of the purchase contract.
The purpose of data transmission is payment processing and fraud prevention. We will transmit personal data to PayPal particularly if a legitimate interest exists for the transfer. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. This transfer serves identity and creditworthiness checks.
You can access PayPal’s applicable privacy policy at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data insofar as this is necessary for contractual payment processing.
8. Transport service providers
For the delivery of orders, we work with external transport service providers (e.g. UPS). To carry out the respective order, these service providers receive the following data from us:
first name,
last name,
postal address.
The legal basis for processing is Art. 6(1)(b) GDPR.
Privacy Policy
The following privacy notice applies to the use of the website store.alko-tech.com (hereinafter the “Website”).
1. General information on data protection
AL-KO Vehicle Technology collects, uses and discloses personal data only if this is permitted by law or if you have demonstrably given your consent.
Personal data is data by which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.
We adhere to the principles for the processing of personal data in accordance with Art. 5 GDPR. Your data is processed on the basis of lawfulness, fair processing and transparency:
for specified, explicit and legitimate purposes,
limited to what is necessary for the purposes of processing (“data minimization”),
accurate and, where necessary, kept up to date,
kept only for as long as necessary for the purposes for which it is processed, and
including appropriate safeguards to ensure the security of personal data.
If we use external service providers to fulfil our business processes, they receive data to the extent necessary in accordance with Art. 28 GDPR. Please understand that we do not disclose individual service providers as a matter of course. However, your data protection rights are fully ensured in accordance with the requirements for processing on behalf.
2. General information on IT security
AL-KO Vehicle Technology takes extensive precautions to ensure the security of your personal data. In doing so, we follow ISO/IEC 27001 and have established technical and organizational measures that protect your data against loss of integrity, availability and confidentiality.
Further information on the processing of your personal data can be found in the respective privacy policy.
Your AL-KO Vehicle Technology
Version: 30/04/2019
3. Information pursuant to Article 13 GDPR for website visitors
When you use this Website, various personal data are collected. As the operator of these pages, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. However, we would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
3.1 Controller
The controller responsible for data processing on this Website is:
AL-KO KOBER LTD
South Warwickshire Business Park
Southam
Warwickshire
CV47 0AL
E-mail: mail.uk@alko-tech.com
3.2 Scope of data collection on our Website
Your data is collected, on the one hand, when you provide it to us. This may, for example, be data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the Website. This is mainly technical data (e.g. Internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our Website.
3.3 Purpose and legal basis for processing personal data
Some of the data is collected to ensure error-free provision of the Website. Other data may be used to analyze your user behavior.
Processing based on your consent (Art. 6(1)(a) GDPR)
If we have obtained your consent to process personal data for specific purposes (e.g. to receive personalized advertising, for identification), processing is lawful on this basis. Consent that has been given may be withdrawn at any time. This also applies to the withdrawal of declarations of consent that you gave us prior to the applicability of the GDPR from 25 May 2018. The withdrawal of consent takes effect for the future and does not affect the lawfulness of data processed until the withdrawal.
Processing based on legitimate interests (Art. 6(1)(f) GDPR)
We process your data in a permissible manner to safeguard our legitimate interests. This includes using your personal data in order to:
inform you about our products and services,
carry out measures to improve and develop services and products in order to offer you customer-specific communication and optimized services,
assert legal claims and defend ourselves in legal disputes,
investigate or prevent criminal offences,
use your data in anonymized form for analysis purposes.
If we intend to process your personal data for a purpose not previously stated, we will inform you in advance in accordance with statutory provisions.
Processing for the purpose of initiating and performing a contract (Art. 6(1)(b) GDPR)
Further personal data such as your name, address, telephone number or e-mail address is not collected when you visit the Website unless you voluntarily provide this information, e.g. to receive a contractual offer. Your information is stored in order to process and handle your enquiry.
3.5 Recipients of data / disclosure of data / third countries
Your data may be disclosed to technical service providers supporting us (e.g. website maintenance providers) for the provision of this Website and for the purposes stated above. We carefully select such providers and have concluded a data processing agreement with them. Disclosure of your data to other third parties and transfer to third countries otherwise takes place only if expressly indicated in this privacy policy or if we are legally obliged to do so.
3.6 Data retention period
We store your personal data for the purposes mentioned above. Your data is processed for the first time from the time it is collected, insofar as you or a third party provides it to us. We delete personal data you have provided to us when the contractual relationship with you has ended or you withdraw your consent and all mutual claims have been fulfilled, and there are no other statutory retention obligations or legal grounds justifying storage.
With Google Analytics, we use the option to limit the storage duration of your data to 26 months.
3.7 Data subject rights / Your rights
Every data subject has the right to:
access pursuant to Art. 15 GDPR,
rectification pursuant to Art. 16 GDPR,
erasure pursuant to Art. 17 GDPR,
restriction of processing pursuant to Art. 18 GDPR,
data portability pursuant to Art. 20 GDPR, and
to object to processing pursuant to Art. 21 GDPR, within the limits of statutory provisions.
Restrictions pursuant to §§ 34 and 35 BDSG apply to the right of access and the right to erasure.
3.7.1 Right to object
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).
3.7.2 Right to withdraw consent
If you have given us separate consent for data processing, you may withdraw this consent at any time in accordance with Art. 7(3) GDPR. Such withdrawal does not affect the lawfulness of processing carried out on the basis of the consent up to the time of withdrawal.
3.7.3 Right to object in specific cases and to direct marketing (Art. 21 GDPR)
If we process personal data about you for direct marketing purposes, you may object to this processing pursuant to Art. 21(2) and (3) GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.
3.7.4 Right to lodge a complaint with the competent supervisory authority
If you believe that the processing of personal data relating to you violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
3.8 Contact for data protection
If you have questions about the collection, processing or use of your personal data, requests for information, rectification, blocking or deletion of data, or the withdrawal of consent you have given, please contact dataprotection@alko-tech.com or contact us using the contact details above.
You may withdraw consent at any time in whole or in part. Please send your withdrawal by e-mail to dataprotection@alko-tech.com or to our address.
3.9 Analytics tools and tools from third-party providers
When you visit our Website, your browsing behavior may be statistically evaluated. This is done primarily using cookies and so-called analytics programs. The analysis of your browsing behavior is generally anonymous; your browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools.
3.9.1 Cookies
Cookies are small text files that are stored on your computer and saved by your browser. Cookies help to make our services more user-friendly, effective and secure. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept cookies, or exclude the acceptance of cookies in certain cases or generally. If cookies are not accepted, the functionality of our Website may be limited. Cookies that are necessary to carry out the electronic communication process or to provide certain functions you require are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.
3.9.2 Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
browser type and browser version,
operating system used,
referrer URL,
host name of the accessing computer,
time of the server request,
IP address.
These data are not merged with other data sources. The collection of these data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its Website — this requires the collection of server log files.
3.9.2 Contacting us
If you contact us (e.g. by e-mail), we store your information to process your enquiry and in case follow-up questions arise. We store and use further personal data only if you consent to this or if it is legally permitted without specific consent.
If you send us enquiries via the contact form, the information from the enquiry form, including the contact details you provide there, will be temporarily stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The processing of the data entered into the contact form is therefore carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). When you use our contact form, your data is stored on our server. If you do not want your data to be stored, you can withdraw your consent to the storage of your data at any time by sending an informal e-mail to dataprotection@alko-tech.com or by written notification to Alois Kober GmbH, Ichenhauser Str. 14, 89359 Kötz.
In addition, the personal data that you have consented to provide as part of contacting us via the contact form is stored via Jotform Inc., 111 Pine St. Suite 1815, San Francisco, CA 94111, USA (“Jotform”). When you use our contact form, your data is stored on the Jotform server. If you do not want your data to be stored by Jotform, you can withdraw your consent to the storage of your data at any time by sending an informal e-mail to dataprotection@alko-tech.com or by written notification to Alois Kober GmbH, Ichenhauser Str. 14, 89359 Kötz.
3.9.3 Conclusion of a data processing agreement
We have concluded a data processing agreement with Jotform and fully implement the strict requirements of the German data protection authorities when using Jotform.
3.10 Analytics tools and advertising
3.10.1 Google Analytics
This Website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the Website. The information generated by the cookie about your use of this Website is generally transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analytics tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.
3.10.2 IP anonymization
We have activated the IP anonymization function on this Website. As a result, your IP address is shortened by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this Website, Google will use this information to evaluate your use of the Website, to compile reports on Website activity and to provide further services related to Website and Internet usage to the Website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
3.10.3 Objection to data collection
You can prevent the storage of all cookies by setting your browser software accordingly. However, please note that in this case you may not be able to use all functions of this and other websites to their full extent. You can also prevent the transmission of the data generated by the cookie and related to your use of the Website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
We also offer you the option of disabling the collection of Website usage data for this Website by clicking the following link: Disable data collection by Google Analytics for this Website. In this case, a special opt-out cookie is set that prevents the future collection of your usage data when you visit this Website.
3.10.4 Processing on behalf
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
3.10.5 Demographic features in Google Analytics
This Website uses the “demographic features” function of Google Analytics. This allows reports to be created containing statements about the age, gender and interests of Website visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers. This data cannot be attributed to a specific person. You can disable this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described under “Objection to data collection”.
3.10.6 Storage period
Data stored by Google at user and event level that is linked to cookies, user IDs (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 26 months. Details can be found at the following link:
https://support.google.com/analytics/answer/7667196?hl=de
3.10.7 Google AdWords and Google Conversion Tracking
This Website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this Website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.
Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that can be used to personally identify users. If you do not want to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. More information about Google AdWords and Google conversion tracking can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this Website may be limited.
3.10.8 Google Tag Manager
Google Tag Manager is a solution from Google Inc. that enables marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool ensures that other tags are triggered, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager.
3.10.9 Meta Pixel
Our Website uses the Facebook visitor action pixel for conversion measurement, provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
This enables the behavior of Website visitors to be tracked after they have been redirected to the provider’s Website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and enables future advertising measures to be optimized. The data collected is anonymous to us as the operator of this Website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook’s data usage policy. This enables Facebook to place ads on Facebook pages as well as outside Facebook. We, as the Website operator, cannot influence this use of data.
The use of the Facebook pixel is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures including social media. Further information on protecting your privacy can be found in Facebook’s privacy notice:
https://de-de.facebook.com/about/privacy/
You can also deactivate the remarketing function “Custom Audiences” in the ad settings at:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
To do so, you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/
3.10.10 CleverReach
This Website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, MĂĽhlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organize and analyze newsletter distribution. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on CleverReach servers in Germany and/or Ireland.
Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. This can include analyzing how many recipients opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our Website) occurred after clicking on the link in the newsletter. Further information on data analysis by CleverReach newsletters can be found at:
https://www.cleverreach.com/de/funktionen/reporting-und-tracking/
Data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time as described above by unsubscribing from the newsletter. If you do not want analysis by CleverReach, you must unsubscribe from the newsletter.
The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers and from CleverReach’s servers after unsubscribing. Data stored by us for other purposes remains unaffected. For details, please refer to CleverReach’s privacy policy:
https://www.cleverreach.com/de/datenschutz/
3.10.11 Conclusion of a data processing agreement
We have concluded a data processing agreement with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.
4. Information pursuant to Article 13 GDPR for customers
We hereby inform you as our customer about the processing of your personal data by AL-KO Vehicle Technology and about the rights to which you are entitled under data protection law.
4.1 Controller
The controller responsible for data processing is:
The controller responsible for data processing on this Website is:
AL-KO KOBER LTD
South Warwickshire Business Park
Southam
Warwickshire
CV47 0AL
mail.uk@alko-tech.com
4.2 Scope and purpose of processing
We process your data only if processing is permitted by law or if we have obtained your consent to data processing. We collect, store and process your data for the entire processing of your purchase, including any subsequent warranty claims, for our service services, and for technical administration. Relevant personal data includes names, address data and telecommunications data. In addition, this may also include enquiry, quotation and order data, data arising from the fulfilment of our contractual obligations, documentation data, and other data comparable with the categories mentioned.
This data is collected:
to perform the contractual relationship,
for correspondence with you,
to handle any liability claims that may exist and to assert any claims against you.
4.3 Legal basis for processing
Processing for the purpose of performing the contract or pre-contractual measures (Art. 6(1)(b) GDPR)
The processing of your personal data is carried out primarily for the purpose of proper performance of the contractual relationship.
Processing based on your consent (Art. 6(1)(a) GDPR)
If we have obtained your consent to process personal data for specific purposes (e.g. submission of an offer), processing is lawful on this basis. Consent that has been given may be withdrawn at any time. This also applies to the withdrawal of declarations of consent that you gave us prior to the applicability of the GDPR on 25 May 2018. The withdrawal of consent takes effect for the future and does not affect the lawfulness of data processed until the withdrawal.
Processing based on legitimate interests (Art. 6(1)(f) GDPR)
We process your data in a permissible manner to safeguard our legitimate interests. This includes using your personal data in order to:
assert legal claims and defend ourselves in legal disputes,
investigate or prevent criminal offences.
If we intend to process your personal data for a purpose not previously stated, we will inform you in advance in accordance with statutory provisions.
4.4 Data retention period
We will store/retain your data for as long as it is needed for our business purposes and, beyond that, in accordance with statutory retention, documentation and limitation periods.
4.5 Recipients of data
Within AL-KO Vehicle Technology, those departments and employees receive access to your personal data that require it to fulfil our contractual and statutory obligations or to safeguard legitimate interests. In addition, service providers and agents engaged by us may receive data for these purposes. We may disclose information about you only if legal provisions require this, you have consented, we are authorized by law to provide information or disclose data, and/or processors commissioned by us equally guarantee compliance with confidentiality as well as the requirements of the GDPR and the German Federal Data Protection Act.
Your personal data will only be disclosed or otherwise transmitted to third parties if this is necessary for contract processing or billing or if you have previously consented. In the course of order processing, for example, the service providers used by us (e.g. carriers, logistics providers, banks) receive the necessary data for order and contract processing.
The data disclosed may be used by our service providers only to fulfil their task. For your order we require your correct name, address and payment data. We require your e-mail address so that we can confirm receipt of your order and communicate with you. We also use it for your identification (customer login). You will also receive your order and shipping confirmation via your e-mail address. Your personal data will be deleted provided that no statutory retention obligations conflict with this and if you have asserted a right to deletion, if the data is no longer necessary for the purpose pursued with the storage, or if its storage is otherwise unlawful.
Under these conditions, the following recipients may receive data:
affiliated companies of AL-KO Vehicle Technology,
service providers & service providers,
credit agencies,
public bodies to fulfil statutory notification obligations, e.g. tax authorities, social security institutions, law enforcement,
banks, credit card companies, payment service providers,
IT service providers,
data disposal companies,
auditing firms,
debt collection service providers,
website management service providers,
insurance companies,
transport and logistics service providers.
4.6 Transfer of data to recipients outside the EEA
Data is transferred to countries outside the EU/EEA only insofar as this is necessary for the performance of contracts with customers, suppliers and service partners (e.g. procurement of materials, production, logistics), you have given us consent, or within the framework of processing on behalf. Data is also exchanged with affiliated companies of AL-KO Vehicle Technology in third countries.
If service providers are used in third countries, they are also obligated — in addition to written instructions — to comply with the level of data protection in the EU by agreeing to the EU Standard Contractual Clauses. Corresponding contractual agreements exist with affiliated companies of AL-KO Vehicle Technology.
4.7 Data subject rights / Your rights
Every data subject has the right to:
access pursuant to Art. 15 GDPR,
rectification pursuant to Art. 16 GDPR,
erasure pursuant to Art. 17 GDPR,
restriction of processing pursuant to Art. 18 GDPR,
data portability pursuant to Art. 20 GDPR, and
to object to processing pursuant to Art. 21 GDPR, within the limits of statutory provisions.
Restrictions pursuant to §§ 34 and 35 BDSG apply to the right of access and the right to erasure.
4.7.1 Right to object
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).
4.7.2 Right to withdraw consent
If you have given us separate consent for data processing, you may withdraw this consent at any time in accordance with Art. 7(3) GDPR. Such withdrawal does not affect the lawfulness of processing carried out on the basis of the consent up to the time of withdrawal.
4.7.3 Right to object in specific cases and to direct marketing (Art. 21 GDPR)
If we process personal data about you for direct marketing purposes, you may object to this processing pursuant to Art. 21(2) and (3) GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.
4.7.4 Right to lodge a complaint with the competent supervisory authority
If you believe that the processing of personal data relating to you violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
4.8 Contact for data protection
If you have questions about the collection, processing or use of your personal data, requests for information, rectification, blocking or deletion of data, or the withdrawal of consent you have given, please contact dataprotection@alko-tech.com or contact us using the contact details above.
You may withdraw consent at any time in whole or in part. Please send your withdrawal by e-mail to dataprotection@alko-tech.com or to our address.
5. Customer account
Orders may be placed as a guest or by creating a customer account. If you register on our Website, we will set up a password-protected direct access to the master data stored by us (customer account). Here you can view data about your completed, open and recently shipped orders and manage your data. You undertake to keep your personal access data confidential and not to make it accessible to any unauthorized third party. We accept no liability for passwords used abusively unless we are responsible for the misuse.
6. Disclosure of personal data
We disclose your personal data to third parties exclusively to the service partners involved in contract processing, such as the transport service provider commissioned with delivery and the credit institution commissioned with payment matters.
7. Payment service providers
7.1 Mollie B.V.
If you choose one of the payment methods offered by the payment service provider Mollie, payment processing is carried out via Mollie B.V., to whom we transmit the information you provide during the ordering process together with information about your order (name, address, possibly IBAN, possibly BIC, invoice amount, currency and possibly transaction number). Your data is transmitted pursuant to Art. 6(1)(b) GDPR exclusively for the purpose of payment processing with Mollie B.V. Your data will be transmitted only insofar as this is actually necessary to process the payment.
7.2 PayPal
PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal enables online payments to be initiated to third parties or payments to be received. PayPal also provides trustee functions and buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.Ă r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If you choose to pay via PayPal, you will be redirected directly to PayPal at the end of the ordering process. Your data will be transmitted to PayPal automatically. By selecting this payment option, you consent to the transmission of personal data required for payment processing.
The transfer is carried out pursuant to Art. 6(1)(b) GDPR and only insofar as this is necessary for payment processing. The personal data transmitted to PayPal generally includes first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. Personal data related to the respective order is also necessary for the processing of the purchase contract.
The purpose of data transmission is payment processing and fraud prevention. We will transmit personal data to PayPal particularly if a legitimate interest exists for the transfer. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. This transfer serves identity and creditworthiness checks.
You can access PayPal’s applicable privacy policy at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data insofar as this is necessary for contractual payment processing.
8. Transport service providers
For the delivery of orders, we work with external transport service providers (e.g. UPS). To carry out the respective order, these service providers receive the following data from us:
first name,
last name,
postal address.
The legal basis for processing is Art. 6(1)(b) GDPR.