Data privacy statement

With this privacy policy, the
WEGMANN automotive GmbH 
Rudolf-Diesel Street 6 
97209 Veitshöchheim
datenschutz[at]wegmann-automotive.com
(hereinafter also referred to as "Wegmann") fulfils its existing legal obligation to provide information pursuant to Art. 13 of the Basic Data Protection Regulation ("DS-GVO") with regard to the processing of personal data on the website www.wegmann-automotive.com. In the following, we therefore explain to you which of your personal data we process and in what way. Please contact us if you have any further questions. You will find our contact details above and at the end of this document.
 
1. information on the collection of personal data
In the following we inform about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
The person responsible pursuant to Art. 4 No. 7 DS-GVO is WEGMANN automotive GmbH, Rudolf-Diesel Straße 6, 97209 Veitshöchheim, Germany (see our imprint). You can contact our data protection officer at datenschutz[at]wegmann-automotive.com or our postal address with the addition "The data protection officer". A contact can be found at the end of this data protection statement. 
When you contact us by e-mail or via our contact form, the data you provide (mandatory information is only your e-mail address, but you can voluntarily provide additional data, e.g. your name and telephone number) will be stored by us to answer your questions. We delete the data collected in this context after the storage is no longer necessary or restrict the processing if there are legal storage obligations. The legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO ("legitimate interest").
If we would like to use commissioned service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.
An automated decision making process in individual cases including profiling in accordance with Art. 22 DS-GVO does not take place.

2. your rights
You have the following rights against us with regard to the personal data concerning you:
              - Right to information,
              - Right to correction or deletion,
              - Right to limit processing,
              - Right to object to the processing,
              - Right to data transferability.
Insofar as we base the processing of your personal data on the balancing of interests (Art. 6 Para. 1 S. 1 lit. f DS-GVO), you can lodge an objection to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you. In the event of such an objection, we request that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
 
3. collection of personal data when visiting our website
When using the website for informational purposes only, i.e. if you do not register, contact us or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f DS-GVO, legitimate interest):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access Status/HTTP Status Code
- Amount of data transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.

4. use of cookies
In addition to the above-mentioned data, cookies are stored on your computer when you use our website, if you give us your consent. 
Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and which provide certain information to the site that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
On the one hand we use technically necessary cookies. These cookies are necessary for a good functionality of our website and cannot be switched off in our system. The legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO ("legitimate interest"). However, you can of course configure your browser settings according to your wishes and also reject such technically necessary cookies. Please note that you will then not be able to use our website.
Otherwise, Art. 6 para. 1 sentence 1 lit. a DS-GVO is the legal basis for the use of cookies ("consent"). You can differentiate whether you give us consent for all cookies, only for certain types of cookies (e.g. performance cookies, statistics cookies, advertising/tracking cookies) or no consent at all. 

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is immediately deleted. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the internet.

The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions: www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: www.google.de/intl/de/policies/privacy.

7. doubleClick by Google
This website uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to serve ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to help identify which ads are shown in which browser, and to prevent them from being shown more than once. DoubleClick may also use cookie IDs to track conversions related to ad requests. For example, when a user sees a DoubleClick ad and then visits the advertiser's site on the same browser to make a purchase. According to Google, DoubleClick cookies do not contain any personally identifiable information.
Google also processes your personal data in the USA. Before giving your consent in accordance with Art. 49 Para. 1 letter a DS-GVO, we would like to point out in particular that in the USA, without an adequacy finding and without suitable guarantees, there may not be an adequate level of data protection, as data protection laws do not comply with the provisions of the DS-GVO, and in particular the rights of data subjects may not be enforceable.

Due to the marketing tools used, your browser will establish a direct connection with the Google server if you have given your voluntary consent. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.
In addition to refusing your voluntary consent, you can alternatively prevent participation in this tracking procedure in various other ways: a) by making appropriate settings in your browser software, in particular by suppressing third-party cookies so that you do not receive third-party ads; b) by deactivating cookies for conversion tracking by setting your browser to refuse cookies from the domain "www. googleadservices.com" domain, www.google.de/settings/ads, this setting being cleared when you delete your cookies; c) by disabling interest-based ads from the providers that are part of the "About Ads" self-regulatory campaign via the link www.aboutads.info/choices, this setting being cleared when you delete your cookies; d) by permanently disabling them in your browser via the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
Further information about DoubleClick by Google can be found at www.google.de/doubleclick and support.google.com/adsense/answer/2839090, as well as general information about Google's privacy policy: www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of 
Network Advertising Initiative (NAI) at www.networkadvertising.org

8. application
You can register online for our applicant portal. To do so, you must send us your name, address, telephone number and e-mail address. Based on this data, we can then grant you access to our applicant portal and set up an appropriate account for you. You will be sent corresponding access data with which you can log in. 
If you then apply to us online, the data you provide will be processed by us to check whether we would like to establish and carry out an employment relationship with you. To do this, you must participate in our online assessment center. 
If you apply online via our career portal, your data will be stored and processed on the systems of our software partner HR Diagnostics AG. A corresponding order processing contract has been concluded with this partner in accordance with Art. 28 DS-GVO. Our software partner will only process your data in accordance with the legal requirements and only in accordance with instructions in the context of the fulfilment of the contract as a processor. He has also taken the necessary security measures as well as technical and organizational measures.
During the application procedure, in addition to the form of address, surname and first name, the usual correspondence data such as postal address, e-mail address and telephone numbers will be stored. In addition, application documents such as letters of motivation, curriculum vitae, professional, training and further training qualifications and job references are also recorded.
The applicant data sent to us and entered by you will generally only be processed until the time of the decision on hiring if an employment relationship is not established. Three months after the rejection has been sent or after the application documents have been returned to the applicant, the data will be deleted.
Data will only be stored in an applicant pool if you expressly give us your consent (Art. 6 Para. 1 S. 1 lit. a DS-GVO in conjunction with Art. 7 DS-GVO). This storage will be for a maximum period of two years. This consent is voluntary. You can refuse it without giving reasons and without having to fear any disadvantages. You can also revoke this consent at any time in text form (e.g. letter, e-mail) with future effect to the contact data shown above, without having to fear any disadvantages.
If we enter into an employment relationship with you, the data that you have made available to us will be processed to establish, implement and, if necessary, terminate the employment relationship. 
The data may be processed for statistical purposes (e.g. reporting). No conclusions can be drawn about individual persons.
You can delete your created account at any time (bewerbungen@wegmann-automotive.com). 
Legal basis is § 26 Federal Data Protection Act ("BDSG") (§ 26 para. 8 p. 2 BDSG).

9. google tag manager
This website uses the Google Tag Manager from Google. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it remains disabled for all tracking tags implemented with Google Tag Manager. 
Google also processes your personal data in the USA. Before you give your consent in accordance with Art. 49 Para. 1 letter a DS-GVO, we would like to point out in particular that in the USA there may not be an adequate level of data protection without a decision on adequacy and without suitable guarantees, as data protection laws do not comply with the provisions of the DS-GVO and in particular the rights of data subjects may not be enforceable.

10. Facebook Custom Audiences / Facebook Pixel

1 - Information/Purpose:

This website uses the so-called "Facebook Pixel" of the social network "Facebook", which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta) as the responsible party, for the following purposes:

Facebook (Website) Custom Audiences
We use the Facebook Pixel and the Conversions API on our website for remarketing purposes in order to be able to address you again within 180 days. This allows users of the website to be shown interest-based advertisements, so-called "Facebook ads", when visiting the social network "Facebook" or other websites that also use this method. In this way, we pursue the interest of displaying advertisements that are of interest to you in order to make our website or offers more interesting for you as a user.

Facebook Conversion
In addition, with the help of the Facebook Pixel and the Conversions API, we want to ensure that our Facebook Ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook Pixel, we can track the effectiveness of the Facebook Ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook Ad (so-called "conversion").

Due to the marketing tools used (Facebook Pixel and Conversions API), your browser automatically establishes a direct connection with Facebook's server as soon as you have agreed to the use of cookies requiring consent and have thus given us the necessary consent. Through the integration of the Facebook pixel and the use of the Conversions API, Facebook receives the information that you have accessed the corresponding web page of our website, or clicked on an ad of ours. If you are registered with a Facebook service, Facebook can assign the visit to your account. We have no influence on this.

The processing of data by Facebook takes place within the framework of Facebook's data usage policy. Specific information and details about the Facebook Pixel and Conversions API and how it works can also be found in Facebook's help section.

2 - Recipient:

Joint responsibility: We as WEGMANN automotive GmbH are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta) for the collection and transmission of data as part of this process. This is for the following purposes:

The creation of individualized or appropriate advertisements, as well as for their optimization.
The delivery of commercial and transactional messages (e.g. via Messenger).
The following processing operations are therefore not covered by joint processing:

Processing that takes place after collection and transmission is the sole responsibility of Meta.
The creation of reports and analyses in aggregated and anonymized form is carried out as part of commissioned processing and is therefore our responsibility.

For joint responsibility, we have concluded a corresponding agreement with Facebook, which can be accessed here: www.facebook.com/legal/controller_addendum.

This sets out the respective responsibilities for fulfilling the obligation under the GDPR with regard to joint responsibility.

The contact details of the responsible company, as well as Facebook's data protection officer, are available here: www.facebook.com/about/privacy

More information on how Meta processes personal data, including its legal basis and further information on data subject rights is located here: www.facebook.com/about/privacy. We transfer the data within the scope of shared responsibility on the basis of legitimate interest pursuant to Art. 6 (1) f DSGVO.

Information on data security conditions can be found here: https://www.facebook.com/legal/terms/data_security_terms and on processing based on standard contractual clauses can be found here: www.facebook.com/legal/EU_data_transfer_addendum

3 - Erasure/Revocation:

You can deactivate the tool via the cookie settings by accessing the cookie settings via the button at the bottom left and changing your selection there.

Lifetime of cookies: up to 180 days after the last interaction (this only applies to cookies set through this website).

4 - Legal basis:

Art. 6 (1) a DSGVO (consent).

11. Matomo (formerly Piwik)

1 - About Matomo
Matomo is an open source web analytics platform. A web analytics platform is used by a website owner to measure, collect and analyse visitor data in order to understand and optimise the website. If you would like to know more about what Matomo looks like, you can access a demo version at: demo.matomo.org.

2 - Purpose of the processing
Matomo is used to analyse the behaviour of website visitors and to identify possible sources of errors. For example, pages not found, search engine indexing issues and what content is viewed the most. Once the data is processed (for example, number of visitors reaching a 404 page or viewing only one page...), Matomo creates reports so that the website owners can improve the website, for example, change the page layout, publish new content and much more.
Matomo processes the following personal data:

- Cookies
- IP address
- User ID
- User-defined sizes
- User Defined Variables
- Job ID
- User location

And also:
- Date and time
- Title of the page viewed
- URL of the page viewed
- URL of the page previously viewed
- Screen resolution
- Time in local time zone
- Files clicked and downloaded
- Link clicks to an external website
- Time taken to generate pages
- Country, region, city
- Main language of browser
- User agent of the browser
- Session record, mouse events (movements, content forms and clicks)
- Interactions
- Media interactions
- A/B testing

3 - Legal regulations
Matomo's processing of personal data is based on legal regulations.
Processing your personal data, such as cookies, helps us to see what works and what doesn't on our website. For example, it helps us to see if the way we communicate is appealing and how we can better organise the structure of the website. Our team benefits from processing your personal data and acts directly on the website. By processing your personal data, you can use a website that is getting better and better.
Without this data, we would not be able to provide you with the service we currently offer. Your data will only be used to improve the user experience on the website and to improve the search function.

4 - Recipients of personal data
Personal data obtained via Matomo will be sent to:
- Our Company and
- InnoCraft's Matomo Analytics Cloud, which is based in France.
given.

5 - Details of transfers to a third country and safeguards.
Matomo data is hosted in France.

6 - Retention period or criteria for determining the retention period.
We retain personal data collected in Matomo for a period of 13 months in accordance with applicable French law.

7 - The rights of the data subject
As Matomo processes your personal data on the basis of legitimate interests, you may exercise the following rights:
- Right of access: you may obtain access to your personal data at any time.
- Right to erasure: You may at any time request us to erase any personal data we have processed about you.
- Right to object: You can object to the tracking of your personal data by using the following opt-out function:

8 – The right to lodge a complaint with a supervisory authority
If you think that the way we process your personal data with Matomo analytics is infringing the law, you have the right to lodge a complaint with a supervisory authority.

9 – Whether the provision of personal data is part of a statutory or contractual requirement; or obligation and possible consequences of failing to provide the personal data
If you wish us to not process any personal data with Matomo, you can opt-out from it at any time. There will be no consequences at all regarding the use of our website

10 – The existence of automated decision-making, including profiling and information about how decisions are made, the significance and the consequences
Matomo is not doing any profiling.

12. CAPTCHA
We use CAPTCHA, which protects our website from spam and abuse. CAPTCHA prevents automated software (so-called bots) from carrying out abusive activities on the website, i.e. it checks whether the entries made are actually from a human being. To determine this, the following data is collected and processed:
- Referrer (address of the page on which the captcha is used)
- IP address of the user
- Google Account (if the user is logged in at Google, this will be recognized and assigned)
- Input behaviour of the user (e.g. answering the CAPTCHA question, input speed into the form fields, order of selection of input fields by the user) 
- Browser, browser size and resolution, browser plugins, date, language setting
- Presentation instructions (CSS) and scripts (Javascript) of the website
- Mouse or touch events within the page
The legal basis is Art. 6 para. 1 sentence 1 letter f DS-GVO ("legitimate interest").

13. YouTube Video Plugin
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode used by us, transmitted to Google and subsequently processed by Google only when you play a video.

14. no social plugins
We do not use social plugins. We only use links to our social media pages: Kununu, Facebook, Xing, LinkedIn, Instagram, YouTube

15. store locator
Our website uses a store locator so that you can quickly find our products at a dealer near you. 
We use Google Maps from Google Inc. to do this, which allows us to display interactive maps directly on the website and allows you to use the map function to find the nearest retailer based on your location for our products.
When you visit our site, no personal data is initially disclosed to the provider. We provide you with the opportunity to communicate directly with the provider via our map. Only if you give your consent will the provider receive the information that you have visited the corresponding website of our online offer. In addition, the data mentioned in the section "Collection of personal data when visiting our website" of this statement will be transmitted. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you have to log out before activating the button. Google stores your data as user profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Google also processes your personal data in the USA. Before you give your consent in accordance with Art. 49 Para. 1 letter a DS-GVO, we would like to point out in particular that in the USA there may not be an adequate level of data protection without a decision on adequacy and without suitable guarantees, as data protection laws do not comply with the provisions of the DS-GVO and in particular the rights of data subjects may not be enforceable.

Further information on the purpose and scope of data collection and processing can be found in the provider's privacy policy. There you will also find further information about your rights and settings to protect your privacy: www.google.de/intl/de/policies/privacy.

16. further functions and offers of our website
In addition to the purely informative use of our website, we offer various services which you can use if you are interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
In some cases we use external service providers to process your data. These have been carefully selected by us, checked and commissioned with regard to the data protection standards applicable there, are bound by our instructions and are checked regularly.
Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer.
If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.
 
17. objection or revocation against the processing of your data
If you have given your consent to process your data, you can revoke it at any time. Such revocation will affect the permissibility of processing your personal data after you have given it to us.
Insofar as we base the processing of your personal data on the weighing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you. In the event of such an objection, please explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising at the following contact details: datenschutz[at]wegmann-automotive.com.

18. recipient of the data
We transmit your data to the specialist departments within Wegmann as far as this is necessary. 
The basis of authorization for any further data transfer within the group is Art. 6 para. 1 sentence 1 lit. f DS-GVO ("legitimate interest"). According to this, data processing is lawful if the processing is necessary to safeguard our legitimate interests, provided that the interests or fundamental rights of the data subject do not outweigh these. In the recitals to the DS-GVO, Recital 48 specifies the legitimate interest in transfer within a group of companies. According to this, transfer within a group of companies for internal administrative purposes with regard to the processing of customer data must be qualified as a legitimate interest on our part within the meaning of Art. 6 (1) sentence 1 lit. f DS-GVO. 
In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. All requirements of Art. 28 DS-GVO are observed.

19. place of the data processing operations 
All processing of your personal data takes place either in Germany or in member states of the European Union. Your personal data will not be transferred by us to countries outside the member states of the European Union (so-called third countries) or to other international organizations, unless otherwise stated in this document. 
If we transfer personal data to service providers outside the EU, this will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or an agreement on the standard contractual clauses of the EU Commission) are in place or the consent of the person concerned has been obtained (Art. 44 ff. DS-GVO). 

18. security / technical and organizational measures
We take all necessary technical and organizational measures, taking into account the provisions of Articles 24, 25 and 32 of the DS-GVO, to protect your personal data from loss, destruction, access, modification or distribution by unauthorized persons and misuse. 
For example, we comply with the legal requirements for pseudonymization and encryption of personal data, for confidentiality, integrity, availability and the resilience of systems and services in connection with processing, for the availability of personal data and the possibility of quickly restoring it in the event of a physical or technical incident, and for the establishment of procedures for regular review, assessment and evaluation of the effectiveness of the technical and organizational measures to ensure the security of processing. 
Furthermore, we also observe the provisions of Art. 25 DS-GVO with regard to the principles of "privacy by design" and "privacy by default".

19. Usercentrics

The recipient of your data within the meaning of Art. 13 (1) (e) GDPR is Usercentrics GmbH. As part of order processing, WEGMANN automotive GmbH transmits personal data (consent data) to Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich, Germany, as processor. Consent data includes the following data: Date and time of the visit or consent / refusal, device information. The data is processed for the purpose of compliance with legal obligations (obligation to provide evidence pursuant to Art. 7 para. 1 GDPR) and the associated documentation of consent and thus on the basis of Art. 6 para. 1 lit. c) GDPR. Local storage is used to store the data. 
The consent data is stored for 1 year. The data is stored in the European Union. Further information on the data collected and contact options can be found at usercentrics.com/privacy-policy/.

20. modification of the data protection declaration
The content of our privacy policy is regularly reviewed.
WEGMANN automotive reserves the right to change the privacy policy at any time with or without prior notice. Please inform yourself about any changes on your own initiative. Our most recent version of the document applies in each case.

Contact us:

DORNBACH GmbH Rechtsanwaltsgesellschaft

Anton-Jordan-Straße 1
56070 Koblenz - Germany

Telefon: +49 261 / 9431 134 (Mr. Dr. Alexander Birkhahn)
Telefon: +49 681 / 89197 1002 (Mr. Rouven Beck)
Telefax: +49 261 / 9431 111
datenschutz@dornbach.de

January 2024