We are very pleased about your interest in our company. The protection of your privacy and your personal data is very important to us as CarMedialab GmbH.
The CarMedialab GmbH website can generally be used without providing any personal data. However, if you wish to take advantage of special services offered by our company via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we will generally obtain your consent.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the CarMedialab GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the CarMedialab GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
The party responsible for this website (the “controller”) for purposes of data protection law is CarMedialab GmbH.
You may, at any time, contact our Data Protection Officer directly
with all questions and suggestions concerning data protection.
Our Data Protection Officer’s contact details are the following:
Alter Unteröwisheimer Weg 11
Telephone: 07251 9234071
Scope of Application
This Data Privacy Statement applies to all
of CarMedialab’s websites, applications and online services
that refer to it.
Whenever you use the internet, your browser automatically transfers certain information, which we collect and store in server log files (hereinafter also referred to as “log files”). The information stored in the server log files includes, but is not limited to:
Such data is not combined with data from other sources. Thus the anonymous data of the server log files are stored separately from all personal data provided by a person concerned. The basis of data processing is Art. 6(1)(b) GDPR, which permits data to be processed for the purposes of performance of a contract or to take steps prior to entering into a contract. The system needs to store your IP address temporarily to be able to display the website on your computer. For this to happen, your IP address must be stored for the duration of the session. The data stored in the log files are used to ensure the functionality of the website. In addition, the data help us to optimize our website and to maintain the security of our IT systems. These anonymously collected data and information are therefore evaluated by CarMedialab GmbH both statistically and with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data processed by us. We delete personal data as soon as they are no longer needed for the purposes for which they were collected. Data that is stored in log files will be deleted within 30 days or less. It is possible that data will be stored and combined with other data for analysis and optimization purposes, and to improve the offer of information on our website. In this case, the user’s IP address will be deleted or altered so that it can no longer relate to the accessing client. The collection of data for provisioning the website and storing of data in log files is carried out for the purposes of error analysis. It is absolutely necessary for the operation and the ongoing enhancement of our website. As a result, you, as the user, have no means of objecting to this.
Some of the data are collected to ensure that the website functions properly. Other data are collected for the purposes of analyzing user behaviour.
In addition, personal data are only collected, processed or used if you disclose them to us voluntarily while visiting our website, for example, during a download or while placing an order, while booking a training course, when requesting information or offers from us, when reporting defective software or hardware, when providing us with feedback, subscribing to our newsletter or when applying for a job online. The legal basis for this processing and for sending you our newsletter is that we have received your consent as user (Art. 6 (1) (a) GDPR). You will find more information on subscribing to our newsletter in the section “Newsletter”.
If you order goods or services from us, we will only collect and use your personal data insofar as this is necessary for the establishment, implementation or termination of the contract. The legal basis of this kind of data processing is Art. 6 (1) (b) GDPR, which permits data to be processed for the performance of a contract or to take steps prior to entering into a contract. No further collection or processing can take place without your express consent. The customer information collected will be deleted after the order has been completed or when the business relationship ends. Legal record keeping requirements remain unaffected.
Furthermore, your personal data will only be processed if you, as user, have so consented (Art. 6 (1) (a) GDPR).
Your personal data will only be transferred to a third party insofar as this is necessary for the establishment, implementation or termination of a contract with you or for the delivery of goods or services. This applies particularly to the transfer of your data to a shipping company, credit institution or other service company used for performing a contract.
The legal basis of data processing is Art. 6 (1) (b) GDPR, which permits data to be processed for the purposes of performance of a contract or in order to take steps prior to entering into a contract, a legitimate interest on our part in the transfer of personal data, Art. 6 (1) (f) GDPR or your explicit consent.
Personal data may be transferred to recipients located outside the EEA in third countries only insofar as there is an appropriate level of data protection at the recipient’s location or where you have given your consent to the transfer. If you would like a summary of the recipients in third countries and information about the rules in place to ensure that there is an appropriate level of data protection, please use the information provided in the section headed “Contact”.
We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
The Google Analytics service is used to analyze how our website is used.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.
Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general.
Google states that it will not connect your IP address to other data.
In addition, Google provides further information with regard to its data protection practices at https://www.google.com/intl/de/policies/privacy/partners including options you can exercise to prevent such use of your data.
However, this does not prevent information from being transmitted to us or to other web analytics services we may use as detailed herein.
We offer you the opportunity to apply for jobs with our company via our website. In the case of these digital applications, we collect your application data electronically in order to process your application.
The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.
If you are hired as a result of the application process, we will store the data you provide during the application process in your personnel file for the purpose of the usual organizational and administrative process, naturally in compliance with further legal obligations.
The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.
If we do not hire you, we will automatically delete the data submitted to us two months after the final decision is made. We will not delete the data, however, if we must store the data for legal reasons such as evidence of equal treatment of applicants, until any legal action is concluded, or four months.
In this case, the legal basis is Art. 6 Para. 1 lit. f) GDPR and §24 Para. 1 No. 2 BDSG. Our legitimate interest lies in any legal defense we may have to mount.
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect per Art. 7 Para. 3 GDPR with future effect.
By clicking on the “Send” button on the contact, feedback and order forms and the transfer of your information, you give your consent to our processing and storing of the information which is in the contact form, and in particular of your personal data, for the purposes for which you wish to have it transferred. We will erase such data as soon as it is no longer needed for its intended purpose. The data you supply on the contact, feedback and order forms is thus only processed on the basis of the consent (Art. 6(1)(a) GDPR) given to us when you send the form. You may, at any time, revoke your consent with future effect. All that you need to do is send us an e-mail with an informal notice revoking your consent (email@example.com). This revocation has no effect on the legality of data processing activities carried out prior to the revocation.
How to subscribe/unsubscribe
As a visitor to our website, you will be offered the option of subscribing to our company newsletter. By looking at the entry form used to subscribe to the newsletter, you can see which personal data will be sent to the processor. At the same time, the IP address of the Internet connection from which you access our website as well as the date and time of your registration are stored.
At CarMedialab GmbH, we use our newsletter to inform our customers, business partners and potential customers at regular intervals about our company’s offerings. You will essentially only be able to receive our newsletter if you have a valid e-mail address and have subscribed to the newsletter. For legal reasons, a confirmation e-mail will first be sent to the e-mail address that you used to subscribe to the newsletter (double opt-in). The purpose of this confirmation e-mail is to verify that you have authorized the use of your e-mail address for the receipt of the newsletter.
Data that you provide us with for receiving our newsletter will only be used for that purpose.
Should you later decide that you no longer wish to receive our newsletter, you may, at any time, stop receiving it by revoking your consent with future effect.
Each newsletter contains a link for revoking your consent. By clicking on the “Unsubscribe” link, you can unsubscribe from the newsletter. Alternatively, you can, at any time, unsubscribe from the newsletter simply by going directly to our website (firstname.lastname@example.org) or by writing to us (see more on this in the section “Contact”).
Your consent as user provides the legal basis for processing your personal data and sending our newsletter to you (Art. 6(1)(a) GDPR).
You are entitled as a data subject to the data protection rights described below.
If you wish to assert these rights, please use the information provided in the section “Contact”. Please ensure that you can be clearly identified.
Right to Access, Rectification or Erasure
You are entitled by law to access, at any time, personal data stored about you, its source, recipients and the purpose for which it is stored (Art. 15 GDPR). In addition, you have the right to demand that your data be rectified (Art. 16 GDPR) or erased (Art. 17 GDPR).
Right to Restrict Processing
Where the statutory requirements are met, you may demand that processing be restricted (Art. 18 GDPR).
Right to Data Portability
Furthermore, where the requirements specified in Art. 20 GDPR are met, you have the right to receive the data which you provided to us in a structured, commonly used and machine-readable format.
Right to Object to Processing of Data in an Individual Case
You have the right to object, on grounds relating to your particular situation, at any time, to the processing of personal data concerning you if the processing is not based on a legitimate interest or a weighing of interests on our part (Art. 21 GDPR). We will cease processing your data unless we are able to demonstrate compelling legitimate grounds for continuing to do so.
Right to Object to Processing of Data for Direct Advertising Purposes
In addition, you may, at any time, object to the processing of your personal data for advertising purposes (Art. 21 GDPR). Where you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.
Right to Revoke Consent
Insofar as the processing of your personal data is based on your consent, you may, at any time, revoke your consent to such processing with future effect. We will delete your data unless there is a statutory storage and retention period. In such case, your data will be blocked unless a legal basis for processing exists.
Right to Lodge a Complaint with the Competent Authority
If you believe that your data is being processed in breach of the GDPR, you may lodge a complaint with the supervisory authority (Art. 77 GDPR). In addition, you may contact the supervisory authority which is competent for your place of residence / state in which you reside or which is competent for us. The latter is:
The State Commissioner for Data Protection and Freedom of Information of the Federal State of Baden-Württemberg.
If you would like to contact us, please use the information provided in the section “Controller”. If you wish to exercise your data protection rights, lodge a complaint or if you have any questions about this Data Privacy Statement or on how we handle personal data, please write to our Data Protection Officer, preferably, send an e-mail to: email@example.com