We are very pleased about your interest in our company. The protection of your privacy and your personal data is very important to us as CarMedialab GmbH.
The CarMedialab GmbH website can generally be used without providing any personal data. However, if you wish to take advantage of special services offered by our company via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we will generally obtain your consent.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the CarMedialab GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the CarMedialab GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
The party responsible for this website (the “controller”) for purposes of data protection law is CarMedialab GmbH.
You may, at any time, contact our Data Protection Officer directly
with all questions and suggestions concerning data protection.
Our Data Protection Officer’s contact details are the following:
Alter Unteröwisheimer Weg 11
Telephone: 07251 9234071
Scope of Application
This Data Privacy Statement applies to all
of CarMedialab’s websites, applications and online services
that refer to it.
Some of the data are collected to ensure that the website functions properly. Other data are collected for the purposes of analyzing user behaviour.
In addition, personal data are only collected, processed or used if you disclose them to us voluntarily while visiting our website, for example, during a download or while placing an order, while booking a training course, when requesting information or offers from us, when reporting defective software or hardware, when providing us with feedback, subscribing to our newsletter or when applying for a job online. The legal basis for this processing and for sending you our newsletter is that we have received your consent as user (Art. 6(1)(a) GDPR). You will find more information on subscribing to our newsletter in the section “Newsletter”.
If you order goods or services from us, we will only collect and use your personal data insofar as this is necessary for the establishment, implementation or termination of the contract. The legal basis of this kind of data processing is Art. 6(1)(b) GDPR, which permits data to be processed for the performance of a contract or to take steps prior to entering into a contract. No further collection or processing can take place without your express consent. The customer information collected will be deleted after the order has been completed or when the business relationship ends. Legal record keeping requirements remain unaffected.
Furthermore, your personal data will only be processed if you, as user, have so consented (Art. 6(1)(a) GDPR).
Your personal data will only be transferred to a third party insofar as this is necessary for the establishment, implementation or termination of a contract with you or for the delivery of goods or services. This applies particularly to the transfer of your data to a shipping company, credit institution or other service company used for performing a contract.
The legal basis of data processing is Art. 6(1)(b) GDPR, which permits data to be processed for the purposes of performance of a contract or in order to take steps prior to entering into a contract, a legitimate interest on our part in the transfer of personal data, Art. 6(1)(f) GDPR or your explicit consent.
Personal data may be transferred to recipients located outside the EEA in third countries only insofar as there is an appropriate level of data protection at the recipient’s location or where you have given your consent to the transfer. If you would like a summary of the recipients in third countries and information about the rules in place to ensure that there is an appropriate level of data protection, please use the information provided in the section headed “Contact”.
We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
The Google Analytics service is used to analyze how our website is used.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.
Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general.
Google states that it will not connect your IP address to other data.
In addition, Google provides further information with regard to its data protection practices at https://www.google.com/intl/de/policies/privacy/partners including options you can exercise to prevent such use of your data.
However, this does not prevent information from being transmitted to us or to other web analytics services we may use as detailed herein.
We maintain an online presence on YouTube to present our company and our services and to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA.
We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. We also do not have access to this user data. Access is only available to YouTube.
We also integrate the following social media sites into our website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on our own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network.
Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States.
Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.
The following social networks are integrated into our site by linked graphics:
We offer you the opportunity to apply for jobs with our company via our website. In the case of these digital applications, we collect your application data electronically in order to process your application.
The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.
If you are hired as a result of the application process, we will store the data you provide during the application process in your personnel file for the purpose of the usual organizational and administrative process, naturally in compliance with further legal obligations.
The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.
If we do not hire you, we will automatically delete the data submitted to us two months after the final decision is made. We will not delete the data, however, if we must store the data for legal reasons such as evidence of equal treatment of applicants, until any legal action is concluded, or four months.
In this case, the legal basis is Art. 6 Para. 1 lit. f) GDPR and §24 Para. 1 No. 2 BDSG. Our legitimate interest lies in any legal defense we may have to mount.
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect per Art. 7 Para. 3 GDPR with future effect.
You are entitled as a data subject to the data protection rights described below.
If you wish to assert these rights, please use the information provided in the section “Contact”. Please ensure that you can be clearly identified.
Right to Access, Rectification or Erasure
You are entitled by law to access, at any time, personal data stored about you, its source, recipients and the purpose for which it is stored (Art. 15 GDPR). In addition, you have the right to demand that your data be rectified (Art. 16 GDPR) or erased (Art. 17 GDPR).
Right to Restrict Processing
Where the statutory requirements are met, you may demand that processing be restricted (Art. 18 GDPR).
Right to Data Portability
Furthermore, where the requirements specified in Art. 20 GDPR are met, you have the right to receive the data which you provided to us in a structured, commonly used and machine-readable format.
Right to Object to Processing of Data in an Individual Case
You have the right to object, on grounds relating to your particular situation, at any time, to the processing of personal data concerning you if the processing is not based on a legitimate interest or a weighing of interests on our part (Art. 21 GDPR). We will cease processing your data unless we are able to demonstrate compelling legitimate grounds for continuing to do so.
Right to Object to Processing of Data for Direct Advertising Purposes
In addition, you may, at any time, object to the processing of your personal data for advertising purposes (Art. 21 GDPR). Where you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.
Right to Revoke Consent
Insofar as the processing of your personal data is based on your consent, you may, at any time, revoke your consent to such processing with future effect. We will delete your data unless there is a statutory storage and retention period. In such case, your data will be blocked unless a legal basis for processing exists.
Right to Lodge a Complaint with the Competent Authority
If you believe that your data is being processed in breach of the GDPR, you may lodge a complaint with the supervisory authority (Art. 77 GDPR). In addition, you may contact the supervisory authority which is competent for your place of residence / state in which you reside or which is competent for us. The latter is:
The State Commissioner for Data Protection and Freedom of Information of the Federal State of Baden-Württemberg, https://www.baden-wuerttemberg.datenschutz.de.
If you would like to contact us, please use the information provided in the section “Controller”. If you wish to exercise your data protection rights, lodge a complaint or if you have any questions about this Data Privacy Statement or on how we handle personal data, please write to our Data Protection Officer, preferably, send an e-mail to: firstname.lastname@example.org