We take data security seriously

The following Privacy Statement applies to the use of our Internet site at: www.autozug-sylt.de (“website” in the following).

The collection and processing of your personal data takes place in compliance with all applicable data protection regulations, in particular EU Directive 2016/697 – the General Data Protection Regulation (GDPR). We collect and process your personal data in order to provide you with the services offered on our website. This statement describes how and for what purpose your data is processed and what rights and options you have in connection with your personal data. Your data will be processed exclusively on the basis of Art. 6 para. 1 GDPR. In accordance with legal regulations, your data will only be stored for the duration necessary to achieve the intended purpose.

1. Responsible Party

The party responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR is

RDC AUTOZUG Sylt GmbH
Industrieweg 16
25890 Westerland
info@autozug-sylt.de

Our Data Protection Officer is

Neumeier AG
Market Street 29
84066 Mallersdorf
Phone: +49 (0)08772/803530
datenschutz@neumeier-edv.de

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection provisions, either altogether or for individual measures, you can address your objection to the responsible party or to our data protection officer.

2. Use of the Website

2.1. Hosting

The hosting services we use serve in particular to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use to operate the website.

In this connection we, or rather our hosting provider, process inventory data, contact data, content data, contract data, usage data, and the meta- and communication data of customers, interested parties, and visitors to this website based on our legitimate interests in the efficient and secure provision of this online site pursuant to Art. 6 Para. 1 S. 1 lit. f) GDPR in conjunction with Art. 28 GDPR.

2.2. Access data

We collect information about you when you use this website. We automatically collect information about usage patterns and your interaction with us, and register information about your computer or mobile device. We collect, store and use data about each access to our site (in “server log files”). The access data includes:

• IP address,
• Browser identification,
• optionally a logon name for pages with HTTP authentication,
• optionally, the address of the website from which the user came to the current website.

We use these log files without allocating them to your person or any other profiling for statistical evaluations for the purpose of our operating, securing and optimizing our website, but also to anonymously record the number of visitors to our website (traffic) and the scope and type of use of our website and services. This information enables us to analyze traffic, troubleshoot and correct errors, and improve our services. Therein lies our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

We reserve the right to subsequently check the log data if there are concrete indications that give rise to a justified suspicion of illegal use. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision of services or billing for a service, e.g. if you use take advantage of one of our offers. We also store IP addresses if we have a concrete suspicion of a criminal offence in connection with the use of our website. We also save the date of your last visit as part of your account (e.g. when you register, log in, click links, etc.).

Server logfiles are stored for 7 days.

2.3. Cookies

Cookies are small text files that are stored on your device. Cookies enable us to make our website more user-friendly, effective, and secure. The following data and information is stored in the cookies:

• Log-in information
• Language settings
• Keywords entered

Information about the number of visits to our website and the use of individual features of our website.

 When the cookie is activated, it is assigned an identification number. Your personal data will not be assigned to this identification number. Your name, IP address, or similar data that would enable the cookie to be assigned to you are not placed in the cookie. On the basis of cookie technology, we merely receive pseudonymized information, such as which pages of our shop were visited, which products were viewed, etc. You can adjust your browser settings so that you are informed in advance when cookies are set and can decide on a case-by-case basis whether you wish to exclude the acceptance of cookies in certain cases or in general, or whether cookies should be blocked completely. This may limit the functionality of the website.

2.3.1. Session cookies

We use “session cookies” in order to optimize our online offer. A session cookie is a small text file that is sent by the respective servers when you visit a website and stored temporarily on your hard drive. The file as such contains a “session ID,” which can be used to assign the various requests received from your browser to a shared session. This allows your computer to be recognized when you return to our website. These cookies are deleted after you close your browser. For example, they enable you to use the shopping cart function across several pages. The collection and processing of data in the session cookies is based on Art. 6 para. 1 lit. f) GDPR.

2.3.2. Persistent Cookies

To a limited extent, we also use persistent cookies (which are also small text files that are stored on your terminal device). These remain on your device and enable us to recognize your browser the next time you visit. These cookies are stored on your hard drive and delete themselves after a prespecified time. Their service life is between 1 month and 10 years. This enables us to present our services to you in a more user-friendly, effective and secure manner and, for example, to display information on the site that is specifically tailored to your interests. Persistent cookies are set only based on your prior consent, Art. 6 Para. 1 lit. a) GDPR. When you access this website, a “consent banner” is displayed. This is where you choose whether you wish to allow the setting of persistent cookies or not. You can revoke your choice at any time by sending us an email.

2.4.  Email contact

When you contact us (e.g. via contact form or email), we store your details for processing the request, and in case follow-up questions arise (Art. 6 para. 1 lit. b) GDPR). We only store and use further personal data if you consent to this or if this is legally permissible without special consent, e.g. to carry out pre-contractual measures in accordance with Art. 6 Para. 1 lit. b) GDPR.

2.5. Google Analytics

We use Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google has signed and obtained certification under the Privacy Shield agreement between the European Union and the United States. So Google has committed to complying with the standards and regulations of European data protection law. Further information can be found at www.privacyshield.gov/.

Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about the use of this website by its visitors is generally transmitted to a Google server in the USA and stored there.

However, if IP anonymization is enabled on this website, Google will truncate your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the U.S. and shortened there. IP anonymization is active on this website. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. When you visit our website, a “consent banner” is displayed. This banner lets you allow or prevent the use of the cookies that are required for Google Analytics, among other things. By ticking “Agree” you consent to the processing of your data by cookies. Therefore, the processing of your data takes place exclusively based on your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You can revoke this consent at any time by sending an email to us or to our Data Protection Officer. However, we would like to point out that in this case you may not be able to fully use all of this website’s functions and features. We have concluded a third-party data processing contract with Google and fully comply with the strict requirements of the German data protection authorities in our use Google Analytics.

This website uses Google Analytics’ “Demographics” feature. This allows the creation of reports that contain statements about the age, gender and interests of the site visitors. This data comes from interest-related advertising by Google and from visitor data from third parties. This data cannot be assigned to any specific person. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described under “Objecting to data collection”.

2.6. Facebook PlugIns

The website links to a “like” page on Facebook. When you click on this link, you leave this website and establish a direct connection between your browser and the Facebook servers. Information about the data that Facebook Inc. subsequently collects can be found here: https://www.facebook.com/privacy/explanation.

2.7. Storage period

Unless specifically stated, we will only store personal data for as long as is necessary to fulfill the purposes for which it was collected.

3. Your rights as the data subject

Under the applicable laws, you have various rights with respect to your personal information. If you wish to assert these rights, please send your request in text form to the address stated in paragraph 1, clearly identifying yourself. Below you will find an overview of your rights.

3.1. Right to confirmation and information

You have the right at any time to receive confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to request from us free information about the personal data stored about you, along with a copy of this data (Art. 15 GDPR). Furthermore, you are entitled to the following information/rights:

• the purposes of the data processing;
• the categories of personal data that are processed;
• the recipients or categories of recipients to whom the personal data has been or will be disclosed, especially if these recipients are in third countries or at international organizations;
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
• the existence of a right to rectify or delete personal data concerning you, or to limit the processing by the responsible party, or to object to such processing;
• the existence of a right of appeal to a supervisory authority;
• if the personal data is not collected from you, all available information about the origin of the data;
• the existence of any automated decision-making including profiling in accordance with 22(1) and (4) GDPR and, at least in these cases, meaningful information on the logic involved and the scope and intended effects of such processing for you.
•  If personal data is transmitted to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transmission.

3.2. Right to rectification

You have the right to demand from us the immediate correction of incorrect personal data concerning you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – including by means of a supplementary declaration.

3.3. Right to cancellation (“right to be forgotten”)

Pursuant to Art. 17 (1) GDPR, you have the right to demand that we delete personal data concerning you immediately, and we are obliged to delete personal data immediately if one of the following reasons applies:

• Personal information are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
• Personal information was processed unlawfully.
• The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
• The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

 If we have made the personal data public and we are obliged to delete them pursuant to Art. 17 para. 1 GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing that you have requested them to delete all links to this personal data or copies or replications of this personal data.

3.4. Right to limitation of processing

You have the right to demand that we restrict the processing (Art. 18 GDPR) if one of the following conditions is met:

• the accuracy of the personal data is disputed by you for a period of time that allows us to verify the accuracy of the personal data,
• the processing is unlawful and you refused to delete the personal data and instead requested that the use of the personal data be restricted;
• we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise, or defend legal claims, or
• you have lodged an objection against the processing pursuant to Art. 21 para. 1 GDPR, as long as it has not yet been established whether the legitimate reasons of our company outweigh yours.

3.5. Right to data transferability

You have the right to receive the personal data concerning you which you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another responsible party without interference on our part (Art. 20 GDPR), provided that the processing is based on an agreement pursuant to Art. 6 Para. 1 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR, and the processing is carried out using automated procedures.

When exercising your right to data transfer in accordance with paragraph 1, you have the right to have the personal data transferred directly by us to another responsible party, insofar as this is technically feasible.

3.6. Right of objection

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 para. 1 sentence 1 lit. e or f GDPR (Art. 21 GDPR); this also applies to profiling based on these provisions. After your objection, we will no longer process the personal data unless we can prove that there are compelling reasons for the processing which are worthy of protection and which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

If personal data is processed by us for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.

3.7. Automated decisions including profiling

You have the right to not be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you. There is no automated decision-making on the basis of the personal data collected.

3.8. Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time (Art. 7 para. 3 GDPR, § 51 BDSG). You can send your revocation of consent by email to: info@autozug-sylt.de or datenschutz@neumeier-edv.de.

3.9. Right to complain to a supervisory authority

You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, at your place of work, or at the place where the alleged infringement occurred, if you are of the opinion  that the processing of your personal data is unlawful.

4. Data security

To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we continually adapt to the state of the art.

Whenever we collect and process personal information, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a continuous improvement process and our Privacy Statements are constantly revised. Please make sure that you have the latest version.

Furthermore, we do not guarantee that our services will be available at specific times; disruptions, interruptions or failures cannot be ruled out. The servers we use are regularly and diligently backed up.

5. Transfer of data to third parties, no data transfer to non-EU countries

In principle, we use your personal data only within our company.

If and to the extent that we involve third parties in the performance of contracts (e.g. logistics service providers), these third parties will only receive personal data to the extent that the transmission is necessary for the corresponding service.

In the event that we outsource certain parts of our data processing (“Order Processing”), we contractually require processors to use personal data only in accordance with the requirements of data protection laws, and to protect the rights of the data subject.

Data shall not be transmitted to entities or persons outside the EU except in the cases referred to in Section 2 of this Privacy Policy and is not planned.

6. Data Protection Officer

If you have any remaining questions or concerns about data protection, please contact our Data Protection Officer:

Neumeier AG
Market Street 29
84066 Mallersdorf
Phone: +49 (0) 8772/803530
datenschutz@neumeier-edv.de