Privacy

Privacy policy

We are glad that you visit our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used. Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person (data subject), e.g. name, address, e-mail addresses, user behavior. This is therefore data with which we can identify you. In addition, you will occasionally find information here on data processing procedures outside this website (e.g. video conferences or newsletters).

Person responsible for data processing

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

exantas Automotive GmbH
Despag Street 3
85055 Ingolstadt
EN
+49 841 95180 30
info@exantas-automotive.de

Data protection officer

exkulpa gmbh
Waldfeuchter Str. 266
52525 Heinsberg
Phone: 02452 / 99 33 11
datenschutz@exantas-automotive.de

General

This privacy policy meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further retention of the data. We inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and in the event of statutory retention obligations.

Information according to Art. 13 DS-GVO

This information is intended for customers, prospective customers, suppliers and employees. Your personal data will be processed by us for the following purposes:

  • To fulfill our contractual obligations to you (Art. 6 para. 1 lit. b DSGVO).
  • For the performance of pre-contractual obligations (Art. 6 para. 1 lit. b DSGVO).
  • To respond to requests (Art. 6 para. 1 lit. b DSGVO).
  • If you have given us consent to process your personal data for certain purposes (for example, to receive our newsletter), the data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a DSGVO).
  • To fulfill legal obligations to which our company is subject (Art. 6 para. 1 lit. c DSGVO).
  • To the extent necessary, we also process your data to protect our legitimate interests, in particular to assert legal claims and defend ourselves in legal disputes or to ensure IT security, to consult and exchange data with credit agencies to determine creditworthiness and default risks, for direct advertising and market research insofar as you have not objected to the use of your data for this purpose, for measures to manage business and further develop services and products, for measures to optimize products and sales, for measures to manage risk, to prevent or investigate criminal acts (Art. 6 para. 1 lit. f DSGVO).

Categories of recipients of the personal data

Within our company, only those employees have access to the data who absolutely need it to perform their tasks (need-to-know principle). Individual processes and services are carried out by carefully selected service providers who are based within the EEA and who comply with data protection regulations. If service providers commissioned by us receive access to personal data when performing your services, order processing agreements have been concluded with them in accordance with Art. 28 Para. 3 GDPR concluded.

Duration of data storage

The data processed by us will be stored for the duration of the existence and processing of the contractual relationship and in compliance with statutory retention periods. These are, in particular, retention obligations under commercial and tax law in accordance with the German Commercial Code (HGB) and the German Fiscal Code (AO). The regular retention and documentation periods are up to ten years. If there is no contractual relationship, we process the data only for as long as the specific purpose requires.

Your data subject rights

As a data subject, you have the following rights with respect to the personal data concerning you:

  • Right to information about the data processed about you by us.
  • Right to rectification or deletion if they are incorrect, out of date or unlawfully collected by us.
  • Right to restriction of processing if complete deletion is not possible, e.g. because we have to comply with legal retention obligations.
  • Right to object to the processing, provided that the data processing is based on a balance of interests (the so-called legitimate interest), as described above under “Purpose of the processing”. This is the case if the processing is not necessary, in particular, for the performance of a contract with you. If you exercise your right to object, please explain why we should not process your data as we have done.

Of course, you can also object to the processing of your personal data for advertising purposes at any time. Please send your objection to our address given in the imprint or write us an e-mail to the address given in the imprint.

  • Right of revocation if you have given us consent to process your data. You can assert your revocation at any time without giving reasons to our company. For this purpose, please contact the address given in the imprint.
  • In addition, you have the right to complain to a data protection supervisory authority about the processing of your personal data by our company.

If you have any questions regarding data protection, please contact us by e-mail at the address given in the imprint.

Cookies

Cookies are small text files that are sent by us to the browser of your end device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your terminal device. They cannot run programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager of this website.

Your rights

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

  • Information acc. Art. 15 DSGVO about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
  • Correction acc. Art. 16 DSGVO of incorrect or incomplete data stored by us;
  • Deletion acc. Art. 17 DSGVO of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
  • Restriction of processing acc. Art. 18 DSGVO, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defense of legal claims or you object to the processing pursuant to Art. 18 DSGVO. Art. 21 DSGVO have collected.
  • Data portability acc. Art. 20 DSGVO, insofar as you provide us with personal data in the context of a consent pursuant to. Art. 6 par. 1 lit. a DSGVO or on the basis of a contract pursuant to. Art. 6 par. 1 lit. b DSGVO and these have been processed by us with the help of automated processes. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, as far as this is technically feasible.
  • Objection acc. Art. 21 DSGVO against the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f DSGVO and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or if the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
  • Revocation acc. Art. 7 par. 3 DSGVO of your given consent with effect for the future.
  • Complaint acc. Article 77 of the GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Data processing in detail

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by ourselves, but by a service provider, who, for the purpose of providing the website, collects the aforementioned data on our behalf in accordance with §§ 3.1 and 4.1 of the German Data Protection Act (Datenschutzgesetz). Article 28 DSGVO processed.

The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).

We use the following hoster:

Host Europe GmbH
Hansestrasse 111
51149 Cologne

Contact form

Nature and scope of processing

If you send us inquiries (e.g. via contact form, e-mail or telephone), we store all data resulting from this (e.g. name, e-mail address, subject of inquiry, etc.). We need this data to process your request and to be able to answer follow-up questions. We do not share this data without your consent.

Purpose and legal basis

The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, provided that your request is related to the performance of a contract or is necessary for the performance of pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective handling of requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if you have given it beforehand.

Storage duration

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

Contact form for applicants

Nature and scope of processing

You have the opportunity to apply to us on our website (e.g. by e-mail, by post or via the online application form).

Purpose and legal basis

We process the personal data of applicants in accordance with the legal requirements for the purpose of processing the application procedure and for the implementation of pre-contractual measures within the meaning of Art. 6 para. 1 lit. b. DSGVO and § 26 BDSG under German law (initiation of an employment relationship) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.

If the application is successful, the data submitted by you will be processed on the basis of § 26 BDSG and Art. 6 para. 1 lit. b DSGVO for the purpose of implementing the employment relationship is stored in our data processing systems.

Storage duration

Your data will be stored for a period of 6 months beyond the end of the application process. As a rule, this is done to fulfill legal obligations or to defend against possible claims arising from legal regulations. Subsequently, we are obliged to delete or anonymize your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (for example, proportion of applications from women or men, number of applications per period, etc.).

If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.

Inclusion in the applicant pool

As part of the application process, we offer applicants the opportunity to be included in our “talent pool” for a period of 12 months on the basis of consent within the meaning of Art. 6 para. 1 lit. a. GDPR to be included.

The application documents in the talent pool are processed solely in the context of future job postings and employee searches and are destroyed at the latest after the deadline. Applicants are informed that their consent to be included in the talent pool is voluntary, has no influence on the current application process and that they can revoke this consent at any time for the future.

If you receive an offer of employment with us as part of the application process and accept it, we will store the personal data collected as part of the application process for at least the duration of the employment relationship.

Presence on social media platforms

Data processing through social networks

We operate publicly accessible profiles on social networks. The social networks used by us in detail can be found below.

Social networks such as Facebook, Twitter, etc. can usually analyze your user behavior extensively. By visiting our social media presences, the following data protection-relevant processing operations are triggered:

If you are logged into your social media account and visit our profile, the operator of this social medium can track this visit. Regardless of this, the operator may process your data (e.g. IP address) even if you are not logged into your account or you do not have an account at all.

The operator summarizes this data in user profiles, in which your preferences and interests are stored. These profiles are used to serve personalized advertising inside and outside the respective social media presence. If you have an account with the respective social network, the personalized advertising can be displayed on all devices on which you are or were logged in.

Depending on the platform, further processing operations may be carried out by the operators of the social media portals, over which we have no control. For details, please refer to the terms of use and privacy policies of the respective social media portals.

Legal basis

Our social media presences are intended to provide the most comprehensive presence possible on the Internet within the meaning of Art. 6 para. 1 lit. f DSGVO ensure. The analysis processes carried out by the operators of the social networks may be based on different legal bases, which are to be specified by the respective providers.

Responsible person and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can exercise your rights (access, rectification, erasure, restriction of processing, data portability and complaint) in principle both vis-à-vis us and against us. us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).

Despite the joint responsibility with the social media portal operators, we have no full influence on the data processing operations of the portals. Our options are largely determined by the corporate policy of the respective provider.

Storage duration

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Mandatory legal provisions – esp. retention periods – remain unaffected.

We have no influence on the storage period of the data collected by the social networks. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

LinkedIn page

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal data, please see LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Video conferencing

Data processing

We use online conferencing tools to communicate with our customers. The tools we use in detail are listed below. If you communicate with us via video or audio conference, your personal data will be collected and processed by us and the provider of the respective tool.

The tools collect the data you provide, including your email address and phone number. They also process, the duration of the conference, when you attended the conference, number of participants and other metadata.

In addition, the provider of the tool processes all technical data required for the handling of the conference. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and connection type.

When you share content in this service, it is stored on the servers of the providers. This includes cloud recordings, chat messages, voice messages, and photos and videos you have shared while using this service.

Please note that we do not have full control over the data processing operations of the tools used. For more detailed information on data processing by the conference tools, please refer to the privacy statements of the respective tools used.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b DSGVO). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO). If you have previously given your consent to data processing, the processing of your data will take place solely on the basis of Art. 6 para. 1 lit. a DS-GVO takes place; the consent can be revoked at any time.

Storage duration

The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Google Fonts

Nature and scope of processing

This website uses web fonts for the uniform display of fonts. These are provided by Google. Your browser loads the required web fonts into your browser cache when you call up the page, so that texts and fonts are displayed correctly. For this purpose, the browser you use establishes a connection to Google’s servers. Google thereby obtains knowledge about your IP address.

If your browser does not support web fonts, a default font from your computer will be used.

More information about Google Web Fonts can be found here: https://developers.google.com/fonts/faq.

Google’s privacy policy can be found here: https://policies.google.com/privacy?hl=de.

Purpose and legal basis

The use of Google Web Fonts is based on our legitimate interest in a uniform presentation of the typeface of our website (Art. 6 para. 1 lit. f DSGVO). If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing of the data is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR. This can be revoked at any time.

Google Maps

Nature and scope of processing

This website uses Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For the use of the functions it is necessary to store your IP address. As a rule, the information is transmitted to a Google server and stored.

The provider of this website has no influence on this data transmission. If Google Maps is activated, Google may use web fonts for the purpose of a uniform display of fonts. Your browser loads the required fonts into your browser cache when you call up Google Maps, so that the fonts are displayed correctly.

Google’s privacy policy can be found here: https://policies.google.com/privacy?hl=de.

Purpose and legal basis

Google Maps is used on the basis of our legitimate interest in an appealing presentation of our online offers and in making it easy to find the places we have indicated (Art. 6 para. 1 lit. f DSGVO). If a corresponding consent has been requested, the data will be processed exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. This can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission: https: //business.safety.google/gdprcontrollerterms/sccs/ and https://business.safety.google/gdprcontrollerterms/

Google reCAPTCHA

Nature and scope of processing

This website uses Google reCAPTCHA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of reCAPTCHA, the data input (e.g. in a contact form) on this website is to be verified. Specifically, whether this is done by a human or by an automated program. Google reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. The analysis starts automatically as soon as the visitor accesses the website. The data collected during the analysis, such as the IP address, the time spent by the website visitor or the mouse movements made, are forwarded to Google.

Visitors to the website are not made aware that any analysis is taking place, these run entirely in the background.

Google’s privacy policy and terms of use can be found at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Purpose and legal basis

The storage and analysis of the data is based on our legitimate interest in protecting our web offers from abusive automated spying and from SPAM (Art. 6 para. 1 lit. f DSGVO). If a corresponding consent has been requested, the data will be processed exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. This can be revoked at any time.