Privacy Policy
1. An overview of data protection
General information
The
following information will provide you with an easy to navigate overview of
what will happen with your personal data when you visit this website. The term
“personal data” comprises all data that can be used to personally identify you.
For detailed information about the subject matter of data protection, please
consult our Data Protection Declaration, which we have included beneath this
copy.
Data recording on this website
Who
is the responsible party for the recording of data on this website (i.e. the
“controller”)?
The
data on this website is processed by the operator of the website, whose contact
information is available under section “Information Required by Law” on this
website.
How do we record your data?
We
collect your data as a result of your sharing of your data with us. This may,
for instance be information you enter into our contact form.
Other
data shall be recorded by our IT systems automatically or after you consent to
its recording during your website visit. This data comprises primarily
technical information (e.g. web browser, operating system or time the site was
accessed). This information is recorded automatically when you access this
website.
What are the purposes we use your
data for?
A
portion of the information is generated to guarantee the error free provision
of the website. Other data may be used to analyze your user patterns.
What rights do you have as far as
your information is concerned?
You
have the right to receive information about the source, recipients and purposes
of your archived personal data at any time without having to pay a fee for such
disclosures. You also have the right to demand that your data are rectified or
eradicated. If you have consented to data processing, you have the option to
revoke this consent at any time, which shall affect all future data processing.
Moreover, you have the right to demand that the processing of your data be
restricted under certain circumstances. Furthermore, you have the right to log
a complaint with the competent supervising agency.
Please
do not hesitate to contact us at any time under the address disclosed in
section “Information Required by Law” on this website if you have questions
about this or any other data protection related issues.
Analysis tools and tools provided by
third parties
There
is a possibility that your browsing patterns will be statistically analyzed
when your visit this website. Such analyses are performed primarily with what
we refer to as analysis programs.
For
detailed information about these analysis programs please consult our Data
Protection Declaration below.
2. Hosting and Content Delivery
Networks (CDN)
External Hosting
This
website is hosted by an external service provider (host). Personal data
collected on this website are stored on the servers of the host. These may
include, but are not limited to, IP addresses, contact requests, metadata and
communications, contract information, contact information, names, web page
access, and other data generated through a web site.
The
host is used for the purpose of fulfilling the contract with our potential and
existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure,
fast and efficient provision of our online services by a professional provider
(Art. 6 para. 1 lit. f GDPR).
Our
host will only process your data to the extent necessary to fulfil its
performance obligations and to follow our instructions with respect to such
data.
Execution
of a contract data processing agreement
In
order to guarantee processing in compliance with data protection regulations,
we have concluded an order processing contract with our host.
3. General information and mandatory
information
Data protection
The
operators of this website and its pages take the protection of your personal
data very seriously. Hence, we handle your personal data as confidential
information and in compliance with the statutory data protection regulations
and this Data Protection Declaration.
Whenever
you use this website, a variety of personal information will be collected.
Personal data comprises data that can be used to personally identify you. This
Data Protection Declaration explains which data we collect as well as the
purposes we use this data for. It also explains how, and for which purpose the
information is collected.
We
herewith advise you that the transmission of data via the Internet (i.e.
through e-mail communications) may be prone to security gaps. It is not
possible to completely protect data against third party access.
Information
about the responsible party (referred to as the “controller” in the GDPR)
The
data processing controller on this website is:
HELG AUTOMOTIVE GmbH
Potsdamer str.92
10785 Berlin
Tel: +49 302 636 79 35 (DE)
Tel: +49 160 371 64 36 (EN)
Fax: +49 302 610 18 17
The controller is the natural person or legal entity that
single-handedly or jointly with others makes decisions as to the purposes of
and resources for the processing of personal data (e.g. names, e-mail
addresses, etc.).
Our website uses, in particular, tools from companies based in the USA. When these tools are active
(consent according to Art. 49 Para. 1 P. 1 lit. a GDPR), your personal
information may be transferred to the US servers of these companies. We must
point out that the USA is not a safe third country within the meaning of EU
data protection law. US companies are required to release personal data to
security authorities without you as the data subject being able to take legal
action against this. The possibility cannot therefore be excluded that US
authorities (e.g. secret services) may process, evaluate and permanently store
your data on US servers for monitoring purposes. We have no influence
over these processing activities.
Revocation
of your consent to the processing of data
A
wide range of data processing transactions are possible only subject to your
express consent. You can also revoke at any time any consent you have already
given us. This shall be without prejudice to the lawfulness of any data collection
that occurred prior to your revocation.
Right
to object to the collection of data in special cases; right to object to direct
advertising (Art. 21 GDPR)
IN
THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F
GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR
PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO
APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL
BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA
PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR
AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING
PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS,
RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING,
EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21
SECT. 1 GDPR).
IF
YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING,
YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED
PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO
PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF
YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT
ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).
Right
to log a complaint with the competent supervisory agency
In
the event of violations of the GDPR, data subjects are entitled to log a
complaint with a supervisory agency, in particular in the member state where
they usually maintain their domicile, place of work or at the place where the
alleged violation occurred. The right to log a complaint is in effect
regardless of any other administrative or court proceedings available as legal
recourses.
Right
to data portability
You
have the right to demand that we hand over any data we automatically process on
the basis of your consent or in order to fulfil a contract be handed over to
you or a third party in a commonly used, machine readable format. If you should
demand the direct transfer of the data to another controller, this will be done
only if it is technically feasible.
SSL
and/or TLS encryption
For
security reasons and to protect the transmission of confidential content, such
as purchase orders or inquiries you submit to us as the website operator, this
website uses either an SSL or a TLS encryption program. You can recognize an
encrypted connection by checking whether the address line of the browser
switches from “http://” to “https://” and also by the appearance of the lock
icon in the browser line.
If
the SSL or TLS encryption is activated, data you transmit to us cannot be read
by third parties.
Information
about, rectification and eradication of data
Within
the scope of the applicable statutory provisions, you have the right to at any
time demand information about your archived personal data, their source and recipients
as well as the purpose of the processing of your data. You may also have a
right to have your data rectified or eradicated. If you have questions about
this subject matter or any other questions about personal data, please do not
hesitate to contact us at any time at the address provided in section
“Information Required by Law.”
Right
to demand processing restrictions
You
have the right to demand the imposition of restrictions as far as the
processing of your personal data is concerned. To do so, you may contact us at
any time at the address provided in section “Information Required by Law.” The
right to demand restriction of processing applies in the following cases:
In
the event that you should dispute the correctness of your data archived by us, we
will usually need some time to verify this claim. During the time that this
investigation is ongoing, you have the right to demand that we restrict the
processing of your personal data.
If
the processing of your personal data was/is conducted in an unlawful manner,
you have the option to demand the restriction of the processing of your data in
lieu of demanding the eradication of this data.
If
we do not need your personal data any longer and you need it to exercise,
defend or claim legal entitlements, you have the right to demand the
restriction of the processing of your personal data instead of its eradication.
If
you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and
our rights will have to be weighed against each other. As long as it has not
been determined whose interests prevail, you have the right to demand a
restriction of the processing of your personal data.
If
you have restricted the processing of your personal data, these data – with the
exception of their archiving – may be processed only subject to your consent or
to claim, exercise or defend legal entitlements or to protect the rights of
other natural persons or legal entities or for important public interest
reasons cited by the European Union or a member state of the EU.
4. Recording of data on this website
Cookies
Our
websites and pages use what the industry refers to as “cookies.” Cookies are
small text files that do not cause any damage to your device. They are either
stored temporarily for the duration of a session (session cookies) or they are
permanently archived on your device (permanent cookies). Session cookies are
automatically deleted once you terminate your visit. Permanent cookies remain
archived on your device until you actively delete them or they are automatically
eradicated by your web browser.
In
some cases it is possible that third party cookies are stored on your device
once you enter our site (third party cookies). These cookies enable you or us
to take advantage of certain services offered by the third party (e.g. cookies
for the processing of payment services).
Cookies
have a variety of functions. Many cookies are technically essential since
certain website functions would not work in the absence of the cookies (e.g.
the shopping cart function or the display of videos). The purpose of other cookies
may be the analysis of user patterns or the display of promotional messages.
Cookies,
which are required for the performance of electronic communication transactions
(required cookies) or for the provision of certain functions you want to use
(functional cookies, e.g. for the shopping cart function) or those that are
necessary for the optimization of the website (e.g. cookies that provide
measurable insights into the web audience), shall be stored on the basis of
Art. 6 Sect. 1 lit. f GDPR, unless a different legal basis is cited. The
operator of the website has a legitimate interest in the storage of cookies to
ensure the technically error free and optimized provision of the operator’s
services. If your consent to the storage of the cookies has been requested, the
respective cookies are stored exclusively on the basis of the consent obtained
(Art. 6 Sect. 1 lit. a GDPR); this consent may be revoked at any time.
You
have the option to set up your browser in such a manner that you will be
notified any time cookies are placed and to permit the acceptance of cookies
only in specific cases. You may also exclude the acceptance of cookies in
certain cases or in general or activate the delete function for the automatic
eradication of cookies when the browser closes. If cookies are deactivated, the
functions of this website may be limited.
In
the event that third party cookies are used or if cookies are used for
analytical purposes, we will separately notify you in conjunction with this
Data Protection Policy and, if applicable, ask for your consent.
Server log files
The
provider of this website and its pages automatically collects and stores
information in so-called server log files, which your browser communicates to
us automatically. The information comprises:
The
type and version of browser used
The
used operating system
Referrer URL
The
hostname of the accessing computer
The
time of the server inquiry
The IP address
This
data is not merged with other data sources.
This
data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of
the website has a legitimate interest in the technically error free depiction
and the optimization of the operator’s website. In order to achieve this,
server log files must be recorded.
Contact form
If
you submit inquiries to us via our contact form, the information provided in
the contact form as well as any contact information provided therein will be
stored by us in order to handle your inquiry and in the event that we have
further questions. We will not share this information without your consent.
The
processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your
request is related to the execution of a contract or if it is necessary to
carry out pre-contractual measures. In all other cases the processing is based
on our legitimate interest in the effective processing of the requests
addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your agreement (Art. 6 Para.
1 lit. a GDPR) if this has been requested.
The
information you have entered into the contact form shall remain with us until
you ask us to eradicate the data, revoke your consent to the archiving of data
or if the purpose for which the information is being archived no longer exists
(e.g. after we have concluded our response to your inquiry). This shall be
without prejudice to any mandatory legal provisions – in particular retention
periods.
Configurator
The
creation of your individual configuration is realized by an external service
provider. The personal data required to send your configuration by e-mail is
sent directly to you and to us via our own mail server and is automatically
deleted by the external service provider's system 24 hours after processing. If
you do not agree to be contacted, we will of course not contact you. Your data
will also not be passed on to third parties. For market research purposes we
reserve the right to view the configurations created.
The external service provider is used in the interest of a safe, fast and
efficient provision of the configurator by a professional provider (Art. 6
para. 1 lit. f GDPR).
The external provider will only process your data to the extent necessary to
fulfil its performance obligations and will follow our instructions with regard
to this data.
Execution of a contract data processing
agreement
In order to guarantee processing in compliance with data protection
regulations, we have concluded an order processing contract with our host.
Request
by e-mail or telephone
If
you contact us by e-mail or telephone, your request, including all
resulting personal data (name, request) will be stored and processed by us for
the purpose of processing your request. We do not pass these data on without
your consent.
These
data are processed on the basis of Art. 6 Sect. 1 lit. b GDPR if your inquiry
is related to the fulfillment of a contract or is required for the performance
of pre-contractual measures. In all other cases, the data are processed on the
basis of our legitimate interest in the effective handling of inquiries
submitted to us (Art. 6 Sect. 1 lit. f GDPR) or on the basis of your consent
(Art. 6 Sect. 1 lit. a GDPR) if it has been obtained.
The
data sent by you to us via contact requests remain with us until you request us
to delete, revoke your consent to the storage or the purpose for the data
storage lapses (e.g. after completion of your request). Mandatory statutory
provisions - in particular statutory retention periods - remain unaffected.
5. Analysis tools and advertising
Google Analytics
This
website uses functions of the web analysis service Google Analytics. The
provider of this service is Google Ireland Limited (“Google”), Gordon House,
Barrow Street, Dublin 4, Ireland.
Google
Analytics enables the website operator to analyze the behavior patterns of
website visitors. To that end, the website operator receives a variety of user
data, such as pages accessed, time spent on the page, the utilized operating
system and the user’s origin. Google may consolidate these data in a profile
that is allocated to the respective user or the user’s device.
Google
Analytics uses technologies that make the recognition of the user for the
purpose of analyzing the user behavior patterns (e.g. cookies or device
fingerprinting). The website use information recorded by Google is, as a rule
transferred to a Google server in the United States, where it is
stored. We would like to point out that after being activated (consent
according to Art. 49 Para. 1 P. 1 lit. a GDPR), data will be transferred to
Google (privacy
policy) in the USA. The USA is considered by the European Court of Justice
to be a country with a level of data protection that is inadequate by EU
standards. If your given consent is limited to the use of "required
cookies" only, the transfer described above will not take place.
This
analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator
of this website has a legitimate interest in the analysis of user patterns to
optimize both, the services offered online and the operator’s advertising
activities. If a corresponding agreement has been requested (e.g. an agreement
to the storage of cookies), the processing takes place exclusively on the basis
of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.
IP anonymization
On
this website, we have activated the IP anonymization function. As a result,
your IP address will be abbreviated by Google within the member states of the
European Union or in other states that have ratified the Convention on the
European Economic Area prior to its transmission to the United States. The full
IP address will be transmitted to one of Google’s servers in the United States
and abbreviated there only in exceptional cases. On behalf of the operator of
this website, Google shall use this information to analyze your use of this
website to generate reports on website activities and to render other services
to the operator of this website that are related to the use of the website and
the Internet. The IP address transmitted in conjunction with Google Analytics
from your browser shall not be merged with other data in Google’s possession.
Browser plug-in
You
can prevent the recording and processing of your data by Google by downloading
and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For
more information about the handling of user data by Google Analytics, please
consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
Contract data processing
We
have executed a contract data processing agreement with Google and are
implementing the stringent provisions of the German data protection agencies to
the fullest when using Google Analytics.
Archiving period
Data
on the user or incident level stored by Google linked to cookies, user IDs or
advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be
anonymized or deleted after 26 month. For details please click the following
link: https://support.google.com/analytics/answer/7667196?hl=en
Facebook Pixel
To
measure conversion rates, this website uses the visitor activity pixel of
Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand
Canal Square, Dublin 2, Ireland. According to Facebook’s statement the
collected data will be transferred to the USA and other third-party countries
too.
This
tool allows the tracking of page visitors after they have been linked to the
website of the provider after clicking on a Facebook ad. This makes it possible
to analyze the effectiveness of Facebook ads for statistical and market
research purposes and to optimize future advertising campaigns.
For
us as the operators of this website, the collected data is anonymous. We are
not in a position to arrive at any conclusions as to the identity of users.
However, Facebook archives the information and processes it, so that it is
possible to make a connection to the respective user profile and Facebook is in
a position to use the data for its own promotional purposes in compliance with
the Facebook
Data Usage Policy. This enables Facebook to display ads on Facebook pages
as well as in locations outside of Facebook. We as the operator of this website
have no control over the use of such data.
The
use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of
the website has a legitimate interest in effective advertising campaigns, which
also include social media. If a corresponding agreement has been requested
(e.g. an agreement to the storage of cookies), the processing takes place
exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be
revoked at any time.
In
Facebook’s Data Privacy Policies, you will find additional information about
the protection of your privacy at: https://www.facebook.com/about/privacy/.
You
also have the option to deactivate the remarketing function “Custom Audiences”
in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.
To do this, you first have to log into Facebook.
If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/.
We
would like to point out that after being activated (consent according to Art.
49 Para. 1 P. 1 lit. a GDPR), data will be transferred to Facebook in the
USA. The USA is considered by the European Court of Justice to be a country
with a level of data protection that is inadequate by EU standards. If you do
not use Facebook and your given consent is limited to the use of
"required cookies" only, the transfer described above will not take
place.
Hotjar
This
website uses Hotjar, an analysis software produced by Hotjar Ltd. („Hotjar“) (http://www.hotjar.com, Level
2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000,
Malta, Europe). With Hotjar it is possible to measure and evaluate usage
behaviour (clicks, mouse movements, scrolling height, etc.) on our website. The
information generated by the tracking code and cookies about your visit to our
website is then submitted to and stored on the Hotjar server in Ireland.
The
following information is collected by the tracking code and cookies:
the
IP address of your device (collected and stored in an anonymous format);
your
email address including your first and last name, insofar as you have made this
available to us through our website;
the
screen size of your device;
device
type and browser information;
geographical
location (country only);
your
preferred language for viewing our website;
mouse
events (movement, position and clicks);
and
keystrokes.
The
following data is automatically generated by our server when Hotjar is used:
related
domain;
pages
visited;
geographical
location (country only);
your
preferred language for viewing our website;
and
data and time that the website was accessed.
Hotjar will use this information to evaluate your usage of our website, to generate reports about this usage as well as about other services related to this usage and for internet analysis. To provide these services, Hotjar also uses third-party services such as Google Analytics and Optimizely. These third-parties can store data that your browser transmits as part of your website visit such as cookies and IP requests. Further information concerning the terms and conditions of use and data privacy by Google Analytics and Optimizely can be found at
http://www.google.com/analytics/terms/us.html
resp. https://www.google.de/intl/en/policies/ and
https://www.optimizely.com/privacy/.
The cookies that Hotjar uses have different periods of validity: some remain
valid for 365 days, others just for the duration of your current visit to our
website. If you continue to use this website, you agree to the processing of
data by Hotjar and its third-party providers (including their respective data
protection policies) as outlined above. You can prevent Hotjar from collecting
data by clicking on the following link and following the instructions detailed
there: https://www.hotjar.com/opt-out.
Further information concerning Hotjar's privacy policy can be found at https://www.hotjar.com/privacy.
6. Newsletter
Newsletter
data
If
you would like to subscribe to the newsletter offered on this website, we will
need from you an e-mail address as well as information that allow us to verify
that you are the owner of the e-mail address provided and consent to the
receipt of the newsletter. No further data shall be collected or shall be
collected only on a voluntary basis. We shall use such data only for the
sending of the requested information and shall not share such data with any
third parties.
The
processing of the information entered into the newsletter subscription form
shall occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a
GDPR). You may revoke the consent you have given to the archiving of data, the
e-mail address and the use of this information for the sending of the
newsletter at any time, for instance by clicking on the “Unsubscribe” link in
the newsletter. This shall be without prejudice to the lawfulness of any data
processing transactions that have taken place to date.
The
data deposited with us for the purpose of subscribing to the newsletter will be
stored by us until you unsubscribe from the newsletter or the newsletter
service provider and deleted from the newsletter distribution list after you
unsubscribe from the newsletter. Data stored for other purposes with us remain
unaffected.
After
you unsubscribe from the newsletter distribution list, your e-mail address may
be stored by us or the newsletter service provider in a blacklist to prevent
future mailings. The data from the blacklist is used only for this purpose and
not merged with other data. This serves both your interest and our interest in
complying with the legal requirements when sending newsletters (legitimate
interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the
blacklist is indefinite. You may object to the storage if your interests
outweigh our legitimate interest.
CleverReach
This
website uses CleverReach for the sending of newsletters. The provider is the
CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.
CleverReach is a service that can be used to organize and analyze the sending
of newsletters. The data you have entered for the purpose of subscribing to our
newsletter (e.g. e-mail address) are stored on servers of CleverReach in
Germany or in Ireland.
Newsletters we send out via CleverReach allow us to analyze the user patterns of our newsletter recipients. Among other things, in conjunction with this, it is possible how many recipients actually opened the newsletter e-mail and how often which link inside the newsletter has been clicked. With the assistance of a tool called Conversion Tracking, we can also determine whether an action that has been predefined in the newsletter actually occurred after the link was clicked (e.g. purchase of a product on this website). For more information on the data analysis services by CleverReach newsletters, please go to:
https://www.cleverreach.com/en/features/reporting-tracking/.
The data is processed based on your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have ta