MANN+HUMMEL Data Protection
Thank you for visiting our website and your interest in our company. The protection of your personal data is an important concern for us. For this reason, compliance with the strict legal provisions on data protection is a matter of course for us. Data protection begins with transparency. It is therefore our concern that you should always know when we store which of your personal data, for what purpose we use it, but also how you can restrict or prevent its use. Our data protection regulations are designed in such a way that they comply with the applicable data protection laws.
- MANN+HUMMEL Data Privacy
- Social Media Data Privacy
- Business Partners Data Privacy
Privacy policy for the use of our website
I. Controller
MANN+HUMMEL International GmbH & Co. KG
Schwieberdinger Strasse 126
71636 Ludwigsburg/ Germany
Tel. +49 7141 980, Fax +49 7141 982545
info@mann-hummel.com
II. Address of the Data Protection Officer
You can reach our data protection officer at the following contact details: data.protection@mann-hummel.com
MANN+HUMMEL International GmbH & Co. KG
Schwieberdinger Strasse 126
71636 Ludwigsburg/ Germany
III. Legal basis for the processing
Personal data is only collected, processed, and used by us if you have given your consent or if we are legally permitted to do so.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1a GDPR serves as the legal basis for the processing of personal data.
When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1b GDPR serves as the legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1c GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1f GDPR serves as the legal basis for the processing.
IV. Recipient of the data
As a matter of principle, we only process personal data if we have your consent or a legal permission to do so. This also applies to the transfer of data to third parties. We do not pass on your personal data to third parties for direct marketing purposes.
Your data will be processed and used within the EU/EEA. However, for certain processes, processing outside the EU/EEA is also necessary. If your data is processed outside the EU/EEA, we will take all necessary measures to ensure that the processing complies with data protection regulations in accordance with Art. 44 GDPR. We may share your personal information with the following recipients in accordance with applicable data protection laws and regulations:
- to third parties who assist us in operating the website
- within the MANN+HUMMEL Group
- within the framework of a valid legal procedure
We take appropriate technical and organizational measures to protect personal data from theft, other loss, misuse, and any unauthorized access during processing.
V. Your rights
Rights of data subjects
If your personal data is processed, you are the data subject within the meaning of the GDPR. Your rights are regulated in Chapter III of the GDPR. You have the right of access to the data processed by the controller, the right of rectification, the right to limit processing, the right of cancellation, the right of information, the right of transferability, the right to object to processing, the right to withdraw your consent and the right not to be subject to a decision based on exclusively automated processing.
To exercise your rights as a data subject, please send an e-mail to data.protection@mann-hummel.com.
Right of appeal to the supervisory authority
Irrespective of any other regulatory or judicial redress, you have the right to file a complaint with a supervisory authority, in particular in the member state where you are a resident, where your workplace is, or where the presumed infringement has taken place when you are of the opinion that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint is filed, advises the complainant about the status and the results of the complaint including the possibility of legal action acc. to Art. 78 GDPR.
Under Art. 77 GDPR, you are free to choose the supervisory authority. For example, you can address your complaint to the supervisory authority of the state of Baden-Württemberg which is responsible for MANN+HUMMEL GmbH.
VI. Reservation of right to change
We reserve the right to adapt this data privacy in accordance with the legal regulations.
VII. MANN+HUMMEL Website
When you visit our website, general information about this process is automatically stored in a protocol file. This is solely made for system-related purposes. The stored usage data is not stored together with other personal data. The following data record is made each time the website is accessed:
- Anonymized IP addresses
- date and time of the request (GMT)
- access location
- message indicating whether the polling was successful (status code)
- amount of data transmitted
- Website where the access was made
- Description of the type of web browser used
- Operating system used
The above-described data are not passed on to a third party and no other analysis is made unless there is a legal obligation to do so.
Contact
When you contact us, we will store your data for the purpose of processing your enquiry and in case further correspondence is required.
For inquiries via a contact form on our website, mandatory information is marked with an asterisk (*). All other information is voluntary. Your data will only be stored for as long as is necessary to process your request or until the purpose for which it was stored no longer applies.
No personal data will be stored for telephone inquiries.
Legal basis for the processing of your personal data:
- performance of a contract
- because it is in our legitimate interest to answer your enquiries
The MANN+HUMMEL International GmbH & Co. KG is part of the MANN+HUMMEL Group. For the processing of your inquiry, it may be necessary for us to forward your data and requests within the MANN+HUMMEL Group. The data will not be passed on to other third parties in this context. The data will only be used for the processing of your enquiry.
All data will be deleted once your request has been fully processed. This does not apply to data for which there are legal or other prescribed retention obligations.
Supplier onboarding
In the course of supplier onboarding we collect company data and also the following personal contact data:
- First name, last name
- Position
- Email address
The data provided in the course of the supplier onboarding are exclusively used for the purpose of initiating the business relationship. Further data processing only takes place if an order is placed. Insofar that no business relationship is formed, your data will be blocked for further use and deleted after the retention periods according to tax law and commercial law have expired as far as you have not expressly consented to a further use of the data.
Applicant details
We process your personal data insofar as this is necessary to carry out the application process and to decide on the establishment of an employment relationship.
These include
- Applicant master data (first name, surname, address, job position)
- Qualification data (cover letter, CV, previous activities, professional qualifications)
- (Employment) references and certificates (performance data, assessment data, etc.)
- Login data (e-mail, password)
Your data will be used exclusively for the purpose of processing your application and will not be passed on to third parties.
If you have applied for a specific position and it has already been filled or we consider you to be more suitable for another position, we would be happy to forward your application to the departments looking for you. We will obtain your consent for this in advance.
Once the application process has been completed, your personal data will be deleted unless you actively request that your data be stored for a longer period or you have concluded a contract. The country-specific legal bases apply.
You will receive further information about the processing of your personal data during the application process or from your contact person in the HR department.
E-Mail Communications
As part of our business relationship, we may contact you once via E-Mail to provide information about our latest products, services, or relevant company updates that may be of professional interest. Additionally, we may invite you to take part in a brief survey related to our products or services, with the goal of better understanding your business needs and incorporating your feedback into future developments.
You can revoke your consent to the storage of your data and the receipt of the E-Mail communications at any time for the future. The revocation can be made via a link in the E-Mail itself. After revocation you will no longer receive E-Mails.
We analyze the use of newsletters in pseudonymized form. For this purpose, opening rates, hard and soft bounces to check the deliverability of the newsletter as well as the number of forwarded E-Mails are recorded. This analysis does not allow any conclusions to be drawn about personal data such as your e-mail addresses.
VIII. Cookies
We use cookies on our website. These are transient cookies that are automatically deleted at the end of the browser session and do not store any personally identifiable information. These include, for example, session cookies, authentication cookies and shopping cart cookies.
We also use persistent cookies that remain stored on your end device beyond the current browser session. They may be valid for a longer period of time, depending on the cookie settings and the specifications ft he website, and are automatically deleted after a specified period. Typically, persistent cookies are used to store information such as user settings, login information and tracking data across multiple visits. These include login cookies, personalization cookies, tracking cookies and cookies to improve performance. They can either be deleted manually via the browser settings or automatically.
The following types of cookie are used by us:
- Strictly Necessary Cookies
- Performance Cookies
- Cookies for marketing purposes (marketing cookies)
The legal basis for the use of cookies is:
- because it is in our legitimate interest or
- because you have given us your consent to do so
Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and are transmitted by the user to our site. Therefore you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may not be possible to use all the functions of the website to their full extent.
Cookie-Consent-Technologie OneTrust
Our website uses OneTrust's cookie-consent-technology to obtain your consent to the storage of certain cookies in your browser and to document these in a data protection compliant manner. The provider of this technology is OneTrust, with two main offices in the United States and England: Atlanta, GA, USA (co-headquarters), 1200 Abernathy Rd NE, Building 600, Atlanta, GA 30328 United States, +1 (844) 847-7154, England (co-headquarters), 82 St Johns Street, Farringdon London, EC1M 4JN, +44 (800) 011-9778. When you enter our website, an OneTrust cookie is stored in your browser, which stores the consents you have given or the revocation of such consents.
The collected data is stored until you request us to delete it or until you delete the OneTrust cookie itself or until the purpose for which the data is stored no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of OneTrust cookies can be found in the OneTrust data protection declaration at https://www.onetrust.com/privacy/.
The use of OneTrust-Cookie-Consent-Technologie is based on the legal obligation to obtain the legally required consent for the use of cookies.
Adobe Analytics
This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). Adobe Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. If the information generated by the cookie about your use of the website is transmitted to an Adobe server, the settings ensure that the IP address is anonymised before geolocation and replaced by a generic IP address before being saved. On behalf of the operator of this website, Adobe will use this information to evaluate the use of the website by users, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser in the context of Adobe Analytics is not merged with other Adobe data. You can prevent the storage of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) from being sent to Adobe and the processing of this data by Adobe by downloading and installing the browser plug-in available under the following link: https://www.adobe.com/privacy/opt-out.html.
Adobe Target
We also use the application Adobe Target from Adobe Inc, 345 Park Avenue, San Jose, CA 95110-2704, USA on our website. The contractual partner in Europe is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus Dublin 24, Republic of Ireland.
With the help of Adobe Target, we can optimize our website and improve the user experience. The software enables us to carry out so-called A/B tests or multivariate tests on the website. To do this, the software runs a modified version of the website compared to the original version (e.g. with a different design and content). By comparing the two versions, we can then determine which presentation our website visitors prefer. This allows us to continuously optimize the portal for our users. We also need the service to display context-sensitive information, to optimize and display website content and to provide information about current promotions and offers. We also need the service to display context-sensitive information, to optimize and display website content and to inform users about current promotions and offers.
Adobe Target uses quantitative methods to record user behavior. Adobe Target provides content for dynamization purposes & AB testing (Adobe Target Basis) based on environmental variables such as the page currently visited, time, partner context, etc. No personal data is used and no measurement takes place by default.
Further information on the functions of Adobe Target can be found at https://www.adobe.com/de/marketing/target.html
Data processing purposes:
Adobe Target uses quantitative methods to record user behavior. For this purpose, cookies are used for analysis purposes with regard to the website user, to optimize and personalize the website and to deliver dynamic content and tests.
Data collected:
The complete IP address or data that allows conclusions to be drawn about individual persons is not collected or processed.
- Visitor origin
- Browser information
- Device information (PC, tablet, smartphone)
- Operating system
The legal basis for data processing § 25 para. 1 sentence 1 TTDSG, Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
Adobe uses “session cookies” and “permanent cookies”. The former are only stored temporarily for the duration of your use of our website. Permanent cookies are used to store information about visitors who repeatedly access our website. If you have consented to the above-mentioned personalization of website content, pseudonymous interest profiles are created, for which data from Adobe Analytics may also be used. In principle, the data will be deleted as soon as the purpose of processing no longer applies.
It cannot be ruled out that your data may be accessed by Adobe Inc. based in the USA.
For data processing outside the EU or the EEA, Adobe Inc. has been certified in accordance with the EU-US Data Privacy Framework (DPF). Data transfers to the USA are thus legitimized on the basis of the adequacy decision of the European Commission pursuant to Art. 45 GDPR. You can find more information on the EU-US Data Privacy Framework program here: https://www.dataprivacyframework.gov/
Information on data protection at Adobe Systems and the privacy policy can be found at https://www.adobe.com/de/privacy.html
You can access the data protection information for Adobe Target here: https://docs.adobe.com/content/help/de-DE/target/using/implement-target/before-implement/privacy/privacy.translate.html
Google
On our website Java-Script code of the company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google) is loaded. If you have activated Java-Script in your browser and have not installed a Java-Script blocker, your browser may transmit personal data to Google. To prevent the execution of Java-Script code from Google altogether, you can install a Java-Script blocker (e.g. https://www.noscript.net/ or https://www.ghostery.com/).
Google ReCaptcha
To ensure sufficient data security when transmitting contact and registration forms, we use the Google ReCaptcha service. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google ReCaptcha is used on our website to differentiate whether the input into forms is made by a natural person or abusively by machine and automated processing. The data processing is carried out in our legitimate interest in accordance with Art. 6 para. 1f GDPR. The Google service includes the processing of IP addresses and, if applicable, other data required by Google for the ReCaptcha service. The deviating data protection regulations of Google Inc. apply to this. Further information on the data protection guidelines of Google Inc. can be found at https://policies.google.com/privacy?hl=de&gl=de or www.policies.google.com/privacy?hl=de.
Google Maps Plug-In
On our website we use the map service Google Maps to offer you map content for our dealer finder. Google Maps is a map service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, information, including the IP address and the address entered as part of the route function, may be transferred to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with the Google servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transfer. According to current knowledge, this includes the following data:
- Date and time of your visit to the website in question,
- Internet address or URL of the web page called up,
- IP address, (start) address entered during route planning
For the use of Google Maps your consent is required in accordance with Art. 6 para. 1a GDPR. Only then can our online offers be used without restriction. If you no longer wish data processing by Google via this service after your consent, you can deactivate the use of JavaScript in your browser settings. Please note that in this case the interactive map function of Google Maps is no longer or only partially usable.
You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy.
Google DoubleClick
Our website uses DoubleClick, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. DoubleClick is used to serve ads when you visit our website. DoubleClick uses information (but not personally identifiable information such as your name or email address) about your visits to this and other websites in order to serve ads about products and services of interest to you. If you would like more information about these practices or to know your choices about not having this information used by DoubleClick, click here: https://policies.google.com/technologies/ads?gl=en&hl=en.
Google Adds Conversion Pixel
We use the service Google Ads. Google Ads is an online advertising program of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
This means that we place Google Ads and also use Google Remarketing and Conversion Tracking as part of this. The ads are displayed after search queries on websites of the Google advertising network. In addition, we use Ads remarketing lists for search ads. This allows us to customize search ad campaigns for users who have visited our website before. Through the services, we have the possibility to combine our ads with certain search terms or to display ads for previous visitors in which, for example, services are advertised that the visitors have viewed on our website. We can thus display interest-based advertising to users of our website on other websites within the Google advertising network (as a "Google ad" within Google Search or on other websites).
For interest-based offers, an analysis of online user behavior is necessary. Google uses cookies to perform this analysis. When clicking on an advertisement or visiting our website, a cookie is set on the user's computer by Google. These cookies have a term of 90 days. The information collected by means of the respective cookie is used to target the visitor in a subsequent search query. Further information on the cookie technology used can also be found in Google's notes on website statistics and in the privacy policy. With the help of this technology, Google and we as a customer receive information about the fact that a user has clicked on an advertisement and has been redirected to our web pages. The information obtained in this way is used exclusively for statistical evaluation for ad optimization. We do not receive any information with which visitors can be personally identified. Your IP address is transmitted to Google, but since we use Google Analytics IP masking on this website, your IP address is anonymized. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website that is tagged with a conversion tag. Based on these statistics, we can track which search terms were clicked on our ad particularly often and which ads lead to the user contacting us via the contact form.
Insofar as data is processed outside the EEA, where there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish a secure level of data protection.
You can find more information on data protection in the context of Google Ads at: https://policies.google.com/technologies/ads?hl=de.
The legal basis for accessing the information is your consent pursuant to Section 25 (1) TTDSG. The legal basis for data processing is your consent pursuant to Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time.
If you do not want your visit to be included in the user statistics, you can prevent this by preventing the storage of the cookie required for these technologies, for example, via your browser settings.
You also have the option of selecting the types of Google ads or deactivating interest-based ads on Google via the ad setting. Alternatively, you can disable the use of cookies by third parties by calling the deactivation help of the network advertising initiative.
However, we and Google still receive statistical information about how many users have visited this site and when. If you do not want to be included in these statistics either, you can prevent this by using additional programs for your browser.
YouTube
On our website the service YouTube of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View is being loaded. We use this service to offer you multimedia content. To use this service, your consent is required in accordance with Art. 6 para. 1a GDPR. Your browser may transmit personal data to Google when using the YouTube service. Further, detailed information on the processing of your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy.
Meta Conversion Tracking Pixel
We use the Custom Audiences service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, as part of our usage-based online advertising. For this purpose, we define target groups of users based on certain characteristics in the Meta ad manager, who are subsequently shown ads within Facebook or Instagram network. Users are selected by Meta based on the profile information they provide and other data provided through their use of Facebook or Instagram. If a user clicks on an advertisement and subsequently arrives on our website, Meta receives the information that the user clicked on the social media post via the meta pixel embedded on our website.
Basically, this generates a non-reversible and non-personal checksum (hash value) from your usage data, which is transmitted to Meta for analysis and marketing purposes. In the process, information about your activities on our website (e.g. surfing behavior, sub-pages visited, etc.) is collected. Meta uses your IP address to geographically restrict social media action posts.
Meta Custom Audiences can be used and after the filter test campaign to play out posts targeted to Facebook and Instagram profiles that had interacted with the action content.
For more information about the purpose and scope of the data collection and the further processing and use of the data by Meta, as well as your settings options for protecting your privacy, please refer to Meta's privacy policy at the following link https://www.facebook.com/policy.php. You can find more information about the Meta Pixel and how it works at the following link https://www.facebook.com/business/help/742478679120153?id=1205376682832142.
You can make settings regarding which advertisements are displayed to you on Facebook or Instagram in the account settings of Facebook or Instagram.
The meta pixel is only set with your consent. The legal basis for accessing the information is your consent pursuant to Section 25 (1) TDDDG. The legal basis for data processing is your consent pursuant to Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time.
Microsoft Clarity
We use the tool "Microsoft Clarity" from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA on our website. Microsoft Clarity is a so-called screen recording tool, which records the activities of a user on our websites during a session and processes them for us in a comprehensible way. The recording and evaluation of website activities serves to improve the user-friendliness of our websites and helps with troubleshooting. In addition, your personal data is processed for the following purposes:
- Tracking (e.g. interest/behavior-based profiling, use of cookies)
- Remarketing and conversion measurement (measuring the effectiveness of marketing measures)
- Interest-based and behavioral marketing
- Profiling (creation of user profiles)
- Reach measurement (e.g. access statistics, recognition of returning users)
- Cross-device tracking (processing of user data across devices for marketing purposes).
To protect the privacy of our users, we have activated the masking of personal data in accordance with the Microsoft Clarity guidelines. This means that sensitive content is masked by default to ensure that it is not captured by Clarity. Sensitive data includes all input field content, numbers and email addresses. Masking ensures that this sensitive information is not passed on to Microsoft.
Further information on the information collected can be found at the following website: https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-data
Data processing is carried out by Microsoft Corporation, which is based in the USA. Microsoft Corporation is certified according to the Data Privacy Framework, so that for data transfers to Microsoft Corporation an adequacy decision of the European Commission in the sense of Art. 45 DSGVO is available. The status of the certification can be accessed via the following website: https://www.dataprivacyframework.gov/s/
The legal basis for the processing of your personal data for the specified purposes is your consent (Section 25 TDDDG and Art. 6 (1) a) GDPR). You can revoke your consent at any time with effect for the future. To revoke your consent, you can simply adjust your cookie settings accordingly via our privacy policy.
You can also revoke your consent for data processing to Microsoft at any time: https://choice.microsoft.com/de-DE/opt-out.
Further information on how the tool works can be found on the following website: https://clarity.microsoft.com/lang/de-de. For information on how Microsoft processes personal data, please refer to Microsoft's privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
Social Media Link
We have included links on our website to our respective profiles on Facebook, Instagram and YouTube and WeChat. By clicking on the respective symbol you can access our profiles on the respective social media platforms.
This linking does not transmit any data from you to the operators of the respective social media platform. If you click on one of these links, you will be redirected to the respective website of the social network and forwarded. Depending on your browser settings, this is done by opening a new tab or a pop-up. Only when you change the URL will the operator of the respective social network collect and process your data.
For more information about privacy on Facebook, follow this link: https://www.facebook.com/about/privacy/.
For more information about data protection on Instagram, follow this link: https://help.instagram.com/519522125107875.
For more information about YouTube’s privacy policy, please follow this link: https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/
LinkedIn Insight Tag
We use the Insight Tag service of LinkedIn Corp. (LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale CA 94085, USA or LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) as part of our usage-based online advertising. Using this technology, we can generate reports on the performance of our advertisements as well as information on website interaction. For this purpose, the LinkedIn Insight Tag is embedded on this website, which establishes a connection to the LinkedIn server when you visit this website. We process your data to evaluate campaigns and collect information about website visitors who may have reached us through our campaigns on LinkedIn.
For more information about the purpose and scope of data collection and the further processing and use of data by LinkedIn, as well as your settings options for protecting your privacy, please refer to LinkedIn's privacy policy at the following link https://www.linkedin.com/legal/privacy-policy?_l=en_EN. You can find more information about the LinkedIn Insight Tag and how it works at the following link https://business.linkedin.com/marketing-solutions/insight-tag.
The LinkedIn Insight Tag is only set with your consent. The use of the tag is accordingly based on Art. 6 para. 1 lit. a DSGVO.
Data protection information for the use of our social media channels
A. General information
MANN+HUMMEL (hereinafter "we", "us", "our") operates company profiles on various social media platforms in order to make contact with users and visitors to these platforms (hereinafter "you", "your") and to share content. This privacy policy informs you about the type, purpose and scope of the processing of personal data. Data processing is primarily carried out by the platform operators, but in certain cases also by MANN+HUMMEL.
Personal data is any information relating to an identified or identifiable natural person. Processing is carried out in accordance with the General Data Protection Regulation (GDPR). Below we explain which processing operations we are responsible for and which data we receive from the respective platforms.
I. Responsibility for data processing
We operate our social media presences on the following platforms:
- Meta Platforms Ireland Ltd (Facebook and Instagram), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
- LinkedIn Ireland Unlimited Company, Gardner House, Wilton Plaza, Wilton Place, Dublin 2, Ireland
- Google Ireland Limited (YouTube), Gordon House, Barrow Street, Dublin 4, Ireland
- New Work SE (XING, kununu), Am Strandkai 1, 20457 Hamburg, Germany
For further information on the allocation of responsibility under data protection law, please refer to the respective sections on the platforms.
II. Recipients of your data
Your personal data will be shared with the respective platform operators in accordance with section A.I.. Within the MANN+HUMMEL Group, data may be transferred to affiliated companies, e.g. for customer communication. These transfers are based on contractual provisions pursuant to Art. 28 GDPR or the general principles for data transfers pursuant to Art. 44 et seq. GDPR. The legal basis is Art. 6 para. 1 lit. b, c or f GDPR, depending on the case. Our legitimate interest lies in the efficient organization of internal workflows and communication processes.
Data may also be processed outside the European Economic Area. In doing so, we ensure that a level of protection comparable to the EU data protection level exists (e.g. through EU standard contractual clauses or adequacy decisions).
Further information on cross-border data processing can be found in the data protection declarations of the platform operators:
- Meta: https://www.facebook.com/privacy/policy
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
- Google: https://policies.google.com/privacy?hl=en
- XING: https://privacy.xing.com/en/privacy-policy
Data is only transferred to external service providers if this is necessary for the stated purposes (e.g. management of social media channels). The service providers are contractually obliged to comply with data protection regulations.
III. Storage duration
We only process your personal data for as long as this is necessary to fulfill the stated purposes or to comply with statutory retention periods. Your data will be erased if the purposes no longer apply, if required by law or if you withdraw your consent or object to the processing.
Please note that the deletion of data collected by the platform operators must be carried out by the platform operators themselves. Please refer to the data protection notices of the respective providers for more information.
IV. Your rights as a data subject
You have the following rights under the GDPR:
- Right to access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to the processing (Art. 21 GDPR)
- Right to withdraw your consent (Art. 7 (3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
V. Data protection contact
Responsible for the operation of the aforementioned social media channels:
MANN+HUMMEL International GmbH & Co. KG
Schwieberdinger Straße 126
71631 Ludwigsburg, Germany
Phone: +49 (7141) 98-0
E-Mail: info@mann-hummel.com
Data Protection Officer:
E-mail: data.protection@mann-hummel.com or
by post for the attention of the Data Protection Officer
VI. Updating this privacy policy
This privacy policy will be updated as necessary, e.g. in the event of changes by platform operators or legal requirements. The currently valid version can be viewed on our social media pages.
VII. Cookies
Information on the use of cookies can be found in our general privacy policy under point VIII. Options for deactivation are also explained there.
VIII. Use of external tools
We use specialized platforms and service providers to manage and optimize our social media activities. These include:
- Sprinklr for planning, publishing and analyzing posts and responding to user queries (social media management & engagement),
- Yext for managing and moderating reviews on company profiles, especially in the Google environment,
- ZeroFox to identify potential misuse and ensure brand security in digital networks.
These service providers may process personal data (e.g. profile names, comments, messages) as part of the assignment. The processing is carried out exclusively for a specific purpose on the basis of Art. 6 para. 1 lit. f GDPR as part of our legitimate interest in efficient, brand-safe and useroriented communication.
Data protection agreements have been concluded with the service providers used in accordance with Art. 28 GDPR. If data is transferred to a third country, suitable guarantees such as standard contractual clauses in accordance with Art. 46 GDPR are used to ensure an adequate level of data protection.
VIII. Note on external links
Our social media channels may contain links to external third-party websites. We have no influence on their content and data protection practices. The respective provider or operator is always responsible for the content of external sites. We recommend checking the data protection declarations of the respective sites when using such links.
B. Meta - Facebook and Instagram
I. Joint controllership pursuant to Art. 26 GDPR
MANN+HUMMEL and Meta Platforms Ireland Ltd (Meta) are joint controllers within the meaning of Art. 26 GDPR in connection with the operation of our Facebook and Instagram presences. The corresponding joint controllership agreement is available at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
Under this agreement, Meta is primarily responsible for guaranteeing the rights of data subjects under Chapter III GDPR with regard to personal data processed in the context of Page Insights. In particular, MANN+HUMMEL is obliged to inform you about the joint controllership and the scope of the data processing.
II. Purposes and scope of data processing
When you visit our Facebook or Instagram presence, Meta processes personal data about your usage behavior, such as interactions with content, page views, devices used (e.g. IP address, operating system, browser type) and demographic data, if available. This information is collected by Meta using cookies or similar technologies - even if you do not have a Meta user account or are not logged in.
MANN+HUMMEL processes in particular in the context of the use of these platforms:
- Publicly visible profile data (e.g. user name, profile picture)
- Content that you actively send to us (e.g. comments, direct messages)
- Aggregated statistical data ("Insights"), provided by Meta
Processing by MANN+HUMMEL is carried out for the purpose of external communication, interaction with you and analysis and optimization of our content. MANN+HUMMEL only receives anonymized, aggregated data; it is not possible for us to draw conclusions about individual persons. Decisions on data processing in the context of Insights are made exclusively by Meta.
The legal basis for data processing by MANN+HUMMEL is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the needs-based design and improvement of our communication via social networks.
III. Rights of the data subjects
Meta is primarily responsible for processing requests to exercise your data subject rights (e.g. access, rectification, erasure, data portability). You can exercise these rights via the account settings of your platform or via the following contact options:
- Privacy Policy Meta: https://www.facebook.com/privacy/policy
- Contact form data protection: https://www.facebook.com/help/contact/540977946302970
MANN+HUMMEL is also available to answer your questions about data processing and will forward corresponding inquiries to Meta within the scope of joint responsibility.
C. LinkedIn
I. Joint controllership pursuant to Art. 26 GDPR
MANN+HUMMEL and LinkedIn Ireland Unlimited Company (LinkedIn) are joint controllers within the meaning of Art. 26 GDPR in connection with the operation of our LinkedIn company page. The corresponding joint controllership agreement is available at the following link: https://www.linkedin.com/legal/l/page-joint-controller-addendum
LinkedIn assumes primary responsibility for the processing of personal data in the context of the socalled "Page Insights" and for the exercise of the rights of data subjects in accordance with the GDPR. In particular, MANN+HUMMEL is obliged to inform you about the joint responsibility.
II. Purposes and scope of data processing
When you visit our company page, LinkedIn processes personal data about your usage behavior (e.g. reactions, comments, shares), your interactions with our profile and publicly accessible profile data if you have a registered LinkedIn user account.
In addition, LinkedIn provides MANN+HUMMEL with aggregated statistical evaluations (Page Insights). These contain information about reach, interactions, demographic characteristics (such as job title, industry or location) and the performance of our Contents. It is not possible for MANN+HUMMEL to draw conclusions about individual users. Decisions on the processing of Insights data are made exclusively by LinkedIn.
MANN+HUMMEL processes content that you actively send to us (e.g. direct messages or comments) solely for the purpose of communicating with you and processing your requests.
Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the needs-based design and optimization of our corporate communication as well as the external presentation to applicants, customers and interested parties.
III. Rights of the data subjects
LinkedIn assumes responsibility for the fulfillment of data subject rights in the context of joint data processing. You can assert your rights (e.g. to information, correction, deletion or objection) directly via the LinkedIn account settings or via the following contact options:
- LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy
- Contact form data protection: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
Requests that reach MANN+HUMMEL within the scope of joint responsibility are forwarded to LinkedIn for processing.
D. YouTube
I. Responsibility for data processing
Google Ireland Limited (Google) is generally responsible for the processing of personal data in connection with the use of YouTube. MANN+HUMMEL uses the technical platform and services of YouTube, but does not operate an independent data processing process there in the sense of joint responsibility within the meaning of Art. 26 GDPR.
Further information on data processing by Google can be found at: https://policies.google.com/privacy?hl=en
II. Purposes and scope of data processing
Google processes users' personal data on the basis of its own responsibility, in particular to provide personalized advertising, usage statistics and other services. This includes data such as:
- IP address and location data
- Information about end devices used and browser settings
- Usage behavior on the platform (e.g. videos viewed, likes, comments)
- Google account information (for logged-in users)
When using its YouTube channel, MANN+HUMMEL only processes the publicly visible information that you provide via your YouTube profiles (e.g. comments, subscriptions, likes) as well as anonymized, aggregated statistical data on reach, target groups and interactions.
MANN+HUMMEL uses this data on the basis of Art. 6 para. 1 lit. f GDPR for the purpose of improving content, analyzing reach and interacting with you. It is not possible for MANN+HUMMEL to make a direct personal reference from the statistical evaluations.
III. Rights of the data subjects
Google is responsible for exercising your data subject rights in connection with the use of YouTube. You can assert your rights (e.g. to information, correction, deletion or objection) directly with Google. You can find the relevant information at
- Google privacy policy: https://policies.google.com/privacy?hl=en
- Privacy settings: https://myaccount.google.com/data-and-personalization
- Help article on the GDPR: https://support.google.com/policies/answer/9581826?hl=en&sjid=422759152526555708-EU
E. XING
I. Joint responsibility pursuant to Art. 26 GDPR
MANN+HUMMEL and New Work SE (operator of XING) are joint controllers within the meaning of Art. 26 GDPR in connection with the operation of our XING company page. The corresponding agreement on joint responsibility regulates in particular the responsibilities in the context of the use of so-called "Page Insights". Further information can be found in XING's privacy policy at: https://privacy.xing.com/en/privacy-policy
New Work SE is responsible for the implementation of data subject rights and primary data processing. MANN+HUMMEL, as joint controller, provides information on the scope of data processing.
II. Purposes and scope of data processing
When you visit our XING company page, XING processes personal data about your use, such as:
- Interactions (e.g. "likes", comments, sharing of posts)
- Publicly accessible profile data (e.g. position, employer, qualifications)
- Aggregated statistical information on reach and interactions ("insights")
MANN+HUMMEL processes this data for the purpose of interacting with you and analyzing the reach and relevance of content. It is not possible for MANN+HUMMEL to draw conclusions about individual persons on the basis of the insights. In addition, we process content that you actively transmit to MANN+HUMMEL (e.g. messages or comments).
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in professional external presentation, communication with interested parties, recruiting and employer branding.
III. Use of kununu
MANN+HUMMEL also has an employer profile on kununu, a service also offered by New Work SE. We respond to publicly submitted employer reviews there. The reviews are anonymous and MANN+HUMMEL is unable to link them to specific individuals. Personal data is only processed in the context of publicly accessible information.
For data processing by kununu, the separate data protection information of the platform applies: https://privacy.xing.com/en/privacy-policy
IV. Rights of the data subjects
XING is primarily responsible for processing requests to exercise your rights (e.g. information, correction, deletion, objection). You can assert these directly via your account settings on XING or via the XING contact form: https://www.xing.com/support/contact
MANN+HUMMEL also forwards any inquiries that reach us as part of our shared responsibility to New Work SE.
1. Information über die Erhebung und Verarbeitung der personenbezogenen Daten1 im Rahmen von Kunden-, Lieferanten oder sonstigen Geschäftsbeziehungen
Sorgfalt und Transparenz ist die Grundlage für eine vertrauensvolle Zusammenarbeit. Daher informieren wir unsere Geschäftspartner darüber, wie wir Daten verarbeiten und wie die Betroffenen ihre Rechte wahrnehmen können, die ihnen nach der Datenschutz- Grundverordnung (DSGVO) zustehen. Welche personenbezogenen Daten wir verarbeiten und zu welchem Zweck, hängt im Einzelfall vom jeweiligen Vertragsverhältnis ab.
2. Name und Kontaktdaten der für die Verarbeitung Verantwortlichen Stelle
Vertragspartner des Hauptvertrages. Alternativ die MANN+HUMMEL Gesellschaft mit der eine geschäftliche Beziehung besteht.
3. Kontaktdaten des Konzerndatenschutzbeaufttragten MANN+HUMMEL
International GmbH & Co. KG Schwieberdingerstraße 126
71636 Ludwigsburg
Telefon: +49 7141 98-0
data.protection@mann-hummel.com
4. Verarbeitete Personenbezogene Daten in einer Geschäftsbeziehung
- Anrede, Name
- Geschäftliche Kontaktdaten wie: Anschrift, E-Mail- Adresse, Telefonnummer (Festnetz und/oder Mobilfunk)
- Vertragsstammdaten: Informationen, die für die Durchführung der Vertragsbeziehung erforderlich sind
- Zahlungsdaten/Kontoinformationen des Vertragspartners
- Daten zur Ermittlung von Bonitäts- bzw. Ausfallrisiken
- Account-Informationen, insbesondere Registrierung und Logins
- ggf. Video- oder Bildaufnahmen bei Besuch an unseren Standorten
- Daten im Rahmen der zentrale Kundendatenverwaltung im Konzernverbund
- Daten im Rahmen von Maßnahmen zur Gebäude- und Anlagensicherheit
- Daten im Rahmen der Gewährleistung der IT- Sicherheit und des IT-Betriebs
5. Herkunft der Daten (Quellen)
Wir verarbeiten personenbezogene Daten, die wir von unseren Geschäftspartnern (Kunden, Dienstleistern, Lieferanten) erhalten. Ggf. erhalten wir personenbezogene Daten von öffentlich zugänglichen Stellen (wie Handelsregistern, Schuldnerverzeichnisse, Grundbücher) sowie anderen Konzernunternehmen der MANN+HUMMEL Gruppe.
6. Zweck und Rechtsgrundlage der Verarbeitung
Die Erhebung dieser Daten erfolgt,
- um unsere Geschäftspartner zu identifizieren.
- um die Geschäftsbeziehung angemessen durchführen zu können.
- zur Korrespondenz mit unseren Geschäftspartnern.
- zur Rechnungsstellung.
- zur Abwicklung von evtl. vorliegenden Haftungsansprüchen sowie der Geltendmachung etwaiger Ansprüche.
- ggf. zu Marketingzwecken (E-Mail-Newsletters).
Die Datenverarbeitung ist nach Art. 6 Abs. 1 S. 1 lit. b DSGVO zu den genannten Zwecken für die angemessene Vorbereitung und Durchführung des Vertragsverhältnisses und für die beidseitige Erfüllung von Verpflichtungen aus dem Vertragsverhältnis erforderlich.
Die für die Vertragsdurchführung von uns erhobenen personenbezogenen Daten werden bis zum Ablauf der gesetzlichen Aufbewahrungspflicht gespeichert (Art. 6 Abs. 1 S. 1 lit. c DSGVO) und danach gelöscht, es sei denn, dass wir zu einer längeren Speicherung gesetzlich verpflichtet sind oder der Geschäftspartner in eine darüber hinausgehende Speicherung nach Art. 6 Abs. 1 S. 1 lit. a DSGVO eingewilligt hat, wir oder ein Dritter ein berechtigtes Interesses gemäß Art. 6 Abs. 1 lit. f DSGVO an der Speicherung haben.
7. Weitergabe der Daten an Dritte
Zur Erfüllung unserer vertraglichen und gesetzlichen Pflichten werden die personenbezogenen Daten gegenüber verschiedenen öffentlichen oder internen Stellen, sowie externe Dienstleistern offengelegt, soweit dies nach Art. 6 Abs. 1 S. 1 lit. b DSGVO für die Abwicklung von Vertragsverhältnissen mit unseren Geschäftspartnern erforderlich ist. Die weitergegebenen Daten dürfen von den Dritten ausschließlich zu den genannten Zwecken verwendet werden.
8. Datenübermittlung an Länder außerhalb der Europäischen Union (sog. Drittländer)
Für die Verarbeitung der Daten setzen wir ggf. auch Dienstleister ein, die sich in Ländern außerhalb der Europäischen Union (Drittländern) befinden. Zum Schutz der personenbezogenen Daten haben wir entsprechende Maßnahmen getroffen, um sicherzustellen, dass die Daten in Drittländern ebenso sicher wie innerhalb der Europäischen Union verarbeitet werden. Mit Dienstleistern in Drittländern schließen wir die von der Kommission der Europäischen Union bereitgestellten Standard-Datenschutzklauseln ab. Diese Klauseln sehen geeignete Garantien für den Schutz personenbezogener Daten bei Dienstleistern in Drittländern vor.
9. Speicherdauer
Wir speichern personenbezogene Daten solange es zur Erfüllung unserer gesetzlichen und vertraglichen Pflichten erforderlich ist.
Sollte eine Speicherung der Daten für die Erfüllung vertraglicher oder gesetzlicher Pflichten nicht mehr erforderlich sein, werden die Daten gelöscht, es sei denn, deren Weiterverarbeitung ist zu folgenden Zwecken erforderlich:
- Erfüllung von gesetzlichen Aufbewahrungspflichten
- Erhaltung von Beweismitteln im Rahmen der gesetzlichen Verjährungsvorschriften. Diese sind durch nationale Gesetze geregelt.
10. Rechte der Betroffenen
10.1 Der Betroffene hat das Recht,
- gemäß Art. 7 Abs. 3 DSGVO die einmal erteilte Einwilligung jederzeit gegenüber uns zu widerrufen. Dies hat zur Folge, dass wir die Datenverarbeitung, die auf dieser Einwilligung beruhte, für die Zukunft nicht mehr fortführen dürfen;
- gemäß Art. 15 DSGVO Auskunft über die von uns verarbeiteten personenbezogenen Daten zu verlangen. Insbesondere kann Auskunft über die Verarbeitungszwecke, die Kategorie der personenbezogenen Daten, die Kategorien von Empfängern, gegenüber denen die Daten offengelegt wurden oder werden, die geplante Speicherdauer, das Bestehen eines Rechts auf Berichtigung, Löschung, Einschränkung der Verarbeitung oder Widerspruch, das Bestehen eines Beschwerderechts, die Herkunft der Daten, sofern diese nicht bei uns erhoben wurden, sowie über das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling und ggf. aussagekräftigen Informationen zu deren Einzelheiten zu verlangen;
- gemäß Art. 16 DSGVO unverzüglich die Berichtigung unrichtiger oder Vervollständigung der bei uns gespeicherten personenbezogenen Daten zu verlangen;
- gemäß Art. 17 DSGVO die Löschung der bei uns gespeicherten personenbezogenen Daten zu verlangen, soweit nicht die Verarbeitung zur Ausübung des Rechts auf freie Meinungsäußerung und Information, zur Erfüllung einer rechtlichen Verpflichtung, aus Gründen des öffentlichen Interesses oder zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen erforderlich ist;
- gemäß Art. 18 DSGVO die Einschränkung der Verarbeitung der personenbezogenen Daten zu verlangen, soweit die Richtigkeit der Daten vom Betroffenen bestritten wird, die Verarbeitung unrechtmäßig ist, der Betroffene aber deren Löschung ablehnt und wir die Daten nicht mehr benötigen, der Betroffene jedoch diese zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen benötigt oder der Betroffene gemäß Art. 21 DSGVO Widerspruch gegen die Verarbeitung eingelegt hat;
- gemäß Art. 20 DSGVO die personenbezogenen Daten, die uns durch den Betroffene bereitgestellt wurden, in einem strukturierten, gängigen und maschinenlesebaren Format zu erhalten oder die Übermittlung an einen anderen Verantwortlichen zu verlangen und
- gemäß Art. 77 DSGVO i.V.m. dem jeweils geltenden lokalen Recht sich bei einer Aufsichtsbehörde zu beschweren. In der Regel kann der Betroffene sich hierfür an die Aufsichtsbehörde des üblichen Aufenthaltsortes oder Arbeitsplatzes oder unseres Geschäftssitzes wenden.
10.2 Wahrnehmung Ihrer Rechte
Um die Rechte als Betroffener wahrzunehmen, kann sich der Betroffene an die verantwortliche Gesellschaft innerhalb der MANN+HUMMEL Gruppe oder an den Konzerndatenschutzbeauftragten unter angegebenen Kontaktdaten wenden. Wir werden Anfragen umgehend sowie gemäß den gesetzlichen Vorgaben bearbeiten und dem Betroffenen mitteilen, welche Maßnahmen wir ergriffen haben.
11. Widerspruchsrecht
Sofern personenbezogene Daten auf Grundlage von berechtigten Interessen gemäß Art. 6 Abs. 1 S. 1 lit. f DSGVO verarbeitet werden, hat der Betroffene das Recht, gemäß Art. 21 DSGVO Widerspruch gegen die Verarbeitung seiner personenbezogenen Daten einzulegen, soweit dafür Gründe vorliegen, die sich aus der besonderen Situation des Betroffenen ergeben.
Das Widerspruchsrecht kann mittels einer E-Mail an: data.protection@mann-hummel.com ausgeübt werden.
12. Angaben zur automatisierte Entscheidungsfindung oder Profiling
Eine automatisierte Entscheidungsfindung oder Profiling findet nicht statt.
13. Änderungen dieser Informationen
Sollte sich der Zweck oder die Art und Weise der Verarbeitung der personenbezogenen Daten wesentlich ändern, behalten wir uns vor diese Informationen zu aktualisieren.
1. Informativa sulla raccolta ed il trattamento dei dati personali in relazione ai rapporti con i clienti, i fornitori o altre relazioni commerciali
I rapporti commerciali fondati sulla fiducia si basano sulla cura e sulla trasparenza. Per questo motivo informiamo i nostri partner commerciali su come trattiamo i dati e su come gli interessati possono esercitare i diritti a loro disposizione in base al regolamento generale sulla protezione dei dati (GDPR). I dati personali che trattiamo e i motivi per cui effettuiamo il trattamento dipendono dal singolo caso e dal rapporto contrattuale in questione.
2. Nome e dati di contatto del responsabile del trattamento
Partner contrattuale del contratto principale. In alternativa, la società MANN+HUMMEL con cui esiste una relazione d'affari.
3. Dati di contatto del responsabile della protezione dei dati del gruppo
MANN+HUMMEL International GmbH & Co. KG
Schwieberdingerstraße 126
71636 Ludwigsburg
Telefono: +49 7141 98-0
data.protection@mann- hummel.com
4. Dati personali trattati in una relazione d'affari
- Titolo, nome
- Dati di contatto aziendali tra cui: indirizzo, indirizzo e- mail, numero di telefono (fisso e/o mobile)
- Dati anagrafici del contratto: informazioni necessarie per l'esecuzione del rapporto contrattuale
- Dati di pagamento/di conto del partner contrattuale - -
- Determinazione del rating di credito e dati sui rischi di insolvenza
- Informazioni sull'account, in particolare dati di registrazione e login, se necessario
- Registrazioni video o foto delle visite in loco, se necessario
- Informazioni sulla gestione centrale dei dati dei clienti all'interno del gruppo
- Informazioni sulle misure di sicurezza degli edifici e degli impianti
- Informazioni sulla protezione della sicurezza IT e delle operazioni IT
5. Origine dei dati (fonti)
Trattiamo i dati personali ottenuti dai nostri partner commerciali (clienti, fornitori di servizi e fornitori). Se necessario, otteniamo dati personali da fonti accessibili al pubblico (come registri commerciali registri commerciali, registri dei debitori e catasti) e da altre aziende del gruppo MANN+HUMMEL.
6. Finalità e base giuridica del trattamento
La raccolta di questi dati ci permette di:
- identificare i nostri partner commerciali
- gestire in modo appropriato il nostro rapporto d'affari
- scambiare corrispondenza con i partner commerciali
- emettere fatture
- elaborare eventuali rivendicazioni di responsabilità e far valere eventuali rivendicazioni
- per scopi di marketing (newsletter via e-mail) se necessario
Secondo l'articolo 6(1)(1)(b) del GDPR, i dati sono trattati per le finalità specificate per la preparazione e l'esecuzione del rapporto contrattuale e per permettere ad entrambe le parti di adempiere ai loro obblighi contrattuali.
I dati raccolti, necessari per l'esecuzione del contratto, vengono memorizzati (articolo 6[1][1][c] del GDPR) fino allo scadere dell'obbligo legale di conservazione e vengono successivamente cancellati, a meno che non siamo legalmente tenuti a memorizzare i dati per un periodo più lungo, o il partner commerciale abbia acconsentito alla conservazione continua come da articolo 6(1)(1)(a) del GDPR o noi o una terza parte hanno un interesse legittimo alla sua conservazione come da articolo 6(1)(f) del GDPR.
7. Divulgazione dei dati a terzi
Al fine di adempiere ai nostri obblighi contrattuali e legali, i dati possono essere comunicati a vari uffici pubblici o interni e a fornitori di servizi esterni nella misura in cui ciò sia necessario per eseguire i rapporti contrattuali con i nostri partner commerciali in conformità con l'articolo 6(1)(1)(b) del GDPR. I dati divulgati possono essere utilizzati da terzi solo per i suddetti scopi.
8. Trasferimento di dati a paesi al di fuori dell'Unione Europea (paesi terzi)
Alcuni dei fornitori di servizi che utilizziamo per elaborare i dati si trovano in paesi terzi al di fuori dell'Unione Europea. Al fine di proteggere i suoi dati personali, abbiamo adottato misure appropriate per garantire che i dati siano trattati in questi paesi terzi con la stessa sicurezza con cui vengono trattati all'interno dell'Unione Europea. I nostri accordi con i fornitori di servizi nei paesi terzi includono le clausole standard di protezione dei dati stabilite dalla Commissione europea. Queste clausole forniscono garanzie adeguate alla protezione dei dati personali quando si trovano all'interno dell'Unione Europea.
9. Periodo di conservazione
Conserviamo i dati personali per il tempo necessario per rispettare i nostri obblighi legali e contrattuali.
Nel caso in cui la conservazione non sia più necessaria per adempiere agli obblighi contrattuali o di legge, i dati verranno cancellati a meno che non sia necessario unulteriore trattamento per i seguenti scopi:
- adempimento degli obblighi normativi sui termini di conservazione;
- conservazione delle prove in relazione a termini di prescrizione legale. Questi sono regolati sulla base della legge nazionale.
10. Diritti dell’interessato
10.1 L'interessato ha il diritto,
- ai sensi dell'articolo 7 (3) del GDPR, di revocare il suo consenso in qualsiasi momento. Ciò implica che non potremo più continuare a trattare i dati sulla base di questo consenso;
- ai sensi dell'articolo 15 del GDPR, di richiedere informazioni sui dati personali da noi trattati. In particolare, possono essere richieste informazioni sulle finalità del trattamento, sulla categoria dei dati personali, sulle categorie di destinatari a cui i dati sono o sono stati comunicati, sul periodo di conservazione previsto, sull'esistenza di un diritto di rettifica, cancellazione, limitazione del trattamento o opposizione, sull'esistenza di un diritto di presentare un reclamo, sull'origine dei dati se non raccolti da noi e sull'uso del processo decisionale automatizzato, compresa la profilazione e, se necessario, informazioni significative sui loro dettagli;
- ai sensi dell'articolo 16 del GDPR, di richiedere l'immediata rettifica dei dati personali inesatti o incompleti che abbiamo memorizzato;
- ai sensi dell'articolo 17 del GDPR, di richiedere la cancellazione dei dati personali che abbiamo memorizzato, a meno che il trattamento sia necessario per esercitare il diritto alla libertà di espressione e di informazione, per adempiere ad un obbligo legale, per motivi di interesse pubblico o per stabilire, esercitare o difendere rivendicazioni legali;
- ai sensi dell'articolo 18 del GDPR, di richiedere la limitazione del trattamento dei dati personali, nella misura in cui l'esattezza dei dati sia contestata dall'interessato, il trattamento sia illecito, l'interessato si opponga alla cancellazione quando la società non ha più bisogno dei dati, l'interessato richieda i dati per l'accertamento, l'esercizio o la difesa di diritti legali o l'interessato, ai sensi dell'articolo 21 del GDPR, si sia opposto al trattamento;
- ai sensi dell'articolo 20 del GDPR, di ricevere i dati personali fornitici dall'interessato in un formato strutturato, di uso comune e leggibile a macchina o di richiederne la trasmissione a un altro responsabile del trattamento e
- ai sensi dell'articolo 77 del GDPR in combinazione con il diritto localmente applicabile, di presentare un reclamo a un'autorità di controllo.
10.2 Esercizio dei suoi diritti
Per esercitare i suoi diritti in qualità di interessato, può rivolgersi alla società responsabile all'interno del gruppo MANN+HUMMEL o al responsabile della protezione dei dati del gruppo utilizzando i dati di contatto indicati. Tratteremo le richieste tempestivamente e in linea con le disposizioni di legge e comunicheremo all'interessato l'azione che abbiamo intrapreso.
11. Diritto di opposizione
Nella misura in cui i dati personali sono trattati sulla base di interessi legittimi ai sensi dell'articolo 6, paragrafo 1, comma 1, lettera f), del GDPR, l'interessato ha il diritto, ai sensi dell'articolo 21 del GDPR, di opporsi al trattamento dei propri dati personali nella misura in cui ciò sia giustificato dalla particolare situazione dell'interessato.
Per esercitare il diritto di opposizione, inviare una e-mail a: data.protection@mann-hummel.com
12. Informazioni sul processo decisionale automatizzato o sulla profilazione
Non viene effettuato alcun processo decisionale automatizzato o profilazione.
13. Modifiche alla presente informativa
In caso di modifiche significative allo scopo per cui i suoi dati personali sono trattati o al tipo e alle modalità di trattamento, ci riserviamo il diritto di aggiornare la presente informativa.
1. Information om insamling och behandling av personuppgifter2 i förhållande till kund-, leverantörs- eller andra affärsrelationer
Tillitsfulla arbetsrelationer bygger på omsorg och transparens. Det är därför vi informerar våra affärspartners om hur vi behandlar data och hur de registrerade kan utöva de rättigheter som finns tillgängliga för dem enligt den allmänna dataskyddsförordningen (GDPR). Vilka personuppgifter vi behandlar och skälen till detta beror på det enskilda fallet och på det aktuella avtalsförhållandet.
2. Namn och kontaktuppgifter till den personuppgiftsansvarige som ansvarar för behandlingen
av avtalspartner i huvudavtalet. Alternativt det MANN+HUMMEL-företag som det finns en affärsrelation med.
3. Kontaktuppgifter till koncernens dataskyddsombud
MANN+HUMMEL International GmbH & Co. KG Schwieberdingerstraße 126
71636 Ludwigsburg
Telefon: +49 7141 98-0
data.protection@mann-hummel.com
4. Personuppgifter som behandlas i en affärsrelation
- Titel, namn
- Företagets kontaktuppgifter inklusive: adress, e-postadress, telefonnummer (fast telefon och/eller mobil)
- Avtalsbasdata: information som är nödvändig för att fullgöra avtalsförhållandet
- Betalningsuppgifter/kontouppgifter för avtalspartner
- Fastställande av uppgifter om kreditbetyg och fallissemangsrisk
- Kontoinformation, särskilt registrerings- och inloggningsuppgifter
- Videoinspelningar eller foton från platsbesök vid behov
- Information om central hantering av kunddata inom koncernen
- Information om säkerhetsåtgärder för byggnader och anläggningar
- Information om skydd av IT-säkerhet och IT-drift
5. Uppgifternas ursprung (källor)
Vi behandlar personuppgifter som erhålls från våra affärspartners (kunder, tjänsteleverantörer och leverantörer). Vid behov inhämtar vi personuppgifter från offentligt tillgängliga källor (t.ex. handelsregister, gäldenärsregister och fastighetsregister) samt från andra företag inom MANN+HUMMEL-koncernen.
6. Syfte och rättslig grund för behandlingen
Insamlingen av dessa uppgifter gör det möjligt för oss att:
- Identifiera våra affärspartners
- genomföra vår affärsrelation på ett lämpligt sätt
- korresponderar med våra affärspartners
- Utför fakturering
- behandla eventuella skadeståndsanspråk och verkställa eventuella anspråk
- Genomföra marknadsföring (nyhetsbrev via e-post) vid behov.
Enligt artikel 6.1.1 b i GDPR behandlas uppgifter för de ändamål som anges för att avtalsförhållandet ska kunna förberedas och genomföras på lämpligt sätt och för att båda parter ska kunna fullgöra sina skyldigheter enligt avtalsförhållandet.
De uppgifter som samlas in av oss och som krävs för att fullgöra avtalet lagras (artikel 6.1.1 c i GDPR) tills den lagstadgade skyldigheten att göra det löper ut och raderas därefter om vi inte är juridiskt skyldiga att lagra uppgifterna under en längre period, eller om affärspartnern har samtyckt till fortsatt lagring enligt artikel 6.1.1 a i GDPR eller om vi eller en tredje part har ett legitimt intresse av att lagring av den i enlighet med artikel 6.1 f i GDPR.
7. Utlämnande av uppgifter till tredje part
För att uppfylla våra avtalsenliga och lagstadgade skyldigheter kan uppgifter lämnas ut till olika offentliga eller interna myndigheter och till externa tjänsteleverantörer i den mån detta är nödvändigt för att fullgöra avtalsförhållandet med våra affärspartner i enlighet med artikel 6.1.1 b i GDPR. De uppgifter som lämnas ut får endast användas av tredje part för ovan nämnda ändamål.
8. Överföring av uppgifter till länder utanför Europeiska unionen (tredje land)
En del av de tjänsteleverantörer som vi använder för att behandla uppgifter är belägna i tredjeländer utanför Europeiska unionen. För att skydda dina personuppgifter har vi vidtagit lämpliga åtgärder för att säkerställa att uppgifterna behandlas lika säkert i dessa tredjeländer som inom Europeiska unionen. Våra avtal med tjänsteleverantörer i tredjeländer innehåller de standardklausuler för dataskydd som fastställts av EU-kommissionen. Dessa klausuler ger lämpliga garantier för skydd av personuppgifter när de behandlas av tjänsteleverantörer i tredjeländer.
9. Lagringsperiod
Vi lagrar personuppgifter så länge som det är nödvändigt för att uppfylla våra lagstadgade och avtalsenliga skyldigheter.
I händelse av att lagring inte längre är nödvändig för att uppfylla avtalsenliga eller lagstadgade skyldigheter, raderas uppgifterna om inte ytterligare behandling är nödvändig för följande ändamål:
- Uppfylla lagstadgade lagringskrav
- Bevarande av bevis i samband med lagstadgade preskriptionstider. Dessa regleras av nationell lagstiftning.
10. Den registrerades rättigheter
10.1 Den registrerade har rätt att,
- i enlighet med artikel 7.3 i GDPR, att när som helst återkalla sitt samtycke från oss. Detta innebär att vi inte längre får fortsätta att behandla uppgifter i framtiden på grundval av detta samtycke;
- i enlighet med artikel 15 i GDPR, att begära information om personuppgifter som behandlas av oss. I synnerhet kan information begäras om ändamålen med behandlingen, kategorin av personuppgifter, de kategorier av mottagare till vilka uppgifterna lämnas eller har lämnats ut, den planerade lagringsperioden, förekomsten av en rätt till rättelse, radering, begränsning av behandlingen eller invändning, förekomsten av en rätt att lämna in ett klagomål, ursprunget till uppgifterna om de inte samlas in av oss, och om användningen av automatiserat beslutsfattande, inklusive profilering och, vid behov, meningsfull information om deras uppgifter;
- i enlighet med artikel 16 i GDPR, att begära omedelbar rättelse av felaktiga eller ofullständiga personuppgifter som lagras av oss;
- att i enlighet med artikel 17 i GDPR begära radering av personuppgifter som lagras av oss, såvida inte behandlingen är nödvändig för att utöva rätten till yttrande- och informationsfrihet, för att uppfylla en rättslig skyldighet, av skäl av allmänt intresse eller för att fastställa, utöva eller försvara rättsliga anspråk;
- att i enlighet med artikel 18 i GDPR begära begränsning av behandlingen av personuppgifter, i den mån den registrerades riktighet bestrids, behandlingen är olaglig, den registrerade motsätter sig radering och vi inte längre behöver uppgifterna, den registrerade ändå behöver uppgifterna för att fastställa dem, utövande av eller försvar av rättsliga anspråk eller den registrerade, i enlighet med artikel 21 i GDPR, har invänt mot behandlingen;
- i enlighet med artikel 20 i GDPR, för att få de personuppgifter som den registrerade har lämnat till oss i ett strukturerat, allmänt använt och maskinläsbart format eller för att begära överföring till en annan personuppgiftsansvarig och
- i enlighet med artikel 77 i GDPR i kombination med lokalt tillämplig lag, att lämna in ett klagomål till en tillsynsmyndighet. I allmänhet kan den registrerade överklaga detta till tillsynsmyndigheten på sin vanliga bostadsort eller arbetsplats eller till vårt huvudkontor.
10.2 Utöva dina rättigheter
För att utöva dina rättigheter som registrerad kan du vända dig till det ansvariga företaget inom MANN+HUMMEL-koncernen eller till koncernens dataskyddsombud med hjälp av de kontaktuppgifter som tillhandahålls. Vi kommer att hantera förfrågningar skyndsamt och i enlighet med de lagstadgade bestämmelserna och meddela den registrerade om de åtgärder vi har vidtagit.
11. Rätt att göra invändningar
I den mån personuppgifter behandlas på grundval av berättigade intressen enligt artikel 6.1.1 f i dataskyddsförordningen har den registrerade enligt artikel 21 i dataskyddsförordningen rätt att invända mot behandlingen av sina personuppgifter i den mån det är motiverat med hänsyn till den registrerades särskilda situation.
För att utöva rätten att invända, skicka ett e-postmeddelande till: data.protection@mann-hummel.com.
12. Uppgifter om automatiserat beslutsfattande eller profilering
Inget automatiserat beslutsfattande eller profilering utförs.
13. Ändringar av denna information
I händelse av väsentliga förändringar av det ändamål för vilket dina personuppgifter behandlas eller typen och sättet för behandlingen, förbehåller vi oss rätten att uppdatera denna information
1. Informacje dotyczące gromadzenia i przetwarzania danych osobowych w związku z relacjami z klientami, dostawcami lub innymi relacjami biznesowymi
Zaufanie w relacjach zawodowych opiera się na trosce i przejrzystości. Dlatego informujemy naszych partnerów biznesowych o tym, w jaki sposób przetwarzamy dane i w jaki sposób osoby, których dane dotyczą, mogą korzystać z praw przysługujących im na mocy ogólnego rozporządzenia o ochronie danych (RODO). Przetwarzane przez nas dane osobowe i podstawy ich przetwarzania zależą od indywidualnego przypadku i danego stosunku umownego.
2. Nazwa i dane kontaktowe administratora odpowiedzialnego za przetwarzanie danych
Kontrahent umowy głównej. Alternatywnie, spółka MANN+HUMMEL, z którą istnieją relacje biznesowe.
3. Dane kontaktowe inspektora ochrony danych Grupy
MANN+HUMMEL International GmbH & Co. KG
Schwieberdingerstraße 126
71636 Ludwigsburg
Telefon: +49 7141 98-0
data.protection@mann-hummel.com
4. Dane osobowe przetwarzane w relacjach biznesowych
- Tytuł, imię i nazwisko
- Biznesowe dane kontaktowe, w tym: adres, adres e-mail, numer telefonu (stacjonarny i/lub komórkowy)
- Dane podstawowe dotyczące umowy: informacje niezbędne do realizacji stosunku umownego
- Dane dotyczące płatności kontrahenta/dane rachunku
- Dane dotyczące ratingu kredytowego i ryzyka niewykonania zobowiązania
- Informacje o koncie, w szczególności dane rejestracyjne i dane logowania
- W razie potrzeby nagrania wideo lub zdjęcia z wizyt w placówkach
- Informacje na temat centralnego zarządzania danymi klientów w ramach Grupy
- Informacje o zabezpieczeniach budynków i zakładów
- Informacje na temat ochrony bezpieczeństwa IT i operacji IT
5. Pochodzenie danych (źródła)
Przetwarzamy dane osobowe uzyskane od naszych partnerów biznesowych (klientów, usługodawców i dostawców). W razie potrzeby pozyskujemy dane osobowe z publicznie dostępnych źródeł (takich jak rejestry handlowe, rejestry dłużników i księgi wieczyste), a także od innych spółek należących do Grupy MANN+HUMMEL.
6. Cel i podstawa prawna przetwarzania
Gromadzenie tych danych pozwala nam:
- zidentyfikować naszych partnerów biznesowych
- odpowiednio realizować nasze relacje biznesowe
- korespondować z naszymi partnerami biznesowymi
- wystawiać faktury
- rozpatrywać wszelkie potencjalne roszczenia i egzekwować ewentualne roszczenia
- w razie potrzeby prowadzić działania marketingowe (newslettery e-mail).
Zgodnie z art. 6 ust. 1 pkt 1 lit. b RODO dane są przetwarzane w określonych celach dla odpowiedniego przygotowania i wykonania stosunku umownego oraz dla umożliwienia obu stronom wywiązania się z obowiązków wynikających ze stosunku umownego.
Zebrane przez nas dane wymagane do wykonania umowy są przechowywane (art. 6 ust. 1 lit. c RODO) do momentu ustania ustawowego obowiązku przechowywania, a następnie podlegają usunięciu, chyba że jesteśmy prawnie zobowiązani do przechowywania danych przez dłuższy okres lub partner biznesowy wyraził zgodę na dalsze przechowywanie zgodnie z art. 6 ust. 1 lit. a RODO lub my lub strona trzecia mamy uzasadniony interes w ich przechowywaniu zgodnie z art. 6 ust. 1 lit. f RODO.
7. Ujawnianie danych stronom trzecim
W celu wypełnienia naszych zobowiązań umownych i ustawowych dane mogą być ujawniane różnym urzędom publicznym lub wewnętrznym oraz zewnętrznym usługodawcom, o ile jest to konieczne do realizacji stosunków umownych z naszymi partnerami biznesowymi zgodnie z art. 6 ust. 1 pkt 1 lit. b RODO. Ujawnione dane mogą być wykorzystywane przez strony trzecie wyłącznie do wyżej wymienionych celów.
8. Przekazywanie danych do krajów spoza Unii Europejskiej (państw trzecich)
Niektórzy dostawcy usług, z których korzystamy do przetwarzania danych, znajdują się w państwach trzecich poza Unią Europejską. W celu ochrony Państwa danych osobowych podjęliśmy odpowiednie środki, aby zapewnić, że dane są przetwarzane w tych krajach trzecich tak samo bezpiecznie, jak w Unii Europejskiej. Nasze umowy z dostawcami usług w krajach trzecich zawierają standardowe klauzule ochrony danych określone przez Komisję Europejską. Klauzule te zapewniają odpowiednie gwarancje ochrony danych osobowych przetwarzanych przez usługodawców w krajach trzecich.
9. Okres przechowywania
Przechowujemy dane osobowe tak długo, jak jest to konieczne do wypełnienia naszych zobowiązań ustawowych i umownych.
W przypadku, gdy przechowywanie nie jest już konieczne do wypełnienia zobowiązań umownych lub ustawowych, dane są usuwane, chyba że dalsze przetwarzanie jest konieczne do następujących celów:
- spełnienie ustawowych wymogów dotyczących przechowywania danych
- zachowanie dowodów w związku z ustawowymi terminami przedawnienia. Są one regulowane przez prawo krajowe.
10. Prawa osoby, której dane dotyczą
10.1. Osoba, której dane dotyczą, ma prawo
- zgodnie z art. 7 ust. 3 RODO, do wycofania swojej zgody w dowolnym momencie. Oznacza to, że w przyszłości nie możemy już przetwarzać danych na podstawie tej zgody;
- zgodnie z art. 15 RODO, do żądania informacji na temat przetwarzanych przez nas danych osobowych. W szczególności można zażądać informacji o celach przetwarzania, kategorii danych osobowych, kategoriach odbiorców, którym dane są lub zostały ujawnione, planowanym okresie przechowywania, istnieniu prawa do sprostowania, usunięcia, ograniczenia przetwarzania lub sprzeciwu, istnieniu prawa do złożenia skargi, pochodzeniu danych, jeśli nie zostały przez nas zebrane, oraz o wykorzystaniu zautomatyzowanego podejmowania decyzji, w tym profilowania i, w razie potrzeby, istotnych informacji o ich szczegółach;
- zgodnie z art. 16 RODO, do żądania natychmiastowego sprostowania niedokładnych lub niekompletnych danych osobowych, które są przez nas przechowywane;
- zgodnie z art. 17 RODO, do żądania usunięcia przechowywanych przez nas danych osobowych, chyba że przetwarzanie jest niezbędne do korzystania z prawa do wolności wypowiedzi i informacji, do wypełnienia obowiązku prawnego, ze względu na interes publiczny lub do ustalenia, dochodzenia lub obrony przed roszczeniami prawnymi;
- zgodnie z art. 18 RODO, do żądania ograniczenia przetwarzania danych osobowych, o ile osoba, której dane dotyczą, kwestionuje prawidłowość danych, przetwarzanie jest niezgodne z prawem, osoba, której dane dotyczą, sprzeciwia się usunięciu, a my nie potrzebujemy już tych danych, ale osoba, której dane dotyczą, potrzebuje tych danych do ustalenia, dochodzenia lub obrony roszczeń lub osoba, której dane dotyczą, wniosła sprzeciw na mocy art. 21 RODO wobec przetwarzania;
- zgodnie z art. 20 RODO, do otrzymania danych osobowych przekazanych nam przez osobę, której dane dotyczą, w ustrukturyzowanym, powszechnie używanym formacie nadającym się do odczytu maszynowego lub do żądania przesłania ich innemu administratorowi oraz
- zgodnie z art. 77 RODO w powiązaniu z lokalnie obowiązującym prawem, do złożenia skargi do organu nadzorczego. Zasadniczo osoba, której dane dotyczą, może w tym celu odwołać się do organu nadzorczego w swoim zwykłym miejscu pobytu lub miejscu pracy lub w naszej siedzibie głównej.
10.2. Korzystanie z przysługujących praw
Aby skorzystać ze swoich praw jako osoby, której dane dotyczą, mogą Państwo odwołać się do odpowiedzialnej spółki w Grupie MANN+HUMMEL lub do inspektora ochrony danych Grupy, korzystając z podanych danych kontaktowych. Będziemy rozpatrywać Państwa zapytania niezwłocznie i zgodnie z przepisami ustawowymi oraz powiadomimy osobę, której dane dotyczą, o podjętych przez nas działaniach.
11. Prawo do sprzeciwu
W zakresie, w jakim dane osobowe są przetwarzane na podstawie prawnie uzasadnionych interesów zgodnie z art. 6 ust. 1 pkt 1 lit. f) RODO, osoba, której dane dotyczą, ma prawo, zgodnie z art. 21 RODO, wnieść sprzeciw wobec przetwarzania dotyczących jej danych osobowych, o ile jest to uzasadnione szczególną sytuacją osoby, której dane dotyczą.
Aby skorzystać z prawa do sprzeciwu, prosimy wysłać wiadomość e-mail na adres: data.protection@mann-hummel.com.
12. Informacje dotyczące zautomatyzowanego podejmowania decyzji lub profilowania
Nie przeprowadzamy zautomatyzowanego podejmowania decyzji ani profilowania.
13. Zmiany w niniejszych informacjach
W przypadku istotnych zmian celu przetwarzania Państwa danych osobowych lub rodzaju i sposobu ich przetwarzania, zastrzegamy sobie prawo do aktualizacji tych informacji.
1. Información sobre la recogida y el tratamiento de datos personales2 en relación con clientes, proveedores u otras relaciones comerciales
Las relaciones laborales de confianza se basan en el cuidado y la transparencia. Es por eso que informamos a nuestros socios comerciales sobre cómo procesamos los datos y cómo los interesados pueden ejercer los derechos que les otorga el Reglamento General de Protección de Datos (GDPR). Los datos personales que tratamos y los motivos para hacerlo dependen de cada caso individual y de la relación contractual en cuestión.
2. Nombre y datos de contacto del responsable del tratamiento
Socio contractual del contrato principal. Alternativamente, la empresa MANN+HUMMEL con la que existe una relación comercial.
3. Datos de contacto del responsable de la protección de datos del Grupo
MANN+HUMMEL International GmbH & Co. KG
Schwieberdingerstraße 126
71636 Ludwigsburg
Teléfono: +49 7141 98-0
data.protection@mann-hummel.com
4. Datos personales tratados en una relación comercial
- Título, nombre
- Datos de contacto de la empresa, incluidos: dirección, dirección de correo electrónico, número de teléfono (fijo y/o móvil)
- Datos maestros del contrato: información necesaria para la ejecución de la relación contractual
- Datos de pago de la parte contractual/detalles de la cuenta
- Determinación de datos de calificación crediticia y riesgos de impago
- Información de la cuenta, especialmente datos de registro e inicio de sesión
- Grabaciones de video o fotos de visitas a lugares si es necesario
- Información sobre la gestión centralizada de datos de clientes dentro del Grupo
- Información sobre las medidas de seguridad de los edificios y las instalaciones
- Información sobre la protección de la seguridad informática y las operaciones informáticas
5. Origen de los datos (fuentes)
Tratamos los datos personales que se obtienen de nuestros socios comerciales (clientes, proveedores de servicios y proveedores). Si es necesario, obtenemos datos personales de fuentes de acceso público (como registros mercantiles, registros de deudores y registros de la propiedad), así como de otras empresas del Grupo MANN+HUMMEL.
6. Finalidad y base jurídica del tratamiento
La recogida de estos datos nos permite:
- Identificar a nuestros socios comerciales
- llevar a cabo nuestra relación comercial de manera adecuada
- Mantener correspondencia con nuestros socios comerciales
- Llevar a cabo la facturación
- Tramitar cualquier posible reclamación de responsabilidad y hacer valer las posibles reclamaciones
- Llevar a cabo actividades de marketing (boletines informativos por correo electrónico) si es necesario.
De conformidad con el artículo 6, apartado 1, frase 1, letra b) del RGPD, los datos se tratan para los fines especificados para la adecuada preparación y ejecución de la relación contractual y para que ambas partes cumplan con éxito las obligaciones de la relación contractual.
Los datos recopilados por nosotros necesarios para la ejecución del contrato se almacenan (artículo 6 [1] [1] [c] del RGPD) hasta que expira la obligación legal de hacerlo y luego se eliminan, a menos que estemos legalmente obligados a almacenar los datos durante un período más largo, o que el socio comercial haya dado su consentimiento para continuar con el almacenamiento según el artículo 6 (1) (1) (a) del GDPR o que nosotros o un tercero tengamos un interés legítimo en su almacenamiento de conformidad con el artículo 6, apartado 1, letra f) del RGPD.
7. Comunicación de datos a terceros
Para cumplir con nuestras obligaciones contractuales y legales, los datos pueden ser comunicados a diversas oficinas públicas o internas y a proveedores de servicios externos en la medida en que sea necesario para llevar a cabo las relaciones contractuales con nuestros socios comerciales de conformidad con el artículo 6, apartado 1, frase 1, letra b) del RGPD. Los datos facilitados solo podrán ser utilizados por terceros para las finalidades antes mencionadas.
8. Transferencia de datos a países fuera de la Unión Europea (terceros países)
Algunos de los proveedores de servicios que utilizamos para procesar datos se encuentran en terceros países fuera de la Unión Europea. Con el fin de proteger sus datos personales, hemos tomado las medidas adecuadas para garantizar que los datos se procesen con la misma seguridad en estos terceros países que dentro de la Unión Europea. Nuestros acuerdos con proveedores de servicios en terceros países incluyen las cláusulas estándar de protección de datos establecidas por la Comisión de la UE. Estas cláusulas proporcionan garantías adecuadas para la protección de los datos personales cuando son tratados por proveedores de servicios en terceros países.
9. Plazo de conservación
Almacenamos los datos personales durante el tiempo que sea necesario para cumplir con nuestras obligaciones legales y contractuales.
En el caso de que el almacenamiento ya no sea necesario para cumplir con las obligaciones contractuales o legales, los datos se eliminarán a menos que sea necesario un procesamiento posterior para los siguientes fines:
- Cumplimiento de los requisitos legales de retención
- Conservación de pruebas en relación con los plazos de prescripción legales. Estos están regulados por la legislación nacional.
10. Derechos del interesado
10.1 El interesado tiene derecho,
- de conformidad con el artículo 7, apartado 3, del RGPD, a retirar su consentimiento en cualquier momento. Esto significa que es posible que ya no sigamos procesando datos en el futuro sobre la base de este consentimiento;
- de conformidad con el artículo 15 del RGPD, para solicitar información sobre los datos personales que procesamos. En particular, se puede solicitar información sobre los fines del tratamiento, la categoría de datos personales, las categorías de destinatarios a los que se comunican o se han comunicado los datos, el período de almacenamiento previsto, la existencia de un derecho de rectificación, supresión, restricción del procesamiento u oposición, la existencia de un derecho a presentar una reclamación, el origen de los datos si no los hemos recopilado, y sobre el uso de la toma de decisiones automatizada, incluida la elaboración de perfiles y, si es necesario, información significativa sobre sus datos;
- de conformidad con el artículo 16 del RGPD, a solicitar la rectificación inmediata de los datos personales inexactos o incompletos que almacenamos;
- de conformidad con el artículo 17 del RGPD, a solicitar la supresión de los datos personales que almacenamos, a menos que el tratamiento sea necesario para ejercer el derecho a la libertad de expresión e información, para cumplir una obligación legal, por razones de interés público o para la formulación, el ejercicio o la defensa de reclamaciones legales;
- de conformidad con el artículo 18 del RGPD, solicitar la limitación del tratamiento de los datos personales, en la medida en que el interesado impugne la exactitud de los datos, el tratamiento sea ilícito, el interesado se oponga a la supresión y ya no necesitemos los datos, el interesado necesite, no obstante, los datos para el establecimiento, ejercicio o defensa de reclamaciones o el interesado, de conformidad con el artículo 21 del RGPD, se ha opuesto al tratamiento;
- de conformidad con el artículo 20 del RGPD, a recibir los datos personales que nos facilite el interesado en un formato estructurado, de uso común y legible por máquina o a solicitar la transmisión a otro responsable del tratamiento y
- de conformidad con el artículo 77 del RGPD en relación con la legislación local aplicable, a presentar una reclamación ante una autoridad de control. Por lo general, el interesado puede recurrir a la autoridad de control de su lugar de residencia habitual o de trabajo o a nuestra oficina central para ello.
10.2 Ejercicio de sus derechos
Para ejercer sus derechos como interesado, puede dirigirse a la empresa responsable del Grupo MANN+HUMMEL o al responsable de la protección de datos del Grupo utilizando los datos de contacto facilitados. Gestionaremos las consultas con prontitud y de acuerdo con las disposiciones legales, y notificaremos al interesado de las medidas que hemos tomado.
11. Derecho de oposición
En la medida en que el tratamiento de datos personales se base en intereses legítimos de conformidad con el artículo 6, apartado 1, frase 1, letra f) del RGPD, el interesado tiene derecho, en virtud del artículo 21 del RGPD, a oponerse al tratamiento de sus datos personales en la medida en que la situación particular del interesado lo justifique.
Para ejercer el derecho de oposición, envíe un correo electrónico a: data.protection@mann-hummel.com.
12. Información sobre la toma de decisiones automatizada o la elaboración de perfiles
No se lleva a cabo ninguna toma de decisiones automatizada ni elaboración de perfiles.
13. Cambios en esta información
En caso de cambios significativos en el propósito para el que se procesan sus datos personales o en el tipo y la forma de procesamiento, nos reservamos el derecho de actualizar esta información.
1. Informatie over het verzamelen en verwerken van persoonsgegevens
In het kader van klant-, leveranciers- of andere zakelijke relaties Vertrouwen in zakelijke relaties is gebaseerd op zorgvuldigheid en transparantie. Daarom informeren wij onze zakenpartners over hoe wij gegevens verwerken en hoe betrokkenen hun rechten kunnen uitoefenen op grond van de Algemene Verordening Gegevensbescherming (AVG). De persoonlijke gegevens die wij verwerken en de redenen daarvoor zijn afhankelijk van het individuele geval en de betreffende contractuele relatie.
2. Naam en contactgegevens van de verwerkingsverantwoordelijke
De contractuele partner van het hoofdcontract. Alternatief het MANN+HUMMEL-bedrijf waarmee een zakelijke relatie bestaat.
3. Contactgegevens van de groepsfunctionaris voor gegevensbescherming
MANN+HUMMEL International GmbH & Co. KG
Schwieberdingerstraße 126
71636 Ludwigsburg
Telefoon: +49 7141 98-0
data.protection@mann-hummel.com
4. Persoonsgegevens die in een zakelijke relatie worden verwerkt
- Titel, naam
- Zakelijke contactgegevens, inclusief adres, e-mailadres, telefoonnummer (vast en/of mobiel)
- Contractuele stamgegevens: informatie die nodig is voor de uitvoering van de contractuele relatie
- Betaalgegevens/rekeninggegevens van de contractpartner
- Gegevens over kredietwaardigheid en risico’s van wanbetaling
- Accountgegevens, met name registratie- en inloggegevens
- Videobeelden of foto’s van locatiebezoeken indien nodig
- Informatie over centrale klantgegevensbeheer binnen de groep
- Informatie over beveiligingsmaatregelen voor gebouwen en installaties
- Informatie over IT-beveiliging en IT-operaties
5. Herkomst van gegevens (bronnen)
Wij verwerken persoonsgegevens die wij verkrijgen van onze zakenpartners (klanten, dienstverleners en leveranciers). Indien nodig verkrijgen wij gegevens uit openbare bronnen (zoals handelsregisters, schuldenregisters en kadaster) of van andere bedrijven binnen de MANN+HUMMEL groep.
6. Doel en rechtsgrondslag van verwerking
Het verzamelen van deze gegevens stelt ons in staat:
- Onze zakenpartners te identificeren
- De zakelijke relatie op passende wijze uit te voeren
- Te corresponderen met zakenpartners
- Facturering uit te voeren
- Mogelijke aansprakelijkheidsclaims af te handelen en claims te handhaven
- Marketingactiviteiten uit te voeren (bijv. e-mailnieuwsbrieven)
Volgens artikel 6(1)(b) AVG worden gegevens verwerkt voor de juiste voorbereiding en uitvoering van de contractuele relatie en om beide partijen in staat te stellen hun verplichtingen na te komen.
De gegevens die nodig zijn voor de uitvoering van het contract worden bewaard (artikel 6(1)(c) AVG) totdat de wettelijke bewaarplicht vervalt. Daarna worden ze verwijderd, tenzij verdere opslag vereist is op basis van wettelijke verplichtingen, door toestemming van de zakenpartner (artikel 6(1)(a) AVG), of in geval van gerechtvaardigd belang (artikel 6(1)(f) AVG).
7. Verstrekking van gegevens aan derden
Om onze contractuele en wettelijke verplichtingen na te komen, kunnen gegevens worden verstrekt aan interne en externe partijen of dienstverleners. Dit gebeurt uitsluitend indien noodzakelijk voor de uitvoering van de contractuele relatie en overeenkomstig artikel 6(1)(b) AVG.
8. Overdracht van gegevens naar landen buiten de Europese Unie (derde landen)
Sommige dienstverleners die wij gebruiken, zijn gevestigd in derde landen buiten de EU. Om uw persoonsgegevens te beschermen, hebben wij passende maatregelen genomen om ervoor te zorgen dat de gegevens net zo veilig worden verwerkt als binnen de EU. Dit omvat standaardbepalingen inzake gegevensbescherming zoals vastgesteld door de Europese Commissie.
9. Bewaartermijn
Persoonsgegevens worden bewaard zolang dit nodig is om te voldoen aan wettelijke en contractuele verplichtingen.
Na afloop hiervan worden gegevens verwijderd, tenzij:
- Wettelijke bewaarplichten naleving vereisen
- Gegevens nodig zijn als bewijs binnen wettelijke verjaringstermijnen
10. Rechten van de betrokkene
10.1 De betrokkene heeft recht op:
- Intrekking van toestemming (artikel 7(3) AVG)
- Inzage in de persoonsgegevens (artikel 15 AVG)
- Correctie van onjuiste of onvolledige gegevens (artikel 16 AVG)
- Verwijdering van gegevens (artikel 17 AVG), tenzij verwerking noodzakelijk is
- Beperking van verwerking (artikel 18 AVG)
- Overdraagbaarheid van gegevens (artikel 20 AVG)
- Indienen van een klacht bij een toezichthoudende autoriteit (artikel 77 AVG)
10.2 Uitoefening van rechten
Neem contact op met de verantwoordelijke binnen de MANN+HUMMEL-groep of de functionaris voor gegevensbescherming via de opgegeven contactgegevens.
11. Recht van bezwaar
Betrokkenen kunnen bezwaar maken tegen verwerking op basis van gerechtvaardigde belangen (artikel 6(1)(f) AVG), indien zij redenen hebben die voortvloeien uit hun specifieke situatie.
Stuur een e-mail naar: data.protection@mann-hummel.com om bezwaar te maken.
12. Geautomatiseerde besluitvorming of profilering
Er worden geen geautomatiseerde beslissingen of profilering uitgevoerd.
13. Wijzigingen in deze informatie
Bij belangrijke wijzigingen in het doel of de aard van de verwerking behouden wij ons het recht voor deze informatie te actualiseren.
1. Informace o shromažďování a zpracování osobních údajů ve vztahu k zákaznickým, dodavatelským nebo jiným obchodním vztahům
Důvěryhodné pracovní vztahy jsou založeny na péči a transparentnosti. Proto informujeme naše obchodní partnery o tom, jak zpracováváme údaje a jak mohou subjekty údajů uplatňovat práva, která jim poskytuje obecné nařízení o ochraně osobních údajů (GDPR). Osobní údaje, které zpracováváme, a důvody, proč tak činíme, závisí na konkrétním případu a na daném smluvním vztahu.
2. Jméno a kontaktní údaje správce odpovědného za zpracování
Smluvní partner hlavní smlouvy. Případně společnost MANN+HUMMEL, se kterou existuje obchodní vztah.
3. Kontaktní údaje pověřence pro ochranu osobních údajů Skupiny
MANN+HUMMEL International GmbH & Co. KG
Schwieberdingerstraße 126
71636 Ludwigsburg
Telefon: +49 7141 98-0
data.protection@mann-hummel.com
4. Osobní údaje zpracovávané v obchodním vztahu
- Titul, jméno
- Obchodní kontaktní údaje včetně: adresy, e-mailové adresy, telefonního čísla (pevná linka a/nebo mobil)
- Základní smluvní údaje: informace nezbytné pro plnění smluvního vztahu
- Platební údaje/údaje o účtu smluvního partnera
- Stanovení údajů o úvěrovém ratingu a riziku platební neschopnosti
- Informace o účtu, zejména registrační a přihlašovací údaje
- V případě potřeby videozáznamy nebo fotografie z návštěv místa
- Informace o centrální správě zákaznických dat v rámci Skupiny
- Informace o bezpečnostních opatřeních budovy a závodu
- Informace o ochraně bezpečnosti IT a provozu IT
5. Původ dat (zdroje)
Zpracováváme osobní údaje, které získáváme od našich obchodních partnerů (zákazníků, poskytovatelů služeb a dodavatelů). V případě potřeby získáváme osobní údaje z veřejně přístupných zdrojů (jako jsou obchodní rejstříky, evidence dlužníků a katastry nemovitostí) i jiných společností v rámci skupiny MANN+HUMMEL.
6. Účel a právní základ zpracování
Sběr těchto údajů nám umožňuje:
- identifikovat naše obchodní partnery
- řádně provádět náš obchodní vztah
- korespondovat s našimi obchodními partnery
- provádět fakturaci
- zpracovat případné nároky na odpovědnost a vymáhat případné nároky
- v případě potřeby provádět marketing (e-mailové zpravodaje).
Podle čl. 6 odst. 1 písm. b) GDPR jsou údaje zpracovávány pro účely stanovené pro náležitou přípravu a plnění smluvního vztahu a pro to, aby obě strany úspěšně plnily své povinnosti ze smluvního vztahu.
Námi shromážděné údaje potřebné pro plnění smlouvy jsou uloženy (čl. 6 odst. 1 písm. c) GDPR) do doby uplynutí zákonné povinnosti a následně jsou vymazány, pokud nejsme ze zákona povinni uchovávat údaje po delší dobu, nebo obchodní partner souhlasil s pokračováním uchovávání dle čl. 6 odst. 1 písm. a) GDPR nebo máme my nebo třetí strana oprávněný zájem na jeho uchování podle čl. 6 odst. 1 f) GDPR.
7. Zpřístupnění údajů třetím stranám
Abychom splnili naše smluvní a zákonné povinnosti, mohou být údaje zpřístupněny různým veřejným nebo interním úřadům a externím poskytovatelům služeb, pokud je to nezbytné pro plnění smluvních vztahů s našimi obchodními partnery v souladu s článkem čl. 6 odst. 1 písm. b) GDPR. Zveřejněné údaje mohou být použity pouze třetími stranami pro výše uvedené účely.
8. Přenos dat do zemí mimo Evropskou unii (třetí země)
Někteří poskytovatelé služeb, které využíváme ke zpracování údajů, sídlí ve třetích zemích mimo Evropskou unii. Za účelem ochrany vašich osobních údajů jsme přijali vhodná opatření, abychom zajistili, že údaje budou v těchto třetích zemích zpracovávány stejně bezpečně jako v rámci Evropské unie. Naše smlouvy s poskytovateli služeb ve třetích zemích zahrnují standardní doložky o ochraně údajů stanovené Komisí EU. Tato ustanovení poskytují vhodné záruky ochrany osobních údajů, pokud jsou zpracovávány poskytovateli služeb ve třetích zemích.
9. Doba uchování
Osobní údaje uchováváme po dobu nezbytnou pro splnění našich zákonných a smluvních povinností.
V případě, že uchovávání již není nutné pro splnění smluvních nebo zákonných povinností, údaje se vymažou, pokud není nutné další zpracování pro následující účely:
- splňující zákonné požadavky na uchovávání
- zajištění důkazů v souvislosti se zákonnými promlčecími lhůtami. Ty jsou kontrolovány národním právem.
10. Práva subjektu údajů
10.1 Subjekt údajů má právo,
- podle čl. 7 odst. 3 GDPR nám svůj souhlas kdykoli odvolat. To znamená, že na základě tohoto souhlasu již nesmíme v budoucnu údaje zpracovávat;
- podle čl. 15 GDPR požadovat informace o námi zpracovávaných osobních údajích. Zejména lze požadovat informace o účelech zpracování, kategorii osobních údajů, kategoriích příjemců, kterým jsou nebo byly údaje zpřístupněny, plánované době uchovávání, existenci práva na opravu, výmaz, omezení zpracování nebo námitku, existenci práva podat stížnost, původ údajů, pokud je neshromažďujeme, a o používání automatizovaného rozhodování včetně profilování a v případě potřeby smysluplné informace o jejich údajích;
- podle článku 16 GDPR požadovat okamžitou opravu nepřesných nebo neúplných osobních údajů, které uchováváme;
- podle čl. 17 GDPR požadovat výmaz osobních údajů, které ukládáme, pokud zpracování není nezbytné pro výkon práva na svobodu projevu a informací, pro splnění právní povinnosti, z důvodů veřejného zájmu nebo pro zjištění, uplatňovat nebo obhajovat právní nároky;
- v souladu s článkem 18 GDPR požadovat omezení zpracování osobních údajů, pokud subjekt údajů popírá přesnost údajů, zpracování je protiprávní, subjekt údajů nesouhlasí s výmazem a my již údaje nepotřebujeme, subjekt údajů přesto údaje potřebuje pro určení, výkon nebo obhajobu právních nároků nebo subjekt údajů podle čl. 21 GDPR vznesl námitku proti zpracování;
- podle článku 20 GDPR obdržet osobní údaje, které nám poskytl subjekt údajů, ve strukturovaném, běžně používaném a strojově čitelném formátu nebo požádat o jejich předání jinému správci a
- podle čl. 77 GDPR ve spojení s místně platným právem podat stížnost u dozorového úřadu. Obecně se může subjekt údajů obrátit na dozorový úřad v místě svého obvyklého bydliště nebo pracoviště nebo na naše ústředí.
10.2 Uplatňování vašich práv
Chcete-li uplatnit svá práva jako subjekt údajů, můžete se obrátit na odpovědnou společnost v rámci skupiny MANN+HUMMEL nebo na pověřence pro ochranu osobních údajů Skupiny pomocí uvedených kontaktních údajů. Dotazy vyřídíme rychle a v souladu se zákonnými ustanoveními a informujeme subjekt údajů o opatřeních, která jsme přijali.
11. Právo vznést námitku
Pokud jsou osobní údaje zpracovávány na základě oprávněných zájmů podle čl. 6 odst. 1 písm. f) GDPR, má subjekt údajů podle čl. 21 GDPR právo vznést námitku proti zpracování svých osobních údajů. údaje, pokud to odůvodňuje zvláštní situace subjektu údajů.
Pro uplatnění práva vznést námitku zašlete e-mail na adresu: data.protection@mann-hummel.com.
12. Informace o automatizovaném rozhodování nebo profilování
Není prováděno žádné automatizované rozhodování ani profilování.
13. Změny těchto informací
V případě podstatných změn účelu, pro který jsou vaše osobní údaje zpracovávány nebo druhu a způsobu zpracování, si vyhrazujeme právo tyto informace aktualizovat.