General information on data protection:
We appreciate your interest in our website. Protecting your privacy while processing personal data and ensuring the security of all business data is an important matter to us which we take into account in our business processes. Please see below for detailed information on how your data are handled.
CONTROLLER PURSUANT TO ART. 4 (7) EU GENERAL DATA PROTECTION REGULATION (GDPR)
Company: IRS Karosserie & Lack GmbH
Address: Halstenbeker Weg 96b, 25462 Rellingen, Germany
DATA PROTECTION OFFICER OF THE CONTROLLER
Name: Dr. Ralf W. Schadowski
Address: ADDAG GmbH & Co. KG | Krefelder Strasse 121 | 52070 Aachen, Germany
Tel: 0241 446 880
SECTION 1 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
(1) Where we obtain the data subject’s consent for the processing of personal data, point (a) of Art. 6 (1) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
(2) Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, point (b) of Art. 6 (1) GDPR serves as legal basis. This also applies to processing that is necessary in order to take steps prior to entering into a contract.
(3) Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, point (c) of Art. 6 (1) GDPR serves as the legal basis.
(4) Where the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, point (d) of Art. 6 (1) GDPR serves as the legal basis.
(5) Where the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, point (f) of Art. 6 (1) GDPR serves as the legal basis.
SECTION 2 DATA ERASURE AND PERIOD OF STORAGE
(1) The data subject’s personal data are erased or blocked once they are no longer necessary in relation to the purpose for which they were stored.
(2) The data may be stored beyond that period where this is stipulated by European or national legislation in Union regulations, laws or other provisions to which the controller is subject.
(3) The data are also blocked or erased once a retention period stipulated by one of the aforementioned legal standards expires, unless continued storage of the data is necessary for the conclusion or performance of a contract.
SECTION 3 INFORMATION ON THE COLLECTION OF PERSONAL DATA
(1) Below we inform you about the collection of personal data when using our website. Personal data include all data that can be related to you personally, e.g. name, postal address, email addresses and user behaviour.
(2) When you contact us by email or via a contact form, we store the data you provide (your email address, if applicable, your name and phone number) to answer your questions. We will erase the corresponding data once their storage is no longer necessary, or restrict the processing in case statutory retention requirements apply.
(3) If we use the services of contracted service providers for individual functions of our website or would like to use your data for advertising purposes, we will inform you of the related processes in detail below, stating the criteria defined for the period of storage.
Collection of personal data on visiting our website
When you use our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect those personal data which your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary to display our website and to ensure stability and security (the legal basis for this is point (f) of Art. 6 (1) GDPR):
- IP address
- Host name
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Data volume transmitted
- Website from which the request comes (referrer)
- The specific pages of our website you visit
- Browser: type, version and language setting
- Operating system: type and version
▪ Screen resolution
▪ Colour depth
▪ Size of the browser window
▪ Installed browser plug-ins
(1) In addition to the aforementioned data, cookies are stored on your computer when you use this website. Cookies are small text files which are stored on your hard drive, assigned to the browser you are using, and which send certain information to the party that sets the cookie. Cookies cannot execute programmes or transmit viruses to your computer. They serve to improve the overall user friendliness and effectiveness of the website.
(2) This website uses the following types of cookies, the scope and function of which are explained below:
- Transient cookies (see b) for more information)
- Persistent cookies (see c) more information)
- Flash cookies (see f) for more information)
- b) Transient cookies are deleted automatically when you close your browser. They include, in particular, session cookies. Session cookies store a so-called session ID, which enables various requests from your browser to be assigned to the common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
- c) Persistent cookies are deleted automatically after a specified period of time, which may vary depending on the cookie. You can delete the cookies at any time in your browser’s security settings.
- d) You can configure your browser settings according to your preferences and refuse to accept third-party cookies or all cookies, for example. “Third-party cookies” are cookies that are set by a third party, i.e. not by the website you are currently visiting. Please note that in this case you may not be able to use all functions of this website.
- f) The flash cookies used are not recorded by your browser, but by your flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your terminal device. These objects store the required data regardless of your browser and do not expire automatically. You can configure the setting and deletion of flash cookies via the Adobe Flash Player Settings Manager at https://www.macromedia.com/support/documentation/de/flashplayer/help/settings_manager07.html. Alternatively, if you do not want cookies to be processed, you can install a corresponding add-on, such as “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private mode in your browser. In addition, we recommend that you regularly delete your cookies and the browser history manually.
SECTION 4 ADDITIONAL FUNCTIONS AND SERVICES OFFERED ON OUR WEBSITE
(1) In addition to the purely informational use of our website, we offer various services which you can use if you are interested. To this end, you usually need to provide further personal data, which we use to provide the respective service and to which the aforementioned principles of data processing apply. Mandatory information is marked with an asterisk. Information in fields not marked with an asterisk is provided on a voluntary basis.
(2) When you contact the service provider by email or via the contact form, we store your email address and, where indicated, your name, phone number and [...] to answer your questions.
(3) In some cases, we use the services of external service providers to process your data. These service providers have been carefully selected and commissioned by us, are bound by our instructions and are monitored on a regular basis.
(5) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this fact in the description of the respective service offered.
SECTION 5 RIGHTS OF THE DATA SUBJECT
Below we inform you about your rights as the data subject pursuant to Art. 15 GDPR. You can exercise these rights at any time and contact us directly to that effect. If you exercise these rights against us, we will thoroughly examine the case, taking into account the related statutory requirements and conditions. To this end, we may need further information from you. We will explain to you in detail the results of our examination and the action we take to fulfil your request. It is possible that we may not be able to fully accommodate your wishes in the manner you desire.
This should not prevent you from exercising your rights against us or making corresponding enquiries with us. We will be happy to answer any questions you may have.
(1) Right of access
You have the right to obtain from us at any time information as to whether or not personal data concerning you are being processed by us. This also includes information on the purposes of the processing, any recipients to whom your personal data have been disclosed, the envisaged period of storage and, where the personal data were not collected from you directly, any available information as to the source of these data. Furthermore, you have the right to obtain from us a one-time free copy of your personal data stored by us. We reserve the right to charge a reasonable administrative fee for any further copies requested.
(2) Right to rectification
You have the right to obtain from us the rectification of any inaccurate personal data we store about you. This also includes the right to have incomplete personal data completed.
(3) Right to erasure
You have the right to obtain from us the erasure of personal data we store about you. Where we have made your personal data public, this also includes our obligation, within the scope of the “right to be forgotten” referred to in Art. 17 (2) GDPR, while taking account of available technology and the costs of implementation, to inform other controllers of these public personal data that you have requested the erasure of any links to, or copy or replication of, these data.
(4) Right to restriction of processing
You have the right to obtain from us restriction of processing of the personal data we store about you. Thereafter, these data may only be processed with your consent or for few purposes stipulated by law.
(5) Right to object to processing
Where the processing of your personal data is based on the balancing of interests, you have the right to object to the processing. This is the case where the processing is not necessary for the performance of a contract with you, which we explain in each case in the description of functions below. If you exercise your right to object, we will ask you to state the reasons why you do not wish your personal data to be processed the way we previously did. In the event of a justified objection, we will review the circumstances and will either discontinue the processing, modify the processing or demonstrate to you our compelling legitimate grounds for continuing the processing.
As a matter of course, you also have the right to object at any time to the processing of your personal data for the purpose of marketing or data analysis. You can object to processing for marketing purposes using the contact details provided above.
(6) Right to withdraw consent to processing
Where you have consented to the processing of your data, you can withdraw such consent at any time. Such withdrawal will affect the lawfulness of processing of your personal data after you have declared to withdraw your consent.
(7) Right to data portability
You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format for the purpose of transmission to another controller. This also includes direct transmission from us to another controller at your request and where technically feasible.
(8) Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint at any time with a supervisory authority concerning our processing of personal data relating to you.
(9) Automated decision-making including profiling
You have the right to obtain information about the existence of automated decision-making including profiling referred to in Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.
SECTION 6 SOCIAL MEDIA AND OTHER THIRD-PARTY SERVICES
(1) On this website, we use services of Google Maps. By doing so, we pursue our interest in enhancing the attractiveness of our website by displaying interactive maps directly on our website and enabling you to conveniently use the map function. The legal basis for using the plug-in is point (f) of Art. 6 (1) GDPR.
(1) On this website, we use functions of ShareThis, a social bookmarking and sharing tool of the company ShareThis, 4005 Miranda Ave, Suite 100, Palo Alto, 94304 California, USA.
(2) By using the social plug-ins of ShareThis, visitors are able to share contents of this website in various social networks, such as Facebook, Twitter, Google+ and many more. When visitors share content with ShareThis in services where they have an account and are logged in, the visit and sharing can be associated with the user.
INTEGRATION OF OTHER THIRD-PARTY SERVICES
(1) On this website, we additionally use services of Google Fonts. By using these services, we can improve your user experience on our website. Among other things, this serves our interest in enhancing the attractiveness of our website. The legal basis for using these services is point (f) of Art. 6 (1) GDPR.
(3) For further information on the purpose and scope of the data collection and processing by the plug-in provider, please read the privacy policies of these providers, where you can also obtain further information on your related rights and setting options to protect your privacy:
(4) Addresses of the respective providers and URLs with their privacy policies:
- b) Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.