Privacy statement and consent on data use

Privacy policy and consent to data use

General information

The goal of data protection and also our goal as WABCOWÜRTH Workshop Services GmbH is to handle personal data in such a way that the personal rights of the individual are protected.

To ensure the fulfillment of this goal, entities responsible for the processing of personal data are obliged to comply with the regulations from the EU legislation (Data Protection Regulation - GDPR) as well as the national laws on data protection.

Personal data may only be collected and processed if this is expressly permitted by the GDPR or another law. Essential basic principles of the GDPR are:

• lawfulness of processing, fair processing, transparency
• purpose limitation
• data minimization
• correctness of data processing
• storage limitation and erasure concepts
• integrity and confidentiality

acting responsibly when handling personal data, but also the risk-conscious use of IT systems and applications are further central objectives of WABCOWÜRTH Workshop Services GmbH

All personal data collected by WABCOWÜRTH Workshop Services GmbH will be stored and processed exclusively for your individual support, for the preparation and fulfillment of contracts, for legitimate interest, for compliance with legal obligations, the transmission of product information or the submission of service offers as well as for order processing or with the consent of the party concerned.

Information obligations of the data controller and rights of the data subject

Data controller

WABCOWÜRTH Workshop Services GmbH
Schliffenstraße 22
74653 Künzelsau-Gaisbach
Germany

Phone: +49 7940 981863-0
E-mail: info@wabcowuerth.com

Data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses, etc.).e.g. names, e-mail addresses, etc.).

Contact details of the data protection officer

E-mail: datenschutz@wabcowuerth.com

Purpose of data collection, processing or use

We are specialists in the field of multi-brand diagnostics, windshield calibration systems and air conditioning service equipment and offer our customers suitable diagnostic solutions for motor vehicles, trailers, vans or buses. Together with our customers we create an individual package of hardware, software, hotline and training. Personal data is collected, processed or used for the purpose of fulfilling this corporate purpose or supporting secondary purposes, such as customer consulting or the further development of technical diagnostic solutions for our customers.

Personal data is collected, processed or used for the purpose of fulfilling this corporate purpose or supporting secondary purposes, such as customer consulting.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This can be, for example, data that you enter in a contact form or provide when making an offer. The provision of data is voluntary and is subject to your decision.

Other data is collected automatically by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior. Data that is collected personally from you and not via the website is used to create the customer number, order processing but also for your support and sending newsletters, offers and service offers.

Groups of data subjects and related data or data categories

The groups of data subjects are

• current employees,
• former employees,
• applicants,
• prospective customers,
• suppliers,
• service providers and
• other business partners.

The related data includes all personal data that is required to fulfill the respective purpose.

Legal basis

Processing of personal data is only lawful if permitted by law, i.e., if there is a legal basis, or if the person has consented.

Personal data is processed in our company only in accordance with the statutory provisions. These are generally,

• if consent to the processing of personal data exists (Art. 6 para. 1 lit. a GDPR),
• if personal data must be processed in order to fulfill a contract or initiate a contract (Art. 6 para. 1 lit. b GDPR),
• if the processing of personal data is necessary to fulfill a legal obligation (Art. 6 para. 1 lit. c GDPR) or
• when we process personal data on the basis of a legitimate interest or on the basis of a legitimate interest of a third party (Art. 6 para. 1 lit. f GDPR).

Special feature on the legal basis of data processing for contractual purposes

WABCOWÜRTH Workshop Services GmbH directs its offer mainly to tradesmen. Therefore, when processing personal data for contractual purposes, the legal basis, unless otherwise specified in individual cases,

1. If you are a registered merchant or freelancer, Art. 6 para. 1 lit. b GDPR, the data processing for the purpose of implementing the contract or pre-contractual measures with the data subject; or

2. if you are acting as an employee of a company, e.g. as an employee in purchasing, Art. 6 para. 1 lit. f GDPR, the legitimate interest of WABCOWÜRTH Workshop Services GmbH. The legitimate interest of WABCOWÜRTH Workshop Services GmbH in this case is the sale of its own goods and services, which is justified in particular by entrepreneurial freedom as well as professional freedom.

In the following, for simplification purposes, we will only speak of "data processing for contractual purposes".

Potential recipients in the event of data transfer

The potential recipients of transferred personal data are

• public bodies, insofar as there is a legal obligation
• service providers and other business partners, insofar as it is necessary to fulfill the respective purpose and a legal provision permits or requires this or the data subject has consented. If it becomes necessary to transfer data to third countries, this will be done exclusively for the conclusion or fulfillment of contracts - insofar as this does not conflict with the interests of the data subject meriting protection - taking into account all data protection requirements. If, where applicable, there is an intention to transfer the personal data to a third country or an international organization, the data transfer shall take place on the basis of an adequacy decision. Should a data transfer nevertheless take place, we refer to the fact that suitable guarantees or binding internal data protection regulations exist, or that a strict standard is always applied in favor of the data subject when weighing the interests of the data subject and the contracting parties.

Standard period for the deletion of data

The deletion of personal data takes place in accordance with the respective applicable legal or contractual regulations for data deletion, taking into account legal or contractual retention obligations. Such legal obligations result, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods specified there for storage or documentation are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship.

Furthermore, other statutory provisions may require a longer storage period, such as the preservation of evidence within the framework of the statutory limitation provisions. In this context, the regular statute of limitations is three years; however, in certain cases, statutes of limitations of up to 30 years or, in individual cases, even beyond this period may be applicable.

Personal data that is not subject to a legal or contractual obligation to retain or delete shall be deleted immediately after it has become superfluous for the fulfillment of the respective purpose.

Your rights regarding data protection (Art. 12 ff GDPR)

The data subject is entitled to various rights regarding data protection. These rights are explained below. To exercise these rights, the above contact details can be used.

Right to information (Art. 15), correction (Art. 16), restriction of processing (Art. 18) and deletion (Art. 17)

Within the framework of the applicable legal provisions, you have the right at any time to free information about the personal data stored by the controller and relating to you, its origin and recipients and the purpose of the data processing and, if applicable. a right to correction, blocking or deletion of this data.

Right to object (Art. 21 GDPR)

Every data subject has the right to object to the processing of his or her data if the data processing is carried out on the basis of Art. 6 (1) lit. f GDPR or for direct marketing purposes. In the event of an objection to the processing of your personal data, we will examine your objection on a case-by-case basis. If we are required by data protection law to delete your personal data due to your objection, we will delete your data taking into account legal retention obligations. The objection does not affect the permissibility of the processing carried out up to the objection.

Right to information

Every data subject has the right to know whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether the data subject is obliged to provide the personal data, and what the possible consequences of not providing it would be.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Use of your data for (direct) marketing purposes

Irrespective of your order for our newsletter, we may use your data, in particular also your e-mail address, for (direct) marketing purposes. We will use your data for this purpose only if you have not objected to it. We hereby inform you, as well as whenever you contact us, that you can object to the use of your data for (direct) marketing purposes at any time without incurring any costs other than the transmission costs at the basic rates.

You can contact us at any time at the above address with regard to this and other questions on the subject of data protection.

If you would like to know which data we have stored about you and to whom we have transmitted which data, we will be happy to inform you of this within the scope of a - free of charge - written self-disclosure. We ask for your understanding that we are not allowed to provide any information by telephone for reasons of data protection law, as it is not possible to clearly identify you on the telephone.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data collection on our website / cookies / analysis tools/ plugins

We process your data in the data centers of Würth IT GmbH, Drillberg 6, 97980 Bad Mergentheim (hereinafter "Würth IT"). The services of Würth IT are used to provide our services. We have concluded an order processing agreement with Würth IT.

For more information on how Würth IT handles personal data, please refer to the data protection declaration at https://www.wuerth-it.com/de/it/datenschutz.php

Server log files

We automatically collect and store information in so-called server log files that your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources.

The legal basis for the data processing is Article 6 para. 1 lit. f GDPR, § 25 para. 2 no. 2 TTDSG. As a website operator, we have a legitimate interest in the correct presentation of the website as well as ensuring the secure operation of the website.

The data processed in connection with the collection of server log files will be stored for as long as necessary for the stated purposes.

Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested are stored on the basis of Art. 6 (1) lit. b GDPR. Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these will be treated separately in this data protection declaration.

"Do Not Track" settings

You can also control the storage of cookies through the "Do Not Track" settings (DNT) in your Internet browser. Depending on the browser, the DNT is either a setting in the program settings or a so-called plug-in or add-on. When activated, the browser signals that tracking measures of this tool are not desired without your explicit consent. If the setting is activated, the tracking functions of this tool are anonymized on our part. Please note that the procedure for activating DNT differs depending on the Internet browser you are using.

Please note that changing the cookie setting does not automatically delete cookies that have already been set in your browser. If necessary, please delete the cookies you no longer want manually via your browser settings.

Cookie list and description

Contact form

If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided, will be stored by us for the purpose of processing the inquiry and for the case of follow-up questions.

Category of the transmitted data

• Your request
• Company name
• Name, first name, contact person
• E-mail address
• Telephone
• Your message

The processing of the data entered in the contact form is based on our legitimate interest in having contact with you, our customers, and to improve the quality of our consulting. (Art. 6 para. 1 lit. f GDPR).

The data you entered in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). An exception to this may be legal storage obligations.

Sweepstakes

If you participate in the sweepstakes, we process the e-mail address you provide.

The legal basis for this information is Art. 6 para.1 lit. a GDPR, your consent. In addition, the fulfillment of contractual purposes on our part: determination and notification of the winner of the competition as well as for sending the prize (GDPR Art. 6 para. 1 lit. b).

The participant data will be deleted by us after the end of the competition or after determination of the winner until after 60 days at the latest.

Online survey

Online surveys conducted by WABCOWÜRTH Workshop Services GmbH as the responsible party are carried out via the LamaPoll platform.

Participation in the surveys is voluntary and is carried out via an external link of the processor Lamano GmbH & Co.KG and its platform LamaPoll.

Lamano GmbH & Co.KG is based in Germany. We have concluded an order processing agreement with Lamano GmbH & Co.KG.

The privacy policy of LamaPoll can be viewed at https://www.lamapoll.de/Support/Datenschutz

LamaPoll may process IP addresses to prevent multiple participation in the survey. This is done by calculating a cryptographic hash value. A "backward operation" is not possible. The check whether an IP address has already participated in a survey is performed by matching the hash value of the IP to be checked with the previously determined hash value. The determined hash value is stored for verification, but these cannot be assigned to a specific result record or participant.

When answering a survey, a session cookie is set on the participant. The session cookie is used to recognize an ongoing participation and to provide a smooth flow of the survey (correct questions, pages and submitted answers as well as assignment of the current participation). The deletion takes place when closing the browser.

The processing of the data provided is based on our legitimate interest to determine the satisfaction with our products and services and to improve our quality (Art. 6 para. 1 lit. f GDPR).

Newsletter

With the WABCOWÜRTH Workshop Services GmbH newsletter we inform you regularly by e-mail about our current offers, promotions and our service.

For the creation and sending of our newsletter, as well as the administration of the data (registration, unsubscription, storage of recipients) we use the program of the online marketing service provider CleverReach GmbH & Co. KG. We have concluded an order processing contract with CleverReach GmbH & Co. KG, in which we oblige CleverReach to protect the data of our customers and not to pass it on to third parties.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. This verification procedure is called double opt-in. After a registration for the newsletter, an e-mail is sent to the specified recipient address, which must then be confirmed. If the confirmation is not received, the registration to the newsletter will be deleted. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after unsubscribing from the newsletter. Data stored by us for other purposes (e.g. email addresses for registration) remain unaffected.

For the purpose of analysis, emails sent with CleverReach contain a so-called "tracking pixel", which connects to CleverReach's servers when the email is opened. In this way, it can be determined whether a newsletter message has been opened.

Furthermore, with the help of CleverReach, we can determine whether and which links in the newsletter message are clicked. All links in the email are so-called tracking links, with which your clicks can be counted.

The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have deposited with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the servers of CleverReach after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

Analysis tools

Google Analytics

We use functions of the web analysis service Google Analytics for statistical evaluation of the use of our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We have concluded an order processing contract with Google. The use of Google Analytics may also involve the transmission of personal data to the servers of Google LLC. in the USA. For the transmission of personal data to Google LLC. based in the USA, Google LLC. has concluded so-called standard contractual clauses of the Commission of the European Union with us. These can be viewed here: http://tools.google.com/dlpage/gaoptout?hl=de.

Demographic characteristics with Google Analytics

We also use the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".

You can permanently object to the collection of your data for the purpose of anonymized statistics by deactivating personalized advertising in the Google advertising options; to do so, follow this link https://www.google.com/settings/ads/onweb/.

Further information on Google Analytics as well as Google's privacy policy can be found at:

Further information on Google Analytics as well as Google's privacy policy can be found at:

• https://www.google.com/intl/de/policies/privacy/ (General Google Privacy Policy)
• https://support.google.com/analytics/answer/6004245?hl=de (Privacy Policy for Google Analytics)
• https://policies.google.com/terms?hl=de#toc-software (Terms of Use Google Services)
• https://policies.google.com/technologies/cookies?hl=de (Overview of the use of cookies by Google)

The use of Google Analytics for statistical analysis of our website is based on Art. 6 para. 1 lit. a GDPR, your consent.

You can prevent the use of cookies by not giving us consent to do so. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

If you do not agree or no longer agree to the storage and use of your data, you can stop the storage and use here In this case, your decision will be stored in the form of a cookie. If you delete your cookies, this will have the effect that this cookie will also be deleted. When you visit our site again, you will then be asked again whether cookies may be used for web analysis.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

We have concluded a contract with Google for the processing of commissioned data and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Plugins and tools

Friendly Captcha

We use Friendly Captcha (hereinafter "Friendly Captcha") on our website. This tool is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

Friendly Captcha is used to check whether the data entered on our website (e.g. on a contact form) has been entered by a human or by an automated program. To do this, Friendly Captcha analyses the behavior of the website visitor based on various characteristics. Friendly Captcha processes various information for analysis (e.g. anonymized IP address, referrer, time of the visit, etc.). For more information please visit: https://friendlycaptcha.com/legal/privacy-end-users/

The data is processed on the basis of Art. 6 (1f) GDPR. The website operator has a legitimate interest in protecting its website against spam and other types of automated abuse.

Conclusion of a data processing agreement

We have concluded a data processing agreement with the Friendly Captcha GmbH in accordance with Art. 28 (3) GDPR to ensure that the Friendly Captcha GmbH protects the personal data of our customers and does not disclose any personal data to third parties.

Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of Google Maps may also involve the transmission of personal data to the servers of Google LLC. in the USA. For the transmission of personal data to Google LLC. based in the USA, Google LLC. has concluded so-called standard contractual clauses of the Commission of the European Union with us. These can be viewed here: https://privacy.google.com/businesses/processorterms/

By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment to your profile at Google, you must log out of your Google account before calling up a map. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

The legal basis for data processing by WABCOWÜRTH Workshop Services GmbH is Art. 6 (1) lit. a GDPR, your consent. You can revoke your consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Further information on Google Maps as well as Google's privacy policy can be found at:

• https://www.google.com/intl/de/policies/privacy/ (General Google Privacy Policy)
• https://policies.google.com/terms?hl=en#toc-software (Terms of use Google services)

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities in the use of Google Analytics.

YouTube

We have integrated YouTube videos into our online offer, which are stored on www.youtube.com and can be played directly from our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA. For the transmission of personal data to Google LLC. based in the USA, Google LLC. has concluded so-called standard contractual clauses of the Commission of the European Union with us. These can be viewed here: https://privacy.google.com/businesses/processorterms/

These are all integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, data is transmitted. We have no influence on this data transmission. You will be explicitly informed again before transmission that a transmission of your data to YouTube takes place during playback. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want the assignment with your profile on YouTube, you must log out of your Google account before playing the video. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The legal basis for data processing by WOW! Würth Online World GmbH is Art. 6 para. 1 lit. a GDPR, your consent. You can revoke your consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Further information on YouTube and Google's privacy policy can be found at:

• https://www.google.com/intl/de/policies/privacy/ (General Google Privacy Policy)
• https://policies.google.com/terms?hl=de#toc-software (Terms of Use Google Services)
• https://www.youtube.com/static?gl=DE&template=terms&hl=de (Terms of Use YouTube)

Data processing of customer data

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or amendment of the contract (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

This data is used to create as a customer, order processing but also for your support and the sending of newsletters, offers and service offers.

The collected customer data will be deleted after the termination of the business relationship. Legal retention periods remain unaffected.

The affected groups of persons are

• current employees,
• former employees,
• applicants,
• prospective customers,
• suppliers,
• service providers and
• other business partners.

To register you as a customer with us we need:

• Company name with legal form (e.g. GmbH)
• Company headquarters (street, house number, postal code, city)
• Name and first name of contact person
• Telephone number

You can provide us with the following data voluntarily:

• E-mail address - However, please note that this is mandatory for information in case of news and updates on the diagnostic system.
• telefax
• if necessary, different billing address and delivery address
• mobile phone

Data transmission in case of contract conclusion

We transmit personal data to third parties only if this is necessary in the context of contract processing and a legal provision allows or requires this or the person concerned has consented. For example, to the companies entrusted with the delivery of the goods, service providers and business partners or the credit institution entrusted with the processing of payments and, in the case of outstanding accounts with us, to debt collection companies. A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

In the event of a leasing inquiry, we will send the data required for the leasing inquiry to our leasing partners, Grenke AG Heilbronn or Würth Leasing GmbH & Co.KG, exclusively and only with your consent.

You will find the Grenke AG data protection declaration at: https://www.grenke.de/datenschutz-grenke-ag

You will find the Würth-Leasing data protection declaration at: https://www.wuerth-leasing.de/datenschutz

Of course, leasing inquiries can also be processed via leasing companies and / or banks of your choice at your request.

Data transmission for service and service inquiries / orders

When contacting our service or hotline team (by telephone or e-mail), the contact data transmitted may be used for the current inquiry as well as other transmitted processes in order to forward the inquiry to the responsible internal department or, in the case of a repair or complaint, to the respective supplier or to the repair company commissioned by us. This is to ensure the proper handling of these business transactions and to guarantee a faster processing of the customer request. \The processing of the data you provide in this context is based on our legitimate interest in accelerating and further optimizing our process flows for our customers (Art. 6 para. 1 lit. f GDPR).

The personal data processed in this context will be stored for the duration in which you are in a business relationship with us or until you request us to delete it. Legal storage obligations remain unaffected.

Data processing during application

In accordance with the requirements of Articles 13 and 14 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data you have submitted as part of the application process and, if applicable, about the personal data we have collected and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.

Purposes and legal basis of processing

We process your personal data in accordance with the provisions of the European General Data Protection Regulation and the German Federal Data Protection Act, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG and, if applicable, Art. 6 (1) lit. b GDPR for the initiation or implementation of contractual relationships.

Furthermore, we may process personal data from you insofar as this is necessary for the fulfillment of legal obligations (Art. 6 (1) lit. c GDPR) or for the defense of asserted legal claims against us. The legal basis for this is Art. 6 (1) lit. f GDPR. The legitimate interest is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG). If you give us express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time, with effect for the future

If an employment relationship arises between you and us, we may, in accordance with Art. 88 GDPR in conjunction with § 26 BDSG-neu, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the obligations arising from a law or a legal act. fulfillment of the rights and obligations of the employee representation resulting from a law or a collective bargaining agreement, a company agreement or a service agreement (collective agreement).

Categories of personal data

We only process data that is related to your application. This may include general personal data (name, address, contact details, etc.), information on your professional qualifications and school education, information on further professional training and, if applicable, other data that you provide to us in connection with your application.

Sources of data

We process personal data that we receive from you by mail or by post in the course of contacting you or in connection with your application. We process personal data that we receive from you by post or e-mail when you contact us or submit your application, or that you send to us via online job portals.

Recipients of the data

We only pass on your personal data within our company to those persons who require this data to fulfill contractual and legal obligations or to implement our legitimate interests. Data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations, or if we have your consent.

Duration of data storage

We store your personal data for as long as this is necessary for the decision on your application. Your application documents containing personal data will be deleted a maximum of six months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is required or permitted by law. We store your personal data beyond this only to the extent that this is required by law or in a specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

If an employment relationship, apprenticeship or trainee relationship is established following the application process, your data will initially continue to be stored to the extent necessary and permissible and then transferred to the personnel file.

If applicable, you will receive an invitation to join our talent pool following the application process. This will allow us to continue to consider you in our selection of applicants for suitable vacancies in the future. If we have your consent to do so, we will store your application data in our talent pool in accordance with your consent or any future consent.

Social networks

We operate profiles on social networks to present our company and to communicate with customers and interested parties. In the following, we will inform you about the associated processing activities.

Data processing for presentation and communication

Social networks enable us to present our company to persons who have an account with the social network (hereinafter "users") and to all visitors to our profiles without an account with the social network (hereinafter "guests"). Furthermore, customers and interested parties can contact us via this profile. Our profiles and posts are generally viewable by users and guests (hereinafter users and guests are collectively referred to as "visitors"). If you comment on our posts or send us a message, this data is stored by the social network and is visible to us. We may respond to your comment or message. In the case of posts, your comment and our reply may still be visible to all users of the social network or to all visitors.

Data processing for statistical and advertising purposes

When you call up our profile, the social network may store and evaluate your call-up as well as all other interactions by you on the website of the social network. This data is made available to the profile owners as statistics and processed by the social networks for advertising purposes, among other things.

If you have an account with the social network and are logged in when you visit our profile, the provider of the social network may link your interactions with our profile to your account data and process them further. However, it is also possible that data about your interactions with our profile will be stored by the social network for the duration of your visit and processed for further purposes if you are not logged in there or do not have an account. In this case, an assignment can be made, for example, through the use of cookies, small files that are stored on your end device, or in connection with your IP address.

The data processing usually follows the purpose of creating an interest profile of the visitor and using these profiles for advertising purposes. If a person calls up certain web pages, information about this call is evaluated and the provider assigns interests to the visitor. Based on the assigned interests, advertisements are displayed to the visitor. Interest-based advertisements can be displayed by the provider both within and outside the web pages of the social network.

Categories of data subjects

Persons who call up our profile on the respective social network (both users with an account with the social network provider and visitors without an account).

Assertion of your rights as a data subject

For information requests or to assert your further rights as a data subject, we recommend that you contact the provider directly, as only the provider has full access to the data processed in connection with a call to our profile or interaction with us at the social network. The contact information of the social networks on the exercise of your rights as a data subject can be found in the section "Information on the social networks used by us". In the case of data processing where there is joint responsibility between the social network provider and us, you also have the right to exercise your rights as a data subject against us. In such a case, we will forward your request to the social network insofar as the request concerns data or processing activities that are processed by the social network.

For more information on the processing activities of the social networks and the existing objection options, please refer to the respective providers.

Information about Facebook

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Facebook")

Website: https://de-de.facebook.com/

Form to contact Facebook's privacy officer: https://www.facebook.com/help/contact/540977946302970

Facebook's data policy: https://de-de.facebook.com/policy.php

Our profile: https://www.facebook.com/wabcowuerth?fref=ts)

Information on Instagram

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Website: https://www.instagram.com/

Privacy policy: https://help.instagram.com/519522125107875

Our profile: https://www.instagram.com/wabcowuerth_workshop_services/channel/

Categories of personal data processed when visiting our profile on Facebook

• Technical information about the end device: operating system, information about the browser used, IP address, further information about the end device and the internet connection
• Contact data: if applicable, information about the user's account
• Data about interactions: Information about visited profiles, clicked links, date and time of interaction, further interactions of the visitor

For more information about the processed data, see: https://www.facebook.com/legal/terms/page_controller_addendum

Shared responsibility for processing Page Insights data

We have entered into a shared responsibility agreement with Facebook, which applies to the processing of data related to our profile on Facebook (so-called "Page") for the purpose of providing the profile and statistical analysis of the interactions of visitors to our profile. This sets out which obligations in connection with the data processing are to be fulfilled either by Facebook or by us and which party is responsible in each case for the individual processing activities.

Agreement on joint responsibility for data processing for Page insights between Facebook and us as the owner of a profile on Facebook in accordance with Art. 26 GDPR: https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the processing of Page insights data: https://www.facebook.com/legal/terms/information_about_page_insights_data

Purposes and legal basis

• Presentation of our company, legitimate interest (Art. 6 (1) p. 1 lit. f GDPR). Processing for this purpose is based on the legitimate interests of the company. Specifically, the interest in maintaining the corporate culture and public relations of the company. These interests are derived from our right to entrepreneurial freedom as well as professional freedom.
• Communication with customers and interested parties, legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR. The processing of data in the case of messages or comments on Facebook is carried out on the basis of our legitimate interests in offering customers and interested parties an easy way to contact us and to improve the quality of our consulting services. These interests are derived from our right to entrepreneurial freedom as well as professional freedom.
• Statistical purposes, legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR. The processing of data for statistical purposes in connection with Page Insights is based, insofar as we are jointly responsible for the processing with Facebook, on our legitimate interest in improving our quality of advice. This interest is derived from our right to entrepreneurial freedom as well as professional freedom.

To the extent that Facebook carries out further processing activities or processes data for statistical or promotional purposes, Facebook is the controller of the processing and the processing may be based on other legal grounds. For more information, please refer to the item "Facebook Data Policy".

Processors of Facebook

In the course of using Facebook, personal data may also be transferred to Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA in the USA. For the transmission of personal data to Facebook Inc. with headquarters in the USA, Facebook Inc. uses so-called standard contractual clauses of the Commission of the European Union. A copy of the standard contractual clauses used can be requested here: https://www.facebook.com/help/566994660333381?ref=dp

Objection options

If you would like to object to processing by Facebook, you can find options for objecting to different processing activities under this link: https://www.facebook.com/help/contact/367438723733209?no_redirect

For your account with Facebook, you can manage the advertising settings yourself under the following link and, for example, deactivate interest-based advertising. If you do not have a Facebook account, you can deactivate interest-based online advertising for participating websites using the following link: https://www.youronlinechoices.com/de/praferenzmanagement/

Right of complaint

You have the right to file a complaint with the competent supervisory authority. You can find out which supervisory authority is responsible in this data protection notice under the item "Right of complaint to the competent supervisory authority". With regard to processing in connection with our profile on Facebook, you can also contact the Irish Data Protection Commission. The contact information of the Irish Data Protection Commission can be found at: https://www.dataprotection.ie/en/contact/how-contact-us#

Information about LinkedIn

Provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA

Website:https://www.linkedin.com/

Privacy policy: https://www.linkedin.com/legal/privacy-policy

Our profile: https://www.linkedin.com/company/wabcow%C3%BCrth-workshop-services-gmbh/

Information on XING:

Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg; Germany

Website: https://www.xing.com

Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

Our profile: https://www.xing.com/pages/wabcowurthworkshopservicesgmbh

Disclaimer

The privacy policy of WABCOWÜRTH Workshop Services GmbH does not apply to applications, products, services, websites or social media features of third parties which are accessible via links provided by us for informational purposes. When you use these links, you leave the WABCOWÜRTH Workshop Services GmbH website, so there is a possibility that information about you may be collected or disclosed here by third parties. WABCOWÜRTH Workshop Services GmbH has no control over third-party Web sites and does not endorse or make any representations about them, or their privacy practices. We therefore encourage you to review the privacy policies

Status: December 2022