Information about the collection of personal data on our website

We would like to inform you that personal data is collected when you visit our website. Person-related are data that are personally accessible to you (eg name, e-mail, user behavior).

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Roman Wieser (President)
R.W. Exclusive Cars GmbH & Co. KG
Carl-Benz-Str.1-3
26781 Papenburg
Germany
Telephone: 04961-9959240
Fax: 04961-995924-9
E-Mail: info@rw-exclusivecars.de

II. General information on data processing

1. Scope of processing of personal data

In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent is not possible for reasons of fact and the processing of the data is permitted by law..

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR ) as legal basis.

In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR as legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.

3. Data deletion and storage time

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, it may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A blocking or deletion of the data takes place even if a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for a conclusion of contract or a fulfillment of the contract.

III. Provision of the website and creation of log files

Our website is solely for the purpose of providing information about our company, our range of used vehicles of various brands, trade-in of vehicles and offers for individual vehicle financing. When visiting our website, only the data transmitted by your browser to our server is collected. This data is necessary for you to be able to view our website and navigate it. The legal basis for collecting the data is Article 6 (1) (f) of the EU General Data Protection Regulation. In detail, the following data is collected when visiting our website:

1. - IP address
2. - Type of browser, as well as its language and version
3. - Operating system
4. - Access status / http status code
5. - Date and time of the request, as well as the time zone
6. - Content of the request and website from which it comes
7. - Transmitted amount of data

The deletion of these data occurs when they are no longer required.

Your rights

You have the following rights with regard to the data stored about us:

1. - Right to rectification and cancellation
2. - Right to information
3. - Right to restriction of processing
4. - Right to data portability
5. - Right to object to the processing

You still have a right of appeal to the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg.

Cookies

In addition to these data, we also use cookies via our website. These are small text programs that are stored after visiting our website on your computer (in your browser). If you visit our website again, the browser used by you will send the information stored in the cookie to our website and may, for example, facilitate navigation, as default settings are adopted. Cookies are not viruses and can not install malicious software on the computer. They are only short texts that are exchanged between web server and browser. The following types of cookies are used on our website:

1. Transiente Cookies (temporary cookies)

These cookies are only stored for the period of use of your browser. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to the website. As soon as you close the browser, these cookies will also be deleted automatically.

1. Persistente Cookies (time-limited cookies)

These cookies differ from the transient cookies only in that they are not automatically deleted when the browser is closed, but only after a preset time. However, you can delete these cookies at any time via the settings of your browser. Basically, you can configure the settings of your browser so that cookies are not or only partially accepted and stored by him. However, if you make use of this opportunity, there may be restrictions on the usability of our website.

IV. Contact form and e-mail contact

1. Description and scope of data processing

On our website is a contact form available, which can be used for electronic contact. If a user realizes this possibility, the data entered in the input mask is transmitted to us and stored. These data are:

1. - Company
2. - Last Name, first Name
3. - E-mail address
4. - Telephone
5. - Text message

At the time of sending the message, the following data is also stored:

1. - IP address
2. - Type of browser, as well as its language and version
3. - Operating system
4. - Access status / http status code
5. - Date and time of the request, as well as the time zone
6. - Content of the request and website from which it comes
7. - Transmitted amount of data

For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy. Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
There is no disclosure of data to third parties in this context. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

Rechtsgrundlage für die Verarbeitung der Daten ist bei Vorliegen einer Einwilligung des Nutzers Art. 6 Abs. 1 lit. a DSGVO.

Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of the data processing

The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

5. Opposition and removal possibility

The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

For the revocation of the consent a formless email to the address info@rw-exclusivecars.de.

All personal data stored in the course of contacting will be deleted in this case.

V. Rights of the person concerned

If personal data is processed by you, you are i. P. D. GDPR and you have the following rights to the responsible person:

1. Right to information

You may ask the person in charge to confirm if personal data concerning you is processed by us. If such processing is available, you can request information from the following information:

1. (1) the purposes for which the personal data are processed;
2. (2) the categories of personal data being processed;
3. (3) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
4. (4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
5. (5) the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. (6) the existence of a right of appeal to a supervisory authority;
7. (7) all available information on the source of the data if the personal data are not collected from the data subject;
8. (8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

You have the right to request information about whether the personal data relating to you are transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with. Art. 46 GDPR to be informed in connection with the transfer.

2. Right to rectification

You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The person in charge must make the correction without delay.

3. Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

1. (1) if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
2. (2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
3. (3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
4. (4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

4. Right to cancellation

a) Obligation to delete

You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

1. (1) Personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. (2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
3. (3) According to. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO objection to processing.
4. (4) Your personal data have been processed unlawfully.
5. (5) The deletion of personal data concerning you shall be required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
6. (6) The personal data concerning you were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.

b) Information to third parties

If the person responsible has made the personal data relating to you public and is in accordance with. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical ones, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Person requested by them to delete all links to such personal data or to make copies or replicas of such personal data.

c) Exceptions

The right to erasure does not exist if the processing is necessary

1. (1) to exercise the right to freedom of expression and information;
2. (2) to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority conferring on the controller has been;
3. (3) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
4. (4) for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
5. (5) to assert, exercise or defend legal claims.

5. Right to information

If you have the right of rectification, erasure or restriction of the processing to the controller, he / she is obliged to notify all recipients to whom the personal data concerning you have been corrected or deleted or processing restricted, unless: this proves to be impossible or involves a disproportionate effort.

You have the right to be informed about these recipients.

6. Right to Data Portability

You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. You also have the right to submit this information to another person without hindrance by the controller to whom the personal information has been provided, provided that

1. (1) the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and
2. (2) the processing is done by automated means.

In exercising this right, you also have the right to obtain that personal data relating to you be transmitted directly from one controller to another controller, as far as technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller..

7. Right to object

You have the right at any time, for reasons that arise from your particular situation, to prevent the processing of your personal data, which, pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications.

8. Right to revoke the data protection consent declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

CloudFlare

On our site Java-Script Code of the company CloudFlare Inc, Inc 665 3rd St. 200, San Francisco, CA 94107, USA (hereafter: Cloudflare) is reloaded. If you have activated JavaScript in your browser and have not installed a Java Script Blocker, your browser may transfer personal data to Cloudflare. We do not know what data Cloudflare associates with the data received and for what purposes Cloudflare uses that data. To prevent the execution of Cloudflare's Java Script code altogether, you can install a Java Script Blocker (eg www.noscript.net). For more information about CloudFlare's privacy, please visit the following link: https://www.cloudflare.com/security-policy.

Online job applications / publication of job advertisements

We offer you the opportunity to apply with us on our website. In these digital applications, your application and application data will be electronically collected and processed by us to process the application process.

The legal basis for this processing is § 26 para. 1 p. 1 BDSG in conjunction with Art. 88 para. 1 DSGVO.

If an employment contract is concluded after the application procedure, we will save your data submitted in the application in your personal file for the purpose of the normal organizational and administrative process - of course, taking into account the further legal obligations.

The legal basis for this processing is also § 26 Abs. 1 S. 1 BDSG in conjunction with Art. 88 para. 1 DSGVO.

When rejecting an application, we will automatically delete the data submitted to us two months after notification of the rejection. However, the deletion does not take place if the data require a longer storage period of up to four months or until the conclusion of a judicial procedure due to legal provisions, for example because of the proof obligations under the AGG.

The legal basis in this case is Art. 6 para. 1 lit. f) DSGVO and § 24 Abs. 1 Nr. 2 BDSG. Our legitimate interest lies in the legal defense and enforcement.

If you expressly agree to a longer storage of your data, for example, for your inclusion in an applicant or interest database, the data will be further processed on the basis of your consent. Legal basis is then Art. 6 para. 1 lit. a) GDPR. Of course, you can revoke your consent at any time according to Art. 7 para. 3 GDPR by declaring to us with effect for the future.

YouTube

In our website we use YouTube. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, hereinafter referred to as "YouTube." YouTube is a subsidiary of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google." Certified under the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google, and therefore its affiliate, YouTube, guarantees EU privacy protection also be respected when processing data in the US.

We use YouTube in conjunction with the Advanced Privacy Mode feature to show you videos. Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the quality improvement of our website. According to YouTube, the Enhanced Privacy Mode feature means that the data below is not transmitted to YouTube's server unless you actually start a video.

Without this "Enhanced Privacy," you will be connected to the YouTube server in the United States as soon as you visit one of our web pages that embed a YouTube video. This connection is required to be able to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time as well as the website you are visiting. It also connects to Google's DoubleClick ad network. If you're logged in to YouTube at the same time, YouTube will provide the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account. For the purpose of functionality as well as for the analysis of the usage behavior YouTube permanently stores cookies via your internet browser on your device. If you do not agree with this processing, you have the option to prevent the storage of cookies by a setting in your Internet browser. For more information, see "Cookies" above. Further information about the collection and use of data, as well as your rights and protection options, is available from Google in the privacy policy at https://policies.google.com/privacy.

Web analytics / tracking

Our website uses the analysis service Matomo for the evaluation of page visits. Matomo uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before saving. Because Matomo is hosted on our own server, third-party processing is not required for the analysis. The information generated by the cookie about the use of this website will not be disclosed to third parties. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. If you do not agree with the storage and use of your data, you can disable the storage and use here. In this case, an opt-out cookie is deposited in your browser that prevents Piwik from saving usage data. If you delete your cookies, this will also result in the Piwik opt-out cookie being deleted. The opt-out must be reactivated when visiting our site again.

Google Analytics

We use Google Analytics on our website. Google Analytics is a web analytics service provided by Google Inc. Google uses cookies. The information generated by cookies about the use of the website is usually transmitted to a Google server in the USA and stored there. Google uses this information on our behalf to evaluate the use of our online offer and to provide us with other services related to the use of this online offer and internet usage. We have extended Google Analytics with the code "anonymizeIP". This means that the IP address of the users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address will be transmitted to a Google server in the US and shortened there. The code extension "anonymizeIp" truncates the last 8bit of the IP address of the users. By using this code, only a rough localization of users is possible. The IP address submitted by the user's browser will not be merged with other data provided by Google. The storage of cookies can be prevented by a corresponding setting of your browser software. Eventually, not all functions of the website can be fully used. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the online offer as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB. It is also possible to set an opt-out cookie, which prevents the future collection of your data when visiting our website. To find out about opt-out cookies, visit : https://developers.google.com/ analytics/devguides/ collection/gajs/?hl=de#disable. For more information about Google's data usage, opt-outs and opt-out options, please visit Google's websites: https://policies.google.com/ technologies/partner-sites?hl=de ("Google's use of your data when you use websites or apps of our partners "), http://www.google.com/policies/technologies/ads ("Advertising").

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. To do this, the browser you use must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer. More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/.

Font Awesome

This site uses so-called web fonts provided by Fonticons, Inc. for consistent font representation. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. To do this, the browser you use must connect to the Fonticons, Inc. servers. This will give Fonticons, Inc. notice that your website has been accessed through your IP address. The use of web fonts is in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer. For more information about Font Awesome, visit https://fontawesome.com/help and the Fonticons, Inc. Privacy Policy: https://fontawesome.com/privacy.

Google Maps

Our website uses Google Maps to display maps and create access maps. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

By visiting the website Google receives information that you have accessed the corresponding page of our website. This also applies regardless of whether you have a user account with Google or logged in via this. In the event that you are logged in via Google's user account while using the website, the data will be assigned directly to your user account. If you do not want this, you must log out before using the service.

By using Google Maps, you consent to the collection, processing, and use by Google and, if applicable, third party providers of automatically collected and entered data. The Terms of Use for Google Maps can be found in Google Maps Terms of Service. For details, go to google.de Transparency and Choices and Privacy Policy. You must exercise your right of objection directly against Google. Using your browser settings, you can disable the Google Maps service (disabling the JavaScript in the browser). A use is then no longer possible.