Поверителност
Privacy policy
Welcome to our website! Thank you for visiting the website of WITTE Automotive GmbH, hereinafter referred to as "WITTE". In this privacy policy, we provide comprehensive information about our handling of personal data and inform you about your rights.
Responsible person and data protection officer
Responsible for this website is
WITTE Automotive GmbH
Höferstrasse 3-15
D-42551 Velbert
Phone: +49 (0) 2051 / 498-0
Fax: +49 (0) 2051 / 498-355
You can reach the data protection officer at the following address
WITTE Automotive GmbH
To the data protection officer
Höferstrasse 3 - 15
D-42551 Velbert
Phone: +49 (0) 2051 / 498-0
Fax: +49 (0) 2051 / 498-355
datenschutzwitte-automotive "«@&.de
Purpose(s) and legal basis of the processing
What data is processed for what purpose?
When you visit our website, the browser used on your device automatically sends information to the server of our website and temporarily stores it in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:
- Date and time of access
- IP address of the requesting computer
- Website from which the website was accessed (referrer URL)
- Websites that are accessed via this website
- Visited page on our website
- Message as to whether the retrieval was successful
- Amount of data transferred
- Information about the browser type and version used
- Operating system
The temporary storage of the data is necessary for the course of a website visit in order to enable the website to be delivered. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.
What is the legal basis for processing this data?
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
Processed categories of personal data
WITTE does not process special categories of personal data (such as health data) at any time.
Recipients / categories of recipients
We reserve the right to commission third parties to perform services and tasks in connection with the existing contractual relationship. The commissioned third parties only receive knowledge of those personal data that are necessary within the scope of the purpose limitation and thus for the direct fulfillment of the task. We assure you that the necessary care with regard to reliability and professional competence is strictly observed when selecting commissioned third parties and that only companies or individuals with an appropriate reputation, reliability and expertise are commissioned. In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations on this under Cookies, tracking tools in this privacy policy.
The website is hosted by transresult GmbH, Konrad-Zuse-Straße 2a, 42551 Velbert, Germany. The hoster receives the above-mentioned data as a processor.
Data transfer to third parties or third countries
All companies that receive personal data from us for the purpose of processing or have access to it must, in addition to concluding an order processing contract, also undertake to maintain data secrecy and to comply with the necessary organizational and technical data protection requirements. This is checked by WITTE before the start of the contract and regularly thereafter to ensure that they fulfill their obligations in practice and that the protection of your data is always guaranteed.
In order to provide our services, we or our processors will, if necessary, transfer or make personal data accessible to a recipient (in particular processors) in a third country. In these cases, we ensure that appropriate safeguards in accordance with Art. 46 (2), (3) and Art. 47 GDPR are in place and complied with. In addition, this step only takes place subject to positive risk assessments for the data transfer (so-called transfer impact assessments).
On July 10, 2023, the EU Commission adopted its adequacy decision for the EU-US data protection framework. This stipulates that the USA guarantees an adequate level of protection for personal data transferred from the EU to US companies that is comparable to that of the EU. In the case of data transfers to companies in the USA that are certified under the EU-US data protection framework, the data transfer is therefore based on Art. 45 para. 1, 45 para. 3 sentence 1 GDPR.
Existence of automated decision-making including profiling
We do not use your data in any way for automated decision-making or profiling.
Duration of storage
WITTE adheres to the principles of data avoidance and data economy. This means that we only collect the data that is necessary to achieve the respective permissible purposes and only store it for as long as necessary or in accordance with the relevant legal bases.
Data that allows conclusions to be drawn about your person, such as IP addresses, will be deleted after 7 days at the latest. If we store the data beyond this period, this data is pseudonymized so that it can no longer be assigned to you.
SSL encryption
WITTE uses SSL encryption to protect your transmitted data in the best possible way. You can recognize such encrypted connections by the prefix https:// in the page link in the address bar of your browser. Unencrypted pages are indicated by http://. Thanks to SSL encryption, none of the data you transmit to this website - such as contact requests - can be read by third parties.
Use of contact form
We provide you with contact forms with which we collect the following personal data:
- Name
- E-mail address
- Phone number
We also collect:
- Time of transmission
- IP address
In the case of inquiries via the contact form for demand management in purchasing, address details, fax number and position in the company are also collected.
By clicking the send button, you consent to the transmission of the data entered in the input mask to us.
The data is stored exclusively for the purpose of sending inquiries and responding to them. The mandatory information is used to assign and respond to your request. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f GDPR). If you enquire about a product or service offered, the processing is carried out for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Your data will be deleted after processing has been completed.
Career portal
In the context of filling vacancies in our application portal, your data such as contact and CV data will be collected and processed as part of the application process. The data is collected for and by WITTE Automotive GmbH via our application portal https://witte-automotive.career.softgarden.de/
Our declaration and information on data protection and the handling of your applicant data can be found in the privacy policy of the career portal at https://witte-automotive.softgarden.io/de/data-security?0
Explanation of cookies and tracking tools
Cookies
Tracking tools
Google Analytics 4
If you have given your consent, Google Analytics 4, a web analysis service of Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Nature and purpose of processing
Google Analytics uses cookies to help the website analyze how users use the site. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behavior is recorded in the form of "events". Events can be
- Page views
- First visit to the website
- Start of the session
- Websites visited
- Your "click path", interaction with the website
- Scrolls (whenever a user scrolls to the end of the page (90%))
- Clicks on external links
- Internal search queries
- Interaction with videos
- File downloads
- Viewed/clicked ads
- Language setting
Also recorded:
- Your approximate location (region)
- Date and time of the visit
- Your IP address (in abbreviated form)
- Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- Your Internet provider
- The referrer URL (via which website/advertising medium you came to this website)
Purposes of the processing
On behalf of the operator of this website, Google will use this information to evaluate your [pseudonymous [NOT IF USER ID IS USED]] use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website [OPTIONAL: and the success of our marketing campaigns].
Receiver
Recipients of the data are/may be
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
- Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
- Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Third country transfer
For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.
Storage duration
The data sent by us and linked to cookies is automatically deleted after 2 [OR: 14 months]. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.
Legal basis
The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TTDSG.
Revocation
You can revoke your consent at any time with effect for the future by going to the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by clicking
a. do not give your consent to the setting of the cookie or
b. download and install the browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout
You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at policies.google.com.
Third party content
Links
Our website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking.
However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, we will remove such links immediately
Social media
Our website does not use any social media plugins. However, we do use links to social media platforms on which we are represented. You can use the links to go directly to our presence on LinkedIn, Facebook and Instagram, for example. The respective provider is responsible for data protection on these social media platforms.
YouTube
This website displays content from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google. When you visit one of our pages with YouTube content, your browser establishes a direct connection to the YouTube servers and retrieves the content there to display it to you. When integrating YouTube content, your browser communicates with a YouTube server in the USA, which can record the corresponding retrieval of the content by your browser. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account before you visit our website. Further information on the handling of user data can be found in the privacy policy of YouTube (as a Google subsidiary) at: https://policies.google.com/privacy?hl=de&gl=de The legal basis for the associated data processing is your consent in accordance with Art. 6 para. 1 a) in conjunction with Art. 45 para. 1, para. 3 GDPR.
Google Maps
This website also displays map material from the map service Google Maps. The provider is Google LLC, 1600 Amphitheatre Park-way, Mountain View, CA 94043, USA ("Google"). When you visit one of our pages with Google Maps, your browser establishes a direct connection to Google's servers and retrieves a map to display it to you. In order to use the functions of Google Maps, it is necessary to process your IP address and information about your possible use of the map. This information is transferred from your internet browser to a Google server in the USA and processed there by Google. Further information on this can be found here: https://support.google.com/analytics/answer/7105316?hl=de Information on the handling of user data can be found in Google's privacy policy: policies.google.com/privacy. The legal basis for the associated data processing is your consent pursuant to Art. 6 (1) a) in conjunction with Art. 45 (1), (3) GDPR.
Right of access, rectification, erasure, restriction, data portability, objection
As a person affected by the processing of your data, you can assert certain rights against us in accordance with the GDPR and other relevant data protection regulations. We explain your rights as a data subject below:
Right to information (Art. 15 GDPR): You can request information from us at any time about the data we hold about you. This information concerns, among other things, the purposes for which we process it, the categories of data we process, the origin of the data if we have not collected it directly from you and, if applicable, the recipients to whom we have transmitted your data. You can receive a copy of your data from us free of charge.
Right to rectification (Art. 16 GDPR): You may request that we rectify any inaccurate personal data concerning you. WITTE will take reasonable steps to keep your data accurate, complete and up to date.
Right to erasure (Art. 17 GDPR): You have the right to erasure ("right to be forgotten"), provided that the legal requirements for this are met. This may be the case, for example, if:
- the data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you withdraw your consent, which is the basis for the data processing, and there is no other legal basis for the processing;
- you object to the processing of your data and there are no overriding legitimate grounds for the processing or you object to data processing for direct marketing purposes;
- the data has been processed unlawfully;
- the processing is not necessary to ensure compliance with a legal obligation that requires us to process your data; in particular with regard to statutory retention periods; to assert, exercise or defend legal claims
Right to restriction of processing (Art. 18 GDPR): You can demand that we restrict the processing of your data if:
- you contest the accuracy of the data, for the period of time we need to verify the accuracy of the data;
- the processing is unlawful and you oppose the erasure of your data and request the restriction of their use instead;
- we no longer need your data, but you need it to assert, exercise or defend legal claims;
- you have objected to processing pending the verification whether our legitimate grounds override yours.
Right to data portability (Art. 20 GDPR): You have the right to data portability. However, you are only entitled to this right if the data processing is based on your consent or is necessary to perform a contract. You can ask us to receive your data in a structured, commonly used and machine-readable format or to transmit this data to another controller - insofar as this is technically feasible.
Right to object (Art. 21 GDPR): You can object to the processing of your data at any time for reasons arising from your particular situation, provided that the data processing is based on your consent or on our legitimate interests or those of a third party. In this case, we will no longer process your data. The latter does not apply if we can demonstrate compelling legitimate grounds for the processing which override your interests or if we need your data for the establishment, exercise or defense of legal claims.
If you wish to exercise your rights or if you have any further questions, please contact the data protection officer:
WITTE Automotive GmbH
To the Data Protection Officer Höferstr. 3 - 15
D-42551 Velbert
Phone: +49 (0) 2051 / 498-0
Fax: +49 (0) 2051 / 498-355
datenschutzwitte-automotive "«@&.de
Right to withdraw consent at any time
Right of revocation (Art. 7 para. 3 GDPR): You have the right to withdraw your consent at any time for the future.
Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the competent supervisory authority.
State Commissioner for Data Protection and Freedom of Information NRW
House address: Kavalleriestr. 2-4, 40213 Düsseldorf
Postal address: Postfach 200444, 40102 Düsseldorf
Phone: +49 (0) 211 38424 -0
E-mail address: poststelleldi.nrw "«@&.de