DATA PROTECTION NOTICE FOR WEBSITE USAGE
Introduction
The protection of your personal rights in the processing of personal data is an important concern for AER DEFENCE GmbH (hereinafter referred to as "AER DEFENCE" or "we"). We process personal data in accordance with the applicable legal provisions (e.g. within the EU according to GDPR).
Controller (Communication)
The controller for data processing within the meaning of data protection law is the company named in the communication (e.g. website, email, short message service).
Purposes of processing
In the following, we provide you with an overview of the purposes of our processing activities.
Implementation of measures for sales promotion and image improvement:
- New customer acquisition
- Customer loyalty / customer satisfaction
- General sales / sales promotion
- Market analysis (external)
Implementation of measures to present the company and its products and services:
- Image promotion
- Company presentation
- Improvement of the "user experience"
Origin of data - Data subject
Your personal data is usually collected directly from you.
Obligation to provide data (Website)
When you visit our website, technical information is automatically collected that is necessary for the user-friendly presentation of the website, e.g. the type of web browser used and the operating system used.
Categories
The processed data can be classified under the following data categories.
Note: The listed data fields are only intended to describe the data categories and do not represent the actual processed data fields.
- IT usage data: e.g. UserID, roles, authorizations, login times, computer name, IP address, GID, Legic no.
Legal bases
The processing of your data is legitimised by the following legal bases:
- Consent: The data subject has consented to the processing of their personal data.
- Legal obligation: The processing is necessary for the controller to comply with a legal obligation. This is as follows:
- §§ 22, 23, 24 TDDDG
- Data transfer to third countries on the basis of an adequacy decision: The data transfer takes place on the basis of an official decision that the third country has an adequate level of data protection. Example: Adequacy decision of the EU Commission. A copy of the adequacy decision can be requested via our data protection contact form.
- Data transfer to third countries on the basis of suitable safeguards: Examples: Art. 46 GDPR, EU Standard Contractual Clauses. Copies of the appropriate safeguards can be requested via our data protection contact form.
- Data transfer to third countries on the basis of an exception under Art. 49 GDPR: consent, performance of a contract with or in the interest of the data subject, public interest, assertion, exercise or defence of legal claims, vital interests, data originating from a public register.
Categories of recipients
In order to fulfil the aforementioned purposes, we may pass on your data to the following recipients:
- Processors within the Volkswagen Group (e.g. provision of IT services, payroll and pension accounting, company car management, accounting services)
- External processors (e.g. organization of trade fair events, implementation of customer satisfaction surveys, dispatch of e-mail newsletters, hosting and operation of CRM systems, digitization of paper invoices, provision of a supplier platform)
- Other external providers of professional services (e.g. translation and transcription service providers, craftsmen, medical institutions, training providers, educational institutions, postal service providers, importers, body manufacturers, service partner workshops, sales partners, sales representatives, research and development partner)
- Responsible companies within the Volkswagen Group (affiliated companies)
Categories of recipients – External Joint Controllers
In addition, there is joint responsibility with external companies for the following activities:
- Use of social media platforms (e.g. Facebook, LinkedIn, Youtube)
Information on use of the website
a) Easy navigation on the website:
When you visit our website, our web servers store your IP address from which access is made, as well as the date and time of your visit.
b) Use of web applications:
When using our web applications, information may also be stored that is necessary for the effective use of this application.
c) Registration using online forms:
Other personal data will only be collected if you voluntarily provide it to us and to the extent necessary for the respective purpose, e.g. as part of a registration, subscription, survey or competition.
d) Use of cookies:
A cookie is a small piece of data that is stored on your device and contains data such as personal page settings and login information.
Data storage and deletion
In principle, we delete your personal data as soon as it is no longer necessary for the purposes mentioned above. In particular, your personal data will be stored for as long as
- a business/contractual/working relationship exists,
- we are legally obliged to do so (obligations to provide evidence and retention),
- we need them to assert, exercise or defend legal claims, or
- this is expedient in the context of the use of information/communication systems (e.g. websites).
Your rights
In addition to the right to information about the data concerning you and the correction of your data, you also have the right to erasure as well as a right to object to the processing, or the right to restrict the processing of your data, provided that there are no legal regulations to the contrary. You also have the right to data portability.
If we collect and process your personal data on the basis of your consent, you also have the right to revoke the consent you have given with effect for the future at no additional cost. Your revocation does not affect the lawfulness of the data processing carried out on the basis of the consent before the revocation.
Where necessary, we will need to verify your identity before we can process your requests.
If, despite our efforts to ensure that the data is correct and up-to-date, incorrect information is stored, we will correct it after being notified by the data subject accordingly.
In the event of complaints, it is possible to contact a data protection supervisory authority.
Safety
Your data is protected by AER DEFENCE by technical and organizational security measures to prevent accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
Our security measures are regularly improved in line with technological developments.
Links to websites of other providers
Our website may contain links to websites of other providers. Websites and services of other providers to which links are provided from our online offer are designed and provided by third parties. We have no control over the design, content and function of these third-party services. AER DEFENCE assumes no responsibility for the content and availability of third-party websites that can be accessed via external links. AER DEFENCE has no influence whatsoever on the content of the linked pages and cannot monitor them on an ongoing basis. If AER DEFENCE is made aware of a possibly infringing content on a linked website, AER DEFENCE will re-examine the objectionable content of the linked page. This data protection notice does not apply to the linked websites of other providers.
Ver 1.0