Data protection

The following data protection notice applies to the use of the website nlb2b.alko-tech.com (hereinafter "website").

Data protection is very important to us. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you the above-mentioned portal. This declaration describes how and for what purpose your data is collected and used and what choices you have in relation to personal data.
By using this website, you consent to the collection, use and transfer of your information in accordance with this privacy policy.

1. Data controller

The data controller for the collection, processing and use of your personal data within the meaning of the GDPR is:

AL-KO Vehicle Technology Group GmbH
Ichenhauser Str. 14
89359 Kötz
Germany
Telephone: + 49 (8221) - 970
E-mail: info@alko-tech.com

2. Personal data 

Personal data is information about factual or personal circumstances of an identified or identifiable natural person. This includes, for example, your name, your telephone number, your address and all continuance data that you provide to us during registration and when creating your customer account.

2.1. Source and type of the personal data we process
We process personal data that we receive from you in the course of our business relationship. In addition we process – insofar as is necessary for the provision of our service – personal data that we have legally received from other companies of the AL-KO Vehicle Technology Group GmbH or from other third parties (e.g. for the fulfilment of orders, for the performance of contracts or on the grounds of consent given by you). On the other hand we process personal data that we have legally obtained from publicly accessible sources and which we are permitted to process.


2.2. Collection, processing and use of your personal data 
Data protection is very important to us. Therefore, we strictly adhere to the legal provisions of the GDPR and Germany’s Telemedia Act when collecting, processing and using your personal data. We collect, store and process your data for the entire processing of your purchase, including any subsequent warranties, for our services, technical administration and our own marketing purposes. Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract processing or billing or if you have given your prior consent. The service providers we use for order processing, for example (such as carriers, logistics providers, banks), receive the data necessary for orders and order processing. The data thus disclosed may only be used by our service providers for the fulfilment of their task. For your order we need your correct name, address and payment details. We need your e-mail address so that we can confirm receipt of your order and communicate with you. We also use this for your identification (customer login). Furthermore, you will receive your order and dispatch confirmation via your e-mail address. Your personal data will be deleted if there are no legal obligations to retain it and if you have asserted a claim for deletion, if the data is no longer required to fulfil the purpose for which it was stored or if its storage is not permitted for other legal reasons.

2.3. Customer account
You can place orders as a guest or by creating a customer account. If you register with us on the website, we will set up password-protected direct access to your continuance data stored with us (customer account). Here you can view data about your completed, open and recently shipped orders and manage their data. You undertake to treat the personal log-in details confidentially and not to make them accessible to any unauthorised third party. We cannot accept any liability for misuse of passwords unless we are ourselves responsible for the misuse.

2.4 Contacting us
If you contact us (e.g. by service hotline or e-mail), we store your details for processing the enquiry and in case follow-up questions arise. We only store and use other personal data if you consent to this or if this is legally permissible without special consent.

3 Disclosure of personal data 
The only third parties that we pass your personal data on to are service partners involved in the processing of the contract, such as the transport service provider commissioned with the delivery and the credit institution commissioned with payment matters.


3.1. Transport service provider:
We work with external transport service providers (e.g. UPS) to deliver orders. They receive the following data from us for the execution of the respective order:
First name, last name, postal address
The legal basis for the processing is Art. 6(1) lit. b) GDPR.


4. General use of the website

4.1. Access data 
We collect information about you when you use this website. We automatically collect information about your usage behaviour and interaction with us and record data about your computer or mobile device. We collect, store and use data about every access to our online content (‘server log files’). The access data includes the name and URL of the retrieved file, the date and time of the retrieval, the amount of data transferred, the notification of successful retrieval (HTTP response code), the browser type and version, the operating system, the referrer URL (i.e. the previously visited page), the IP address and the requesting provider.
We use this log data without assigning it to you personally or otherwise profiling it for statistical evaluations for the purpose of the operation, security and optimisation of our online content, but also for the anonymous recording of the number of visitors to our website (traffic) as well as the extent and type of use of our website and services, as well as for accounting purposes in order to measure the number of clicks received from partners. This information allows us to provide personalised and location-based content and to analyse traffic, troubleshoot and improve our services. We reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision of a service or the billing of a service, e.g. if you use one of our offers. We also store IP addresses if we have a concrete suspicion of a criminal offence in connection with the use of our website. We also store the date of your last visit as part of your account (e.g. when registering, logging in, clicking links etc.).


4.2. Legal basis
We process personal data in accordance with the provisions of the European Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
For the fulfilment of contractual obligations (Art. 6 (1) lit. b GDPR).
Personal data is processed (Art. 4 (2) GDPR) for the provision and procurement of company services, in particular for the execution of our contracts or pre-contractual measures with you and the completion of your orders as well as all activities required for operation and administration.
Further details of the purpose of the data processing can be found in the respective contract documents and the general terms and conditions.
For the purposes of legitimate interests (Art. 6 (1) lit. f GDPR)
We only process your data beyond the actual fulfilment of the contract insofar as is necessary to protect our legitimate interests or those of third parties. For example:

• Testing and optimising procedures for needs analysis and direct customer contact;
• Advertising or market and opinion research, insofar as you have not objected to the use of your data;
• Assertion of legal claims and defence in legal disputes;
• Ensuring IT security and IT operations;
• Prevention and investigation of criminal offences;
• Measures for business management and further development of services and products.

Based on your consent (Art. 6 (1) lit. a GDPR)
Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent granted can be revoked at any time.

4.3. Google Analytics 
We use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses ‘cookies’, text files stored on your computer, to help the website analyse how users use the site. The information generated by the cookie about visitors’ use of this website is generally transmitted to a Google server in the USA and stored there.
Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.
The IP address sent by your browser in the context of Google Analytics is not merged with other Google data. You can refuse to store cookies through the appropriate settings in your browser software; however, we must point out that in this case you may not be able to use all features of this website to their full extent.
You can also prevent the data generated by the cookie and relating to your usage of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout?hl=en-GB. As an alternative to the browser plugin or for browsers on mobile devices, you can click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in future (this opt-out cookie only works in this browser and only for this domain. If you delete the cookies in your browser, you must click this link again): Deactivate Google Analytics

4.4. Cookie consent with OneTrust
We use the cookie consent technology from OneTrust to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection-compliant manner. The provider of this technology is OneTrust, represented in two main offices in the USA and England: Atlanta, GA, USA (Co-Headquarters), 1200 Abernathy Rd NE, Building 600, Atlanta, GA 30328 United States, +1 (844) 847-7154 as well as London, England (Co-Headquarters), Dixon House, 1 Lloyd’s Avenue, London, EC3N 3DQ, +44 (800) 011-9778. When you enter our website, a OneTrust cookie is stored in your browser, which stores the consents you have given or the revocation of these consents.
OneTrust cookie consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1) p. 1 lit. c GDPR.
The collected data will be stored until you request us to delete it or you delete the OneTrust cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected.
Details on the data processing of OneTrust cookies can be found in the OneTrust privacy policy at https://www.onetrust.com/privacy/.

4.5. Google Tag Manager
Google Tag Manager is a solution from Google Inc. that enables marketers to manage website tags via a single interface. The tool tag manager itself, which implements the tags, is a cookie-less domain and does not collect any personal data. The tool releases other tags, which may collect data. Google Tag Manager does not access this data. If disabled at a domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

5. Data security 

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.
We transmit your personal data in encrypted form. This applies to your orders and also to the customer login. We use the SSL (Secure Socket Layer) coding system, but we would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can present security vulnerabilities. Complete protection of data from access from third parties is not possible.
To secure your data, we maintain technical and organisational security measures that we constantly adapt to the state of the art. We also do not guarantee that our content will be available at all times; disruptions, interruptions or failures cannot be ruled out. The servers we use are carefully backed up on a regular basis.


6. Your rights as a data subject 

In connection with the processing of personal data by AL-KO Vehicle Technology Group GmbH, you have data subject rights:

• the right of access to your personal data stored by us (Article 15 GDPR), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the source of your data if it has not been collected directly from you;
• the right to have inaccurate data rectified or to have correct data completed (Article 16 GDPR);
• the right to have your data stored by us deleted (Article 17 of the GDPR), insofar as we do not have to comply with any legal or contractual retention periods or other legal obligations or rights to continue storing the data;
• the right to restrict the processing of your data (Article 18 of the GDPR), insofar as you dispute the accuracy of the data, the processing is unlawful but you object to its erasure; the controller no longer requires the data but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 of the GDPR;
• the right to data portability (Article 20 GDPR), i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to request the transfer to another controller;
• the right to lodge a complaint with a supervisory authority (Article 77 GDPR). As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our company headquarters for this purpose.
• the right to object (Article 21 of the GDPR). You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1) lit. e or f GDPR; this also applies to profiling based on these provisions. We will then no longer process personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

If personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.
You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.


To exercise your data protection rights, please contact us in writing at dataprotection@alko-tech.com or at the address mentioned in point 1.



Status: January 2021