Data Protection Declaration

Anonymous data collection

As a general rule, you can visit the non-personalized webpages of the Webasto Group (www.webasto.com, www.webasto-group.com, www.webasto-comfort.com, www.webasto-career.com and www.webasto-electrified.com) without telling us who you are. When you visit our website, the IP address currently used by your PC, the browser type and your PC's operating system, the website from which you visited us, the date, time, and websites visited by you are recorded. However, inferences cannot be made based on personal data and are not intended. This information is evaluated for statistical purposes. You remain anonymous as an individual user.

Personal data

Personal data is information relating to your person. This includes information such as your name, address, postal address and telephone number. Furthermore, when you visit our online presence (www.webasto.de, www.webasto.com and www.webasto-group.com), further usage data is logged such as:

- the IP address,
- the browser type and operating system of your PC,
- the website from which you are visiting us, and
- the date, time and the websites that you have visited.

Personal data is only collected by the companies of the Webasto Group if it is generated automatically as part of the usage process or if you provide us with this voluntarily, for example when filling out a registration form, registering for personalized services or submitting an application. Your data entered in the form will be stored solely for the following purposes:

- for Webasto to meet your quotation request
- to register for the newsletter and to send you the newslette

Purposes of processing and legal basis

For the fulfilment of contractual obligations (Article 6(1) lit. b GDPR)

Your data will be processed on the basis of Article 6(1) lit. b GDPR for the purpose of performing and executing orders and contracts within the scope of the implementation of our contracts with our customers and suppliers or for the purposes of implementing pre-contractual measures which are taken at your request. This includes, in particular, concrete inquiries that we receive at events such as trade fairs. Furthermore, the relevant legal provisions apply to those processing operations that are necessary for us to be able to make our online services available to you.

The purposes of data processing depend primarily on the specific product and/or service provided and may include, but are not limited to, demand analyses, consultations, purchase contracts and contracts for work and labor as well as regulatory requirements. Further details on data processing purposes can be found in the relevant contract documents and terms and conditions.

Irrespective of established contractual relationships and your interest in our services, you also enter into a user relationship with us by visiting our online presence. The processing of usage data resulting from the visit of our online presence is also legitimized by Article 6(1) lit. b GDPR.

(1) Within the scope of the balancing interests (Article 6(1) lit. f GDPR)

If necessary, we process your data beyond the actual performance of the contract to protect our legitimate interests or those of third parties. Due to the multitude of processing contexts that are theoretically conceivable, the following points should only be understood as a selection of the most practice-relevant situations. We can provide more detailed information within the framework of specific claims for information. This includes in particular:

- the consultation of and data exchange with credit agencies (e.g. SCHUFA) to determine creditworthiness and default risks in our transactions
- the review and optimization of procedures for demand analyses for the purpose of direct customer approach,
- advertising or market and opinion research, unless you have objected to the use of your data,
- the recording and storage of contact data when business cards are handed over in the event of someone being interested in our services, e.g. at trade fairs,
- the enforcement of legal claims and defense in legal disputes,
- ensuring the company’s IT security and operation,
- the prevention and investigation of criminal offences,
- video surveillance for the protection of domiciliary rights, for the collection of evidence in the event of burglary (see also Section 4 BDSG),
- measures ensuring building and plant security (e.g. access controls),
- measures to secure domiciliary rights,
- measures for business management and further development of services and products,
- risk management in the Webasto Group.

Based on your consent (Article 6(1) lit. a GDPR)

If you have granted your consent to the processing of personal data for specific purposes (e.g. advertising measures for non-customers or the use of photographs), the lawfulness of this processing is established by virtue of this consent.

A given consent can be revoked at any time. This also applies to the revocation of declarations of consent issued to us prior to the validity of the GDPR, i.e. before 25 May 2018. The withdrawal of a consent only takes effect for the future and does not affect the lawfulness of the data processed until this withdrawal.

(2) Based on legal requirements (Article 6(1) lit. c GDPR)

In addition, as a company, we are subject to various legal obligations, i.e. statutory requirements (e.g. German Money Laundering Act [Geldwäschegesetz, GwG], tax laws and regulatory requirements). The purposes of processing include, among other things, creditworthiness checks, identity and age checks, fraud and money laundering prevention, compliance with control and reporting obligations under tax law, and the assessment and management of risks within the company.

Transfer of personal data to third parties

We transfer your data to other companies in the Webasto Group for general administrative purposes in accordance with Article 6(1) lit. f GDPR and to our authorized dealers and service partners if required in order to respond to your enquiry or to fulfil the contract. If you request an offer from a dealer via our website www.webasto-comfort.com, we will pass on the personal data you have provided to the dealers you have selected.
Webasto will of course be happy to support you in the context of a justified request to access or erase data by also forwarding the request to the service provider on your behalf.
With regard to the transfer of data to recipients outside of our company, it should first be noted that we only transfer required personal data in compliance with the applicable data protection regulations. We are only allowed to transfer personal data of our suppliers if this is required by law, if the person concerned has consented to such or if we are otherwise authorized to do so. Under these conditions, recipients of personal data may be, for example:

- public authorities and institutions (e.g. tax authorities, criminal prosecution authorities) where there is a legal or official obligation,
- creditors or insolvency administrators enquiring within the scope of execution writs
- public auditors. Data cannot be transferred to any other third parties unless you have expressly consented to this.

The use of our range of social media and map services may result in data transmissions and subsequent processing of usage data by the respective services in the U.S. The basis for any processing activities is your explicit declaration of consent which you have given via the cookie banner. Your declaration of consent justifies such data processing by way of exception and on a case-by-case basis pursuant to Art. 49 (1) lit. a GDPR. Please note that there is no data protection in the USA which would be comparable to the level in the EU and EEA. In particular, it is possible that state authorities may access your personal data on the basis of legal authorisations without us or you being informed. There are no comparable opportunities for enforcing the law of another country in the U.S. so that this does not appear promising.

Possible data transmissions exclusively take place in automated form in connection with the use of our social media offerings and Google's map services and with the help of cookies. Further details on this can be found in this data protection declaration in the sections "Use of cookies", "Google Maps map service of Google Inc." and "Use of social plug-ins from Facebook, Google+, Twitter and XING".

You can reject the use of cookies and other technologies altogether or choose individual settings. You can also revoke your consent at any time with effect for the future. Any processing carried out previously remains unaffected by a revocation. Please contact our Data Protection Officer under "dataprotection@webasto.com".

Duration of the storage

We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations.

If the data is no longer required for the fulfilment of our contractual or legal obligations, it is deleted at regular intervals, unless its – time-limited - further processing is necessary for the following purposes:

- compliance with obligations to preserve business records under commercial and tax law,
- German Commercial Code [Handelsgesetzbuch, HGB], Fiscal Code of Germany [Abgabenordnung, AO], or the German Money Laundering Act [Geldwäschegesetz, GwG]. The periods for storage and documentation specified there are generally two to ten years.
- Preservation of evidence within the framework of the statutory statute of limitations. According to Sections 195 et seq. of the German Civil Code [Bürgerliches Gesetzbuch, BGB], these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.

Your rights

You have the following statutory rights regarding the processing of your personal data:

- Right of access to your stored personal data;

- Right of rectification;

- Right of erasure;

- Right of object;

- Right to restriction of processing;

- Right of data portability.

You can withdraw your consent to the processing of your personal data at any time.

In addition, you have the right to appeal to the competent data protection supervisory authority in Bavaria (Article 77 GDPR in conjunction with Section 19 BDSG).

Should you no longer agree to the storage of your personal data or should this data have become inaccurate, we will, upon receipt of corresponding instructions, arrange for the deletion, amendment, or blocking of your data within the limits of the relevant statutory provisions. Upon request, you will receive information regarding all of your personal data that we have stored on you free of charge. The restrictions according to Sections 34 and 35 BDSG apply to the right of access and the right of erasure. If you have any questions regarding the collection, processing, or use of your personal data, for information, rectification, blocking, or erasure of data as well as for the use of further rights, please contact the Webasto Group Data Protection Officer (dataprotection@webasto.com) or the respective Webasto Group company in writing.

Use of cookies

Cookies are used on our websites. Cookies are small text files that are placed on your computer when you visit our websites. We set cookies for the purposes of guaranteeing the use of our online services, for individual website optimization and to guarantee IT security. For further information on our cookies, please see the next section.

When you visit our website, we display a so-called "cookie banner" in which you can give your consent to the use of cookies on this website by pressing a button. Your selection will also be saved for future visits on our website.

Cookies that are absolutely necessary to use our online services or to guarantee IT security do not require your consent. The use of these cookies and related processing activities are permitted by Article 6(1) lit. f) GDPR.

Cookies for all other purposes, such as for individual website optimization, for marketing or for carrying out statistical evaluations of your activities on our website, however, require your consent.

If you no longer wish us to use cookies at a later date, you have the option of changing the selection made for the use of cookies. To do so, you can adjust the settings for cookie management in your Internet browser. Here, in particular, the deletion of cookies that have already been placed can be initiated or the setting of cookies can be blocked for the future. Please note that the settings may vary depending on the browser you are using.

More information about our Cookies and Services are available in the next section. Here you also can change your settings.

Links to other websites

Our online presence includes links to other websites. We don't have any influence over whether their operators comply with data protection provisions. Therefore, you should examine the respectively offered data protection statements separately. We also don't have any influence on the legality of the contents of these websites. Therefore, we reject any responsibility for the contents of other websites.

Newsletter

We send newsletters, e-mails, and other electronic communications with marketing information (hereinafter "newsletters") only with the permission of the recipient or as permitted under the law. Insofar, they are definitive for the permission of the users in connection with a registration to the newsletter whose contents are specifically described.

If you subscribe to our newsletter, we use the data necessary for this or separately provided by you in order to regularly send you our e-mail newsletter. It is possible to unsubscribe to our newsletter at any time either by sending a request to the contacts described below or by clicking on a link provided for this purpose in the newsletter.

In order to subscribe to the newsletter, it is sufficient to provide us with your e-mail address. The subscription to our newsletter is carried out in a so-called double-opt-in process. That is, after subscribing you receive an e-mail in which you are asked to confirm your subscription. This confirmation is necessary so that no one can subscribe with someone else's e-mail address.

The subscriptions to the newsletter are recorded so that we can verify the legal requirements according to the subscription process. This includes the storage of the subscription and the confirmation data as well as the IP address.

You can cancel the receipt of our newsletter at any time, i.e. revoke your permission. This simultaneously deletes your permissions to receive the newsletter. You can find a link for the cancellation of the newsletter at the end of every newsletter.

Questions and comments

For questions, suggestions, or comments regarding the topic of data protection, please contact our group data protection officer by sending an e-mail (dataprotection@webasto.com).

As a result of the rapid development of new Internet technologies, it is necessary to update our Data Protection Statement/Privacy Policy from time to time. Here you can find information regarding amendments to these policies.