The protection of your personal data and your right to informational self-determination are of great importance within FleetNI GmbH. In the following, we would like to inform you in accordance with Art. 13, 14 and 21 of the European General Data Protection Regulation (GDPR) about how your personal data is processed by us and what rights you have as a data subject. The following general information is valid from 01.09.2024 and replaces any previous information. For special processing situations, you will receive separate or supplementary information if this is necessary. This includes, for example, the data protection declarations on our websites, conditions of participation for events or information in the context of declarations of consent. The following general information will be updated as necessary.
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA AND HOW CAN YOU CONTACT THE DATA PROTECTION OFFICER?
Controller within the meaning of Art. 4 No. 7 GDPR:
FleetNI GmbH
Lise-Meitner-Straße 4
22941 Bargteheide
Phone +49 4532 9740 – 01
Fax +49 4532 9740 – 150
E-mail: hello(at)fleetni.eu
Managing directors:
Anja Pleus, Stefan Schneider, Andreas Brodhage, Thomas Ramdohr
Phone: +49 4532 9740 – 01
E-mail: hello(at)fleetni.eu
Contact details for data protection matters
E-mail: datenschutz(at)global-automotive-service.com
2. WHAT CATEGORIES OF PERSONAL DATA DO WE PROCESS AND WHERE DO THEY COME FROM?
We collect a large part of the personal data directly from you or the data arises directly from the respective business relationship. However, it may be necessary to use personal data from other sources as part of the processing mentioned under point 3. This will of course be done in compliance with data protection regulations. In such cases, the personal data may originate from publicly accessible sources (e.g. commercial registers, registers of associations, population registers, land registers, debtor directories, press publications and internet searches), from affiliated companies or from other third parties (e.g. credit agencies, address publishers and authorities). Depending on the processing activity and purpose, the following data is processed, for example:Personal master data (e.g. name, date of birth), contact and address data (e.g. address, e-mail address, telephone number), bank details, order data (e.g. type and quantity of goods ordered or services used), historical data on the business relationship with FleetNI GmbH or data in the context of ongoing contact maintenance, such as data on communication that has taken place, including date, time and purpose. If you access FleetNI GmbH websites or use other electronic services provided by us, various IT-specific information is processed by us. In addition to the type, time and duration of access, this also includes the IP addresses you use, data about the end devices you use, such as the operating system and browser, and the amount of data transmitted. So-called “cookies” are also used as part of the processing mentioned under point 3. You can find more detailed information in the specific data protection information for the respective website or electronic service. The information for the website can be found at the end of this document.
3. FOR WHAT PURPOSES IS YOUR PERSONAL DATA PROCESSED AND ON WHAT LEGAL BASIS?
Your personal data is processed in accordance with the provisions of the European General Data Protection Regulation (GDPR), the Federal Data Protection Act in the version dated June 30, 2017 (BDSG-new) and any other applicable data protection regulations.
3.1 Processing for the performance of a contract or for pre-contractual measures pursuant to Art. 6 para. 1 sentence 1 letter b) GDPR
A large part of the personal data is processed by us in order to be able to fulfill contracts with you or to carry out pre-contractual measures at your request. The legal basis for this is Art. 6 para. 1 sentence 1 letter b) GDPR. The processing activities, including the associated purposes, result in particular from the respective contract. Also required in this context are order-related communication, the documentation of transactions, the booking of business transactions and the processing of complaints, including the fulfillment of any warranty claims.
3.2 Processing for the fulfillment of legal obligations or for the fulfillment of public interests pursuant to Art. 6 para. 1 sentence 1 letter c) and letter e) GDPR
All FleetNI GmbH companies, like any other company, must fulfill a wide variety of legal obligations. This also requires the processing of personal data. The legal basis for this is Art. 6 para. 1 sentence 1 letter c) GDPR. Furthermore, personal data may have to be processed to fulfill public interests. The legal basis for this is Art. 6 para. 1 sentence 1 letter e) GDPR. The requirements and the resulting processing activities and purposes arise in particular from commercial and tax law, but also from other regulatory or official requirements. The retention periods for business documents require, for example, that a large number of documents, including the personal data they contain, are stored for the long term.
Other processing activities based on legal regulations may include the prevention of money laundering, the prevention, combating and investigation of terrorist financing, the fulfillment of tax control and reporting obligations, identity verification and comparison with anti-terror lists. Judicial or official measures may make it necessary for personal data to be processed and, in particular, disclosed. These include measures in the context of criminal prosecution, the gathering of evidence, the enforcement of or defense against civil law claims or audits by tax and/or supervisory authorities.
3.3 Processing to protect the legitimate interests of FleetNI GmbH or third parties pursuant to Art. 6 (1) sentence 1 letter f) GDPR
As a customer or business partner, you are accustomed to a trusting working relationship. In addition to the fulfillment of contracts with you, the implementation of pre-contractual measures and the fulfillment of legal obligations or the protection of public interests, we process personal data in order to protect the legitimate interests of us or third parties. The legal basis for this is Art. 6 para. 1 sentence 1 letter f) GDPR. The processing activities primarily include
In order to safeguard our own legitimate interests, we may supplement the data stored by us with data stored in publicly accessible sources or with data collected from third parties (e.g. credit agencies, address publishers or authorities).
We also process personal data for marketing purposes and for market or opinion research. We contact you for advertising purposes in person, by telephone and by post. If you have purchased goods or services from us, we may process your e-mail address in order to send you information about similar products and services by e-mail. We will obtain your consent where required by law. We also exchange personal data with affiliated companies within the scope of the statutory provisions. Processing in the context of a balancing of interests only takes place if you have not objected to this and if the legislator does not require explicit consent. We will inform you separately below about your right to object in accordance with Art. 21 GDPR.3.4 Verarbeitung auf Basis Ihrer expliziten Einwilligung gemäß Art. 6 Abs. 1 Satz 1 Buchstabe a) DSGVO
Certain processing activities may make it necessary for us to obtain your consent. The legal basis for such processing activities is Art. 6 para. 1 sentence 1 letter a) GDPR. Consents given before 25.05.2018 generally remain valid. If we require your consent, we will inform you of the planned processing before granting consent. You can revoke both new consent and consent granted in the past at any time with effect for the future. However, the withdrawal of consent does not affect the lawfulness of processing up to the time of withdrawal.
4. WHICH CATEGORIES OF RECIPIENTS HAVE ACCESS TO YOUR PERSONAL DATA AND TO WHOM IS THIS DATA TRANSMITTED?
Within FleetNI GmbH, those departments have access to personal data that require this data as part of their professional activities and to carry out the processing described under point 3. Your personal data will only be passed on to bodies outside FleetNI GmbH if this is permitted by law and is necessary in the context of the processing described under point 3. Your personal data will not be sold for advertising purposes or for the purposes of market and opinion research.
5. HOW LONG WILL YOUR PERSONAL DATA BE STORED BY FLEETNI GMBH?
FleetNI GmbH processes your personal data for as long as is necessary in the context of the business relationship, including pre-contractual measures and to fulfill legal obligations.
In addition, FleetNI GmbH is obliged to observe retention periods under commercial and tax law. These arise in particular from the German Commercial Code, the German Tax Code and the Money Laundering Act and amount to up to 10 years after the end of the business relationship or the initiation of the contract.
Due to further statutory provisions, it may be necessary to store data beyond this period in order to preserve evidence. Sections 195 of the German Civil Code provide for limitation periods of up to 30 years, whereby the regular limitation period is three years.
Once the above-mentioned periods have expired, the personal data is regularly deleted. Exceptions to this only arise if further processing is necessary in the context of a legitimate interest in accordance with point 3 c). According to Section 35 BDSG-new, such an interest may also exist if deletion is not possible or only possible with disproportionately high effort due to the special type of storage and the interest of the data subject in deletion is to be regarded as low. Instead of erasure, processing is restricted by means of suitable technical and organizational measures.
6. WILL YOUR PERSONAL DATA BE TRANSFERRED TO A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANIZATION?
The processing of personal data by FleetNI GmbH generally takes place in Germany or in the European Union. A transfer to service providers, affiliated companies or other third parties outside the European Union only takes place within the framework of the statutory provisions if
7. WHAT DATA PROTECTION RIGHTS DO YOU HAVE?
As a data subject, you have various rights that you can assert against FleetNI GmbH under certain conditions. These include
Restrictions apply to the rights to information and erasure in accordance with Sections 34 and 35 BDSG-new.
You can object to processing based on legitimate interest (Art. 21 (1) GDPR). In this case, we will stop the processing unless there are compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defense of legal claims. This applies analogously to the processing of your personal data for the purpose of direct marketing (Art. 21 para. 2 GDPR). You can withdraw your consent at any time in accordance with Art. 7 para. 3 GDPR. This also applies to consent given before 25.05.2018. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG-new). If you wish to exercise your rights, please contact the data protection officer of FleetNI GmbH, preferably in writing. You will find the contact details under point 1.
8. ARE YOU OBLIGED TO PROVIDE PERSONAL DATA?
You must provide the personal data that is necessary for the establishment and implementation of the business relationship, for the implementation of pre-contractual measures and for the fulfillment of the associated contractual obligations. You must also provide the data that FleetNI GmbH is legally obliged to process. Without this information, we will regularly not be able to conclude or fulfill the respective contract with you. Such an obligation to provide personal data may only arise in the further course of a business relationship. The provision of other personal data is voluntary.
9. IS THERE AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES (INCLUDING PROFILING)?
FleetNI GmbH uses automated individual decision-making in accordance with Art. 22 GDPR in the performance of contracts. In the event of repeated payment default, the option to purchase with payment terms is automatically blocked. This measure is intended to reduce payment defaults. Data subjects have the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision. In the context of recruitment procedures, there is no automated decision-making in individual cases within the meaning of Art. 22 GDPR, i.e. the decision on your application is not based exclusively on automated processing.
In some cases, personal data is also processed automatically in order to evaluate certain personal aspects (so-called profiling). In order to provide you with targeted information about products and services and to be able to make you offers tailored to your needs, evaluation mechanisms are used that take into account, among other things, your industry affiliation and product group-specific sales in the past.
Special categories of personal data pursuant to Art. 9 GDPR and data about your nationality are not used in this context.
10. INFORMATION ABOUT YOUR RIGHT TO OBJECT ACCORDING TO ART. 21 GDPR
Right to object in individual cases
If you object, FleetNI GmbH will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Right to object to the processing of personal data for the purpose of direct marketing
FleetNI GmbH uses your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If you object to the processing for direct marketing purposes, FleetNI GmbH will no longer process your personal data for these purposes.
The objection can be made informally and should be addressed to
FleetNI GmbH
Lise-Meitner-Straße 4
22941 Bargteheide
Bargteheide, Germany
E-mail: hello(at)fleetni.eu
ADDITIONAL INFORMATION ON THE USE OF THIS WEBSITE
It is possible to use our website without providing personal data. Different regulations may apply to the use of individual services on our website, which in this case are explained separately below. Your personal data (e.g. name, address, e-mail, telephone number, etc.) will only be processed by us in accordance with the provisions of German data protection law. Data is personal if it can be clearly assigned to a specific natural person. In this respect, the following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data
Controller within the meaning of Art. 4 No. 7 GDPR:
FleetNI GmbH
Lise-Meitner-Straße 4
22941 Bargteheide
Bargteheide, Germany
Managing directors:
Anja Pleus, Stefan Schneider, Andreas Brodhage, Thomas Ramdohr
Phone: +49 4532 9740 – 01
E-mail: hello(at)fleetni.eu
We would like to point out that Internet-based data transmission is subject to security vulnerabilities, making complete protection against access by third parties impossible.
COOKIES
We use so-called cookies on our website to recognize multiple use of our offer by the same user/internet connection owner. Cookies are small text files that your Internet browser stores on your computer. They are used to optimize our website and our offers. These are usually so-called “session cookies”, which are deleted again at the end of your visit. In some cases, however, these cookies provide information to recognize you automatically. This recognition is based on the IP address stored in the cookies. The information obtained in this way is used to optimize our services and make it easier for you to access our website. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.
SERVER DATA
For technical reasons, the following data, which your Internet browser transmits to us or to our web space provider, is recorded (so-called server log files):
This anonymous data is stored separately from any personal data you may have provided and therefore does not allow any conclusions to be drawn about a specific person. It is evaluated for statistical purposes in order to optimize our website and our offers.
CONTACT OPTION
On our website, we offer you the opportunity to contact us by e-mail and/or via a contact form. In this case, the information provided by the user is stored for the purpose of processing the contact. The data will not be passed on to third parties. The data collected in this way is also not compared with data that may be collected by other components of our website.
HOSTING
Our website is hosted by PlusServer GmbH in Cologne (Germany). The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in the reliable presentation and high-performance accessibility of our website.
Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Also available here: Link.
TOOLS & COMPONENTS
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Every time you access a page on this website that contains LinkedIn elements, a connection is established to LinkedIn servers. LinkedIn is informed that you have visited this website using your IP address. If you click on LinkedIn’s “Recommend button” and are logged into your LinkedIn account, LinkedIn can assign your visit to this website to you and your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by LinkedIn.
If consent has been obtained, the use of the above-mentioned service is based on Art. 6 Para. 1 lit. a GDPR and Section 25 TTDSG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the most comprehensive possible visibility in social media.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de
You can find further information on this in LinkedIn’s privacy policy at http://www.linkedin.com/legal/privacy-policy.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is summarized in a user ID and assigned to the respective device of the website visitor. Furthermore, with Google Analytics we can record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the recorded data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there. This service is used on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/ .
Browser plug-in
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information about how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Contract processing
We have concluded a contract processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
INFORMATION/REVOCATION/DELETION
In accordance with the Federal Data Protection Act, you can contact us free of charge if you have any questions about the collection, processing or use of your personal data and their correction, blocking, deletion or revocation of a granted consent. We would like to point out that you have the right to correct incorrect data or delete personal data if this claim is not contradicted by a statutory retention period.
The data protection declaration was partly created by the data protection declaration generator of the law firm Weiß & Partner and with eRecht24.
OUR SUBCONTRACTORS
Within FleetNI GmbH, we work with the following subcontractors for various purposes:
PlusServer GmbH, Venloer Str. 47, 50672 Cologne (Purpose: hosting the website)