Webasto Charger Setup - Privacy policy (draft) (Current Version)

Privacy Policy The companies of the Webasto Group (Webasto SE, Webasto Roof & Components SE and Webasto Thermo & Comfort SE and their affiliated companies) respect your privacy and take the protection of personal data very seriously. We would like you to know when we store what data and how we use it. We have taken technical and organizational measures to ensure that the relevant data protection regulations are observed. We process personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and local data protection laws. Personal data Personal data is information relating to your person. Looking on the data processed by this app, only the serial number of your wallbox could be considered as personal information. Your data entered in the app will be stored solely for the following purposes: - For configuring your wallbox setup and transmitting these settings to our charging cloud. Purposes of processing and legal basis For the fulfilment of contractual obligations (Article 6(1) lit. b GDPR) Your data will be processed on the basis of Article 6(1) lit. b GDPR for the purpose of performing and executing orders and contracts within the scope of the implementation of our contracts with our customers and suppliers or for the purposes of implementing pre-contractual measures which are taken at your request. This includes, in particular, concrete inquiries that we receive at events such as trade fairs. Furthermore, the relevant legal provisions apply to those processing operations that are necessary for us to be able to make our online services available to you. The purposes of data processing depend primarily on the specific product and/or service provided and may include, but are not limited to, demand analyses, consultations, purchase contracts and contracts for work and labor as well as regulatory requirements. Further details on data processing purposes can be found in the relevant contract documents and terms and conditions. Irrespective of established contractual relationships and your interest in our services, you also enter into a user relationship with us by visiting our online presence. The processing of usage data resulting from the visit of our online presence is also legitimized by Article 6(1) lit. b GDPR. (1) Within the scope of the balancing interests (Article 6(1) lit. f GDPR) If necessary, we process your data beyond the actual performance of the contract to protect our legitimate interests or those of third parties. Due to the multitude of processing contexts that are theoretically conceivable, the following points should only be understood as a selection of the most practice-relevant situations. We can provide more detailed information within the framework of specific claims for information. This includes in particular: - the consultation of and data exchange with credit agencies (e.g. SCHUFA) to determine creditworthiness and default risks in our transactions - the review and optimization of procedures for demand analyses for the purpose of direct customer approach, - advertising or market and opinion research, unless you have objected to the use of your data, - the recording and storage of contact data when business cards are handed over in the event of someone being interested in our services, e.g. at trade fairs, - the enforcement of legal claims and defense in legal disputes, - ensuring the company’s IT security and operation, - the prevention and investigation of criminal offences, - video surveillance for the protection of domiciliary rights, for the collection of evidence in the event of burglary (see also Section 4 BDSG), - measures ensuring building and plant security (e.g. access controls), - measures to secure domiciliary rights, - measures for business management and further development of services and products, - risk management in the Webasto Group. Based on your consent (Article 6(1) lit. a GDPR) If you have granted your consent to the processing of personal data for specific purposes (e.g. advertising measures for non-customers or the use of photographs), the lawfulness of this processing is established by virtue of this consent. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent issued to us prior to the validity of the GDPR, i.e. before 25 May 2018. The withdrawal of a consent only takes effect for the future and does not affect the lawfulness of the data processed until this withdrawal. (2) Based on legal requirements (Article 6(1) lit. c GDPR) In addition, as a company, we are subject to various legal obligations, i.e. statutory requirements (e.g. German Money Laundering Act [Geldwäschegesetz, GwG], tax laws and regulatory requirements). The purposes of processing include, among other things, creditworthiness checks, identity and age checks, fraud and money laundering prevention, compliance with control and reporting obligations under tax law, and the assessment and management of risks within the company. Transfer of personal data to third parties We transfer your data to other companies in the Webasto Group for general administrative purposes in accordance with Article 6(1) lit. f GDPR. With regard to the transfer of data to recipients outside of our company, it should first be noted that we only transfer required personal data in compliance with the applicable data protection regulations. We are only allowed to transfer personal data of our suppliers if this is required by law, if the person concerned has consented to such or if we are otherwise authorized to do so. The use of our services may result in data transmissions and subsequent processing of usage data by the respective services in the U.S. The basis for any processing activities is your explicit declaration of consent which you have given via the cookie banner. Your declaration of consent justifies such data processing by way of exception and on a case-by-case basis pursuant to Art. 49 (1) lit. a GDPR. Please note that there is no data protection in the USA which would be comparable to the level in the EU and EEA. In particular, it is possible that state authorities may access your personal data on the basis of legal authorisations without us or you being informed. There are no comparable opportunities for enforcing the law of another country in the U.S. so that this does not appear promising. Possible data transmissions exclusively take place in automated form in connection with the use of our services. You can also revoke your consent at any time with effect for the future. Any processing carried out previously remains unaffected by a revocation. Please contact our Data Protection Officer under "dataprotection@webasto.com". Duration of the storage We process and store your personal data for four weeks . Your rights You have the following statutory rights regarding the processing of your personal data: - Right of access to your stored personal data; - Right of rectification; - Right of erasure; - Right of object; - Right to restriction of processing; - Right of data portability. You can withdraw your consent to the processing of your personal data at any time. In addition, you have the right to appeal to the competent data protection supervisory authority in Bavaria (Article 77 GDPR). Should you no longer agree to the storage of your personal data or should this data have become inaccurate, we will, upon receipt of corresponding instructions, arrange for the deletion, amendment, or blocking of your data within the limits of the relevant statutory provisions. Upon request, you will receive information regarding all of your personal data that we have stored on you free of charge. If you have any questions regarding the collection, processing, or use of your personal data, for information, rectification, blocking, or erasure of data as well as for the use of further rights, please contact the Webasto Group Data Protection Officer (dataprotection@webasto.com) or the respective Webasto Group company in writing. Questions and comments For questions, suggestions, or comments regarding the topic of data protection, please contact our group data protection officer by sending an e-mail (dataprotection@webasto.com). As a result of the rapid development of new Internet technologies, it is necessary to update our Data Protection Statement/Privacy Policy from time to time. Here you can find information regarding amendments to these policies. Responsible authority within the meaning of data protection laws Data Protection Webasto Group Webasto SE Kraillinger Straße 5 82131 Stockdorf Germany Group Data Protection Officer: Reinhard Bersch dataprotection@webasto.com Phone: +49 (89) 8 57 94-0