Privacy Policy

I. General Information on Data Protection & Data Subject Rights

§1 General Information

Data protection is an important topic. Below, we inform you about the collection and processing of personal data. Personal data refers to all data that can be related to you personally.

Controller pursuant to Art. 4(7) GDPR

Schotte Automotive GmbH & Co. KG
Zum Kraftwerk 1
45527 Hattingen

Phone: +49 2324 97797700
Email: info@schotteautomotive.de

Data Protection Officer (DPO)
You can reach our personally appointed Data Protection Officer at the following address:

Mr. Patrick Grihn
grihn@dsb.ruhr
DSB Ruhr
c/o nextindex GmbH & Co. KG
Grabenstr. 12
44787 Bochum

If you have any questions regarding the processing of your data, security, or if you wish to request access to your data, you can contact him directly and in confidence.

§2 General Overview of Data and Processing Activities

We aim to provide you with the required transparency in accordance with Art. 12 GDPR. Therefore, please find below an overview of our processing activities:

Types of processed data:

Usage / Communication data: e.g., when accessing a website, IP address, device information, time and date of access.
Contact data: e.g., provided during registration or data entry.
Master data: e.g., name, company, address.
Communication data: e.g., metadata regarding calls or emails.
Content data: e.g., content provided in emails.

Additional internal data processed for customers, interested parties, suppliers, and business partners (for quotation and contract management, service, marketing, direct advertising, and customer care):

Contract data
Customer master data (CRM)
Supplier data
Payment data
Order and billing data

Categories of Data Subjects:

Users of this website (also referred to as visitors)
Customers
Suppliers

Purposes of Processing:

Operating the website and providing information
Ensuring the operation of the website and our systems (e.g., firewalls)
Communicating with our customers
Responding to inquiries
Optimizing and analyzing the website
Providing information to (potential) customers

§3 Your Rights

You have the following rights regarding your personal data processed by us:

Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object to processing
Right to data portability
Right to lodge a complaint with a data protection supervisory authority

Detailed Rights:

Right of Access (Art. 15 GDPR): You have the right to request information about your personal data processed by us. In particular, you can request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.
Right to Rectification (Art. 16 GDPR): You have the right to demand the immediate correction of inaccurate or incomplete personal data stored by us.
Right to Erasure ('Right to be forgotten') (Art. 17 GDPR): You have the right to request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing (Art. 18 GDPR): You have the right to demand the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or if you have objected to processing pursuant to Art. 21 GDPR.
Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future.
Right to Lodge a Complaint (Art. 77 GDPR): You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work, or our registered office.

Exceptions to the Right to Erasure: The right to erasure does not apply if processing is necessary:

For exercising the right of freedom of expression and information;
For compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
For reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89(1) GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing;
For the establishment, exercise, or defense of legal claims.

§4 General Legal Bases

Performance of a contract: When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Legitimate interest: If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Art. 6(1)(f) GDPR serves as the legal basis.
Legal obligation: Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
Vital interests: In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.
Consent: If we obtain the consent of the data subject for processing operations of personal data, Art. 6(1)(a) GDPR serves as the legal basis.

II. Website

§5 General Information

General data upon visiting the site

In the case of merely informational use of the website—meaning you do not register or otherwise transmit information to us—we only collect the personal data that your browser transmits to our server in order to display our website to you and to ensure stability and security. The processing is based on Art. 6(1)(f) GDPR (Legitimate Interest).

Log Files

Data is stored in log files to ensure the functionality of the website. In addition, the data serves to optimize the website and ensure the security of our information technology systems. The processing is based on Art. 6(1)(f) GDPR (Legitimate Interest).

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

If data is stored in log files, this is the case after a maximum of seven days. Extended storage is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the calling client.

Cookies

In addition to the aforementioned data, cookies may be stored on your computer when you use our website.

We use technically necessary cookies for security purposes and the technical implementation of the website. The processing is based on Art. 6(1)(f) GDPR (Legitimate Interest). These cookies are generally deleted after you log out or close your browser.

We also use cookies to analyze user behavior or for marketing purposes. These cookies are deleted after a specified period. Unless stated otherwise in this privacy policy, processing is based on Art. 6(1)(f) GDPR (Legitimate Interest). Otherwise, it is based on consent pursuant to Art. 6(1)(a) GDPR.

You can delete the cookies stored on your computer at any time via your browser settings. Furthermore, you can configure your browser to delete cookies when you close the browser or to reject cookies generally. Please note that you may not be able to use all features of our website properly without cookies.

§6 Third-Party Services

IONOS SiteAnalytics

This service allows us to analyze user behavior on our website to improve functionality and user-friendliness. IONOS SiteAnalytics helps us understand how visitors interact with our content, which pages are particularly popular, and how we can optimize the technical performance of our website.

The processing is carried out for the purpose of statistical analysis of user behavior, measuring website reach, and technical website optimization based on Art. 6(1)(a) GDPR (Consent). You can withdraw your consent at any time with effect for the future.

The recipient of the data is our Processor, IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

§7 Contact Form and E-Mail Contact

A contact form is available on our website, which can be used for electronic contact. If a user utilizes this option, the data entered in the input mask is transmitted to us and stored.

Alternatively, contact is possible via the provided email address. In this case, the user's personal data transmitted with the email will be stored.

We process the respective personal data to handle the conversation (contact, reply) based on Art. 6(1)(f) GDPR (Legitimate Interest) or based on Art. 6(1)(b) GDPR (Performance of a contract or pre-contractual measures).

The data will be deleted when it is no longer required to fulfill the purpose of the processing.

III. Changes to our Privacy Policy

This Privacy Policy is occasionally updated to reflect changes in business processes and legal requirements. You will always find the most current version on the website.

Version 1.0