1. General information
Mr. Scandis Car- & Truckwash (Skandinavien Damm 1, 24983 Handewitt) is the “controller”, as defined by the European General Data Protection Regulation (GDPR), with respect to all data processing carried out on this website. We respect your privacy rights. We know how important the personal data we receive from you (as the user of our website) is. We respect the protection of your personal data and will only collect, store or process the data obtained in accordance with the relevant data protection regulations within the scope of our business purpose.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. Legal bases for processing
Where we obtain your consent to certain processing operations involving personal data, the processing will be based on Art. 6(1a) of the European General Data Protection Regulation (GDPR). The processing of personal data that is required for performing a contract we have concluded with you is based on GDPR Art. 6(1b). This also applies to processing operations that are necessary for implementing pre-contractual measures. Where personal data is processed to comply with a legal obligation that applies to our company, the processing will be based on GDPR Art. 6(1c). Where processing is necessary for safeguarding legitimate interests pursued by us or by a third party, and where your interests or fundamental rights and freedoms do not override those legitimate interests, the processing is based on GDPR Art. 6(1f). The legitimate interest of our company regularly is to perform the services owed by us and/or continuously optimise our services and presentations.
4. Erasure of data and storage period
Your personal data is erased or blocked as soon as the purpose for storing this data no longer exists. In addition, data may be stored where this is has been provided for by the European or national legislator in Union regulations, laws or other provisions. Data will also be blocked or erased when a storage period provided for by any of the aforementioned legal rules expires, unless this data still needs to be stored for concluding or performing a contract.
5. Collection of personal data
In general, we do not collect or use any personal data when persons visit our website. We only do this where this is necessary for providing a functioning website or our content and services. We regularly only collect and use personal data of our users with their consent. This does not apply in cases where it is not possible to obtain the user's consent in advance for factual reasons and where the processing of this data is permitted by legal regulations. In the following we would like to inform you about the type, scope and purpose of our handling of data in the context of this website:
5.1 Server log files
Any time our website is accessed, the user's access data that are required for enabling and billing the use is stored on our server in a log file which is automatically transmitted to us by your browser. This data tells us:
• the browser type/ browser version
• the operating system used
• the host name of the accessing computer
• the date and time of the server request
• the IP address of the computer accessing the website;
• the website from which our website was accessed (Referrer URL)
• the files accessed;
• the data volume transferred. The log files are stored for the following purposes:
• analysing the file access for statistical purposes;
• system security and stability of the website
• review for any use that violates the terms of contracts or is otherwise unlawful provided that there are actual indications for this.
This data processing operation is based on GDPR Art. 6(1f). Our legitimate interest follows from the aforementioned data collection purposes. We do not use the data collected for the purpose of identifying you. We do not combine this data with other data sources.
After the user has logged in on our website, “cookies” are stored on the user's computer. A cookie is a small text file in a computer directory that is meant to store cookies. The purpose of this file is to be able to identify the user's computer for the duration of the session. Cookies cannot manipulate the user's end device and can be deleted manually at any time, most easily in the browser. In the settings of your browser you can decide on how cookies should be handled, whether they should be rejected or whether they should only be accepted after they have been confirmed. The purpose of the cookies, in this case “session cookies”, is to expand the features of our website and to make its use as convenient as possible for you. You are free to refuse to accept cookies, but please note that some of the components of our application cannot work properly in this case. Processing data through cookies is necessary for the aforementioned purposes to safeguard our legitimate interests, as well as those of third parties in accordance with GDPR Art. 6(1f).
Use of Cookiebot
5.3 Usage data
We collect personal data from you and use this data based on GDPR Art. 6 (1b) where this is necessary to enable you to use our website (usage data). For advertising and market research purposes and to design our website based on users' needs we may also create usage profiles using pseudonyms. You have a right to object to this use of your data at any time. We are not allowed to combine the usage profiles with data regarding the person to whom the pseudonym refers.
5.4 Data use in the context of your contacting us
If you use the contact form to send us inquiries, we will store your data from the form or the e-mail address provided for contacting you, including the contact data you provided there, only for processing the respective inquiry and in case we have any follow-up questions. We do not disclose this data to third parties without your consent. This use of data in the context of processing your request is based on GDPR Art. 6(1b).
If you want to place an order at our webshop, you need to provide personal data, which we need for processing your order, for the conclusion of the contract. Information that is compulsory as it is necessary for processing the contracts is marked as such; additional information may be provided voluntarily. We process the data provided by you for processing your order. This data processing operation is based on GDPR Art. 6(1b). You have the option of creating a customer account that allows us to store your data for future purchases. If you create an account under “My Account”, the data provided by you will be stored until you revoke your consent to this storage. You can delete all other data, including your user account, in the customer area at any time. We may also process the data provided by you in order to inform you about additional interesting products from our portfolio or send you e-mails with technical information. We have a duty to store your address, payment and order data for a period of ten years under commercial and tax law. However, we restrict processing after two years, i.e. afterwards, your data will only be used to comply with the legal obligations. To prevent unauthorised third-party access to your personal data, in particular financial data, the order process is encrypted using TLS technology.
5.6 Tracking methods
The use of tracking tools is based on GDPR Art. 6(1f). Their purpose is to ensure, within the scope of our legitimate interests in this respect, a design of our website that is based on users’ needs and the continuous optimisation of our website (through statistical analyses).
Use of Google Analytics
Use of Piwik
This website uses the web analytics service Piwik to analyse and regularly improve the use of our website. The statistics generated allow us to improve our website and make it more interesting to you as the user. This analysis in enabled by placing cookies (see above) on your computer. The controller will only store the data collected this way on its server within the EU. You can stop this analysis by deleting any existing cookies and preventing the storage of new cookies. However, please note that preventing the storage of cookies may prevent you from making full use of this website. You can prevent the storage of cookies through your browser settings. You can prevent the use of Piwik by removing check mark at the bottom of this page which will enable the opt-out plugin. This website uses Piwik with the “AnonymizeIP” extension. This means that all further processing is done with shortened IP addresses. Consequently, they cannot be directly related to a specific person. The IP address transmitted by your browser through Piwik will not be combined with other data collected by us. The Piwik programme is an open source project. The third-party provider information on data privacy is available at http://piwik.org/privacy/policy.
5.7 Use of YouTube plugins
Our website uses the plugin feature of the YouTube platform of Google Inc. (“Google”), San Bruno/California, USA. A connection to the YouTube servers is created every time you access our website. The YouTube server is informed about your visit to our website. To our knowledge, this does not involve any processing of personal data. However, if you are logged in to your YouTube account, you would enable YouTube to directly allocate your browser history to your personal profile. You can deactivate this allocation by logging out of your account before accessing our website. Further information on this can be found in YouTube's Privacy Notice which is available at https://www.youtube.de/t/privacy.
5.8 Use of Facebook and Instagram plug-ins
Social plug-ins from the social network Facebook.com (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2) are integrated on our pages. The plug-ins are identified by the relevant logo or the “Like” button on our page. When you visit our website, the plug-in establishes a direct connection between your browser and the Facebook server. This informs Facebook that you visited our website using your IP address. If you click on the social media icons while you are logged into your Facebook or Instagram account, you can link the content of our pages to your profile. This allows Facebook to assign your visit to our website to your user account. Please note that, as the provider of the website, we are not informed about the content of the data transmitted or about its use by Facebook. Further information on this can be found in Facebook's privacy notice which is available at https://www.facebook.com/privacy/explanation. If you do not want Facebook to be able to assign the visit to our pages to your particular user account, please log out of your user account.
5.9 Information on data handling as it relates to the Facebook fan page
We use our Facebook fan page to keep customers informed about us, our products and our services. Of course, it is also a great way to keep in contact and communicate with Facebook users.
Facebook itself is in charge of the technical aspects of data handling. We therefore refer to Facebook’s Data Policy.
However, the European Court of Justice holds that, in some cases, there may be joint responsibility on behalf of both the Facebook fan page and Facebook. Handling of this data is therefore performed according to an agreement on the overall data handling activities, which can be found here and here.
5.9.1 Facebook Conversion Pixel
We use the conversion pixel from Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA. By accessing this pixel from your browser, Facebook can then identify whether a Facebook ad was successful. For this purpose, we only obtain statistical data on effectiveness and for market research purposes from Facebook; no personal data is collected. For further information, and particularly if you are logged into Facebook, please see Facebook’s information on data protection https://www.facebook.com/about/privacy/. Please click here if you would like to revoke your consent to the conversion pixel: https://www.facebook.com/settings?tab=ads#_=_.
5.9.2 Facebook Website Custom Audiences
Within our website, we use the “Website Custom Audiences” pixel from the social network Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. So-called event pixels are integrated on our pages. When you visit our pages, these event pixels establish direct connections between your browser and the Facebook server. In this way, Facebook obtains data on specific actions of users which can then be tracked. If you are a Facebook ad user, Facebook can assign your interactions with the ads to the user account. The website operator therefore has the opportunity to evaluate this data for statistical market research purposes. Data collected through the use of the pixels is anonymised. Personal data relating to individual persons is not collected. However, this data is stored and processed by Facebook. The website operator has no access to these datasets. Facebook is able to connect this data to the user's Facebook account and also use it for advertising purposes in accordance with its own data use regulations: https://www.facebook.com/about/privacy/. The user can enable Facebook and its partners to place ads on and off Facebook. It can also store a cookie on the user's computer for these purposes. This consent is only valid if, when declaring consent, the user has a minimum age of 16. Please click here if you do not wish for your data to be collected by Custom Audiences: https://www.facebook.com/settings?tab=ads#_=_
5.11 Use of Google Maps
This website uses the services provided by Google Maps. This allows us to display interactive maps to you directly on our website and enables you to comfortably use the map feature. When you visit our website, Google is notified of your accessing the respective web page on our website. In addition, our website transmits the data specified above (in 5.1). This happens both where Google provides a user account through which you are logged in and in situations where there is no user account. If you are logged in to Google, your data is allocated to your account directly. If you do not want this data to be allocated to your Google profile, you need to log out of Google before you click on the button. Google stores your data as user profiles and uses it for advertising and market research purposes and/or to design its website based on users' needs. Data is analysed (even for users that are not logged in) in particular to provide advertising based on users’ needs and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, which can only be exercised by contacting Google, though. Further information on the purpose and scope of data collection and its processing by the plugin provider is available in the privacy notice of the respective provider. The privacy notice also provides additional information regarding your relevant rights and configuration options for the protection of your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has committed to complying with the provisions of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The processing of your data in this respect is based on GDPR Art. 6(1f). Our legitimate interests are to market the website and to provide access to offerings that are focused on your interests as much as possible to you in this respect.
You can subscribe to our email newsletter on the website. We use the services of the CleverReach newsletter system (provider: CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany). We only process your email address from the form, along with any information you provide voluntarily. This is absolutely necessary to be able to send you the newsletter. You may unsubscribe from the newsletter at any time by emailing email@example.com. Alternatively there is an unsubscribe link in every newsletter email. To analyse the popularity of our newsletters and to optimise them, we record when emails have been opened and links clicked. This usage analysis is based on legitimate interests. You can object to us processing this by unsubscribing from the newsletter.
Google Adwords conversion
We use the services of Google Adwords to draw consumers’ attention to our attractive offering on external websites through advertising tools (referred to as “Google Adwords”). Based on the advertising campaign data we can determine the effectiveness of individual advertising measures. The purpose of using this service is to display advertising to you that is of interest to you, to make our website more interesting to you, and to achieve a fair calculation of advertising costs. These advertising tools are delivered by Google through servers referred to as “ad servers”. For this purpose we use ad server cookies that allow us to measure certain parameters, such as the display of ads or clicks by users, in order to determine effectiveness. If you get to our website through a Google ad, Google Adwords places a cookie on your PC. In general, these cookies are only valid for a period of 30 days and are not meant to be used to personally identify you. The analysis values typically stored for this cookie are the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (a note stating that the user does not want to be approached any more). These cookies enable Google to recognise your internet browser. Where users visit certain pages of the website of an Adwords customer and the cookie stored on the user's computer has not expired yet, Google and the customer can see that the user clicked on the ad and was taken to this page. Each Adwords customer is assigned a different cookie. Consequently, cookies cannot be tracked beyond the websites of Adword customers. We ourselves do not collect or process any personal data in the context of the aforementioned advertising measures. Google only provides statistical analyses to us. These analyses allow us to recognise which of the advertising measures used are particularly effective. We do not receive any additional data from using the advertising tools. In particular, we are not able to identify users based on this information. Based on the marketing tools used, your browser automatically establishes a direct connection with the Google server. We do not have any influence on the extent and the further use of the data that are collected by Google using this tool and therefore inform you to the best of our knowledge: Through the integration of AdWords Conversion, Goggle is notified of the fact that you accessed that particular part of our website or clicked on one of our ads. If you are registered with a Google service, Google can allocate the visit to your account. Even if you are not registered with Google, or are not logged in, there is a possibility that the provider may find out and store your IP address. You have various options for preventing the participation in this tracking method: a) by selecting the appropriate settings in your browser software; in particular, if you refuse to accept third-party cookies, you will not receive any third-party ads anymore; b) by disabling cookies for conversion tracking which is done by blocking cookies from the domain “www.googleadservices.com” in your browser settings https://www.google.de/settings/ads; these settings are deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” using the link http://www.aboutads.info/choices; these settings are deleted when you delete your cookies; d) by disabling the participation permanently in your Firefox, Internet Explorer or Google Chrome browser at http://www.google.com/settings/ads/plugin. Please note that doing so may prevent you from making full use of all of the features of this website. Further information on Google’s data privacy policies is available at: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. As an alternative, you can visit the website of Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has committed to complying with the terms of the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
6. Your rights
Where we process your personal data on our website, you are the “data subject”, as defined by the GDPR. Therefore you have the following rights vis-à-vis us:
6.1 Right of access
You may ask us to confirm whether we are processing personal data about you. Where we do process your personal data, you may request to be informed about the following:
• the purposes for which the personal data is being processed;
• the categories of personal data being processed;
• the recipients and/or the categories of recipients to whom your personal data were or are still being disclosed;
• the intended duration of the storage of your personal data or, if it is impossible to provide specific information on this, criteria for determining the storage period;
• the existence of a right to lodge a complaint with a supervisory authority; all available information regarding the origin of the data if the personal data is not collected from you; the existence of automated decision-making, including profiling, in accordance with GDPR Art. 22(1) and (4) and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
You also have the right to request information as to whether your personal data is transferred to a third country or an international organisation. In this context you may request to be informed about the appropriate guarantees in accordance with GDPR Art. 46 in connection with the transfer.
6.2 Right to rectification
You also have a right vis-à-vis us to have your personal data rectified and/or completed where your processed data is inaccurate or incomplete. Where this is the case, we will rectify the data without undue delay.
6.3 Right to the restriction of processing
Under the following circumstances you have a right to request that the processing of your personal data be restricted if:
• you are contesting the accuracy of your personal data for a period that enables us to verify the accuracy of the data;
• the processing is unlawful and you oppose the erasure of your personal data and instead request the restriction of its use;
• we no longer need your personal data for the purposes of processing, but you need this data for establishing, exercising or defending legal claims, or
• you have objected to the processing in accordance with GDPR Art. 21(1) and it has not been established yet whether our legitimate reasons override your reasons. After you have requested the restriction of the processing of your personal data, this data (aside from its storage) may only be processed with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural person or legal entity or for reasons of an important public interest of the Union or a Member State. We will notify you before the restriction is lifted.
6.4 Right to erasure
You may request that your personal data be erased without undue delay. We have a duty to erase this data without undue delay where one of the following reasons applies:
• Your personal data is no longer required for the purposes for which it was collected or otherwise processed.
• You revoke any existing consent that formed the basis of processing in accordance with GDPR Art. 6(1a) or Art. 9(2a) and there is no other legal basis for continuing the processing.
• You object to the processing in accordance with GDPR Art. 21(1) and there are no overriding legitimate grounds for the processing.
• You object to the processing by way of direct marketing in accordance with GDPR Art. 21(2).
• Your personal data was processed unlawfully.
• The erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which we are subject.
• Your personal data was collected in relation to the offer of information society services referred to in GDPR Art. 8(1). Where we have made your personal data public and have a duty to erase this data in accordance with GDPR Art. 17(1), we will take reasonable steps, taking into account the available technology and the cost of implementation, to inform the data controllers that you have requested the erasure of any link to, or copy or replication of, this personal data by these controllers. Your right to the erasure of data does not exist where the processing is necessary
• to exercise the right to freedom of expression and information;
• to comply with a legal obligation requiring the processing under the law of the Union or the Member States to which we are subject or to perform a task which is in the public interest or is carried out in the exercise of official authority vested in us;
• for reasons of public interest in the area of public health in accordance with GDPR Art. 9(2h), (2i) and (3);
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with GDPR Art. 89(1) to the extent that the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
• to establish, exercise or defend legal claims.
6.5 Right to be informed
Where you have exercised your right to the rectification or erasure of data or the restriction of its processing vis-à-vis us, we have a duty to communicate this rectification or erasure of the data or the restriction of its processing to all recipients to whom your personal data was disclosed, unless this proves impossible or involves disproportionate effort. You have a right to be informed about these recipients.
6.6 Right to data portability
You have the right to receive the personal data concerning you that you provided to us in a structured, commonly used and machine-readable format. In addition, you have the right to transmit that data to another controller without being hindered by us where
• the processing is based on consent in accordance with GDPR Art. 6(1a) or Art. 9(2a) or on a contract in accordance with GDPR Art. 6(1b) and
• the processing is carried out by automated means. In this respect you also have the right to have us transmit your personal data directly to another controller where this is technically feasible. This right must not adversely affect the rights and freedoms of other persons. The right to data portability does not apply to any processing operation involving personal data that is necessary for the performance of a task in the public interest or carried out in the exercise of official authority vested in us. We do not believe that the data currently being processed within the offering of our website include data that is subject to the right of data portability.
6.7 Right to object
You have the right to object to processing of your personal data that is based on GDPR Art. 6(1e) or (1f) at any time on grounds relating to your particular situation; this also applies to any profiling based on those provisions. In this case we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless the data is processed for the establishment, exercise or defence of legal claims. Where your personal data is processed for direct marketing purposes, you have the right to object to processing of personal data concerning you for the purposes of such marketing at any time; this also applies to any profiling related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
6.8 Right to revoke the consent under data protection law
You have a right to revoke your consent under data protection law at any time. The revocation of your consent does not affect the lawfulness of the processing carried out based on the consent until the consent was revoked.
6.9 Automated individual decision-making, including profiling
You have the right not to be subjected to a decision that is based solely on automated processing, including profiling, which produces legal effects for you or has similar significant negative effects for you. We do not perform such processing operations.
6.10 Right to lodge a complaint with a supervisory authority
Notwithstanding any additional rights to lodge complaints, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged violation, if you feel that the processing of your personal data violates the GDPR.
7. Responsibility for linked content
We may also use links to websites of other providers on our website. This privacy notice does not apply in this respect. Please read the privacy notice of the respective provider where your use of the websites of these other providers involves the collection, processing or use of personal data. We are not responsible for their data protection policies.
8. Disclosure of personal data to third parties
Your personal data is only stored on our servers or servers used on our behalf. These servers can only be accessed, and the data can only be used, by a group of employees and/or service providers with special authorisation and access is limited to that data which is necessary for performing the relevant task. Your data will not be transferred to third parties without your consent. Unless otherwise provided for in this privacy notice, data is not currently being transferred to third countries (countries outside of the European Economic Area – EEA) and there are no plans for doing so in the future.
9. Data security
To protect your personal data, we have implemented technical and organisational measures to ensure that your data is protected against any accidental and/or intentional loss, destruction or manipulation or the access by unauthorised persons. Our protective measures are reviewed on a regular basis and are adapted to keep up with technical advances as required.
10. Data protection officer
If you have any additional questions regarding the processing of your personal data, please contact our data protection officer: compolicy GmbH, Dr. Christian Wolff, An den Eichen 15, 24248 Mönkeberg info(at)compolicy.de
11. Changes to the privacy notice
We reserve the right to change this privacy notice at any time as required and with reference to the data protection regulations in effect at the time when the privacy notice is changed. Here you can decide whether a unique web analysis cookie may be placed in your browser in order to enable the website operator to collect and analyse various types of statistical data. If you want to decide against such placement, please click on the following link in order to place the Piwik disabling cookie in your browser. The information regarding your visit to this website is currently being collected by Piwik web analytics. Please click here to ensure that the information regarding your visit will not be collected any more.