DATA PRIVACY STATEMENT
Preamble
STABILO International GmbH (in the following: STABILO) is firmly committed to data privacy. Therefore, as a matter of course, we strictly adhere to the legal regulations concerning the protection of data privacy (in particular those in GDPR (General Data Protection Regulation), BDSG [German Data Protection Act] and TMG [German Telemedia Act]) and will do everything possible to ensure the privacy of your data. In addition, it is important for us that you know at any given time which data we store and how we use them. Please take a moment to read the following text informing you about the way we deal with your data. We reserve the right to revise the content of this data privacy statement from time to time, in particular to adapt it to new legal stipulations and technical development so that we can also safeguard data protection in the future. It is therefore advisable to regularly take note of our information and remarks concerning data processing.
This Data Privacy Statement is applicable to STABILO’s internet presence under the domain: https://www.stabilo.com/com, as well as other country STABILO websites (in the following. “Website”).
1 Responsible person and scope
The responsible person is: STABILO International GmbH, Schwanweg 1 – 90562 Heroldsberg, Germany (hereinafter “STABILO”).
2 Data Protection Officer
Our Data Protection Officer is: Mr. Sebastian Meyer, Schwanweg 1 – 90562 Heroldsberg, Germany. Please refer to our Data Protection Officer if you have any questions regarding data protection issues at our company. You can reach him under the email-address datenschutz@stabilo.com.
3 General Principles on data processing
We collect and use personal data from our users basically only then, when this is necessary to provide a functional Website as well as to deliver our content and services.
3.1 Personal data
Personal data is all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, email-address, address, date of birth or your phone number. Non-personal data is ex. data regarding the number of users at a website.
3.2 Processing of personal data
Processing of personal data is any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
We process personal data through our Website only if you provide us with this data, ex. when filling out our contact form or sending us an email. We process this data for the named purposes or for the purposes defined in your request. We do not disclose your personal data to third parties, unless otherwise provided by law or you have given us your consent thereto. Apart from that you may use the general information at https://www.stabilo.com/com without revealing your personal data.
The data processing described above is carried out in accordance with article 6 (1) lit. b and article 6 (1) lit. f GDPR.
3.3 Legal basis
Collecting and processing your personal data takes generally place upon your consent. Should the data processing be based on your consent, the legal basis for this data processing is Article 6 (1) lit. a GDPR. An exception may occur when obtaining a consent is not possible and/or this is permitted by law. If processing your data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, the legal basis for this data processing is Article 6 (1) lit. b GDPR. If processing your personal data is necessary for compliance with a legal obligation to which we as the controller are subject, the legal basis for this data processing is Article 6 (1) lit. c GDPR.
If processing your personal data is necessary for the purposes of legitimate interests pursued by us, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, the legal basis for this data processing is Article 6 (1) lit. f GDPR.
3.4 Competitions
Personal data of participants in STABILO competitions, e.g. the surname, first name, email address, date of birth, university affiliation and country will only be used to run the competition and to notify the winners. The addresses of the winners can also be processed to send the prizes in the event of a win. The above-mentioned personal data are only collected when entered by the participant during registration for the respective competition. It is up to the free decision of the participant whether this data will be communicated to us. Without this information, the candidate may not be able to take part in the competition or to benefit in case of a win. Personal data will never be passed on to third parties. STABILO uses various partners to process competitions and to send prices, which can be given access to personal data to the extent necessary and which are carefully selected by STABILO. The legal basis for the processing of data after registration for the competition by the participant is Art. 6 para. 1 lit. b GDPR, i.e. the processing of this data is necessary to carry out pre-contractual measures or to fulfil a contract.
4 Cookies
Below we describe the processing operations connected with usage of cookies, sessions and logfiles.
4.1 Usage of cookies, sessions and logfiles
A cookie is a small text file stored in your browser cache and enables an analysis of your use of our Website and/or ensures the functionality of the Website. Further our partners use cookies in order to evaluate the user behaviour for advertising purposes (social targeting). A session is a single session which will be saved on our server for a short period of time. Logfiles are created by the server and stored by us. They contain automatically generated logs of all or specific activities of processes on a computer system.
4.2 Data collected by cookies
Except for the IP address, no personal data will be stored in the cookies, sessions and logfiles. Furthermore, these files cannot transfer viruses, spy on your computer, or send emails undetected. In addition, each webserver can only read out those cookies it placed itself.
The following data is automatically collected via cookies, sessions and logfiles when you call up our Website:
- Your internet address (IP address) / host name
- Agent/browser type and version
- Website you were referred from (referrer URL)
- Operating system used
- Pages viewed on our Website
- Date and time of access
- Session (for registered users)
- Session ID (for registered users)
This data is stored separately from the data you provided to us and is not linked with other personal data. The data processed according to 4.2. is processed for statistical purposes, in order to optimize our Website and our offer.
4.3 Prevention of cookies
If you object to the use of cookies, sessions and logfiles, you can block or restrict their usage in your browser. However, it cannot be ruled out that in this case you might not be able to use individual functions on our webpages.
Upon closing your browser, the session-cookies are deleted, other cookies after one year. Cookies from our Partners, ex. Google (4.4) are deleted maximally after 24 months. You can deactivate the usage of cookies by Google by means of visiting the deactivating site of Google. Alternatively, you may deactivate the usage of third party cookies by means of visiting the deactivating site of the network initiative.
4.4 Legal basis
The processing activities described above are necessary for the purposes of legitimate interests pursued by us. The legal basis for this data processing is Article 6 (1) lit. f GDPR.
5 Data security and precautionary measures
We are committed to protecting your privacy and treating your personal data confidential. In order to avoid any manipulation, loss or misuse of your data stored by us, we take extensive technical and organizational security measures that are regularly reviewed and adapted to technological progress. Intensive training of our employees and their obligation to data security ensure that your personal data is treated confidential.
5.1 Responsibility of the User
We urge you to also take all possible measures to protect your data while working on the internet. Due to the structure of the internet, it is not possible for us to ensure that third parties, which are not within the scope of our responsibility, adapt identical privacy and security measures. Possibly if personal data is not encrypted or is sent per email it may be seen or read by third parties. Hereto we have no impact. It is the responsibility of the User, to secure his/her data via encryption or by other means.
5.2. Encryption
We use the SSL (Secure Sockets Layer) to encrypt your data on all Websites which require providing personal data. SSL encryption masks your data before transmitting it to our server, in such a manner that it cannot be reconstructed by third parties. This safeguards the privacy of your personal data.
5.3. Technical security measures at STABILO:
Encryption of sensitive data transfer with SSL certificates by dotSource, Goethestraße 1, 07773 Jena, Germany.
Server security: a firewall system protects our servers against attacks.
An internal security system and authorisation concept make sure that your sensitive data are not accessible to our employees unless they have a special authorisation.
6 Service providers for processing personal data
We employ service providers, who process personal data on our behalf and only on our instruction. The service providers are required to comply with all data protection regulations and to process data in accordance with our instructions. Our service providers have been carefully selected and receive access to your personal data only to the extent and for the time necessary to carry out their services.
Service providers in third countries such as the USA and countries outside the European Economic Area are subject to data protection regulations, which do not protect personal data to same extent as in the European Union. Should we process your personal data in countries, which do not provide such a high level of data privacy as in the European Union, then we will ensure by means of contractual regulations and other instruments that your that your personal data is safe and adequately protected.
7 Storage period
Your data will be stored only for the period of time required by law. Your data will be erased, when you have withdrawn your consent for processing your data or the purposes of processing your data have been obtained or when the processing is no longer legitimate for any legal reasons. Any retention periods required by law shall remain unaffected. During the statutory retention periods your data will not be processed for other purposes.
8 Rights concerned
From the GDPR, the following rights arise for you as an affected person for the processing of your personal data:
8.1 Right of access
According to art. 15 GDPR, you can request information about your personal data processed by us. In particular, you may request information on the source of the data, the recipients of this data or categories of recipients, as well as the processing purposes.
8.2 Right of objection
If the processing of personal data is based on your consent, you may object to this processing for the future, at any time and without any reason. To do so please send an email at: or a letter at: STABILO International GmbH, Schwanweg 1 – 90562 Heroldsberg, Germany.