Source: https://www.sam-automotive.com/index.php/en/privacy-policy
Timestamp: 2019-04-22 02:29:00+00:00

Document:
The following privacy statement concerns your use of our website www.fysam-auto.com (hereinafter “Website”).
We take data protection very seriously. Your personal data is collected and processed in strict accordance with all applicable data protection requirements, in particular those of the General Data Protection Regulation (GDPR).
Please contact us if you object to our collecting, processing, or using your personal data according to any one or all of the data protection provisions outlined in this privacy statement.
You may save or print this privacy statement at any time.
The processing of data on this Website is performed by the website operator. The contact information of the website operator can be found on the imprint page of this Website.
We collect the data that you provide to us via the Website, e.g. data that is entered into a contact form.
Other data is collected by our IT systems when you visit the Website. This data is mainly technical in nature (e.g. information regarding your Internet browser, operating system, or the time of your visit), and collected automatically as soon as you access our Website.
Some of your data is used to ensure the Website runs without errors. Other data may be used to analyze user behavior.
You have the right to be informed, at any time and free of charge, about the source, recipient, and intended use of your collected personal data. You also have the right to request that this data be rectified, restricted, or erased. You may contact us at any time at the address listed on our imprint page for questions on these or other topics related to privacy. Moreover, you are also entitled to file a complaint with a supervisory authority.
The operator of this Website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy statement.
A variety of personal data is collected when you use this Website. Personal data is data that makes it possible to identify you personally. The present privacy statement describes the data that we collect, and the ways in which we use it. It also summarizes how and why your data is collected.
Please note that all data transmission via the Internet (e.g. communication by email) may be subject to security flaws. It is impossible to protect data from third-party access completely.
We make use of hosting to provide us with the infrastructure and platform services, computing capacity, disk space, database services, security services, and technical maintenance services that are necessary for the operation of this Website.
To carry out these services, we (or our hosting provider) process the inventory data, contact data, content data, contractual data, usage data, meta data, and communication data of customers, prospects, and visitors to this Website on the basis of our legitimate interests to ensure our Website remains both efficient and secure, as per Art. 6 (1) (f) and Art. 28 of the GDPR.
We use this log data (without associating it with you or any other profile) to perform statistical analyses which allow us to optimize the performance and security of our Website, as well as for the anonymous recording of the number of visitors to our Website (traffic), to measure the scope and type of use associated with our Website and services, and, for accounting purposes, to determine the number of clicks effectuated by our partners. With this information, we can offer personalized and localized content, analyze data traffic, troubleshoot errors, and improve our services.
Herein lies the basis for our legitimate interest as per Art. 6 (1) (f) of the GDPR.
We reserve the right to subsequently check all log data if concrete evidence leads to a justified suspicion of unlawful use. We save IP addresses for a limited period of time in log files if these addresses are required for security purposes or for the delivery or invoicing of a service, such as when you opt for one of our offers. Once the order process has been terminated or the payment received, we delete the IP address if it is no longer required for security purposes. We also save IP addresses if we have a genuine suspicion that a crime has been committed in conjunction with the use of our Website. Moreover, we save the date of your last visit (e.g. during registration, login, the clicking of links, etc.) as part of your customer account.
We use so-called “session cookies” to optimize our Website. A session cookie is a small text file that is sent by the server of an Internet site as you visit that site, and temporarily stored on your computer. Each cookie contains a “session ID” which allows for the various requests you make with your browser to be assigned to your entire session. Session IDs enable your computer to be recognized when you navigate back to our Website. Session cookies are deleted when you close your Internet browser. These cookies come in handy, for example, when you wish to visit other pages without losing the items you have already placed in your shopping cart.
We also use a limited number of “persistent cookies” (also small text files) which are stored on your end device and allow us to recognize your browser the next time you visit our Website. These cookies are saved on your hard drive and automatically deleted after a given time (anywhere from one month to ten years). Cookies help us to make our Website easier to use, more effective, and more secure, as well as to offer you information that is tailored to your own particular interests.
Information on the number of times our Website was requested, and the use of the individual functions of our Website.
When cookies are enabled, they are assigned ID numbers. These numbers are not associated with your personal data. Your name and IP address - or other such data which would make it possible to associate the cookie with your identity - are not saved inside the cookie. We only receive pseudonymized data based on cookie technology, such as information on the pages you visited in our online store, the products you viewed, etc.
We process the personal data that is necessary for us to fulfill our contractual obligations, such as your name, address, email address, the products you ordered, and your billing and payment information. This data must be collected before a contract can be concluded.
Once the warranty and legal data retention periods have expired, we proceed with the deletion of this data. Data linked to a user account (see below) is always kept until the account has been closed.
Art. 6 (1) (b) of the GDPR is the legal basis for the processing of this data, as this data is required for us to fulfill our contractual obligations vis-à-vis our customers.
You can create a user account on our Website. If you choose to do so, we will require the personal data that is requested during the initial login. For subsequent logins, only your email address or username and password will be required.
For new registrations, we collect core data (e.g. name and address), communication data (email address), payment data (bank account details), and access data (username and password).
In order to ensure your registration is completed properly and prevent unauthorized registrations by third parties, you will receive an activation link by email once you have completed your registration which will allow you to activate your account. Your transmitted data will only be saved in our system if you have successfully completed your registration.
You can request that your user account be deleted at any time, without incurring any other costs besides the usual basic rates. To do so, simply write to us (by email, fax, letter, etc.) at the address listed under Section 1 of this privacy statement. We will then proceed with the deletion of your personal data, provided that we are not required to save this data to complete an order or fulfill legal data retention obligations.
Your consent as per Art. 6 (1) (a) of the GDPR is the legal basis for the processing of this data.
If you wish to subscribe to the newsletter, we will need the data that is requested during the subscription process. Your newsletter subscription is recorded by us. Once your subscription has been submitted, an email will be sent to the email address you entered, requesting that you confirm your subscription (“double opt-in”). This confirmation is necessary to prevent third parties from being able to register with your email address.
You can revoke your consent at any time to receiving newsletters, and thereby cancel your subscription.
We save your registration data for as long as this data is required to send the newsletter. We save the records of your subscription and your mailing address in the event that interest be expressed in the proof of your original consent. In general, this information is saved, as per the statutes of limitations for civil claims, for a maximum of three years.
Your consent as per Art. 6 (1) (a) and Art. 7 of the GDPR and Art. 7 (2) (3) of the UWG is the legal basis for the sending of the newsletter. The legal basis for the recording of the subscription is our legitimate interest in the proof that the newsletter has only been sent with your consent.
You can cancel your subscription at any time, without incurring any other costs besides the usual basic rates. To do so, simply write to us (by email, fax, letter, etc.) at the address listed under Section 1 of this privacy statement. Each newsletter also contains an “unsubscribe” link.
In addition to the newsletter, we regularly send you product recommendations by email. With these emails, we are able to provide you with information about the products which might be of interest to you, based on the goods and services you have purchased previously. When sending these emails, we pay special attention to comply with all legal regulations. You may cancel these recommendations at any time, without incurring any other costs besides the usual basic rates. To do so, simply write to us (by email, fax, letter, etc.) at the address listed under Section 1 of this privacy statement. Each of these emails also contains an “unsubscribe” link.
The legal permission as per Art. 6 (1) (f) of the GDPR and Art. 7 (3) of the UWG is the legal basis for these emails.
When you contact us (e.g. via the contact form or by email), we process the personal data that is required for the processing of your request or for any follow-up questions which may arise.
If this data processing is conducted to perform pre-contractual measures which arise from your inquiry, e.g. if you are already our customer or to execute a contract, then Art. 6 (1) (b) of the GDPR is the legal basis for this data processing.
We only process additional personal data if you give us your express consent to do so (Art. 6 (1) (a) of the GDPR) or we have a legitimate interest to process such data (Art. 6 (1) (f) of the GDPR). Here, a legitimate interest might lie in answering your email.
This Website uses the functions of the web analysis tool Google Analytics. Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA, is the provider of this service.
Google Analytics uses so-called “cookies.” Cookies are text files which are stored on your computer and allow us to analyze your use of our Website. The information gathered by the cookie regarding your use of this Website is usually transmitted to a Google server in the USA, where it is stored.
Art. 6 (1) (f) of the GDPR is the basis for the saving of personal information by Google Analytics cookies. The website operator has a legitimate interest in the analysis of user behavior, in order to optimize both its online offer and its advertisements.
The IP anonymization function is enabled on this Website. With this function, Google shortens your IP address within the member states of the European Union, or in other nations included in the Agreement on the European Economic Area, before it is sent to the USA. In certain rare cases, your full IP address will be sent to a Google server in the USA and shortened there. The operator of this Website has requested that Google use this information to evaluate your use of the Website, compile reports on the activities of the Website, and render other services for the website operator with regard to the use of the Website and the Internet. The IP address sent by your browser during a Google Analytics analysis will not be linked to other Google data.
You are free to disable cookies in the settings of your browser; please note, however, that you may not be able to make full use of all the functions of this Website if you do so. You can also prevent Google from collecting and processing the data gathered by the cookie with regard to your use of the Website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You can prevent your personal data from being collected by Google Analytics by clicking on the following link. An opt-out cookie will be used to prevent your data from being collected during subsequent visits to this Website: disable Google Analytics.
We have entered into a contractual data processing agreement with Google and implement the strict requirements of the German data protection authorities with regard to the use Google Analytics.
This Website uses the Google Analytics “Demographics and Interests” feature. Demographics and Interests creates reports which contain information on the age, gender, and interests of visitors to the Website. This data comes from interest-based advertisements by Google, as well as from visitor data from third-party providers. This data cannot be associated with any one particular individual. You can disable this function at any time via the Ads Settings in your Google account, or by prohibiting the collection of your data by Google Analytics as outlined in the “Objection to data collection” section above.
Our Website uses Google Analytics Remarketing functions in connection with the cross-device functions of Google AdWords and Google DoubleClick. Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA, is the provider of this service.
This function allows for the target groups created with Google Analytics Remarketing to interface with the cross-device functions of Google AdWords and Google DoubleClick. As a result, personalized, interest-based advertisements which had been tailored in accordance with your previous usage and surfing behavior on one end device (such as your phone) can now be displayed on one of your other end devices (e.g. a PC or tablet).
If you have provided the appropriate permission, Google will link your web and app browsing history with your Google account for this purpose. The same personalized ads can then be displayed on each of the end devices you use to log into your Google account.
Google Analytics collects the user’s Google-authenticated ID that is temporarily linked to our Google Analytics data to make it easier for the function to define and create target groups for cross-device advertising campaigns.
You can permanently opt out of cross-device remarketing/targeting by disabling personalized ads in your Google account at the following link: https://www.google.com/settings/ads/onweb/.
The data collected in your Google account can only be processed with your consent, which you can grant to or revoke from Google (Art. 6 (1) (a) of the GDPR). For data collection that is not conducted in your Google account (e.g. because you do not have a Google account or have opted out of the collection), the data collection is based on Art. 6 (1) (f) of the GDPR. A legitimate interest arises in that the website operator seeks to obtain an anonymized analysis of website visitors for marketing purposes.
This Website uses Google AdWords. AdWords is an online advertising program created by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA (“Google”).
We use the “conversion tracking” tool in Google AdWords. When you click on an ad placed by Google, a cookie is deployed for conversion tracking. Cookies are small text files that an Internet browser deposits on a user’s computer. These cookies become invalid after 30 days and can no longer be used to personally identify the user. If the user surfs to a page of this Website and the cookie has yet to expire, then we (and Google) will determine that the user clicked on the advertisement and was forwarded to this page.
Every Google AdWords client receives a separate cookie. Cookies cannot be traced back via the websites of AdWords clients. The information obtained by the use of conversion cookies helps Google create conversion statistics for those AdWords clients who have opted for conversion tracking. These clients learn the total number of users who clicked on their ad and were redirected to a page containing a conversion tracking tag. They do not however receive information which would make it possible to identify users personally. Opting out of conversion tracking is easy: simply disable the Google Tracking Conversion Cookie in the user settings of your browser. As a consequence, you will not be included in conversion tracking statistics.
The storing of personal data by “conversion cookies” is based on Art. 6 (1) (f) of the GDPR. The website operator has a legitimate interest in the analysis of user behavior, in order to optimize both its online offer and its advertisements.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA (“Google”) is the provider of this service.
reCAPTCHA is used to check whether data entry on our websites (e.g. in a contact form) is performed by a person or an automated program. reCAPTCHA analyzes the behavior of website visitors. This analysis begins automatically as soon as the visitor accesses the Website. During the analysis, reCAPTCHA evaluates a number of different attributes, including the user’s IP address, the amount of time the user spends on the Website, and the mouse movements that are executed. The data collected during the analysis is forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors will not be informed that such an analysis is taking place.
The processing of this data is based on Art. 6 (1) (f) of the GDPR. The operator of the Website has a legitimate interest to protect its online offers from unauthorized automated disclosure and SPAM.
Unless otherwise indicated, we only store your personal data for as long as it is required for its intended purposes.
In some cases, such as in tax and commercial law, the legislation makes provisions for the storage of personal data. In these cases, we only continue to save your data for these legal purposes and do not process it in any other way, and once the legal retention period has expired, the data is deleted.
According to applicable law, you have various rights with regard to your personal data. If you wish to exercise these rights, please send your request by email or regular mail to the address listed in Section 1 of this privacy statement, making sure to include all the personal details required to establish your identity.
An overview of your rights is provided below.
You have the right to transparent information with regard to the processing of your personal data.
the existence of automated decision-making, including profiling, as per Art. 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
If personal data is transferred to a third country or an international organization, you have the right, as per Art. 46 of the GDPR, to be informed of the appropriate safeguards of such a transfer.
You have the right to request that we rectify and, if necessary, complete your personal data.
You have the right to request that we immediately rectify any incorrect data relating to your identity. Taking into account the purposes of the processing, you also have the right to request – including by way of a supplementary statement – that incomplete personal data be completed.
In many instances, we are obligated to erase your personal data.
the personal data has been collected in relation to the services offered by the information society as per Art. 8 (1) of the GDPR.
If we have disclosed your personal data and are obligated per Art. 17 (1) of the GDPR to delete it, then we shall, taking into account available technology and the cost of implementation, take reasonable steps, including technical ones, to inform the parties in charge of processing your data that you have requested that these parties delete all links to, or copies or replications of, this personal data.
In many instances, you have the right to request that we restrict the processing of your personal data.
you have objected to the processing as per Art. 21 (1) of the GDPR, as long as it has not been determined that our company’s legitimate interests override your own.
You have the right to receive, transmit, or have your personal data transmitted by us in a machine-readable manner.
In exercising your right to data portability as per Paragraph 1, you have the right to request that we transmit your personal data to another controller directly, insofar as this is technically possible.
You have the right to object to the lawful processing of your personal data, provided this objection is based on your own particular situation and does not override our interests in the processing.
You have the right, for reasons stemming from your own particular situation, to object at any time to the processing of your personal data based on Art. 6 (1) (e) or (f) of the GDPR; this also applies to profiling based on these conditions. We shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling, provided the latter is related to direct marketing.
You have the right, for reasons stemming from your own particular situation, to object at any time to the processing of your personal data which is performed for scientific or historical research purposes, or statistical purposes, as per Art. 89 (1) of the GDPR, unless this processing is necessary to complete a task that is in the interest of the public.
You have the right to not be subject to a decision that is based solely on automated processing – including profiling – which leads to you suffering legal or other significant consequences.
We do not perform automated decision-making based on the personal data we collect.
You have the right to revoke at any time a consent you have granted with regard to the processing of your personal data.
You have the right to file a complaint with a supervisory authority, in particular in the member state of your residence, your place of work, or the place of the alleged infringement, if you consider that the processing of your personal data is in any way unlawful.
We take great effort to protect your data according to all applicable privacy laws and the latest technological possibilities.
Your personal data is transmitted in an encrypted manner. This is true for orders as well as your customer login. Although we use the SSL (Secure Sockets Layer) protocol, all data transmission via the Internet (e.g. communication by email) may be subject to security flaws. It is impossible to protect data from third-party access completely.
To make your data secure, we maintain technical and organizational security measures (as per Art. 32 of the GDPR) that are always implemented with the best available technology.
We also take great care to ensure our servers remain secure. We cannot however guarantee that our services will be available at all times, as disruptions, interruptions, and malfunctions are not always avoidable.
In general, your personal data is only used within our company.
If and to the extent that we seek the assistance of third parties to fulfill our contracts (such as logistics service providers), these parties only receive your personal data if this data is necessary to carry out the particular service.
In the event that we outsource certain parts of our data processing ("job processing") to other data processors, these processors are contractually obligated to only use your personal data in accordance with the requirements of privacy laws, and to ensure your rights remain protected.
Data is not transmitted to entities or people outside the EU (except as described in Section 4 of this privacy statement), nor do we expect it to be in the future.
Our Website uses plugins from the Google-run website YouTube. YouTube, LLC, 901 Cherry Ave., San Bruno, CA, 94066, USA, is the operator of these plugins.
When you visit one of our pages containing a YouTube plugin, a connection is established to YouTube’s servers. YouTube will therefore learn which of our pages of our Website you have visited.
If you are logged into your YouTube account while navigating the Website, you are allowing YouTube to associate your surfing behavior with your personal YouTube profile. To prevent YouTube from making such an association, simply log out of your YouTube account before visiting the Website.
We use YouTube to provide an attractive online offer, which represents a legitimate interest as per Art. 6 (1) (f) of the GDPR.
The Website uses Google Web Fonts to standardize the fonts on its pages. When you access a page, your browser downloads the required Web Fonts to your browser’s cache to properly display texts and fonts.
For Web Fonts to work, your browser must establish a connection to Google’s servers. Google therefore learns that our Website has been accessed by your IP address. We use Google Web Fonts to create a uniform and attractive online offer, which represents a legitimate interest as per Art. 6 (1) (f) of the GDPR.
If your browser does not support Web Fonts, then your computer will use a default font.
This Website runs “Google Maps” via an API (application programming interface). Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA, is the provider of this service.
Your IP address must be saved if you wish to use the features of Google Maps. This information is usually sent to a Google server in the USA and saved there. The provider of this Website has no influence on this data transmission.
We use Google Maps to provide an attractive online offer and to make it easy to find the addressees listed on our Website, which represents a legitimate interest as per Art. 6 (1) (f) of the GDPR.
We have the right to make occasional modifications to this privacy statement to ensure it complies with the current legal regulations, or in order to update the services listed herein, e.g. following the introduction of new services. The updated privacy statement will be applicable the next time you visit the Website.

References: Art. 6
 Art. 28
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 7
 Art. 6
 Art. 7
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 89
 Art. 32
 Art. 6
 Art. 6
 Art. 6