Source: https://www.brose.com/de-en/datasecuritypolicy.html
Timestamp: 2019-04-23 04:11:48+00:00

Document:
We are delighted that you are interested in our website. We take the protection of personal information very seriously and pay close attention to this aspect in our online activities. The processing of your personal information by Brose takes place in compliance with statutory requirements and – if necessary – based on your consent. The most important statutory basis for this is the European General Data Protection Regulation (GDPR). We also comply with all other applicable data protection legislation, in particular Germany’s Data Protection Act (Bundesdatenschutzgesetz, BDSG) and Telemedia Act (Telemediengesetz, TMG).
You are on the website “brose.com”. Brose Fahrzeugteile GmbH & Co. Kommanditgesellschaft, Coburg (“Brose”) is responsible (the “controller”) for data processing associated with your use of the website.
- When you visit our website to initiate contracts or business relationships with us, the legal basis for the processing of your data is Art. 6 para. 1 (b) GDPR (initiation or performance of a contract).
- Also, as a general rule, processing takes place based on our legitimate interests in accordance with Art. 6 para. 1 (f) GDPR. Our legitimate interest is to operate a website for general information and communication purposes as well as to present our company.
Is there an obligation for you to provide your data and what happens if you choose not to?
Is your data shared with anyone? Or, who participates in the processing of my data?
We only share your data internally with the department that is responsible for your request. In some cases, it may also be forwarded to another Brose Group company.
We use the CDN from Akamai Technologies GmbH (Parkring 20 – 22, 85748 Garching, Germany) for the basic features of our website and the service provider Brightcove, Inc. (290 Congress Street, 4th Floor, Boston MA 02210, USA) for the delivery of videos. Usage data is collected automatically on the servers of Akamai and Brightcove for the purpose of delivery, acceleration and protection of Brose web content.
Data processing and the required storage of cookies takes place based on our legitimate interests as per Art. 6 para. 1 (f) GDPR. Our legitimate interests relate to the smooth and accelerated display of our web content on brose.com and thus serve our business interests to operate a website for general information and communication purposes as well as to present our company.
Your usage data is shared with Akamai and Brightcove where it is automatically processed on our behalf. Brose has no possibility to analyze this data.
Your usage data is stored by the cookies of Akamai and Brightcove only for the duration of your visit to the website and then automatically deleted (“session cookies”).
It is not possible to use the website without processing your usage data.
More information about privacy and the processing of your personal data by Akamai is available here. More information about privacy and the processing of your personal data by Brightcove is available here.
We use the “etracker” service, which enables data traffic analysis for our website (web analytics). This helps us continuously improve the information and the design of our website. We use etracker for various purposes such as to analyze which sections and subpages of our website were visited – and how often and for how long – and where our users come from (other websites).
etracker GmbH (Erste Brunnenstraße 1, 20459 Hamburg, Germany) processes different usage data for this purpose and assigns an anonymous identifier to it. Additionally, certain information of the operator of website from which you came to us (in particular the URL of the previous page, any related search engine, any related search terms) may be processed. This usage data is used to create non-personalized reports on the use of our website.
Data processing and the required storage of cookies takes place based on your consent as per Art. 6 para. 1 (a) GDPR.
Your usage data is shared with etrackerGmbH where it is automatically processed on our behalf. In principle, analysis options are used only internally by our IT and marketing department.
More information about privacy and the processing of your personal data by etracker is available here.
The recommendation tool of Dynamic Yield (Highlands House, Basingstoke Road, Spencers Wood, Reading, Berkshire, England RG7 1NT) is used to optimize our website to turn your visit into a personalized experience with recommendations and content specifically tailored to your preferences. To do this we use the page content you previously accessed to recommend similar or thematically related products or other content that might be relevant to you.
Dynamic Yield processes different usage data for this purpose. Cookies are used exclusively to save pseudonymized information under a randomly generated ID (pseudonym). Your IP addresses are only saved in anonymized form in the process. This means that it is not possible to associate the data to any particular user and that it cannot be (re)stored at a later time.
Your usage data is shared with Dynamic Yield where it is automatically processed on our behalf. In principle, analysis options are used only internally by our IT and marketing department.
More information about privacy and the processing of your personal data by Dynamic Yield is available here .
Who is the controller for the Google Maps service?
Our website uses a map service called “Google Maps”. We have marked Brose group locations on Google Maps and embedded this map on our website under “Company/Locations”. Controller under data privacy protection laws: Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We have no access to the data that Google collects in the scope of this map service. Google is solely responsible for any data processing that takes place.
Nevertheless, in order to be as transparent as possible, we would like to provide you with some information on how data is processed in connection with the Google Maps service.
For more information, please see Google’s privacy statement at policies.google.com/privacy.
What is the purpose of the Google Maps service?
We have marked the location of the Brose Group on Google Maps and embedded this map on our website under “Company/Locations” in order to enable visitors to find our locations quickly and to make our website as appealing as possible.
The processing of your personal data in connection with the Google Maps service takes place based on the legitimate interests of Brose on the basis of Art. 6 para. 1 (f) of the European General Data Protection Regulation (GDPR). Our legitimate interest is to optimize our website in order to promote business and enable users to quickly find Brose Group locations. For more information on the legal basis for processing your personal data, please see the privacy statement of Google, the controller, at policies.google.com/privacy.
Is there an obligation for you to provide your personal data and what happens if you choose not to?
You are not required to provide your personal data. However, if your personal data cannot be processed, you will not be able to use our website brose.com or the Google Maps service embedded on our website.
We do not have any access to your personal data in connection with the Google Maps service, and we do not share any information with third parties. For more information on how Google, the controller, may share your personal data, please see Google’s privacy statement at policies.google.com/privacy.
Is your data shared with a third country or an international organization?
We will not transmit the personal data you share in connection with the Google Maps services with a third country or international organization. If the Google Maps service connects with the servers of Google, the controller, and your personal information is transmitted in the process, then further information on this is available in Google’s privacy statement at policies.google.com/privacy.
We do not store any personal data in connection with the Google Maps service. For more information on how Google, the controller, may store your personal data, please see Google’s privacy statement at policies.google.com/privacy.
Google Tag Manager enables us to manage website tags via a single interface. However, the Tag Manager that uses the tags itself functions without cookies and does not collect any personal information. Your IP address is only transmitted to Google in anonymized form.
The Tag Manager only triggers other tags, which may collect data of their own in certain circumstances. This privacy statement provides information on the respective third parties (eTracker). However, Google Tag Manager does not use this data. If you have disabled cookies in your settings or by some other means, this will be observed for all tracking tags that were set with the Google Tag Manager; i.e. the tool does not modify your cookie settings.
Google may ask you for permission to share product data (e.g. your account information) with other Google products in order to enable certain features, e.g. to make it easier to add new conversion tracking tags for AdWords. In addition, Google developers review data concerning product usage from time to time in order to further optimize the product. However, Google will never share data of this kind with other Google products without your consent.
We offer you the possibility of applying for job openings at our company via the applicant portal on our website.
In addition to Brose Fahrzeugteile GmbH & Co. Kommanditgesellschaft, Coburg, Germany, which initially receives all applications, the party responsible for the processing of your personal data is the respective Brose Group company responsible for your application.
Personal data such as your name, contact information, educational background, training data and job experience ("applicant data") that you provide to us as part of your application is treated confidentially and electronically stored and used solely for the purpose of application processing and, if necessary, to carry out the subsequent employment relationship.
We need the data processed as part of the application process to potentially enter into an employment relationship or make a decision on hiring you. We process this personal data to verify your suitability for the respective position, for the purpose of application processing and to contact you.
By means of a separate declaration you can consent to being included in our applicant pool should your application not be accepted following the respective hiring process. This makes it possible for us to contact you again in case of suitable job postings that match your profile.
The processing of your personal data as part of the application process is carried out on the basis of Art. 6 para. 1 (b) GDPR (initiation or performance of a contract) and any applicable national rules on the protection of employee data (e.g. Section 26 (1) sentence 1 BDSG in Germany).
Any further storage of your data in the applicant pool takes place based on your consent as per Art. 6 para. 1 (a) GDPR.
Is there an obligation for you to provide your data or is this required for the conclusion of a contract and what happens if you choose not to?
Please note: You are not required to provide your data as part of the application process. However, it is not possible to execute the application process and establish an employment relationship without processing your data and hence your application unfortunately cannot be considered without providing your data.
Refusal to consent to the inclusion in our applicant pool will not result in any disadvantages for the concrete hiring process. But we will not be able to contact you then for other job openings.
We share your data within the Brose Group with the company or department responsible for your application within the company.
We also store your personal data on the central server of our system provider Haufe-Lexware Service GmbH & Co. KG (Frauenhoferstr. 5, 82152 Planegg, Germany) who acts on our behalf (Art. 28 GDPR).
Data may be shared with a third country outside of the EU depending on which company within the Brose Group is responsible for your application. In this case we guarantee that appropriate safeguards are taken to protect your personal data, in particular through the conclusion of standard data protection clauses pursuant to Art. 46 para. 1 (c) GDPR.
Your personal data is deleted as soon as it is no longer required for the application process (e.g. if your application is rejected or a negative decision is made). This does not apply if statutory provisions prevent deletion or if further storage is required for evidentiary purposes. For example, personal data may be stored for evidentiary purposes for the period in which it is possible to make claims against our company (e.g. such as those pertaining to the General Act on Equal Treatment in Germany (Allgemeines Gleichbehandlungsgesetz, AGG)).
If you consent to the inclusion of your application in our applicant pool your application will be stored for a maximum of 48 months; your data is automatically deleted after this period. You can use the contact information below (please refer to Section 8) to contact our privacy officer at any time even before the end of this 48-month period and request the deletion of your data from the applicant pool. The data will be deleted immediately. If your application results in the conclusion of a contract, then your data will be stored and used for the purpose of the usual organizational and administrative processes in compliance with relevant regulations.
We secure our website and other systems with up-to-date technical and organizational measures to prevent your data from being lost, destroyed, accessed, modified or disseminated by unauthorized persons. When sending personal data, we make use of encryption technology to ensure extremely high levels of confidentiality. Our servers use various security mechanisms and permission processes to make unauthorized access difficult. You should keep your access information secret at all times and close your browser window once you have finished communicating with Brose. This will ensure that no one apart from you can access your personal data if you share your computer with other people.
Right to object the processing, in particular if this takes place to safeguard the legitimate interests of the controller (Art. 21 GDPR).
the competent regulatory agencies. For Brose Fahrzeugteile GmbH & Co. Kommanditgesellschaft, Coburg, Germany, this is Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany, email: poststelle@lda.bayern.de.
Brose has publicly accessible profiles on social networks. The social networks we use are listed below.
If you are logged into your social media account and visit our social media site, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in. Even if you do not have an account with the relevant social media portal, your personal data can still be collected. In this case, the data is collected, for example, via cookies that are stored on your device or by recording your IP address.
With the help of the data collected in this way, the operators of the social networks can create user profiles in which your preferences and interests are stored. In this way, interest-related advertising can be displayed inside and outside the respective social media presence. If you have an account on the social network, interest-based advertising can be displayed on all devices on which you are logged in or where you have been logged in.
Our social media sites should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
If you visit one of our social media sites (e.g. Facebook), we are responsible, together with the operator of the social media platform, for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data portability and complaints) basically both against us and against the operator of the respective social media network (e.g. against Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our possibilities depend largely on the corporate policy of the respective provider.
The data collected directly by us via our social media sites will be deleted from our systems as soon as the purpose for its storage ceases to apply, you request that we delete it, you revoke your consent for storage or the purpose for data storage ceases to apply. Stored cookies remain on your device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have a profile at Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under EU-US-Privacy-Shield.
You can customize your advertising settings independently in your user account.
We use the short message service Twitter. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter is certified under EU-US-Privacy-Shield.
We have a profile at LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified according to the EU-US Privacy Shield. LinkedIn uses advertising cookies.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 6
 Art. 6