Source: https://www.avl-set.com/en/privacy-policy/
Timestamp: 2019-12-05 17:15:02
Document Index: 775743396

Matched Legal Cases: ['Art. 4', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy - AVL SET
AVL SET TRANSPARENCY STATEMENT
1. With this Transparency Statement we, the AVL group of companies (hereinafter together AVL, we or us), describe how we collect and further process personal data. According to Article 13 and 14 GDPR, companies need to meet specific information requirements when collecting personal data (directly from the data subjects or from thirds). With this Transparency Statement, we respond to these obligations.
2. This Transparency Statement is not necessarily a comprehensive description of our data processing activities. It is possible that other data protection statements, specific privacy notices, general terms and conditions or similar documents are applicable to specific circumstances. For example, please check our Online Privacy Notice for data we collect from users when visiting and operating our online channels like websites, apps, etc.
3. If you provide us with personal data of other persons (such as work colleagues, network contacts, family members etc.), please make sure the respective persons are aware of this Transparency Statement and only provide us with their data if you are allowed to do so and such personal data is correct.
1. The contact details of the body responsible for this website and for the privacy aspects relating to this website (in accordance with Art. 4 para. 7 GDPR) are mentioned in the imprint (individually designated for country pages).
2. Our Data Protection Officer can be reached by email at: info-sps@avl.com
3. Generally, the data controller is responsible for collecting and processing of your personal data. To comply with data protection legislation, the data controller will be the AVL group entity with whom you contract for a product or service, or with whom you interact in a specific case. Please find a list of all AVL group entities here.
4. You can notify us of any data protection related concerns, irrespective of the involved AVL group entity, using the following contact details:
Attn.: Data Protection Manager
1. We process personal data that we obtain from our business clients, suppliers, other business partners as well as individuals in the context of business relationships with them or their employers
2. For data we collect from users when operating our websites, apps and other applications, please also note their respective specific privacy statements (e.g., see our Online Privacy Notice).
3. We also process – insofar as necessary to provide our services and organize our procurement of services – personal data that we obtain from publicly accessible sources, (e.g. debt registers, commercial and association registers, press, internet) or that is legitimately transferred between AVL group entities, from authorities or from other third parties (e.g. event organizations, network partners, credit rating agencies etc.).
4. Apart from data you provided to us directly, the categories of data we receive about you from third parties include, but are not limited to:
o information in connection with your professional role and activities (e.g. in order to conclude and carry out contracts with you or your employer);
o information about you in correspondence and discussions with third parties (e.g. if someone recommends you specifically);
o information about you given to us by individuals associated with you (family, consultants, legal representatives, etc.) in order to conclude or process contracts with you or with your involvement (e.g. references, delivery-address, powers of attorney, emergency contacts);
o information regarding legal regulations (e.g. export restrictions);
o information from our distributors and other business partners for the purpose of ordering or delivering services to you or by you;
o information about you found publicly in the media or internet (insofar as indicated in the specific case, e.g. in connection with job applications, media reviews, marketing/sales, etc.);
o your interests and other socio-demographic data (for marketing purposes);
o data in connection with your use of our websites, apps, and other applications (e.g., IP address, MAC address of your smartphone or computers, information regarding your device and settings, cookies, date and time of your visit, sites and content retrieved, applications used, referring website, localization data; see our Online Privacy Notice),
o information from public registers;
o data received in connection with administrative or court proceedings.
a. For fulfillment of contractual obligations (Art. 6 para. 1b GDPR)
b. In the context of balancing interests (Art. 6 para. 1f GDPR)
o Consulting and exchanging data with third parties (e.g. debt register to investigate creditworthiness and credit risks);
o Reviewing and optimizing procedures for needs assessment for the purpose of direct customer approach as well as obtaining personal data from publicly accessible sources for customer acquisition;
o Processing your personal data in connection with your capacity as an employee of one of our clients, business partners or suppliers (in the context of our global purchasing operations, when engaging with our customer services (e.g. support ticketing system, phone requests));
o Marketing interaction, market and opinion research (e.g. interactions during events/trade fairs, filling of questionnaires and other forms);
o Collaboration with business partners and suppliers in the context of joint projects (organization, process and project management);
o Asserting legal claims and defense in legal disputes and official proceedings;
o Guarantee of our company’s IT security and IT operation (including access rights management);
o Prevention and clarification of crimes;
o Video surveillance and other measures to protect the right of owners of premises to keep out trespassers or for collecting evidence in case of security incidents;
o Measures for building and site security as well as protection of our employees and other individuals and assets (including digital assets) owned by or entrusted to us (e.g. access controls, visitor logs, network and mail scanners, telephone recordings);
o Measures for business management (e.g. client and vendor relationship management), business development, development of services and products;
o Acquisition and sale of business divisions, companies or parts of companies and other corporate transactions and the transfer of personal data related thereto.
c. As a result of your consent (Art. 6 para. 1a GDPR)
d. Due to statutory provisions (Art. 6 para. 1c of the GDPR) or in the public interest (Art. 6 para. 1e GDPR)
Furthermore, as a global company in the field of development, simulation and testing technology of powertrains for passenger cars, trucks and large engines, we are subject to various legal obligations, meaning statutory and regulatory or self-regulatory requirements. Purposes of processing may therefore include assessment and fulfilling control and reporting obligations under fiscal laws and measuring and managing various legal and regulatory risks within AVL.
e. Necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6 para. 1d GDPR)
o affiliates of the AVL group of companies;
o our service providers (within the AVL group of companies or externally, such as e.g. banks, insurances, consultants), including processors (such as e.g. IT providers, logistics providers, telecommunications providers, marketing agencies);
o dealers, suppliers, subcontractors and other business partners;
o domestic and foreign authorities or courts;
o the public, including users of our websites, apps, applications, and social media (e.g. pictures and videos with your consent);
o acquirers or parties interested in the acquisition of business divisions, companies or other parts of the AVL group of companies;
o other parties in possible or pending legal proceedings;
1. Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we make reasonable efforts to protect personal data against accidental and illegal destruction and loss. We strive to ensure that personal data is used properly and protected from unauthorized access, use or disclosure. We use a combination of process, technology and physical security controls to protect personal data from unauthorized access, use or disclosure.
2. In addition, access to personal data is restricted to employees, contractors and agents who need such information to perform their assigned functions and to develop or improve our services.
1. We will process and store your personal data for as long as it is necessary in order to fulfill our contractual and statutory obligations. It should be noted here that our business relationships usually are long-term obligations, which are set up on the basis of periods of years.
2. If the data is no longer required in order to fulfill contractual or statutory obligations, it is deleted or anonymized, to the extent possible, unless its further processing is required – for a limited time – e.g. for the following purposes:
o Fulfilling obligations to preserve records according to commercial and tax law;
o Retaining data for the period during which claims can be asserted against our company;
o Legitimate business interests require further retention (e.g. for evidence and documentation purposes).
9. Do I have an Obligation to Provide Personal Data to?
1. In accordance with and as far as provided by applicable law (as in the case where the GDPR is applicable), you have the right to access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restrict processing (Article 18 GDPR), the right to object (Article 21 GDPR), and if applicable – the right to data portability (Article 20 GDPR). Furthermore, if applicable on you, there is also a right to lodge a complaint with an appropriate data privacy regulatory authority (Article 77 GDPR).
2. On grounds relating to your particular situation, you shall have the right of objection, at any time to processing of your personal data which is based on Article 6 para 1e GDPR (data processing in the public interest) and Article 6 para 1f GDPR (data processing based on balancing interests). If you submit an objection, we will no longer process your personal data unless we can give evidence of mandatory, legitimate reasons for processing, which outweigh your interests, rights, and freedoms, or processing serves the enforcement, exercise, or defense of interests. Please note, that in such cases we may not be able to continue to provide services and maintain a business relation.
3. Please note that the exercise of these rights may be in conflict with your contractual obligations and this may result in consequences such as premature contract termination or involve costs. If this is the case, we will inform you in advance unless it has already been contractually agreed upon.
4. You can withdraw consent granted to us for the processing of personal data at any time. Please note that the withdrawal only applies to the future. Processing that was carried out before the withdrawal is not affected by it.
5. In general, exercising these rights requires that you are able to prove your identity (e.g., by a copy of identification documents where your identity is not evident otherwise or can be verified in another way).
6. The objection or withdrawal does not need to be made in a particular form and should ideally be addressed to the contact details given above.
1. We may partially process your personal data automatically with the aim of evaluating certain personal aspects (profiling, market and opinion research, etc.). In particular, profiling allows us to inform and advise you about products or services possibly relevant for you more accurately. For this purpose, we may use evaluation tools that enable us to communicate with you as required.
2. In establishing and carrying out a business relationship, we generally do not use any automated decision-making nor any profiling pursuant to Article 22 GDPR. If we use this procedure in individual cases, we will inform you of this separately, as long as this is a legal requirement.