1. General and scope
2. The provider (hereinafter also: “we”) collects, uses and stores your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act and the Telemedia Act. Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person. Below we inform you about the type, scope and purpose of the collection and use of personal data by the provider.
3. This data protection information applies to the processing of the provider with regard to
4. Data processing processes of the provider in the context of processing data from its applicants, customers and suppliers
5. Data processing processes on the website www. https://cartraction.de/,
6. Data processing processes of the provider’s company page on Facebook,
7. Data processing of the provider’s company website on Instagram,
8. Data processing processes of the provider’s company website on Youtube,
9. Data processing of the provider’s company website on Google My Business and
10. Data processing of the provider’s company website on mobile.de
11. Who is responsible for data processing?

Responsible for data processing is:

CarTraction GmbH

Fürstenhofer Str. 4/3

71546 Aspach

Managing Director: Ute Bartels

If you have any questions about data protection law, you can contact us at any time. Use the contact details given in the imprint for this purpose.

3. Which data is processed and from which sources does it come?

We process personal data (Art. 4 No. 1 GDPR) that we need as part of our work as a workshop and tuning company, as well as for order-based activities in the field of automotive engineering. The personal data we process includes the following personal data: Name, address, email addresses and communication content, unless other types of data for the respective processing are mentioned elsewhere in this data protection notice.

4. For what purpose is the data processed and on what legal basis is the processing based?
5. We process personal data in order to provide our services and to be able to receive and process your inquiries.
6. Processing according to Art. 6 Para. 1 a) GDPR with your consent.

We process personal data in accordance with Article 6 Paragraph 1 a) in order to draw your attention to our offers.

2. Processing according to Art. 6 Para. 1 b) GDPR to fulfill our contractual obligations.

If we enter into a contractual (or pre-contractual) relationship with you, then we process data in order to be able to provide our services as a workshop and tuning company, as well as for order-based activities in the field of automotive engineering.

3. Processing according to Art. 6 Para. 1 c) GDPR to fulfill legal obligations

If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Article 6 (1) (c) GDPR.

4. Processing according to Art. 6 Para. 1 d) GDPR

In rare cases, the processing of personal data could become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Article 6 Paragraph 1 Letter d) GDPR.

5. Processing according to Art. 6 Para. 1 f) due to legitimate interests

Ultimately, processing operations could be based on Article 6 (1) (f) GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail. Legitimate interests in the processing pursued by the person responsible or a third party: If the processing of personal data is based on Article 6 Paragraph 1 lit. f GDPR, our legitimate interest is the performance of our business activities and the associated communication with you (see recital 47 GDPR).

5. SSL Encryption

Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that theThe address line of the browser changes from “http://” to “https://” and the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

6. Server log files

Based on Article 6 Paragraph 1 Letter f) GDPR, we collect and store information about your visit to our website in so-called server log files, which your browser automatically transmits to us. These are:

1. Shortened IP address
2. Browser type/version
3. Operating system used
4. Referrer URL (the previously visited page)
5. Date and time of server request
6. Amount of data transferred
7. the requesting provider
8. This data is only collected for statistical purposes. This data is not merged with other data sources.
9. Use of Cookies
10. Our website uses so-called “cookies” on the basis of Article 6 Paragraph 1 Letter a GDPR and on the basis of Article 6 Paragraph 1 Letter f GDPR. A “cookie” is a file that stores certain device-related information on the user’s access device (PC, tablet, smartphone, etc.). If our website is accessed from the user’s device, the server on our website receives information from cookies. The server can evaluate the information stored in the cookie in various ways. Cookies can e.g. B. advertisements are adapted to the user behavior recorded with the cookie and statistical data on website use are recorded. You can allow or disable cookies via the settings in your browser. However, not all functions of our website may be available if you disable cookies.
11. We use the following technically necessary cookies on the basis of Article 6 Paragraph 1 Letter f) GDPR
12. Avia Cookie Consent (aviaCookieConsent); Function: Checks whether cookie hint was accepted; Storage period: 2 months; Possibility of third-party access: none
13. Flow Flow Social Media Stream Plugin (ff_news_session); Function: To be able to display social media streams; Storage duration: until the end of the session; Possibility of third-party access: none
14. PHP session ID (PHPSESSID); Function: PHP session management to differentiate between users; Storage duration: until the end of the session; Possibility of third-party access: none
15. WordPress test cookie (wordpress_test_cookie); Function: Test by WordPress whether cookies are activated in the browser (for backend login); Storage duration: until the end of the session; Possibility of third-party access: none
16. We use the following technically non-essential cookies on the basis of Article 6 Paragraph 1 Letter a) GDPR
17. Cookie name: Google Analytics tracking cookie (_gat_gtag_UA_147573710_1); Function: Tracks visitors on the website; storage time: 1min; Accessibility from third parties: Yes, Google Inc.
18. Cookie name: Google Analytics user differentiation (_ga); Function: distinguish users; storage period: 2 years; Accessibility from third parties: Yes, Google Inc.
19. Cookie name: Google Analytics user differentiation (_gid); Function: distinguish users; Duration of storage: 24h, possibility of access by third parties: Yes, Google Inc.
20. Data protection when dealing with customer and supplier data

We also collect and process data from customers and suppliers that we receive in connection with our business activities. This can be customer data as part of contract initiation, e.g. when arranging test drives or accepting workshop appointments. In this case, we collect name, address, email address and telephone number in order to be able to contact (potential) customers and bill our services. In the case of suppliers, we also collect names, addresses, email addresses and telephone numbers. In addition, account information to be able to pay for ordered services. The processing is based on Article 6 I lit b) GDPR.

9. Data protection in applications and in the application process

The provider collects and processes the personal data of applicants for the purpose of processing the application process on the basis of Article 6 I lit b GDPR. The processing can also take place electronically. This is particularly the case if an applicant sends the relevant application documents electronically, for example by email or via a web form on the website, to the person responsible for processing. If the person responsible for processing concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant by the person responsible for processing, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no deletion is possibleother legitimate interests of the person responsible for processing. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

10. Basic information on the duration of the storage of data

In principle, we process and store personal data only for the period necessary to achieve the purpose of processing or if this is provided for in laws or regulations to which the person responsible for processing is subject. If the purpose of storage no longer applies or if a legally prescribed storage period expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions.

11.Google Analytics

1. This website uses functions of the web analysis service Google Analytics on the basis of Article 6 Paragraph 1 Letter a) GDPR. The provider is Google Inc. 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
2. IP anonymization: We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
3. Browser plugin: You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by using the browser available under the following link. Download and install the plugin: https://tools.google.com/dlpage/gaoptout?hl=de
4. Objection to data collection by Google: You can prevent your data from being collected by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics
5. You can find more information on how Google Analytics handles user data in Google’s data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de
6. Contact Form

We provide you with a contact form on our website to give you the opportunity to contact us electronically. If you use our contact form, we store and process the data entered in the form. This is the following data: name, email address, phone number, subject line, your company name and your message. Alternatively you can contact us by email. In this case, we store and process the data transmitted by e-mail. We do not pass on any personal data to third parties. Data is only used to be able to respond to your request. The storage and processing of your personal data in this context is based on Article 6 (1) (f) GDPR.

13. Information on the transfer of data to a third country

As part of our service, we also use various cloud services, including those from providers based in the USA or other countries outside the EU/EEA area, which, among other things, also store personal data (e.g. names, email addresses and possibly other data) in our process order. We expressly point out that the European Commission has not yet issued an adequacy decision, particularly with regard to the USA. The provider will only transmit personal data to a provider in the USA if this transmission is permitted in accordance with the so-called Privacy Shield Agreement and/or the transmission is legitimized by standard data protection clauses (standard contractual clauses) under data protection law. The guarantees according to privacy shieldcan be found here: https://www.privacyshield.gov/EU-US-Framework

The Standard Contractual Clauses can be found here: http://eurlex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF

14. Google Maps and Youtube videos on our website

On this website we use the offer of Google Maps and YouTube. This enables us to show you interactive maps or YouTube videos directly on the website and enables you to conveniently use the map function and additional content. The processing is based on Art. 6 Para. 1 f) GDPR. By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. If you are logged in to Google, your data can be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Here you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

15. Provider’s company page on Youtube and Google My Business

We use YouTube and Google My Business to communicate with potential customers and provide content there for retrieval. Youtube and Google My Business are operated by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland. The processing is based on Art. 6 Para. 1 f) GDPR. You can find more information about data protection on YouTube and Google My Business here: https://policies.google.com/privacy?hl=de&gl=de.

16. Data processing of the provider’s company website on Instagram

We use Instagram to communicate with potential customers and provide content there for retrieval. Instagram is operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The processing is based on Art. 6 Para. 1 f) GDPR. Further information on this can be found in Facebook’s data protection declaration at https://de-de.facebook.com/policy.php.

17. Data processing of the provider’s company website on mobile.de.

We also use mobile.de to communicate with potential customers and provide content there for retrieval. The service is operated by mobile.de GmbH, Marktplatz 1, D-14532 Europarc Dreilinden. The processing is based on Art. 6 Para. 1 f) GDPR. Further information on this can be found in the data protection declaration of mo-bile.de at https://www.mobile.de/service/privacyPolicy?lang=de.

18. Our Facebook Page and Facebook Insights

In connection with the operation of our Facebook page at https://www.facebook.com/pg/socialhub.io/, we also use the Facebook Insights function of the provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, United States, integrated. If you access from within the European Union, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland is the responsible provider. As part of the operation of our Facebook page, we can communicate with you via the functions provided by Facebook. As long as you have only clicked on “Like” and do not otherwise interact with our site, we will not have access to your name or IP address or any other personal data. Since we have access to the analysis functions of Facebook Insights, according to the case law of the ECJ, we are still to be qualified as “jointly responsible for data processing” with Facebook in accordance with Art. 26 DSGVO. Facebook has specified the conditions for joint data processing in the contract here https://www.facebook.com/legal/terms/page_controller_addendum. Facebook Insights only gives us access to statistical evaluations, e.g. about the number of page views, the number of new “Likes” and other interactions with our site. However, Facebook may collect the information in connection with your profile and will also have access to your IP address. Therefore, on the basis of the contractual agreement specified by Facebook, Facebook (and not we) is primarily responsible for this data processing. As far as our secondary responsibility is concerned, the data processing is based on our legitimate interest in accordance with Art. 6 (1) f GDPR. Inquiries based on your rights as a data subject regarding the data processing mentioned can be sent to us or to Facebook. Since Facebook is primarily responsible, a direct request to Facebook is preferable. You can do this here: https://www.facebook.com/privacy/explanation. If you address your request to us, we are contractually obliged to forward it to Facebookn.”

19. Is there an automated decision-making process?

We do not use automated decision-making processes according to Art. 22 GDPR for the initiation of decisions on the establishment or implementation of the business relationship that would have legal consequences for the person concerned or similar significant negative effects on this person.

20. Documentation of given consents
21. If you have given us your consent via our website in accordance with Art. 7 GDPR, § 7 UWG to contact you by email, then your consent is as follows:

Yes, I want to subscribe to the newsletter

2. You can revoke your consent at any time free of charge. A revocation can be made e.g. by email or by post or by using the unsubscribe function in the respective email.
3. Rights of data subjects

Pursuant to Art. 15 GDPR, the data subject has the right to request information free of charge about the personal data that has been stored about him and the purpose of the data processing. The data subject also has the right to have incorrect data corrected and his or her personal data blocked and deleted in accordance with Articles 16, 17 and 18 GDPR. Under the conditions specified in Art. 20 GDPR, he is also entitled to receive the personal data relating to him that has been stored in a structured, common and machine-readable format and to transmit this data to another person responsible without hindrance by the provider. In addition, the data subject is entitled pursuant to Art. 21 (1) GDPR to object to the processing of personal data relating to him or her, which is based on Art. 6 (1) lit. e or f GDPR, for reasons that arise from his particular situation to file an objection. The provider will fulfill the aforementioned rights of the person concerned, insofar as the legal requirements for the assertion of the rights are met. Please direct any requests for your personal data to the email address or postal address given in the legal notice of our website. Every data subject has the right to lodge a complaint with a data protection supervisory authority about the processing of data when using the website.