Thank you for your interest in our website. The protection of your privacy when processing personal data as well as the security of all business data is an important concern for us that we take into account in our business processes. Here we inform you in detail about the handling of your data.
Controller according to Art. 4 para. 7 EU-General Data Protection Regulation (GDPR)
Telefon: +49 (0) 711 34 03 35 55
E-Mail: email@example.com Data protection officer of the controller
The data protection officer can be reached at: firstname.lastname@example.org
1. Rights of the data subject (Art. 15. GDPR)
In the following, we will inform you about your data subject rights. You can exercise these rights at any time and contact us directly for this purpose. If you request these rights from us, we will examine them in detail, considering the associated legal requirements and conditions. If necessary, we will request further information from you. We will explain the results of our examination and our procedure for fulfilling your request to you in detail. It is possible that we will not be able to fully comply with your requests in the way you would like.
This should not prevent you from claiming your rights from us or from inquiring with us in this regard. We will be happy to answer any questions you may have.
a) Right of access (Art. 15 GDPR)
In accordance with the law, you have the right to request information from us at any time as to whether and which of your personal data is being processed by us. This also includes information on the purposes of processing, if applicable, recipients to whom we have disclosed your data, the planned storage period and, if applicable, information on the origin of this data if we have not collected it directly from you. In addition, you have the right to a one-time free copy of your personal data stored by us. We reserve the right to charge a reasonable administrative fee for making the following copies.
b) Right of rectification (Art. 16 GDPR)
You have the right to request us to correct any inaccurate data we have stored about you. This also includes the right to have incomplete personal data completed.
c) Right to erasure (Art. 17 GDPR)
You have the right to request us to delete data that we have stored about you. If we have published data about you, this also includes our obligation, within the framework of the "right to be forgotten" pursuant to Article 17 (2) of the GDPR, to forward your request to delete all links to this data and copies or replications of this data to other controllers of this published personal data, considering available technology and implementation costs.
d) Right to restriction of processing (Art. 18 GDPR)
You have the right to demand that we restrict the processing of data that we have stored about you. After that, processing of this data is only possible with your consent or for a few legally defined purposes.
e) Right to object to processing (Art. 21 GDPR)
Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your advertising objection via the contact channels listed above.
f) Right to revoke consent under data protection law (Art. 7 GDPR)
If you have given your consent to the processing of your data, you may revoke it at any time in accordance with Article 7 (3) of the GDPR. Such revocation affects the permissibility of processing your personal data after you have expressed it to us.
g) Right to data portability (Art. 20 GDPR)
You have the right to receive from us personal data that you have provided to us in a structured, common and machine-readable format for the purpose of transferring it to another controller. At your request and taking into account the available technical possibilities, this also includes direct transfer from us to the other responsible party.
h) Right of appeal to a supervisory authority (Art. 13 GDPR)
You have the right to lodge a complaint about our processing of data relating to you with a data protection supervisory authority at any time. You can reach the responsible data protection authority at:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart
i) Automated decision-making including profiling (Art. 22 GDPR)
You have the right to obtain information about the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
2. legal basis for the processing of personal data (Art. 6 GDPR)
(1) Insofar as we obtain the consent of the data subject for processing operations involving personal data, this shall be based on the legal basis of Art. 6 (1) a of the EU General Data Protection Regulation (GDPR).
(2) When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
(3) Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c GDPR serves as the legal basis.
(4) In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) GDPR shall serve as the legal basis.
(5) If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) (f) GDPR shall serve as the legal basis for the processing.
3. information about the collection of personal data
(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g., name, address, e-mail addresses, user behaviour.
(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
(3) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
Collection of personal data when visiting our website In the case of mere informational use of the website, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR):
4. Data deletion and storage duration
(1) The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage expires.
(2) Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject.
(3) Data shall also be blocked or deleted if a storage period prescribed by the standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
5. Cookie usage
Cookies are small files that are stored on your hard drive and associated with the browser you are using, and through which certain information flows to the body that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective.
Further information and setting options can be found under the link Privacy Settings
6. Further functions & offers of our company website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must usually provide additional personal data that we use to provide the respective service and for which the data processing principles apply. Mandatory data is marked with an asterisk. Information in fields not marked in this way is purely voluntary.
(2) When you contact the service provider by e-mail, your e-mail address and, if you so indicate, your name, telephone number and [...] will be stored by us to answer your questions.
(3) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
(4) Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, contracts or similar services together with partners. You will receive more information about this when you provide your personal data or below in the description of the offer.
(5) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
7. web analytics & third party services
The legal basis for the use of locally deployed web analysis tools is Art. 6 para. 1 p. 1 lit. f GDPR, i.e., the protection of our legitimate interests in consideration of the interests of our website visitors. Our interest is the analysis of the use of our website by our website visitors, to improve our offer and to make it more interesting for you as a user. If the analysis tool used also serves other purposes or we use it for other interests, we will inform you about this directly in the explanations for the respective analysis tool.
The legal basis for the use of third-party providers to perform web analytics is based on Art. 6 para. 1 p. 1 lit. a.
a) Google Analytics
(1) This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
(3) You can deselect the storage of cookies by deselecting the "Analytics" category in the cookie banner. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
(4) For data processing in connection with Google Analytics by Google, data processing based on the EU standard data protection clauses has been concluded by our company with the service provider.
(5) Information from the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 User conditions: http://www.google.com/analytics/terms/de.html Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html Datenschutzerklärung: http://www.google.de/intl/de/policies/privacy.
b) Google Tag Manager
(1) This website uses Google Tag Manager from the provider Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate e.g. Google Analytics as well as other Google marketing services into our website. The Google Tool Manager does not process any personal data of the users and does not create any cookies.
(2) Further information on Google Tag Manager is available at: http://www.google.de/tagmanager/use-policy.html; and on data protection at Google in general: https://policies.google.com/privacy
c) Google Ads Conversion Tracking
(1) This website uses Google Ads Conversion Tracking, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.
(2) Through the use of Google conversion tracking, it can be determined by us as the website operator and by Google whether the user has carried out certain actions on the website.
(3) For example, it can be evaluated which buttons on our website were clicked how often and which products are the most popular. Conversion statistics are created on the basis of this information.
(4) This tells us the number of users who have clicked on our ads and what actions have been taken by the users.
(6) The use of Google conversion tracking is based on Art. 6 para. 1 lit. a GDPR. Your consent is obtained on the basis of the User Consent Manager used (cookie banner) and can be revoked at any time by deselecting the Marketing category under the Privacy Settings link in the footer.
(7) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
8. payment provider
(1) This website uses the payment provider Stripe to process payment transactions.
(2) This is done on the legal basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to offer a secure payment method. The transfer of data to Stripe takes place for the fulfilment of the contract in accordance with Art. 6 para. 1 lit b DSGVO. GDPR.
(3) The following data will be transmitted to Stripe: cardholder name, customer number, order number, email address, bank details, transaction amount, transaction period (date / time), credit card details, credit card validity period, credit card verification code (CVC).
(4) The transmission of your personal data to Stripe is necessary for the execution of the payment process.
(5) Compliance measures for international data transfers have been implemented by the payment provider Stripe. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
(6) Information from the third party provider: Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
9. special forms of use of websites
a) Facebook Fanpage
(1) The use of our Facebook fan page requires the collection of personal data. Some are also collected during an unannounced visit. More specifically, metadata (frequency, duration, location from which the "likes" were made, when are users online, which posts reach fans, which fans have interacted with posts in what way, information about the device used), personal data (gender, age, place of residence, language and other demographic data) are obtained from Facebook here. This personal data is used here for statistical purposes. The legal basis for the use is Art. 6(1) f of the GDPR.
(2) As a user, you can exercise your rights in accordance with Art. 12 - 23 GDPR. You can see a detailed list of your rights under 1. rights of the data subject.
(3) More information on Facebook's data policy is available at: https://www.facebook.com/about/privacy/, as well as information on the Insight data on https://www.facebook.com/legal/terms/information_about_page_insights_data
(4) Pursuant to Art. 26 GDPR, there is a joint responsibility between us and Facebook. This is in the form of a contract on https://www.facebook.com/legal/terms/page_controller_addendum
(1) Our website offers the option of subscribing to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. These are - date and time of registration / - e-mail of the orderer.
(2) The legal basis for the processing of the data after the user has registered for the newsletter is Art. 6 Para. 1 lit. a GDPR if the user has given his consent.
(3) The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active.
(4) The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter.
(5) Further information on the service provider:
Marmato GmbH, Wilhelmstraße 4a, 70182 Stuttgart, Germany, www.marmato.com
Zoho Corporation GmbH, Trinkausstr. 7, 40213 Düsseldorf, Germany www.zoho.com/de
c) Web Shop - Order Processing
(1) As part of the processing of your order in the AMG Driving Academy (ADA), your data will be transmitted to Mercedes-AMG GmbH (Daimlerstraße 1, 71653 Affalterbach) and zet:motion. GmbH (Schelmenwasenstr. 39 70567 Stuttgart, Germany) in the course of joint responsibility pursuant to Article 26 (1) sentence 1 of the GDPR.
(2) The processing in the case of private individuals is carried out on the legal basis of Art. 6 para. 1 lit. b ("fulfilment of a contract" and in the case of business customers on the legal basis of Art. 6 para. 1 lit. f ("legitimate interest").
10. Definitionsa) Personal Data
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
c) Restriction of Processing
The marking of stored personal data with the aim of limiting their processing in the future.
Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
The processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
i) Third party
Means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
The data subject any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to personal data relating to him or her being processed.