Privacy Notice

We would like to use the information below to provide you "data subject" with an overview of our processing of your personal data and your rights under data protection law.

In the following, we provide information about the type, scope and purposes of the processing of your personal data in our Service SAF Tire Pilot I.Q. App. By implementing technical and organisational measures, we ensure that your data is processed and protected at all times in accordance with the applicable regulations.

When you use this SAF Tire Pilot I.Q. App via the Internet, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy notice explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Personal data, such as your name, address or email address, is always processed in accordance with the EU General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to the "SAF-HOLLAND GmbH". The aim of this Privacy Notice is to inform you about the scope and purpose of the personal data we collect, use and process.

The data controller, as defined by the GDPR, is:

SAF-HOLLAND GmbH
Haupstraße 26, 63856 Bessenbach, Deutschland
Phone: +49 6095 301-0
Fax: +49 6095 301-200
Email: info@safholland.de

The data protection officer of SAF-HOLLAND Group is available at said address or directly by e-mail datenschutz@safholland.de

You may contact our data protection officer directly at any time if you have any questions or suggestions regarding data protection.

Art. 6 (1) lit. a) GDPR (icw § 25 (1) German Telecommunications-Telemedia Data Protection Act (TTDSG)) serves our company as the legal basis for processing operations where we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 (1) lit. b) GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in the case of enquiries about our products or services.

If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations, the processing is based on Art. 6 (1) lit. c) GDPR.

Finally, processing operations could be based on Art. 6 (1) lit. f) GDPR. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the protection of a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not overweigh. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European law. In this respect, the legislature took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47, Sentence 2 GDPR).

5.1 SSL/TLS-encryption

This service uses SSL or TLS encryption to guarantee the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact enquiries that you send to us as the operator.

We use this technology to protect your transmitted data.

6.1 Registration as a user

In order to use our SAF Tire Pilot I.Q. App, it is necessary for you to register.

Which personal data is transmitted to us in this process can be seen from the respective input mask used for registration. The personal data you enter is collected and stored exclusively for internal use by us and for our own purposes. We may arrange for data to be passed on to one or more data processors, who will also use the personal data exclusively for an internal use attributable to us.

By registering to our service, the IP address assigned by your internet service provider (ISP), the date and the time of registration are also stored. This is done only for the purpose of preventing our services from being misused. If necessary, this data may be used to clarify the situation surrounding any crimes committed. In this respect, the storage of this data is necessary for our protection. As a matter of principle, this data is not disclosed to third parties. This does not apply if we are legally obliged to pass on the data or if the data is passed on for the purpose of criminal prosecution.

Your registration, including voluntary provision of personal data, also serves us to offer you content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely erased from our database.

Upon request, we will provide you at any time with information about which personal data is stored about you. Furthermore, we will correct or delete personal data at your request, insofar as this does not conflict with any statutory retention obligations. A data protection officer named in this Privacy Policy and all other employees are available to the data subject as contact persons in this context.

The processing of your data is in the interest of a convenient and easy use of our service. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f) GDPR.

6.2 Data processing when opening a customer account and for contract execution

Pursuant to Art. 6 (1) lit. b) GDPR, personal data is collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete execution of the contract or deletion of your customer account, your data will be blocked taking into account tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we are legally permitted to the further use of your data, about which we inform you accordingly below.

6.3 Services / Digital Goods

We only transmit personal data to third parties if this is necessary within the framework of the Data Protection Agreement, for example to the credit institution commissioned with the payment processing.

No further transmission of data will take place unless you have expressly consented to the transmission. Your data will not be disclosed to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 (1) lit. b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

7.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data relating to you will be processed.

7.2 Right to information (Article 15 GDPR)

You have the right to obtain information about the personal data stored about you at any time, free of charge, as well as the right to access a copy of such data from us, in accordance with the statutory provisions.

7.3 Right to rectification (Article 16 GDPR)

You have the right to request the immediate rectification of incorrect personal data relating to yourself. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

7.4 Erasure (Article 17 GDPR)

You have the right to demand that we erase the personal data relating to you be deleted without delay, provided that one of the reasons provided by law applies and if processing or further storage is not required.

7.5 Restriction to processing (Article 18 GDPR)

You have the right to request that we restrict the processing of your data if one of the legal requirements is met.

7.6 Data transferability (Article 20 GDPR)

You have the right obtain personal data relating to you that you provided us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance by us, to whom the personal data was provided, provided that the processing is based on the consent pursuant to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR or on a contract pursuant to Art. 6 (1) lit. b) GDPR, and the data are processed using automated procedures, unless processing is necessary to complete a task, is in the public interest or is carried out in the exercise of an official authority assigned to us.

Furthermore, when exercising your right to data transferability pursuant to Art. 20 (1) GDPR, you have the right to have personal data transferred directly from one controller to another, provided this is technically feasible and does not impede the rights and freedoms of other persons.

7.7 Objection (Article 21 GDPR)

You have the right to lodge an objection to the processing of personal data relating to you for reasons relating to your particular situation where this is done on the basis of Art. 6 (1) lit. e) (data processing in the public interest) or lit. f) (data processing on the basis of the weighing of legitimate interests) GDPR.

This also applies to profiling based on these provisions pursuant to Article 4 Number 4 GDPR.

Should you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling and legitimate reasons for such processing that outweigh your interests, rights and freedoms, or where processing serves the assertion, exercise or defence of legal claims.

In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling where this is connected to this kind of direct marketing. Should you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for this purpose.

In addition, you have the right to object to our processing of your personal data for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR for reasons arising from your particular situation, unless such processing is necessary for the performance of a task in the public interest.

You are free to exercise your right to lodge an objection in relation to the use of information society services, Directive 2002/58/EC notwithstanding, by means of automated procedures using technical specifications.

7.8 Revocation of consent regarding data protection

You have the right to revoke any consent to the processing of personal data at any time with future effect.

7.9 Lodging a complaint with a supervisory authority

You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.

We process and store your personal data only for the period of time necessary to meet the storage purpose or as required by the legal provisions to which our company is subject.

If the storage purpose no longer applies or if a required retention period expires, personal data will be routinely blocked or erased in accordance with the statutory provisions.