Privacy policy

Thank you for your interest in our website. We take the careful handling of personal information and the protection of your privacy very seriously. This is why we strictly adhere to the legal regulations and consider the legal principles for the processing of personal data, including purpose limitation and data minimisation.

You can print this document or save it by using the standard functions of your browser (usually File/Save as). You can also download and archive a PDF version of this document. To open the PDF file, you will need the free Adobe Reader program or similar software for displaying PDFs.

In the following we would like to inform you about how we handle your data.

 

1. Contact person

The point of contact and so-called controller for the processing of your personal data when you visit this website within the meaning of the EU General Data Protection Regulation (GDPR) is

Carmeq GmbH
Carnotstraße 4
10587 Berlin
Tel. +49 30 3983537-0
Fax +49 30 3983537-199
E-Mail: datenschutz@carmeq.com
(hereinafter: CARMEQ).

If you have any questions about data protection in connection with our services or the use of our website, you can also contact our data protection officer at any time. The data protection officer can be contacted at the above postal address or by sending an email to the address provided (please mark all correspondence with: “F.A.O. data protection officer”).

 

2. Processing of personal data

When you use our website, personal data may be processed.

2.1. Personal data
Personal data means any information relating to an identified or identifiable person. In particular, this includes information that enables us to draw conclusions about your identity, such as your name, your telephone number, your address or email address. Statistical data which we collect, for example, when you visit our website and which cannot be linked to you personally, is not covered by the term ‘personal data’.

2.2. Use for information purposes
You can visit our website without providing any personal information. Every time you visit our website, we collect the data automatically transmitted by your browser in order to make visiting the website possible. This is in particular:

  • IP address of the requesting device
  • date and time of the request
  • addresses of the website visited and the requesting website
  • information about the browser used and the operating system of the device

It is necessary to process this data to make it possible to visit the website and to guarantee the longterm functionality and security of our systems. For the purposes described above, the data specified is also temporarily stored in internal log files in order to generate statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the
proportion of mobile devices with which the pages are accessed increases) and for the general administrative maintenance of our website. The legal basis for this is Art. 6(1) Sentence 1(b) GDPR.

The information stored in the log files does not allow any direct conclusions about your person – specifically, we only store IP addresses in shortened form. The log files are stored for seven days and archived after subsequent anonymisation.

2.3. Online applications
On our website you have the possibility to find out online about vacancies as well as to apply at CARMEQ via the job market or to submit your unsolicited application. For more information, please refer to the separate privacy policy for online applications.

 

3. Use of cookies for analysis purposes

In order to improve our website, we use cookies to statistically record and analyse general usage behaviour. A cookie is a small text file stored on your device by your browser. Cookies are not used to execute programs or download viruses onto your computer. The main purpose of our own cookies is rather to provide an offer tailored to your needs and to make using our services as time-saving as possible.

The legal basis for this data processing is Art. 6(1) Sentence 1(f) GDPR, based on our legitimate interest in the demand-oriented design and continuous optimisation of our website.

Our website specifically uses Matomo, an open-source analysis platform provided by InnoCraft Ltd, 150 Willis St, 6011, Wellington, New Zealand (“Matomo”). Matomo uses a cookie to analyse our website with regard to your user behaviour. This cookie, which is placed on your computer when you visit our website, also stores and transmits your anonymised IP address. This means that when data is transmitted to our server, the IP address is shortened in such a way that we can no longer identify you as a visitor to our website. The usage data transmitted to us by the cookie is only evaluated by us; we will not forward it to third parties. The sole purpose of this evaluation is to optimise and further develop our website.

Most browsers are set to automatically accept cookies by default. However, you can adjust your browser settings in such a way that cookies are rejected or stored only with prior consent. You can also prevent the recording of data generated by the cookie and related to your use of this website (including your IP address) by clicking on the following button. Please note that if you later delete all cookies in your browser or use a different browser and/or profile, you will need to store a new optout cookie.

For further information, please refer to the privacy information and privacy policy provided by
Matomo.

It appears you have deactived JavaScript in your browser. This feature is only available with JavaScript turned on. If you don’t want your data to be collected, you can still turn on Do Not Track in your browser which is a general setting and is being respected by our Matomo installation.

4. Integration of videos

We have embedded videos on our website that are stored on the Vimeo video platform and can be played directly on our website. Vimeo is a multimedia service provided by Vimeo, Inc, 555 West 18th Street, New York 10011, USA (“Vimeo”). The legal basis of this integration is Art. 6(1) Sentence 1(f) GDPR, based on our legitimate interest in integrating a video and image content. In the event that personal data is transferred to the USA, Vimeo has subjected itself to the EU-US Privacy Shield.

When you visit our website, Vimeo receives the information that you have retrieved the corresponding subpage. This may happen regardless of whether you are logged in to Vimeo or not. Vimeo may use this data for purposes of advertising, market research and the demand-oriented design of its websites. If you view videos on our website and are simultaneously logged in to your Vimeo profile, Vimeo can also link this event to your Vimeo profile. If you do not want this information to be associated with your Vimeo profile, you must log out of Vimeo before visiting our website.

For further information, please refer to Vimeo’s Privacy Policy.

 

5. Recipients of the data

We only disclose data collected by us if this is necessary for the fulfilment of a contract or for the provision of the technical functionality of the website, or if another legal basis for the disclosure of data exists.

Part of the data processing may be carried out by our service providers. Specifically, personal data is passed on to Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (“Hetzner Online”) for storing our website and databases as well as to Volke Kommunikations-Design GmbH, Borsigstr. 6, 38446 Wolfsburg (“Volke”) for the maintenance of our website. If we pass data on to service providers, they may use the data exclusively for the fulfilment of their tasks. We have carefully selected and commissioned the service providers. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of data subjects and are carefully monitored by us.

In addition, data may be disclosed in connection with official requests, court orders and legal proceedings if this is necessary to pursue or enforce rights.

 

6. Your rights

You have the right to information about how we process your personal data. In this regard, we will explain the data processing to you and provide you with an overview of the data stored about you. If data stored by us is incorrect or no longer up to date, you have the right to have this data corrected. You may also demand that your data be erased. Should the erasure not be possible in exceptional cases due to other legal regulations, the data will be blocked so that it is only available for that legal purpose. You may also have the rocessing of your personal data restricted, if for example you have doubts as to the accuracy of the data. You also have the right to data portability, which means that on request we will send you a digital copy of the personal data you have provided.

In order to assert your rights described here, you can contact us at any time using the contact details provided. This also applies if you wish to receive copies of safeguards in order to prove an adequate level of data protection.

You have the right to withdraw the consent you gave us at any time. As a result of this, we will cease the data processing based on this consent with future effect. This withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

Insofar as we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time for reasons arising from your particular situation. If your objection is to data processing for direct marketing purposes, you have a general right of objection, which we will implement without requiring you to give reasons.

If you would like to make use of your right of withdrawal or objection, it is sufficient to simply notify us using the contact details provided above.

Finally, you have the right to lodge a complaint with our competent data protection supervisory authority. You can assert this right by contacting a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement. In Berlin, where CARMEQ is headquartered, the competent supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.

 

7. Data security

We have taken technical and organisational measures to secure our website and other systems against the loss, destruction, access, alteration or distribution of data by unauthorised persons. Despite regular checks, it is however no possible to ensure complete protection against all risks.

 

8. Changes to this privacy policy

Due to the rapid development of the internet and the ongoing developments in case law, we reserve the right to adapt this privacy policy to technical and legal requirements at any time.

Last amended: September 2018