Privacy policy
- Preface and selected terms
- Responsible party and data protection officer
- Brief overview of data processing
- Legal basis for the processing of personal data
- Data subjects rights according to the GDPR
- External hosting
- Automatic server log files
- Use of cookies
- Contact and communication
- Information for applicants
- Direct marketing
- Plugins used
- Microsoft Teams audio and video conferencing
- Own social media presences
- Supplementary information for business contacts
1. Preface and selected Terms
Protection of personal data
We consider it our primary responsibility to maintain the confidentiality of the personal data you provide to us and to protect it from unauthorized access. Therefore, we apply the utmost care and state-of-the-art security standards to ensure maximum protection of your personal data. As a company under private law, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the regulations of the German Federal Data Protection Act (BDSG). We have taken technical and organizational measures to ensure that the regulations on data protection are observed both by us and by our external service providers.
On the one hand, this data protection declaration informs visitors and users of our Internet presence about the data processing operations that take place online and involve the processing of personal data. On the other hand, you will receive information about our processing operations that do not primarily take place online.
- GDPR is the abbreviation for the European Data Protection Regulation.
- BDSG is the abbreviation for the Federal Data Protection Act in its current version.
- Personal data are all individual details that allow conclusions to be drawn about a natural person (for definition see Art. 4 (1) GDPR). This includes, for example, names, e-mail addresses, telephone numbers, but also data such as IP addresses or customer numbers.
- The processing of personal data includes all operations, for example the collection, storage, transmission, archiving or deletion of personal data (definition Art. 4 (2) GDPR).
- The data subject within the meaning of data protection law is any natural person from whom personal data are processed.
- Further definitions of terms can be taken from the General Data Protection Regulation, which can be found in Art. 4 of the GDPR (Definitions).
2. Responsible Party and Data Protection Officer
Responsible Party for data processing
JOYSONQUIN Automotive Systems GmbH
Gutenbergstr. 16
71277 Rutesheim
GERMANY
Phone +49 (0) 7152 33002-0
Fax: +49 (0) 7152 33002-120
Data protection officer required by law
DSB Externer Datenschutzbeauftragter Stuttgart
Fabian Henkel
Graduate business economist (FH)
Certified data protection officer
Phone: +49(0)176 32744172
E-mail: info@externer-datenschutzbeauftragter-stuttgart.de
Web: https://www.externer-datenschutzbeauftragter-stuttgart.de
3. A brief Overview
The following contents provide you with a brief overview of the processing of personal data; more detailed information can be found in the respective passages presented in detail.
Security on our website (SSL Secure Socket Layer)
Our website is equipped with an SSL certificate, with the help of which data transmission processes are encrypted. This happens, for example, when you send us a message via a form. However, as a precaution, we would like to point out that one hundred percent security in electronic data processing is not possible and that there is always a residual risk.
Data that you transmit to us
We process data on this site that you enter yourself, for example in a form. In this case, the purpose of the processing results from the type of form and, on the other hand, from this data protection declaration. Also, if you send us a message by e-mail, for example, or contact us in any other way, we will process your data in accordance with the purpose of the contact.
Automatic server log files
Our server automatically records all accesses and thus also IP addresses (log files), this serves the defense against attacks, the analysis of access figures and the smooth operation.
Use of Cookies
Cookies help us to provide various services. Cookies are small text files that are stored in your browser and can be read. We use both our own cookies and third-party cookies, you can find more information in this privacy policy.
Plugins and content delivery networks
We sometimes use plugins and content delivery networks, well-known examples of such services being the video service Youtube or the map service Google Maps. If such services are integrated via a website, access data is transmitted to the services. This is usually your IP address and other metadata, such as time and date of access. As a rule, the provision is carried out by setting cookies.
Direct Marketing
Direct marketing to existing customers in our legitimate interest
We reserve the right to send our customer e-mail newsletter on the basis of §7 (3) UWG in conjunction with Art. 6 (1) lit. f GDPR. We also reserve the right to send postal advertising to existing customers in our legitimate interest. You can of course object to receiving direct marketing information from us at any time.
Further data recipients
a) Use of processors
We use processors in accordance with the requirements of Art. 28 GDPR, for example in the area of IT services, web hosting, email hosting or printing services. These process personal data for us in accordance with instructions.
b) Use of external services
If it is necessary (for example, for the execution of contracts), we pass on your data, for example, to banks, other payment service providers, shipping service providers, our tax advisor or lawyer.
c) Legal obligations
In addition, in certain cases we are obliged to make a report to the relevant authorities on the basis of the Money Laundering Act. In addition, we are subject to further legal obligations, such as trade laws or tax law, in this context we must pass on certain data to tax authorities, for example.
d) Affiliated companies
Insofar as it is necessary for the execution of orders, personal data, for example from personal data, for example from contact persons of our customers or suppliers, may be passed on to affiliated companies. We have concluded data processing agreements, where required, based on EU standard contractual clauses with appropriate safeguards.
e) Investigation of criminal offences
In so far as it should be necessary for the investigation of a criminal offence, we pass on data to the criminal prosecution authorities.
General information on deletion periods for personal data
We process the data as long as this is necessary for the respective purpose. As far as necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract; in addition, we are obligated to comply with statutory retention obligations and – if applicable – until the expiry of any contractually agreed
contractually agreed warranty periods. The statutory retention periods for legal transactions are as follows transactions are usually 10 years in accordance with §257 HGB (German Commercial Code) and §158 AO (German Tax Code), in each case beginning with the year following the legal transaction.
If the data processing is based on your consent, we delete your data after your revocation.
We delete applicant data – insofar as there are no important reasons for longer-term storage or consent has been given for longer-term storage – four months after completion of the application process, insofar as no employment contract has been concluded with the applicant.
For further deletion periods, please refer to the passages on individual processing operations, which we present in this data protection declaration.
Transfer of personal data to a third country
If we process data in a third country (i.e., outside of the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third services of third parties or the disclosure or transfer of data to other persons, entities or companies. companies, this shall only take place in accordance with the legal requirements. Subject to express consent or transfer required by contract or by law, we process or let data only in third countries with a recognized level of data protection, a contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/dataprotection/international-dimension-data-protection_de).
Obligation to provide personal data
The provision of personal data is regularly required for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, it will not be possible for us to conclude and fulfil a contract with you.
4. Legal Bases for the processing of personal data
The legal bases for the processing of personal data are exceptional circumstances that permit the processing of personal data. The main legal bases are shown in particular in Art. 6 GDPR. The legal bases according to which we process personal data are described in the individual processing operations in this privacy policy.
Consent given (Art. 6 para. 1 lit. a GDPR)
Consent is one of these legal bases and requires that the consenting person gives it in an informed manner and on a voluntary basis. Consent based on Art. 6 para. 1 lit a GDPR can be revoked at any time without giving reasons.
Contract-related data processing (Art. 6 para. 1 lit. b GDPR)
The processing of personal data for the initiation or execution of contracts is also a legal basis and is defined in Art. 6 para. 1 lit. b GDPR.
Legal obligation (Art. 6 para. 1 lit. c GDPR)
The exceptional case of data processing due to a legal obligation is found in Art. 6 para. 1 lit. c GDPR, for example, we are obliged to comply with certain retention periods under commercial law and tax law.
Legitimate interests (Art. 6 lit. GDPR)
The processing of personal data on the basis of a balancing of interests pursuant to Art. 6(1)(f) GDPR permits processing after careful consideration of financial or legal interests vis-à-vis the interests of the data subject that are worthy of protection.
5. Data subjects rights under the European Data Protection Regulation
Every natural person is entitled to certain rights, these are defined in particular in Articles 15 to 21 and 77 of the GDPR. In principle, you have the following rights, which you can claim from us.
Right to revoke consent given (cf. Art. 7 GDPR)
You can revoke consent given to us at any time without giving reasons with effect for the future.
Right to information (cf. Art. 15 GDPR)
You have the right to request information about the data processed about you and the purposes of the processing at any time.
Right to rectification (cf. Art. 16 GDPR)
If you discover that we are processing incorrect or incomplete data about you, you have the right to rectification.
Right to erasure (cf. Art. 17 GDPR)
You have the right to request the erasure of your personal data that we process about you at any time. Insofar as complete deletion is not possible, for example because we have to comply with statutory retention obligations or we can assert legitimate interests for another reason, we will restrict your data until these reasons cease to apply.
Right to restriction of processing / blocking (cf. Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data happened / happens unlawfully, you can demand the restriction of the data processing instead of the deletion.
- If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
- If you have restricted the processing of your personal data, such data may only be processed – apart from being stored – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Right to data portability (cf. Art. 20 GDPR)
You have the right to have us transfer your data to another company in a machine-readable format, insofar as this is possible with reasonable effort.
Right to object to certain processing operations and direct marketing (cf. Art. 21 GDPR).
Art. 21(1) – You may exercise your right to object at any time, this is particularly relevant if the processing is based on Art. 6(1)(e) or (f) GDPR. This also includes processing for profiling purposes. If we can demonstrate compelling reasons for the processing that outweigh your interests or the processing serves the enforcement of legal claims, their exercise or defence, we may reject your objection in individual cases.
Art. 21(2) – You may also object at any time to processing for direct marketing purposes, this includes profiling related to direct marketing. We will follow up your objection at any time and no longer process your data for these purposes.
Right to complain to a supervisory authority (cf. Art. 77 DGVO)
You have the right to complain about the processing of your personal data to the supervisory authority for data protection at any time.
6. External Hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data insofar as this is necessary for the fulfilment of its service obligations and follow our instructions with regard to this data.
We have contracted the following supplier for hosting:
S3-Medien GmbH
Siemensstr. 6-8
71277 Rutesheim
Germany
Conclusion of a data processing agreement
To ensure data protection-compliant processing, we have concluded a contract on order processing with our hoster.
7. Server Log Data
Our web server automatically logs all accesses and thus also IP addresses of visitors. This serves the defense against attacks, the analysis of access figures and the smooth operation. We have a legitimate interest in this (Art. 6 lit. f GDPR).
The server log usually records not only the IP address but also other metadata about the session, this data can be found below.
- Date and time of retrieval
- Information about the type of browser and the version used Browser
- Information on the operating system used
- Device (Client)
- Refferer URL (via which page you have landed with us)
- Invoked hyperlinks
We process this data only for the purposes mentioned above. We delete server log files after six months at the latest.
8. Use of Cookies
Our website uses cookies for the provision of services and to ensure full functionality. Cookies and similar technologies are very small text documents or pieces of code that often contain a unique identification code. When you visit a website or use a mobile application, a computer asks your computer or mobile device for permission to store this file on your computer or mobile device and access information. Information collected through cookies and similar technologies may include the date and time of your visit and how you use a particular website or mobile application.
Cookies ensure that you remain logged in during your visit to our online shop, that all items in your shopping cart remain saved, that you can shop safely and that the website continues to function smoothly. The cookies also ensure that we can see how our website is used and how we can improve it. In addition, depending on your preferences, our own cookies may be used to present you with targeted advertising that matches your personal interests.
Cookies are stored on your terminal device and transmitted from it to our site. As a user, you have full control over the use of cookies. You can define whether and which cookies you generally allow in your browser settings. We recommend that you set your browser so that you are informed when a website wants to set cookies on you. This gives you control over which cookies you want to accept. However, if you do not allow cookies, the functionality of websites may be limited.
Cookies are basically divided into non-persistent and persistent cookies. A further distinction is made between first party cookies (which come directly from our web server) and third party cookies (which are set by third-party providers).
Cookie types by runtime
Session cookies: Session cookies are deleted at the latest when you leave our website and close your browser.
Persistent cookies: These cookies remain stored even after you leave our website and close your browser of the browser. Persistent cookies can have different durations, from one day to several years. These cookies can perform various functions, for example, your login details may be stored so that you are automatically logged in when you return to our website. Other persistent cookies are used for analysis, tracking and marketing purposes.
Cookie types by origin
We use both first-party cookies and third-party cookies. First-party cookies are cookies that come directly from us. Third-party cookies are cookies that are placed via a third-party provider. We use various third-party cookies for analysis, tracking and marketing purposes.
Cookie types by function
Necessary cookies
These cookies are necessary for the website to function properly. Some of the following actions can be performed with these cookies. – Save items in a shopping cart for online purchases – Save your cookie settings for this website – Save language settings – Log in to our portal. We need to verify that you are logged in.
Performance Cookies
These cookies are used to collect statistical information about the use of our website, also called analytics cookies. We use this data to improve performance and optimize the website.
Functional cookies
These cookies enable more functionality for our website visitors. These cookies can be set by our external service providers or our own website. The following functionalities may or may not be enabled if you accept this category. – Live chat services – Watch online videos – Social media sharing buttons – Sign in with social media on our website.
Advertising / Tracking Cookies
These cookies are set by external advertising partners and are used to profile and track data across multiple websites. If you accept these cookies, we may display our advertisements on other websites based on your user profile and preferences. These cookies also store data about how many visitors have seen or clicked on our ads in order to optimize advertising campaigns.
Cookie Preferences and Legal Bases
We use technically necessary cookies in the interest of a functional and stable website (Art. 6 para. 1 lit. f GDPR), we use other cookies only with your consent (Art. 6 para. 1lit. a GDPR). You can make your preferences regarding the selection of non-essential cookies at the beginning of your visit, furthermore you have the possibility to adjust your preferences at any time.
The individual legal basis for the use of various tools that use cookies can be found in the respective passages in our privacy policy.
9. Contact and communication
Communication by E-mail
Insofar as you write us an email, we process your data according to the content and purpose of the message. As a rule, processing is carried out on the basis of pre-contractual measures or in the context of the implementation of a contractual relationship on the basis of Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f. GDPR. It is a legitimate interest to process your request quickly and efficiently.
Please note that we store all incoming e-mails in accordance with the principles of proper accounting for a period of ten years, starting with the first day of the following year in which the message was received. Thus, to the extent that you request us to delete the data, we will henceforth restrict your data for processing and store it only for the purpose of complying with retention periods in our legitimate interest.
Communication by phone or fax
Even if you contact us by phone or fax, we process your data either for the initiation and execution of contractual relationships (if the content is product- or service-related) and/or in our legitimate interest, analogous to contacting you by e-mail.
We do not record the content of conversations, but we may make notes for processing your inquiry. We store these until the purpose of the data processing has been achieved and we no longer have any legitimate interests in the processing. If necessary, contents of the conversation are stored anonymously for statistical purposes. Of course, you can request deletion at any time.
10. Information for job applicants
We offer you the opportunity to apply for a job with us (e.g. by e-mail, by post or via an online application form). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 BDSG under German law (initiation of an employment relationship), Article 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Article 6 para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons involved in processing your application.
If the application is successful, the data you submitted will be stored in our data processing systems on the basis of Section 26 of the German Federal Data Protection Act (BDSG) and Article 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.
Retention period of the data
If we are unable to make you a job offer, if you reject a job offer or if you withdraw your application, we reserve the right to store the data you have submitted with us on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 4 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. This storage serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 4-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if legal storage obligations prevent deletion.
11. Direct Marketing
Direct marketing to existing customers in a legitimate interest
We reserve the right to use the data collected on the occasion of a purchase contract or service contract, if necessary, for direct advertising by e-mail or by post in accordance with Section 7 (3) UWG, if the customer does not object or has not objected to this use.
The direct advertising exclusively comprises offers for similar products or services as the products or services already purchased by the user from us. We have a legitimate, economic interest (Art. 6 para. 1 lit. f GDPR) in informing our customers about new products and improving our services.
We use your data for up to three years after the last legal transaction for direct marketing purposes in the legitimate interest.
Of course, you can object to receiving direct marketing by e-mail at any time. Address your objection to the above-mentioned responsible party.
12. Plugins, CDNs and Scripts
Google Web Fonts
This page uses web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This enables Google to know that this website has been accessed via your IP address. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on his website. If a corresponding consent has been requested (e.g. a consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.
If your browser does not support web fonts, a standard font from your computer will be used.
For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://policies.google.com/privacy?hl=de.
13. Video conferencing with Microsoft Teams
Video conferencing with MS Teams
We use the online conferencing tool Microsoft Teams for communication with our customers. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Conclusion of a data processing agreement
We have concluded an order processing contract with the Microsoft Teams provider and fully implement the strict requirements of the German data protection authorities when using Microsoft Teams.
Scope of data processing
When you communicate with us via video or audio conference over the Internet, your personal data is collected and processed by us and Microsoft.
In doing so, Microsoft Teams collects any data that you provide/enter to use the tools (email address and/or your phone number). Furthermore, Microsoft Teams processes the duration of the conference, start and end (time) of participation in the conference, number of participants and other “contextual information” related to the communication process (metadata).
Furthermore, Microsoft Teams processes all technical data that is required to handle the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
If content is exchanged, uploaded or otherwise made available within Microsoft Teams, it will also be stored on Microsoft Teams servers. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemails uploaded photos and videos, files, whiteboards, and other information shared while using the Service.
Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the provider’s company policy. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
Purpose and legal basis
Microsoft Teams is used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). In the context of initiating the implementation of employment relationships, the use is supplementary based on §26 BDSG in addition to Art. 6 para. 1 lit. b GDPR. Insofar as consent (Art. 6 para. 1lit. a GDPR) has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.
Storage period
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
14. Own Social Media Appearances
Data processing by social networks
We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below. Social networks such as Facebook, Twitter, etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered.
Specifically:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet and to enable effective user information and communication with users. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on deviating legal bases, which are to be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Person responsible and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Social networks in detail
We maintain profiles on the following social networks.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu- sccs.
For details on their handling of your personal data, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
15. Information for business partners
The following supplementary information applies to all business contacts, such as customers, suppliers, partners and comparable.
Purpose and legal basis
We process personal data of our business contacts, which we collect in the context of the initiation and implementation of contractual relationships. The legal basis is primarily Art. 6 para. 1 lit. b GDPR.
As a rule, we process the following categories of data:
- Name, first name
- Salutation
- Company name
- Company address
- Phone and fax data
- e-mail address
- Professional function and/or position
- Company bank details / other payment details
- Data on the history of the business relationship
Customer and supplier history
In the course of the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts, initiated by you or by one of our employees, further personal data is generated, e.g. information on contact channel, date, occasion and result; (electronic) copies of correspondence as well as possible information on participation in direct marketing measures.
Changes of purpose
Data processing for other purposes is only considered if the legal requirements necessary in this respect pursuant to Art. 6 para. 4 GDPR exist. We will, of course, comply with any information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR in this case.
Legal bases for the processing of personal data
Based on your consent (Art. 6 para. 1 lit. a GDPR)
We process personal data for one or more specific purposes if you have given us consent to do so. If personal data is processed on the basis of your consent, you have the right to revoke your consent at any time with effect for the future.
Data processing for the fulfillment of contracts (Art. 6 para. 1 lit. b GDPR)
We process personal data for the performance of contracts. The performance of contracts includes, for example, the conclusion, execution and reversal of a contract. In addition, we process personal data that is necessary for the performance of pre-contractual measures, such as for the initiation of a contract, and is done at your request.
Data processing due to a legal obligation (Art. 6 para. 1 lit. c GDPR)
Like any company, we have to comply with retention obligations and other documentation requirements, this may include documents containing personal information. Insofar as we process data for these purposes, the processing is based on a legal obligation. Further legal bases result from the requirements of commercial law and tax law.
Data processing on the basis of a balance of interests (Art. 6 para. 1 lit. f GDPR)
If we process data on the basis of a balance of interests, you as the data subject have the right to object to the processing of personal data, taking into account the requirements of Art. 21 GDPR. As far as the specific purpose allows, we process your data pseudonymized or anonymized.
General information on deletion periods for personal data
Principle of purpose limitation and compliance with statutory retention periods
We process data as long as this is necessary for the respective purpose. To the extent necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract.
In addition, like any company, we are obliged to comply with the statutory retention periods, for example the periods arising from commercial and tax law. Insofar as statutory retention obligations exist, the personal data in question will be stored for the duration of the retention obligation. The storage period is also governed by the statutory limitation periods, which are defined, for example, in §§ 195 et seq. of the German Civil Code (BGB) are generally three years, but in certain cases can be up to thirty years. After the retention period has expired, a check is made to determine whether there is a further need for processing. If there is no longer a need, the data is deleted.
Example
If you enter into a legal transaction with us (Art. 6 para. 1 lit. b GDPR), we store your data for ten years until the expiry of the requirements under commercial and tax law. After this period, we will check whether we can delete the data and, if so, we will forward it for deletion.
E-mails and business letters
We archive all our e-mail traffic for ten years. If you write us an e-mail, your data and the entire e-mail content are stored accordingly for 10 years. Most e-mails count as business letters; in addition, e-mails may contain information relevant under tax law. In our opinion, the effort to check each individual e-mail in this respect is not in proportion to the benefit and the interests of the sender worthy of protection. However, you can of course request deletion at any time and we will carry out a case-by-case check and inform you of the result. This may lead to deletion or restriction of processing, depending on the content of the correspondence.
Revocation of your consent
Insofar as we process your data on the basis of your consent (Art. 6 para. 1 lit. a GDPR), we will delete it after your revocation. Unless there are legitimate interests against a complete deletion. For example, we generally retain declarations of consent for up to three years after receipt of your revocation in the legitimate interest (Art. 6 para. 1 lit. f GDPR). We retain consent exclusively under restriction of processing in order to be able to defend ourselves in the event of a dispute.
Categories of recipients of personal data
Data Processors
External service providers may be processors with whom one of the joint controllers has concluded a contract within the meaning of Article 28 GDPR. Before commissioning a processor, the controllers check whether the processor can demonstrate a sufficient level of data protection. For example, in the IT area we use service providers for maintenance, support and care of systems or hosting of applications.
Currently, we use the following processors in particular:
- Luithle + Luithle GmbH – IT Services, Zachersweg 14, 74376 Gemmrigheim, Germany
- Advanced Applications GmbH – Hosting SAP, Rheinwaldstraße 38, 78628 Rottweil, Germany
- SAP Germany SE & Co. KG – ERP Cloud, SAP Germany SE & Co. KG, Hasso-Plattner- Ring 7, 69190 Walldorf, Germany
- Microsoft Ireland Operations Limited .- MS365 and Azure, The Atrium Building, Block B, Carmanhall Road, Sandyford Business Estate, Dublin 18 Ireland
- Rhenus Data Office GmbH – disposal services, Körschtalstraße 100, 73770 Denkendorf, Germany
- iqs GmbH – Support for CAQ Software, Erlenstraße 13c – 77815 Bühl (Baden), Germany
- Allocation Network GmbH – supplier portal, Arabellastraße 17, 81925 Munich, Germany
- Serviceware SE – software provider, Carl-Zeiss-Str. 16, 65520 Bad Camberg, Germany
- S3 Medien GmbH – web hosting, Siemensstr. 6-8, 71277 Rutesheim, Germany
Providers of third-party specialist services
Other external service providers may be providers of third-party specialist services for which the processing of personal data is not an essential part of the service. Examples include banks, shipping services, tax consultants, auditors, railroad, airline and car rental companies, hotels, further education institutions or telecommunications providers.
Authorities, agencies, public bodies and associations
Public authorities and agencies, such as the tax office, may be recipients within the scope of their duties, insofar as we are obligated or authorized to transmit data. In addition, social insurance institutions and the employers’ liability insurance association are recipients of personal data.
Other parties, insofar as you have given us your consent
If you have given us explicit consent, we will also pass on your data to other bodies. However, this will be done within the limits of your verifiable consent.
Affiliated companies
Insofar as there is a necessity to carry out orders, personal data, for example from contact persons of our customers or suppliers, may be passed on to affiliated companies. We have entered into order processing agreements with all affiliated companies and, where required, based on EU standard contractual clauses with appropriate safeguards.
Affiliated companies are as follows:
- Ningbo JOYSONQUIN Automotive Systems Holding Co, Ltd, No. 1266 Juxian Road, High-Tech Park, Ningbo, Zhejiang, CHINA.
- JOYSONQUIN Automotive Systems North America, LLC, 1301 West Long Lake Road, Suite 160, Troy, MI, 48098, USA
- JOYSONQUIN Automotive Systems México S.A. de C.V., Circuito San Miguelito Oriente 100, Parque Industrial Colinas de San Luis, Ciudad Satélite, 78423 San Luis Potosí, SLP, MEXICO
- JOYSONQUIN Automotive Systems Polska Sp. z o.o., Ul. Stacyjna 16, 58-306 Wałbrzych, POLAND
- JOYSONQUIN Automotive Systems Romania S.R.L., Str. DE 301 km 0+200, Judetul Braşov, 507075 Ghimbav, ROMANIA
Transfer to a third party country
In principle, we try to process your data exclusively within Germany and the EU. The transfer of your data to a third country outside the EU / EEA (hereinafter:
“Third Country”) takes place, to the extent permitted, to affiliated companies or processors located in such Third Country. This is done either on the basis of adequacy decisions of the European Commission or by applying the EU standard contractual clauses as amended from time to time, subject to appropriate safeguards. Possible recipients are mentioned in this privacy policy. We will be happy to provide you with details upon request.
Legal or contractual obligation to provide personal data
The provision of personal data is regularly required for the initiation, conclusion, execution and reversal of a contract. In the event that you do not provide the required personal data, we are not able to conclude and fulfill a contract with you.