Privacy policy

Privacy policy

(as of 06 November 2020)

 

We, Alltrucks GmbH & Co. KG, appreciate your visit to our website and your interest in our company. In the following privacy policy, we would like to inform you in particular about the processing of your personal data by us and your rights in connection with this.

 

• 1 Responsible person

"Controller" within the meaning of Art. 4 No. 7 GDPR is the

 

Alltrucks GmbH & Co. KG

represented by the managing director Homer Smyrliadis

Perchtinger Str. 6, 81379 Munich

e-mail: data.protection@alltrucks.com

Phone: +49 (0)89 4622466 - 0

Fax: +49 (0)89 4622466 - 86

(hereinafter "ALLTRUCKS" or "we").

 

• 2 Data protection officer

You can contact our data protection officer at

 

Peter Christian Felst

Mazars GmbH & Co. KG WPG/StBG

Domstraße 15 | 20095 Hamburg | Germany

Email: data.protection@alltrucks.com

 

 

You can of course also contact our central contact point for data protection by e-mail: data.protection@alltrucks.com

 

• 3 Information on the processing of personal data

Personal data will only be processed by us if and to the extent that this is permitted under the applicable regulations for the protection of personal data or if you have given us your consent.

 

"Personal data" means any information relating to an identified or identifiable natural person. This may include, for example, name, address, e-mail address, telephone number and bank details.

 

We understand other terms used in this privacy policy (also) within the meaning of the definitions set out in Art. 4 GDPR.

 

You will find more detailed information on data processing when visiting our website (server logs) in Section 1 below. Sections 2 to 6 of this Section 3 then contain information on further data processing, which is only carried out if you provide us with additional personal data on a voluntary basis. In principle, you will not suffer any negative consequences if you do not provide us with any further personal data beyond the information described in section 1. In certain contexts, however, we as the controller require your personal data in order to take action, e.g. to be able to process an enquiry from you. In such cases, we cannot provide the service you have requested without access to the personal data required for this purpose.

 

None of the data processing listed in the following sections involves automated decision-making including profiling within the meaning of Art. 22 (1) and (4) GDPR.

 

1. Data processing when visiting our website (server logs)

When you visit our website (including our partner portal and our Alltrucks Fleet platform), we collect data from each visitor by default, which is transmitted from your browser to our server to technically enable our site to be accessed. For reasons of security and stability, our web server automatically logs access to our website. The following information is collected:  

 

• IP address of the requesting computer,
• Date and time of the server request,
• File name and the URL/address you have accessed,
• Access status/http status code,
• amount of data transferred,
• Referrer URL (the previously visited website),
• Browser,
• operating system and its interface and
• Language and version of the browser software.

 

Your information is analysed for statistical purposes and stored on our servers for a period of 7 days. If the above information is personal, the legal basis for its processing is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we have a legitimate interest in data processing for the purpose of ensuring security and stability.

 

2. Data processing when using a contact form

We have integrated various contact forms into our website. You can use these contact forms (e.g. if you want to become a workshop partner) to contact us electronically and send us an enquiry or information. If you fill out such a contact form and send us your data via the respective button, the data you enter in the relevant contact form will be transmitted to us. We process this (personal) data in order to process and answer your enquiry or to contact you.

The legal basis for the processing of your personal data, which is transmitted to us when you send us your contact enquiry, for the aforementioned purpose is your consent and thus Art. 6 para. 1 sentence 1 lit. a) GDPR.

We generally store the data processed by us via the contact form for as long as is necessary to fulfil the relevant purposes. If you revoke your consent beforehand, we will no longer process your data for this purpose after receipt of the revocation and will delete it.

 

3. Data processing in the context of a workshop contract with an Alltrucks partner

Alltrucks offers a Europe-wide workshop concept under the name "Alltrucks Truck + Trailer Service" as a full-service concept. As part of this workshop concept, Alltrucks offers workshops the opportunity to acquire special expertise in the field of commercial vehicle systems and strives for a long-term partnership with these workshops (so-called Alltrucks partners). The following statements refer specifically to data processing within the framework of such a workshop contract (including any contract supplements).

 

We only process data that is provided to us when the workshop contract is concluded and as part of the execution and processing of the workshop contract. We do not process any personal data from publicly accessible sources.

 

1. a) Processed categories of personal data

We process the following categories of personal data as part of the conclusion, execution and processing of a workshop contract concluded with an Alltrucks partner:

• Identification and contact details of the Alltrucks partner (e.g. customer number, company or name, address) as well as the content and circumstances of communication in the context of contract implementation, initiation and processing
• Information on the Alltrucks partner's premises (e.g. company, address, equipment, condition, performance class)
• Billing data (e.g. bank details) and data on payment behaviour
• Contents of contracts (e.g. sales contracts, purchasing target agreements) with third parties and signature of the contract
• Contact details and job or function titles of the Alltrucks partner's contact persons (e.g. name, business e-mail address, telephone number)

 

1. b) Purpose and legal basis of data processing

We process the categories of personal data listed above in accordance with the following purposes on the basis of the following legal bases:

1. aa) On the basis of consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)

If you have given us your consent to do so, we process the personal data on the basis of Art. 6 para. 1 sentence 1 lit. a) GDPR for the purpose covered by the declaration of consent.

1. bb) For the fulfilment of contractual obligations (Art. 6 para. 1 sentence 1 lit. b) GDPR)

We process the personal data for the purpose of establishing, implementing and processing the workshop contract between Alltrucks and the Alltrucks partner, including any amendments to the contract and for the implementation of pre-contractual measures on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR. This includes in particular

• Provision of contractual services by Alltrucks (e.g. access to Alltrucks' offers, sending of house and market information, advertising for the Alltrucks-specific services of the Alltrucks Partner)
• Processing of the Contractual Partner's data in the Alltrucks portal
• Enabling participation in and realisation of the Alltrucks training courses
• Ensuring compliance with the Alltrucks minimum requirements by the Alltrucks partner

 

1. cc) On the basis of a legitimate interest (Art. 6 para. 1 sentence 1 lit. f) GDPR)

We process personal data on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR to protect our legitimate interests, namely

• to answer and process general enquiries that are not directly related to the establishment, execution and handling of the workshop contract
• to promote the Alltrucks umbrella brand and the presentation of the Alltrucks offers by the Alltrucks partners on site to (potential) customers and members of the Alltrucks Fleet, in particular through publication on the Internet (e.g. in the "Workshop Finder")
• to strengthen the exchange within the Alltrucks workshop network by making the data available to other Alltrucks partners (e.g. in the partner portal)
• to store the data of the administrator and the contact persons of the Alltrucks partner in the Alltrucks portal, to provide the (contact) data of these persons in various media (e.g. in the "workshop finder") and to provide certain services (e.g. technical information and training) by Alltrucks
• to simplify the granting or activation of licences by storing data in the corresponding licensing services/tools
• to establish, execute and fulfil an existing contract with an Alltrucks partner, insofar as personal data is processed that does not concern the contractual partner  
• to provide information (e.g. about new cooperation partners) and for commercial campaigns (e.g. information about campaigns, services and the portfolio of cooperation partners or shareholders of Alltrucks)
• for the documentation of warranty cases
• to provide the service for Alltrucks fleet customers.

 

1. c) Recipients of personal data or categories of recipients

The personal data processed in the context of the conclusion, execution and processing of the workshop contract is disclosed to the following recipients or categories of recipients:

• external service providers (IT service providers (e.g. for programming and adapting the Alltrucks portal and applications); service providers who work for us to ensure a Europe-wide service network (e.g. as part of the technical hotline, 24/7 breakdown service); if applicable, owner of the training centre)
• Preferred partners/ co-operation partners of Alltrucks
• Shareholder of Alltrucks (Robert Bosch GmbH, Knorr-Bremse Systeme für Nutzfahrzeuge GmbH, ZF Friedrichshafen AG)
• other members of the Alltrucks workshop network
• Members of the Alltrucks Fleet

 

1. d) Data transfers to or in a third country or an international organisation

The personal data processed as part of the workshop contract will not be transferred to international organisations. Personal data is only transferred to third countries as part of the transfer of data to partner workshops in the Alltrucks workshop network as described under c). Alltrucks ensures that the level of data protection required by the GDPR is maintained to the necessary extent in the third countries covered by the Alltrucks workshop network. Alltrucks ensures that the data processing takes place in a third country for which an adequacy decision of the European Commission exists or suitable guarantees for data protection in accordance with the GDPR exist for the respective third country.

 

4. Data processing in the context of the Alltrucks Partner Portal

In the following we would like to inform you about the data processing in the context of the registration and use of the Alltrucks Partner Portal.

 

1. a) Registration for the Alltrucks Partner Portal

We offer our contractual partners services that can be accessed online. For this purpose, our contractual partners must register and nominate employees who are granted online access. As part of the registration process, users are provided with the required mandatory information and processed on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR for the purposes of registration for the Alltrucks partner portal, provision and storage in the user account and protection against misuse.

 

1. b) Edit user profile

If you edit the profile data stored in the user profile (personal details or contact information and company data) after prior registration in the Alltrucks Partner Portal, we process the personal data transmitted via the relevant button. The legal basis for the processing of personal data of the contractual partner for the purpose of enabling access to the partner portal and changing the profile data is Art. 6 para. 1 sentence 1 lit. b) GDPR. In all other cases, the legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we have a legitimate interest in enabling access to the partner portal and the customisation of profile data as requested.

 

1. c) Training portal

If you use our training offer and book a seminar via our portal, we process the data transmitted to us as part of the seminar registration for the purpose of concluding, implementing and processing the contract for the seminar in question. The legal basis for the processing of the contractual partner's personal data is Art. 6 para. 1 sentence 1 lit. b) GDPR. If the seminar participant is not also a contractual partner, the legal basis for the processing of their personal data is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we have a legitimate interest in enabling participation in the seminar/training.

The data transmitted to us as part of the seminar registration will be disclosed to the providers of the seminars/trainings named in the registration form.  

1. d) Data processing in the context of the Alltrucks VINcat parts catalogue

Further information on the processing of personal data within the scope of the licence agreement concerning the Alltrucks VINcat parts catalogue can be found in the data protection information sheet, which is available at https://internal.alltrucks.com/documents/10180/701972/Datenschutzinformationen+zum+EULA_Bestellschein_Alltrucks_VINcat/36d34675-564d-4b01-b004-540e3e71346e is available.

 

1. e) Data processing in the context of the Alltrucks job portal  

Further information on the processing of personal data in the context of the Alltrucks job portal/job market can be found at https://www.alltrucks-jobmarket.com/de/datenschutz can be found in our privacy policy.

 

5. Data processing as part of the "Alltrucks Fleet" fleet service programme

As part of the workshop concept, Alltrucks offers the so-called "Fleet Service Programme" for "Fleet Partners". Within the online platform created for this purpose, partners are provided with a comprehensive service package for the organisation and execution of repairs and maintenance of commercial vehicles (fleet vehicles) by Alltrucks partners. The fleet partnership is established in a legally binding manner by registering on the Alltrucks Fleet Platform in conjunction with the signing of the utilisation contract by the fleet partner and Alltrucks. We process personal data as part of the initiation and execution of the contract for the fleet service programme with Alltrucks and as part of the use of the Alltrucks Fleet Platform.

 

This data is disclosed to the following categories of recipients: Workshops and service providers that provide services booked on the Alltrucks Fleet platform.

 

1. a) Alltrucks fleet partner

If a fleet partner (wishes to) conclude a contract with Alltrucks for the use of the fleet service programme "Alltrucks Fleet" and the associated Alltrucks Fleet Platform, the data provided during the registration process or the initiation and execution of the contract (including the use of our online platform) (company data and contact details of the contact person, service and fleet information (e.g. licence plate and VIN code) will be processed for the purpose of establishing, implementing and processing the aforementioned contractual relationship with the fleet partner and to enable simplified communication and interaction between the fleet and Alltrucks Fleet. (e.g. licence plate number and VIN code)) for the purpose of establishing, implementing and processing the aforementioned contractual relationship with the fleet partner and to enable simplified communication and interaction between the fleet partner and Alltrucks partner.

The data is stored in our Alltrucks-Fleet online platform. Once you have successfully registered and logged in, you can use the platform to view and manage your account data, settings and services, among other things.

The legal basis for the processing of personal data of the contractual partner is Art. 6 para. 1 sentence 1 lit. b) GDPR. In addition, the legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we have a legitimate interest in the processing of this data for the purpose of enabling simplified communication via our online platform and increasing the quality of service for our contractual partners and our services.

 

1. b) Alltrucks partners (workshops)

If an Alltrucks partner wishes to participate in the "Alltrucks Fleet" fleet service programme and use our online platform, the data provided as part of the registration process or contract initiation and execution (including the use of our online platform) (company data and contact details of the contact person, service information) will be processed for the purpose of establishing, implementing and processing the respective contractual relationship with the Alltrucks partner and to enable simplified communication and interaction between the fleet and Alltrucks partners.

The data is stored in our Alltrucks-Fleet online platform. Once you have successfully registered and logged in, you can use the platform to view and manage your account data, settings and services, among other things.

The legal basis for the processing of personal data of the contractual partner is Art. 6 para. 1 sentence 1 lit. b) GDPR. Furthermore, the legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we have a legitimate interest in the processing of this data for the purpose of enabling simplified communication via our online platform and increasing the quality of service for our Alltrucks partners and our services.

 

6. Data processing in the context of making contact/enquiries

If you send us a contact enquiry by e-mail (e.g. e-mail address, name, etc.) or contact us by other means, we may process personal data in order to be able to respond to such enquiries and process them in accordance with the purpose of your enquiry. The legal basis for the processing of personal data transmitted to us in the context of an enquiry is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we have a legitimate interest in data processing for the purpose of processing and responding to your enquiry. If your enquiry is aimed at concluding a contract with us, the legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. b) GDPR.

• 4 Duration of storage of personal data; retention obligations

Your personal data will generally be stored for as long as is necessary to fulfil the relevant purposes for which we process the personal data. In particular, we store personal data for as long as this is necessary for the establishment, execution and processing of a contractual relationship, if there is an overriding legitimate interest in data processing within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR or if a previously granted consent to the processing of personal data (Art. 6 para. 1 sentence 1 lit. a) GDPR) is revoked. All contract data and other personal data that is/was processed in the context of existing contractual relationships with Alltrucks will be deleted after termination of our contractual relationship, including at our partner workshops. You can also find more detailed information on the duration of the storage of your personal data in the individual sections of this privacy policy.

 

In addition, legal requirements, in particular archiving obligations, may result in an obligation to retain data. For example, we are obliged to retain certain data/documents for a period of six or ten years due to existing commercial and tax law requirements. In these cases, however, we will block your personal data so that it can only be used for archiving purposes. The legal basis for the processing of your personal data in this case is Art. 6 para. 1 sentence 1 lit. c) GDPR.

 

• 5 Recipients of personal data or categories of recipients

We do not pass on personal data to third parties unless we are legally authorised or obliged to do so or you have given us your consent to do so.

 

Data will only be passed on to state institutions and/or authorities if we are obliged to do so due to mandatory legal regulations or official or court orders.

 

Your personal data will be disclosed to shipping service providers, breakdown service providers and technical service providers. Additional information on the categories of recipients in the context of the individual processing operations can be found in the individual bullet points in § 3 above.

 

• 6 Links to Google Maps

We use Google Maps on our website to show you locations, such as our company location, visually and to enable you to plan your route conveniently.

In order to make the use of Google Maps as data-saving as possible, we only offer the map function of Google Maps via a link to the Google Maps website. This means that no data about you is transmitted to Google when you visit our website unless you click on the Google Maps link. However, as soon as you click on our link to Google Maps, you will be redirected to the Google Maps website. We have no influence whatsoever on the data processing that is then carried out independently by Google.

The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's respective privacy policy (https://policies.google.com/privacy?hl=de).

Please note that by clicking on further links to Google Maps you leave the area of protection and responsibility of our website and by clicking on the link you trigger the collection and processing of data by Google, which is not subject to our control.

 

• 7 Links to social networks via "social media buttons"

We have integrated various "social media buttons" into our website, in particular those from Facebook and LinkedIn. By using social media buttons, we are pursuing the goal of making our website more user-friendly.

We have integrated the "social media buttons" as links into our website. If you click on one of these buttons, you will be taken to our online presence on the relevant network. If you do not click on any of our social media buttons, no data will be transmitted to the operators of these networks when you visit our website. Your information will only be transmitted to the respective operator of the (social) network if you click on one of our "social media buttons" and are redirected to our online presence on the network in question.

We have no influence whatsoever on the processing of your personal data carried out by the respective providers of the plug-ins.

The purpose and scope of the data collection and the further processing and use of the data by the operators as well as your rights in this regard and setting options for protecting your privacy can be found in the respective data protection regulations of the operators.

Please note that by clicking on one of the social media plug-ins, you leave the area of protection and responsibility of our website and, by activating the plug-in, trigger the data collection and processing of the individual providers of the plug-ins, which is not subject to our control.

 

• 8 Right to information, rectification, erasure, restriction of processing, data portability, revocation of a declaration of consent

In principle, you have the following rights vis-à-vis us with regard to your personal data:

• Right to Information in accordance with Art. 15 GDPR,
• Right to Correction in accordance with Art. 16 GDPR,
• Right to Cancellation in accordance with Art. 17 GDPR,
• Right to Restriction of processing according to Art. 18 GDPR and
• Right to Data portability in accordance with Art. 20 GDPR.

In addition, there is a Right of appeal to a data protection supervisory authority (Art. 77 GDPR) in accordance with the following § 10.

With regard to the Right of objection in accordance with Art. 21 GDPR, we refer to our explanations in § 11 of this privacy policy.

If you give us your consent to process your personal data, you have the right to withdraw your consent at any time. Please note that the Revocation of consent the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected.

 

• 9 Right to lodge a complaint with the data protection supervisory authority

If you believe that we are not processing your personal data in accordance with the requirements described herein and/or applicable data protection laws, you can complain to a data protection supervisory authority about the processing of your personal data by us at any time (Art. 77 GDPR). The data protection supervisory authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach.

 

• 10 Right of objection

In accordance with Art. 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 sentence 1 lit. e) or lit. f) GDPR. You can address your objection to the controller (see § 1) or to our data protection officer (see § 2). In the event of an objection, we will no longer use your personal data for the purposes concerned and will erase it from our systems unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

 

Status: 06.11.2020

Customise data protection settings