PRIVACY POLICY
The protection of your privacy is important to AVL Tippelmann
AVL TRANSPARENCY STATEMENT
(Article 13, 14 GDPR)
Contents:
- Scope
- Who is reponsible for data processing and how can I contact them?
- What sources and data do we use?
- What do we process your data for (purpose of processing) and on what legal basis?
- Who receives my data?
- Will data be transferred to a third country or an internatiol organization?
- Security of processing
- For how long will my data be stored?
- Do I have an obligation to provide personal data to you?
- What data privacy rights do I have?
- Right to lodge a complaint with a supervisory authority
- To what extends is there automated decision-making or profiling?
- Amendments of this transparency statement.
- Scope
- With this Transparency Statement we, the AVL group of companies (hereinafter together AVL, we or us), describe how we collect and further process personal data. According to Article 13 and 14 GDPR, companies need to meet specific information requirements when collecting personal data (directly from the data subjects or from thirds). With this Transparency Statement, we respond to these obligations.
-
This Transparency Statement is not necessarily a comprehensive description of our data processing activities. It is possible that other data protection statements, specific privacy notices, general terms and conditions or similar documents are applicable to specific circumstances. For example, please check our online privacy notice below for data we collect from users when visiting and operating our online channels like websites, apps, etc.
-
If you provide us with personal data of other persons (such as work colleagues, network contacts, family members etc.), please make sure the respective persons are aware of this Transparency Statement and only provide us with their data if you are allowed to do so and such personal data is correct.
- Who Is Responsible for Data Processing and How Can I Contact Them?
- Generally, the data controller is responsible for collecting and processing of your personal data. To comply with data protection legislation, the data controller will be the AVL group entity with whom you contract for a product or service, or with whom you interact in a specific case. Please find a list of all AVL group entities here. You can notify us of any data protection related concerns, irrespective of the involved AVL group entity, using the following contact details: AVL List GmbH
Hans-List-Platz 1
8020 Graz
Austria
Phone: +43 (316) 787-0
Fax: +43 (316) 787-400
E-Mail: privacy@avl.com
Attn: Data Protection Manager
If possible, please specify which affiliated group entity of AVL you refer to.
- Generally, the data controller is responsible for collecting and processing of your personal data. To comply with data protection legislation, the data controller will be the AVL group entity with whom you contract for a product or service, or with whom you interact in a specific case. Please find a list of all AVL group entities here. You can notify us of any data protection related concerns, irrespective of the involved AVL group entity, using the following contact details: AVL List GmbH
- What Sources and Data Do We Use?
- We process personal data that we obtain from our business clients, suppliers, other business partners as well as individuals in the context of business relationships with them or their employers
- For data we collect from users when operating our websites, apps and other applications, please also note their respective specific privacy statements (e.g., see our Online Privacy Notice below).
- We also process – insofar as necessary to provide our services and organize our procurement of services – personal data that we obtain from publicly accessible sources, (e.g. debt registers, commercial and association registers, press, internet) or that is legitimately transferred between AVL group entities , from authorities or from other third parties (e.g. event organizations, network partners, credit rating agencies etc.).
- Apart from data you provided to us directly, the categories of data we receive about you from third parties include, but are not limited to:
- information in connection with your professional role and activities (e.g. in order to conclude and carry out contracts with you or your employer);
- information about you in correspondence and discussions with third parties (e.g. if someone recommends you specifically);
- information about you given to us by individuals associated with you (family, consultants, legal representatives, etc.) in order to conclude or process contracts with you or with your involvement (e.g. references, delivery-address, powers of attorney, emergency contacts);
- information regarding legal regulations (e.g. export restrictions);
- information from our distributors and other business partners for the purpose of ordering or delivering services to you or by you;
- information about you found publicly in the media or internet (insofar as indicated in the specific case, e.g. in connection with job applications, media reviews, marketing/sales, etc.);
- your interests and other socio-demographic data (for marketing purposes);
- data in connection with your use of our websites, apps, and other applications (e.g., IP address, MAC address of your smartphone or computers, information regarding your device and settings, cookies, date and time of your visit, sites and content retrieved, applications used, referring website, localization data; see our Online Privacy Notice below)
- information from public registers;
- data received in connection with administrative or court proceedings.
- We process personal data that we obtain from our business clients, suppliers, other business partners as well as individuals in the context of business relationships with them or their employers
- What Do We Process Your Data for (Purpose of Processing) and On What Legal Basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the local law applicable to our respective AVL group entities:
- For fulfillment of contractual obligations (Art. 6 para. 1b GDPR)
Primarily, data is processed in order to provide and receive services in the context of carrying out our core business activities, i.e. to contract with our clients and suppliers or to carry out pre-contractual measures that occur as part of a request. The purposes of data processing are primarily in compliance with the specific services provided or received. You can find more specific details about the purposes of data processing in the relevant contract documents and terms and conditions.
- In the context of balancing interests (Art. 6 para. 1f GDPR)
Where required and in line with applicable law, we process your data beyond the actual fulfillment of the contract for the purposes of the legitimate interests pursued by us or a third party, such as:- Consulting and exchanging data with third parties (e.g. debt register to investigate creditworthiness and credit risks);
- Reviewing and optimizing procedures for needs assessment for the purpose of direct customer approach as well as obtaining personal data from publicly accessible sources for customer acquisition;
- Processing your personal data in connection with your capacity as an employee of one of our clients, business partners or suppliers (in the context of our global purchasing operations, when engaging with our customer services (e.g. support ticketing system, phone requests));
- Marketing interaction, market and opinion research (e.g. interactions during events/trade fairs, filling of questionnaires and other forms);
- Collaboration with business partners and suppliers in the context of joint projects (organization, process and project management);
- Asserting legal claims and defense in legal disputes and official proceedings;
- Guarantee of our company's IT security and IT operation (including access rights management);
- Prevention and clarification of crimes;
- Video surveillance and other measures to protect the right of owners of premises to keep out trespassers or for collecting evidence in case of security incidents;
- Measures for building and site security as well as protection of our employees and other individuals and assets (including digital assets) owned by or entrusted to us (e.g. access controls, visitor logs, network and mail scanners, telephone recordings);
- Measures for business management (e.g. client and vendor relationship management), business development, development of services and products;
- Acquisition and sale of business divisions, companies or parts of companies and other corporate transactions and the transfer of personal data related thereto.
- As a result of your consent (Art. 6 para. 1a GDPR)
As long as you have granted us consent to process your personal data for certain purposes (e.g. analysis of certain activities for marketing purposes, when registering to receive newsletters, when taking photos or videos at events, etc.), the processing will be within the scope of and based on such consent, unless we have another legal basis, provided that we require one. Consent given can be withdrawn at any time, but this does not affect the legality of data processed prior to withdrawal.
- Due to statutory provisions (Art. 6 para. 1c of the GDPR) or in the public interest (Art. 6 para. 1e GDPR)
Furthermore, as a global company in the field of development, simulation and testing technology of powertrains for passenger cars, trucks and large engines, we are subject to various legal obligations, meaning statutory and regulatory or self-regulatory requirements. Purposes of processing may therefore include assessment and fulfilling control and reporting obligations under fiscal laws, and measuring and managing various legal and regulatory risks within AVL.
- Necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6 para. 1d GDPR)
In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party.
- For fulfillment of contractual obligations (Art. 6 para. 1b GDPR)
- Who Receives My Data?
In the context of our business activities and in line with the purposes of the data processing set out above, we may transfer data to third parties, insofar as such a transfer is permitted and we deem it appropriate, in order for them to process data for us or, as the case may be, their own purposes. In particular, the following categories of recipients may be concerned:
- affiliates of the AVL group of companies;
- our service providers (within the AVL group of companies or externally, such as e.g. banks, insurances, consultants), including processors (such as e.g. IT providers, logistics providers, telecommunications providers, marketing agencies);
- dealers, suppliers, subcontractors and other business partners;
- clients;
- domestic and foreign authorities or courts;
- the public, including users of our websites, apps, applications, and social media (e.g. pictures and videos with your consent);
- acquirers or parties interested in the acquisition of business divisions, companies or other parts of the AVL group of companies;
- other parties in possible or pending legal proceedings;
- Will Data Be Transferred to a Third Country or an International Organization?
- Certain of those recipients may be within the European Economic Area (EEA) but they may also be located in any country worldwide. In particular, you must anticipate your data to be transmitted to any country in which the AVL group of companies is represented by affiliates, branches or other offices (see here), as well as to other countries where our service providers are located. If we transfer data to a country without adequate legal data protection, we ensure an appropriate level of protection as legally required by way of using appropriate measures (in particular on the basis of the standard contract clauses of the European Commission, which can be accessed here) or we rely on the statutory exceptions of consent, performance of contracts, the establishment, exercise or enforcement of legal claims, overriding public interests, published personal data or because it is necessary to protect the integrity of the persons concerned.
- Certain of those recipients may be within the European Economic Area (EEA) but they may also be located in any country worldwide. In particular, you must anticipate your data to be transmitted to any country in which the AVL group of companies is represented by affiliates, branches or other offices (see here), as well as to other countries where our service providers are located. If we transfer data to a country without adequate legal data protection, we ensure an appropriate level of protection as legally required by way of using appropriate measures (in particular on the basis of the standard contract clauses of the European Commission, which can be accessed here) or we rely on the statutory exceptions of consent, performance of contracts, the establishment, exercise or enforcement of legal claims, overriding public interests, published personal data or because it is necessary to protect the integrity of the persons concerned.
- Security of Processing
- Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we make reasonable efforts to protect personal data against accidental and illegal destruction and loss. We strive to ensure that personal data is used properly and protected from unauthorized access, use or disclosure. We use a combination of process, technology and physical security controls to protect personal data from unauthorized access, use or disclosure.
- In addition, access to personal data is restricted to employees, contractors and agents who need such information to perform their assigned functions and to develop or improve our services.
- Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we make reasonable efforts to protect personal data against accidental and illegal destruction and loss. We strive to ensure that personal data is used properly and protected from unauthorized access, use or disclosure. We use a combination of process, technology and physical security controls to protect personal data from unauthorized access, use or disclosure.
- For How Long Will My Data Be Stored?
- We will process and store your personal data for as long as it is necessary in order to fulfill our contractual and statutory obligations. It should be noted here that our business relationships usually are long-term obligations, which are set up on the basis of periods of years.
- If the data is no longer required in order to fulfill contractual or statutory obligations, it is deleted or anonymized, to the extent possible, unless its further processing is required – for a limited time – e.g. for the following purposes:
- Fulfilling obligations to preserve records according to commercial and tax law;
- Retaining data for the period during which claims can be asserted against our company;
- Legitimate business interests require further retention (e.g. for evidence and documentation purposes).
- We will process and store your personal data for as long as it is necessary in order to fulfill our contractual and statutory obligations. It should be noted here that our business relationships usually are long-term obligations, which are set up on the basis of periods of years.
- Do I have an Obligation to Provide Personal Data to You?
In the context of certain of our business relationships you may be obliged to provide us with personal data that is necessary for the conclusion and performance of a business relationship and the performance of our contractual obligations (as a rule, however, there is no statutory requirement to provide us with data). Without this information, we will usually not be able to enter into or carry out a contract with you (or the entity or person you represent). - What Data Privacy Rights Do I Have?
- In accordance with and as far as provided by applicable law (as in the case where the GDPR is applicable), you have the right to access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restrict processing (Article 18 GDPR), the right to object (Article 21 GDPR), and if applicable – the right to data portability (Article 20 GDPR). Furthermore, if applicable on you, there is also a right to lodge a complaint with an appropriate data privacy regulatory authority (Article 77 GDPR).
- On grounds relating to your particular situation, you shall have the right of objection, at any time to processing of your personal data which is based on Article 6 para 1e GDPR (data processing in the public interest) and Article 6 para 1f GDPR (data processing based on balancing interests). If you submit an objection, we will no longer process your personal data unless we can give evidence of mandatory, legitimate reasons for processing, which outweigh your interests, rights, and freedoms, or processing serves the enforcement, exercise, or defense of interests. Please note, that in such cases we may not be able to continue to provide services and maintain a business relation.
- Please note that the exercise of these rights may be in conflict with your contractual obligations and this may result in consequences such as premature contract termination or involve costs. If this is the case, we will inform you in advance unless it has already been contractually agreed upon.
- You can withdraw consent granted to us for the processing of personal data at any time. Please note that the withdrawal only applies to the future. Processing that was carried out before the withdrawal is not affected by it.
- In general, exercising these rights requires that you are able to prove your identity (e.g., by a copy of identification documents where your identity is not evident otherwise or can be verified in another way).
- The objection or withdrawal does not need to be made in a particular form and should ideally be addressed to the contact details given above.
- In accordance with and as far as provided by applicable law (as in the case where the GDPR is applicable), you have the right to access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restrict processing (Article 18 GDPR), the right to object (Article 21 GDPR), and if applicable – the right to data portability (Article 20 GDPR). Furthermore, if applicable on you, there is also a right to lodge a complaint with an appropriate data privacy regulatory authority (Article 77 GDPR).
- Right to lodge a complaint with a supervisory authority
- As the controller, we are obliged to notify you of the right to lodge a complaint with a supervisory authority. The right to lodge a complaint with a supervisory authority is in particular regulated by Article 77 para 1 GDPR. According to this provision, without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
- As the controller, we are obliged to notify you of the right to lodge a complaint with a supervisory authority. The right to lodge a complaint with a supervisory authority is in particular regulated by Article 77 para 1 GDPR. According to this provision, without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
- To What Extent Is There Automated Decision-Making or Profiling?
- We may partially process your personal data automatically with the aim of evaluating certain personal aspects (profiling, market and opinion research, etc.). In particular, profiling allows us to inform and advise you about products or services possibly relevant for you more accurately. For this purpose, we may use evaluation tools that enable us to communicate with you as required.
- In establishing and carrying out a business relationship, we generally do not use any automated decision-making nor any profiling pursuant to Article 22 GDPR. If we use this procedure in individual cases, we will inform you of this separately, as long as this is a legal requirement.
- We may partially process your personal data automatically with the aim of evaluating certain personal aspects (profiling, market and opinion research, etc.). In particular, profiling allows us to inform and advise you about products or services possibly relevant for you more accurately. For this purpose, we may use evaluation tools that enable us to communicate with you as required.
- Amendments of this Transparency Statement
We may amend this AVL Transparency Statement at any time without prior notice. The current version published on our website shall apply.
The protection of your privacy is important to AVL.
This AVL Online Privacy Notice applies to data we collect from users when visiting and operating our online channels like websites, apps, etc. For any other processing of Personal Data of the AVL group of companies, please find here our general AVL Transparency Statement according to art. 13 and 14 EU General Data Protection Regulation (GDPR).
We know that you care about which information about you is used and stored. We strictly observe the legal provisions and regulations applicable to us when processing your personal data and we are com-mitted to maintaining robust privacy protections for all our users.
This AVL Tippelmann Privacy Notice is designed to help you understand how we collect, use and safeguard the in-formation you provide. It explains how we handle your personal information and how you can access and update your preferences. The AVL Tippelmann Privacy Notice applies to all of your interactions with AVL Tippelmann through:
- avl-tippelmann.com
- subsites to avl-tippelmann.com
- sister sites if these include this Privacy Notice by reference
Personal data you share with us through these sites will be processed by AVL Tippelmann and AVL Tippelmann group according to the principles set out below:
Contents
General Information about Data we Collect
Areas of the AVL Tippelmann Website
Information about the collection of personal data when you visit our website
Information about the collection of personal data when you register on our website
Information about the collection of personal data when you email us or fill in a form
Information about the Collection of Personal Data when you Refer a Friend, or receive a Respective Message (Forward to a Friend)
Information about the collection of personal data when you use other areas (e.g. our Shop)
Information about the use of Personal Data when we choose Custom Audiences on third party sites
Privacy and trust go hand-in-hand. Both are valuable to us.
Responsible Body ("Controller")
Your Rights as a Data Subject
Storage of Your Personal Data
Retention of Your Personal Data
Deletion of Your Personal Data
Updating or Changing your avl-tippelmann.com Account
Security Measures we Apply When Holding Your Data
Are Your Data being Shown to Others?
Sharing your personal data with other AVL Tippelmann Affiliates and/or AVL Tippelmann companies
Use of other Service Providers
Secure Transmission
Your Personal Data in AVL Tippelmann Marketing and Promotion Activities
General
Opting-out from Our Communications
Newsletter Tracking
Cookies and Similar Technologies
What are Cookies?
What are Cookies being used for?
What kind of Cookies?
How can I avoid the placing of Cookies on my device?
Deleting Cookies Manually by You
Google Analytics
General Information about Data we Collect
We collect “Non-Personal Data” but also “Personal Data”.
Personal Data include, for example, your email, contact and company address information etc. that you provide us (e.g. through a registration process on www.avl-tippelmann.com or through other channels).
Non-Personal Datainclude all information that cannot be used to identify you as a person, such as usage data, generic demographic information, landing page hit rates referring to our website pages or URLs. When Non-Personal Data is being linked to Personal Data it becomes Personal Data.
Areas of the AVL Tippelmann Website
Information about the collection of Personal Data when you visit our website
Anyone may visit the public areas of the AVL Tippelmann website www.avl-tippelmann.com without disclosing his or her name, address, etc. Such information is only requested by AVL Tippelmann if needed to provide services to you or to fulfill requests you may have (such as registering, ordering documents, subscribing to a newsletter, registering for an event, etc.).
When you use our website for informational purposes, only, and for as long as you do not provide us with any information about you, then we only collect data that is technically necessary for us to show you our website and to ensure its stability and security (legal basis is Art. 6 (1) (f) GDPR). Such data are:
- IP address of the accessing computer
- Date and time of retrieval
- URL of the retrieved page
- Status message as to whether the retrieval was successful
- Transmitted amount of data
- The referrer URL from which the user came to the retrieved page
- HTTP user agent information (i.e. information about the accessing device, its operating system, and its browser)
- information stored in Cookies we have set
- log files we have created to be able to describe an event that has occurred during your visit (e.g. acceptance of Terms of Use).
Information about the collection of Personal Data when you register on our website
If you want to enjoy content on our website in a user-targeted manner you are required to regi¬ster into secure areas, made available as part of our website (e.g. on "my AVL Tippelmann"). The content and applications in such secure area are selected according your account settings and access rights.
The Personal Data we collect within such secure areas may include the following, depending on what you have provided:
- Name and Contact Details (first name, last name, email address, postal address)
- Registration Information (preferences, participation details of an event, food requests, special assistance requests for an event, event ticket prices and payment methods)
- Geographical Data (information about where you are located, such as country, city, postal code)
- Payment Data (payment details such as billing address, payment method and payment status)
- Interests and Preferences (your interests and preferences related to our products and solutions and what you have downloaded from avl-tippelmann.com)
The purpose of collecting Personal Data in such secure areas, is to make it possible for you, as an AVL Tippelmann website user, to influence the content we will serve you with (by reflecting your own personal needs and preferences). Also, you enable us to provide you with information on specific topics via your preferred channel (website, email, postal, phone), if you have opted to receive such information. Further, the objective is to make it easier for you to engage and interact with our products and solution portfolios, receive offerings, and purchase products via the AVL Tippelmann website.
According to Art. 6(1)(b) GDPR the processing of your data is necessary for fulfilling a contract with us or for carrying out precontractual measures, since without this we can not conclude the contract or take precontractual measures.
Information about the collection of Personal Data when you email us or fill in a form
When you contact us by e-mail, through a form on our website (such as the registration form for the participation to an event, or to download a publication), or through other areas on the website made available to you to fill information, the information you provide (your e-mail address and, if applicable, your first name and last name, plus information explicitly asked for, or further information you provide us with) will be stored by us to answer your questions, to process transactions that you have requested, to pass on information about AVL Tippelmann products and solutions (legal basis is Art. 6(1)(b) GDPR).
Information about the Collection of Personal Data when you Refer a Friend, or receive a Respective Message (Forward to a Friend)
Sometimes, you have the possibility to point a friend to a section on our website if you believe this is useful to that friend. In that context you may enter another person's email address as the recipient of a message generated within our systems. The message will contain the link to the section of our website you deem to be useful, your email address (as the sender), your name, all of which will be visible to the recipient together with the other information you entered into the subject line and the body section of the respective message.
When you receive such a message you see all of the information that has been entered into the "Forward to a friend"-form. It may be the following: email address, first name, last name, any other information about you, which the website user has entered into the form.
Such information will only temporarily be stored, and processed for the time needed to have an email being sent on behalf of the website user. While we may keep logs to protect ourselves, we do not otherwise use the information provided to us via the corresponding form. Further processing does not take place in relation to information provided in this way, nor do we pass on such information to third parties. It is our legitimate interest to offer such functionality to keep up a conversation about our offerings that are, upon corroboration from a website user, of interest to the recipient (Article 6(1)(f)).
Information about the Collection of Personal Data when you use other areas (e.g. our Shop)
When you register for and use our shop or other areas of the website additional privacy statements apply.
Information about the use of Personal Data when we choose Custom Audiences on third party sites
We sometimes define Custom Audiences to deliver advertisements to Website Visitors on third party sites (mainly social media sites, e.g. Facebook, Linkedin, etc.) based on email addresses that we have collected. For example, on Facebook we use Facebook Custom Audiences and on Linkedin we use Matched Audiences. On these social media websites, we sometimes can Identify information about you, such as demographic and other information, such as your academic title, industry, or organization, to improve our marketing efforts. You will learn more about these programs under the following links:
- Facebook Custom Audiences: https://www.facebook.com/business/a/custom-audiences
- Linkedin Matched Audiences: https://business.linkedin.com/de-de/marketing-solutions/ad-targeting/matched-audiences
Privacy and trust go hand-in-hand. Both are valuable to us.
Responsible Body ("Controller")
The body responsible for this website and for the privacy aspects of this website (collection, processing and use of your Personal Data) in accordance with Art. 4 para. 7 EU General Data Protection Regulation (GDPR) and its contact details are mentioned in the imprint (individually designated for country pages).
Our data protection manager can be reached by email at: info.tippelmann@avl.com
Your Rights as a Data Subject
You have the right to access according to Art. 15 GDPR, rectification according to Art. 16 GDPR, erasure according to Art. 17 GDPR, restriction of processing according to Art. 18 GDPR, and - if applicable - data portability according to Art. 20 GDPR.
Where we use your Personal Data based on Art. 6(1)(f) GDPR you further have the right to object against our use of your Personal Data. We shall no longer process such Personal Data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. If you want to exercise your right to object in such a scenario please contact us at: info.tippelmann@avl.com
Where we process your Personal Data on the basis of your consent you can revoke that consent at any time. The revocation does not affect the legality of the processing carried out on the basis of the consent prior to the revocation. If you want to withdraw your consent please contact us at: info.tippelmann@avl.com.
For your safety and ours, we may need to authenticate your identity before fulfilling your request.
Furthermore, if applicable on you, there is also a right to lodge a complaint with an appropriate data privacy regulatory authority (Article 77 GDPR).
To What Extent Is There Automated Decision-Making?
We generally do not use any automated decision-making pursuant to Article 22 GDPR. If we use this procedure in individual cases, we will inform you of this separately, as long as this is a legal requirement.
Storage of Your Personal Data
Retention of Your Personal Data
In order to offer you the best customer experience, we are storing the Personal Data that have been provided by you during your interactions with AVL Tippelmann.
We delete data after the storage is no longer required. For tracking information acquired through our Newsletters see below("Newsletter Tracking"), we may need to keep data on file beyond that period if statutory retention rules require us to do so. In such scenarios, we will restrict the processing to what is needed to fulfill the statutory retention rules. For data retention in the context of our use of Google Analytics see below ("Google Analytics").
Personal Data provided to AVL Tippelmann by you online may be linked to information passed on to AVL Tippelmann when services or products are ordered.
Deletion of Your Personal Data
AVL Tippelmann will provide you with information about what Personal Data of yours we store. You can get information about your stored data at any time free of charge, and you may at any time assert your right to correct incorrect information, or to delete your data. If you wish to do so please contact our data protection manager at info.tippelmann@avl.com
Updating or Changing your avl-tippelmann.com Account
If you want to update or delete your avl-tippelmann.com account, please contact us at info.tippelmann@avl.com.
If you have any other questions, contact the data protection manager at info.tippelmann@avl.com.
Security Measures we Apply When Holding Your Data
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons AVL Tippelmann makes appropriate effort to protect Personal Data against accidental and illegal destruction and loss. AVL Tippelmann endeavors to ensure that Personal Data is used in a proper manner and to protect it from unauthorized access, use, or disclosure. We use a combination of process, technology and physical security controls to help protect personal information from unauthorized access, use, or disclosure.
Further, access to personal information is restricted to those employees, contractors, and agents of AVL Tippelmann who need to know such data to perform their assigned functions and develop or improve our products and services.
Are Your Personal Data being Shown to Others?
Sharing your Personal Data with other AVL Tippelmann Affiliates and/or AVL Tippelmann companies
Any Personal Data that you provide online through AVL Tippelmann websites may be passed on to other AVL Tippelmann Affiliates and/or AVL Tippelmann companies. We will do so only if deemed appropriate. All AVL Tippelmann Affiliates and/or AVL Tippelmann companies are bound by a groupwide Data Protection Policy.
Sometimes, and least partially, your Personal Data will be processed outside the EU or the EEA, namely in the following countries: Brazil, China, India, Japan, South Korea, Russia, Thailand, Turkey, and the United States. Other destinations may be added over time. Please refer to the current list of AVL Tippelmann Affiliates at https://avl-tippelmann.com Transfers to AVL Tippelmann Affiliates and/or AVL Tippelmann companies will be made on the basis of declarations of adequacy or other accepted safeguards according to the Articles 44 et seq. of the GDPR, in particular standard data protection clauses adopted by the European Commission.
Please contact us if you would like to request to see a copy of the specific safeguards applied to the export of your information (Art. 13 para 1(f) GDPR).
Use of other Service Providers
We use service providers for a range of services. If we do so we ensure to be in compliance with the requirements under Art. 28 GDPR (provision describing the safeguards to apply when data processors are being used).
Secure TransmissionWhen special categories of Personal Data is transferred over the Internet, we encrypt it using Transfer Layer Security (TLS) encryption technology or similar technology.
Your Personal Data in AVL Tippelmann Marketing and Promotion Activities
General
In addition to the processing of your Personal Data for purchasing reasons, we may use your information for the following marketing purposes (legal basis is Art. 6(1)(f) GDPR):
- Sending interest-related newsletter
- Inviting you to events and webinars
- Informing you about the latest product and software releases, product recommendations, market trends/insights and promotions
- Inviting you to participate in surveys in order to help us to improve our communication and communication platforms
- Provide you with emails containing updates about technical developments and similar information.
Sometimes, we may ask you for your consent with respect to our marketing and promotional endeavors (legal basis then is Art. 6(1)(a) GDPR).
Opting-out from Our Communications
You can always unsubscribe from AVL Tippelmann marketing communication by logging-in to AVL Tippelmann My Cockpit and unsubscribing from marketing and promotional messages by clicking the unsubscribe tick box in “My News”. Your request will be processed immediately. You then will automatically be unsubscribed from all further information such as event, webinar, product and solutions, product release highlights etc. (except if you limit your opting-out to specific categories of messages). You can also object against such use of your Personal Data by contacting us at: info.tippelmann@avl.com.
Where we process your Personal Data on the basis of your consent you can revoke that consent at any time. The revocation does not affect the legality of the processing carried out on the basis of the consent prior to the revocation. If you want to withdraw your consent please contact us at: info.tippelmann@avl.com.
You can always change your preferences in the AVL Tippelmann My Cockpit (“My News”).
Newsletter Tracking
When sending out newsletters we use so-called web beacons or tracking pixels. A web beacon or a tracking pixel is a one-pixel image file embedded within the newsletter message, served to you from a remote server when you open the newsletter message. We use these to evaluate your user behavior. For this, the data mentioned in the section "Areas of the AVL Tippelmann Website" and the following information are linked to your e-mail address and an individual ID: (i) email delivered or not; (ii) email opened or not; (iii) timestamps; (iv) links clicked; (v) content viewed. This data is used to create a user profile to better align the newsletter with your interests. This data will also be linked to your activities on our website. We will understand to what extent our offerings are of interest to you.
The information collected in this way will be stored by us as long as you have subscribed to the newsletter. Once you log out, it will be stored statistically and anonymously.
You have the possibility to opt-out from such tracking at any time, if so inform us at info.tippelmann@avl.com or use other methods we provide within the newsletter email.
Currently, AVL Tippelmann uses the services of Mailchimp:
The Rocket Science Group, LLC
675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308 USA
Mailchimp Privacy Policy (https://mailchimp.com/legal/privacy/)
Cookies and Similar Technologies
We are using cookies on our website.
What are Cookies?
Cookies are small files that are stored on a user's computer. They are designed to hold a modest amount of data specific to a particular client and website, and they can be accessed either by the web server or the client computer. This allows the server to deliver a page tailored to a particular user, or the page itself can contain some script that is aware of the data in the cookie and so is able to carry information from one visit to the website (or related site) to the next (see http://www.whatarecookies.com/).
What are Cookies being used for?
Cookies help to improve your experience with our website by helping you resume where you left off, remembering your login, your preferences, and or providing you with various tailored functions, such as showing you content targeted to your interests. We use information derived from cookies to improve the navigation structure of the AVL Tippelmann websites and optimize their user-friendliness (legal basis is Art. 6(1)(f) GDPR). A large part of the AVL Tippelmann websites may also be viewed without cookies.
What kind of Cookies?
On our website, we use cookies. Some of these cookies are necessary, while others help us to improve your experience by providing insights into how the site is being used. Necessary cookies enable core functionality. The website cannot function properly without these cookies, and can only be disabled by changing your browser preferences. Analytical cookies help us to improve our website by collecting and reporting information on its usage.
These cookies may be session cookies or persistent cookies. Session cookies will be deleted when you close the browser, or shortly after having logged out. Session cookies store a session ID. With this, different requests from your browser can be assigned to the shared session so that your computer can be recognized when you return to our website. Persistent cookies are stored on your device for a certain period of time, and then automatically deleted after that period of time, specified for each individual cookie, has lapsed.
How can I avoid the placing of Cookies on my device?
When opening the website you will see a banner that is being shown on the website. You can confirm that you are permitting analytical cookies.
You may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the browser used, and may thus deny the setting of cookies. This is possible in all popular internet browsers. If you deactivate the setting of cookies in the internet browser used, not all functions of our website may be entirely usable.
Deleting Cookies Manually by You
You can at any time delete cookies that already have been stored on your device. Files containing cookies are usually stored in your browser directory.
Google Analytics
To constantly improve and optimize our AVL Tippelmann product and service offerings, we are using web tracking technologies. For this we are using Google Analytics, a Web analytics tool offered by Google Inc. ("Google", www.google.com) that provides statistics and tracks web traffic.
Google Analytics requires the placing of "cookies" on the device from which you access the web pages. These cookies enable us to analyze the use of our web pages by you. In addition, for the purpose of identifying trends and improving our online offer, usage data such as the page last visited, the browser used, date, time, etc. are being evaluated. The information generated by the cookie about the use of the web pages are usually transmitted to a Google server in the USA and stored there. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-USFramework.
AVL Tippelmann uses Google's services by enabling the IP anonymization feature. This leads to Google storing the user's IP address only in a shortened format, resulting in anonymization / masking. The anonymization or masking of the IP takes place after the IP addresses arrive in the Google Analytics data collection network, but before any storage or processing of the data takes place. For more information, see: IP Anonymization in Google Analytics.
On behalf of AVL Tippelmann, Google will use the information obtained from cookies to evaluate the use of the web pages by you, to compile reports on web page activity and to provide other services related to web page activity and internet usage to AVL Tippelmann. This is our legitimate interest in data processing. The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR.
In addition, data submitted to Google via the Google Analytics service is linked by Google with third-party cookies associated with visits to other websites, such as when an advertiser uses their Google Analytics data to create more relevant ads, or would like to more accurately analyze their traffic. More about this can be found under the explanatory page about Google Analyticsprovided by Google.
You may prevent the cookie generated information (including your IP address) from being collected, transmitted to Google and processed by Google by downloading and installing the browser plug-in available at the following link (effective only for the device on which you install the browser plug-in): http://tools.google.com/dlpage/gaoptout(not for mobile devices).
Instead, you can prevent the placing of cookies on your device by adapting the settings in your browser software accordingly.
Additional information about the third party provider:
- Third-party company and address: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
- Terms of Use: http://www.google.com/analytics/terms/de.html,
- Information about Data Protection provided by Google (overview): http://www.google.com/intl/de/analytics/learn/privacy.html
- Google Privacy Policy: http://www.google.de/intl/de/policies/privacy.