Data Protection Statement

KRESS Fahrzeugbau GmbH takes care to guard the security of your personal date to the best of its abilities. In the sections which follow we wish to inform you in detail how we handle your data.

1. Name and Contact Details of the controller responsible for data processing as well as of data protection officer

a) Responsible for data processing (Controller) on this page:
KRESS Fahrzeugbau GmbH
Daimlerstraße 7
74909 Meckesheim
Deutschland
Telefon: (+49) (0) 62 26 - 92 63 – 0
Telefax: (+49) (0) 62 26 - 92 63 – 29
E-Mail: info@kress.eu

b) Data Protection Officer of KRESS Fahrzeugbau GmbH
Dr. Christine Saavedra
Daimlerstraße 7
74909 Meckesheim
Deutschland
Telefon: (+49) (0) 62 26 - 92 63 – 0
Telefax: (+49) (0) 62 26 - 92 63 – 29
E-Mail: tina.saavedra@t-online.de

2. Collection and Storage of Data as well as Nature and Purpose of Use of Such Data

a) When the website is visited:
When you visit our website www.kress.eu, information is automatically sent from the browser on your device in use to the server on our website. This information is temporarily stored in so-called log files. The following information is thus automatically collected and saved until it is automatically deleted.

• IP address of the device in question requesting a file
• Date and time of the request
• Name and URL of data requested
• Website from which request was made (Referrer-URL)
• Browser used and if applicable OS of your computer
• Name of your access provider.

The data mentioned above are used by us for the following reasons:

• To provide you with a trouble-free connection to our website.
• To allow you to visit and use our website comfortably.
• To evaluate the security and stability of our system.
• other administrative purposes.

The legal basis for us processing this data is art. 6 ( 1) S. 1 lit. f GDPR. Our data processing is justified owing to the purposes listed there for data collection. Under no circumstances do we use the data collected to make any conclusions concerning you.
Furthermore, we use cookies and analystical tools when our website is visited. Detailed information concerning these can be found below at sections 4 and 5.

b) Subscribing to our newsletter
If you have specifically give us your permission according to art. 6. par. 1 S. 1 lit. a GDPR, we will use your email address to send your our newsletter on a regular basis. In order to receive the newsletter, we require an email address.
Unsubscribing from our newsletter is possible at any time, either by using the link found at the end of every newsletter or informing us that you no longer wish to receive our newsletter via email at info@kress.eu.

c) Using our contact form
Should you have any questions, we give you the opportunity to contact us using the contact form found on our website. For this, we need a valid email address so we can see from whom the query comes and whom we are answering. You may choose to fill out other optonal fields. The data processing involving in contacting us is in accordance with art. 6 Abs. 1 S. 1 lit. f GDPR and is based on the purposes listed there. The personal data collected by us when the contact form is used are automatically erased once your request has been settled.

d) Using our web shop
We use your personal data to process your request or order.
The data processed are in accordance with art. 6 par. 1 S. 1 lit. b GDPR to settle your request or fulfill contractual obligations.
Once the contract has been completed, your data are de-activated, so that they can no longer be used. Once the deadline regarding tax and trade regulations has elapsed, we erase your data unless you have give us your express permission to keep using your data. We also reserve thre right to further use this data so long as this is legally allowed and you have been informed of any further use of your data.

e) Disclosing your data to shipping companies, payment service providers and credit institutions to fullfil contract
To fullfil contractual obligations, we give your disclose your data to the shipping company commissioned with delivering goods provided this is necessary for the goods in question to be deliverd. Depending on the payment service provider you have selected during the order process, we disclose the data collected necessary for the payment process to the credit institution commissioned with handling payment or to a payment service provider commissioned by us or to the payment service provider selected.
The data processed is in accordance with art. 6 par. 1 S. 1 lit. b GDPR in order to fulfil the contract.
To a certain extent, the payment service providers collect this data themselves if you have an account with them. In this case, during the order process you must register with the company in question and log in with your access data. In this case, the data protection statement of the payment service provider in question is valid.

f) Credit check and Scoring
Should we provide services in advance of payment, for example a purchase on account, we reserve the right in order to safeguard our legitimitate interests to obtain and identity and credit check from service providers specialized in this matter (credit agencies). To this end, we discose your personal data for a credit check to the following companies:

SCHUFA Holding AG
Kormoranweg 5
65201 Wiesbaden

Bürgel Wirtschaftsinformationen GmbH & Co. KG
Gasstraße 18
22761 Hamburg

Verband der Vereine Creditreform e.V.
Hellersbergstraße 12
41460 Neuss

The credit check may include score values which have been calculated based on scientifically recognized mathematical-statistical processes. As part of this process, data relating to address among other things are disclosed.
The data processed for the purposes mentioned above are to safeguard our legitimate interests as well as the interests of a third party according to art. 6 par. 1 S. 1 lit. f GDP . The information included in the statistical probability of a payment default is used to be use to settle any decision concerning the justification, execution or termination of a contractual relationship. Your interests which are worthy of protection will be considered in accordance with legal conditions.

3. Disclosing your data

We disclose your data to third parties only under certain strict conditions. Below we inform you of these conditions.
Consent
When you have given us your express consent in accordance with art. 6 par. 1 S. 1 lit. a GDPR, we can disclose your data to a third party.
Representing legal claims v
According to art. 6 par. 1 S. 1 lit. f GDPR, we may dislose your personal data to third parties, wenn such a disclosure is necessary to validate, execute or to protect legal claims.In this case, you may assume that you do not have a prevailing interest not to disclose your data.
Legal Obligation
We disclose your personal data in complicance with a legal obligation according to art. 6 par. 1 S. 1 lit. c .
Contract
When disclosure of your personal data is legally valid and necessary for the existence of a contractual relationship, we can give your data to third parties.

4. Cookies

We use cookies, i.e. small text files which are saved on your computer or other device and are created automatically be your browser, when you visit our website. Cookies do not damage your device or computer in any way and do not contain viruses, trojans or other malware. They do however process data. . Cookies contain information which are created uniquely for the device visting our website. This does not mean that we can immediately identify you as the user. We use cookies to make using our services more agreeable. To this end, we use so-called session cookies which recognize whether you have already visited individual pages of our website before. These are automatically deleted when you leave the page in question.
Furthermore, we use temporary cookies to optimize a user-friendly environment. These are saved on your device for a specific period of time. Should you visit our website again to use our services, immediate recognition of your having visited before occurs so that all settings and information previously entered by you do not have to be put in again.

Furthermore, we use cookies to statistically analyze the use of our website and to optimize what we offer you on our website (see below). Cookies make it possible for us to recognize that you have already been on our website. These cookies are automatically erased after a specified period of time.
The data processed by the cookies for the purposes listed above serve to safeguard our legimitate interests as well as those of third parties in accordance with art. 6 par. 1 S. 1 lit. f GDPR.
Most browsers automatically accept cookies. You can, however, configure your browser in such way so that no cookies are saved on your computer or a message appears every time a cookie is generated. You can also set your browser so that cookies are always erased whenever you exit the browser. Completely deactivating cookies could meant that you are not able to use certain functions on our website.

5. Analytical tools

The tracking tools described below are used in accordance with art. 6 par. 1 S. 1 lit. f GDPR By using tracking tools we wish to ensure an individualized design as well as continually optimizing our website. In addition, we use tracking tools to statistically analyze our website and to evaluate how we can optimize our services for you. These are legitimate interests as per the regulation mentioned in the previous sentence. The purpose for the data processing as well as the categories of data in question can be taken from the description of the relevant tracking tool.

a) Google Analytics
In order to individualize our website and to continually improve it, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; forwith referred to as Google“). To this end, anonymized user profiles are generated and cookies used. (see above) . Information is generated via the cookie concerning your use of our website such as:

• Browser Type /-Version,
• Operating system used,
• Referrer URL (the site previously visited),
• Host name of your computer (IP address),
• Time of server request.

This information is generally transmitted to a Google server in the USA and stored there. The information is used to evaluate how the website is being used, to create reports on website activities, marketing and individualized design of this website as well as services linked to website use and internet use. This information may also be transmitted to third parties if this is legally permissible or if third parties are processing the data as part of a contract. Under no circumstances is your IP address connected to other Google data. The IP addresses are made anonymous making it impossible to connect them to a person (IP Masking).
You can prevent cookies from being installed on your device by using the appropriate settings on your browser software. However it may be that in this case not all functions of our website will be available to you.
Furthermore, you can also prevent the data collected via the cookie and connected to your using our website (including IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
Apart from the browser add-on, particulary in the case of browsers on mobile devices, you can prevent Google Analytics from processing your data by clicking on this link Erfassung von Daten von Google Analytics für diese Webseite deaktivieren.

An opt-out cookie is applied which prevents future processing of your data on our website. The opt-out cookie is specific to our website and is on your device. If you erase the cookies in the browser, you must apply the opt-out cookie once again.
Further information on data collection in connection with Google Analytics can be found on the Google Analytics support page (https://support.google.com/analytics/answer/6004245?hl=de).

b) Google Adwords Conversion Tracking
In order to statistically analyze use of our website as well as to optimize our website for you, we also use Google Conversion Tracking. In this case, Google Adwords places a cookie (see above) as soon as you reach a Google advertisement on our website.
These cookies become invalid after thirty days and are not used to personally identify you. If the user visits certain sites of the Adwords customer and the cookie has not expired yet, Google and the customer can recognize that the user has clicked on the advertisement and has been forwarded to this page. Each Adwords customers receive a different cookie. In this way, cookies cannot be followed via the websites of adwords customers. The information obtained via conversion cookies serve to generate conversion statistics for adwords customers who have opted for conversion tracking. Adwords customers find out the total number of users who have clicked on their advertisement and who have been forwarded to a site via a conversion tracking tag. They do not, however, receive any information which would enable personal identification of the user. If you do not want to take part in tracking processes, you may reject the cookie needed for this process, for example by changing browser settings to deactivate automatic generation of cookies. You can also deactivate cookies for conversion tracking by setting up your browser to block all cookies from the domain www.googleadservices.com. Googles data protection information on conversion tracking can be found at https://services.google.com/sitestats/de.html.

c) Use of IP Mapper for web analysis
we use freegeoip.net (freegeoip.net), to create anonymous user profiles in order to evaluate visitor behaviour. This serves to improve and individualize our servies. To this end, cookies may also be used (See 4. above). The anonymized user profiles are not linked to personal data via the name of the pseudonym.

6. Simple link to Facebook
We have a link to our Facebook page which is governed by the data protection terms of Facebook. The purpose and amount of data collected and the further processing and use of data by Facebook as well as your rights and setting options in question concerning privacy protection can be found at https://www.facebook.com/about/privacy/ from Facebook.

7. Google Maps
On our website we offer you "Google Maps" as an additional service, an online map provider belonging to Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereafter known simply as "Google"). With this service, we can offer you interactive maps directly from our website and make it possible for you to use all functions of this map service with ease. When you visit our web site and use this service by clicking on the appropriate button, Google receives the information that you have clicked on this service. To this end your IP address is transmitted, a process which occurs automatically, regardless of whether you have a user account with Google or not. If you are logged on to your Google account, your data is directly assigned to your account. If you do not want your data matched to your Google profile, you must log out before you use the map service. Google saves your data as a use-specific profile and uses this information for advertising, marketing and to enhance the user experience. In particular, this data is then evaluated (even for users who are not logged in) for user-specific advertising and to inform other users of your activities on our web site.
We use Google Maps in order to be able to display interactive maps from Google Maps so that you can use our web site more efficiently, for example, if you wish to find one of our dealers or partners in your area.

You may object to having this user profile created but to do this, please contact Google directly. Google has committed to the so-called Privacy Shield Agreement between the European Union and the United States. By signing this agreement, Google agrees to comply with regulations of the European General Data Protection Regulation. For more information, please click on the link provided: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
For further information on the nature and scope of the collection and processing of your data by Google, please see the company's data protection statement. There you can also find information concerning your rights and the various settings you can change to protect your privacy. : http://www.google.de/intl/de/policies/privacy.

8. Your Rights and Choices
The GDPR provides you with certain rights regarding your personal data. These include:

Access
In accordance with Art. 15 GDPR you may reasonably access the personal data relating to you.You may particularly obtain information concerning:

• the purposes of processing
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed,
• the envisaged period for which the personal data will be stored;
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• the source of data not collected by us
• the existence of automated decision-making, including profiling and at least in those cases, meaningful information about the logic involved.

Rectification
In accordance with art. 16 GDPR you have the right to request the following:

• Rectification of inaccurate personal data without undue delay which has been stored by us
• Right to have incomplete personal data stored by us completed.

Erasure

According to art. 17 GDPR you have the right to obtain erasure of personal data kept by us so long as the following does not apply:

• for exercising the right of freedom of expression and information;
• in fulfullment of a legal obligation
• for reasons of public interest
• for the establishment, exercise or defence of legal claims.

Restriction

According to art. 18 GDPR you are entitled to obtain restriction of processing where one of the following applies:

• the accuracy of the personal data is contested by you
• the processing is unlawful and you oppose erasure of the personal data and we no longer need it but you require it for establishing, exercising or protecting your legal claims;
• You have objected to the processing in accordance with art. 21 GDPR ;

Data Portability
In accordance with art. 20 GDPR you have the right to receive your personal data, which has been provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

Withdrawal of Consent
According to art. 7 par. 3 GDPR you have the right to withdraw your consent at any time. After which we shall no longer process the data affected by this consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawl.
In accordance with art. 77 GDPR you are entitled to lodge a complaint with a supervisory authority. Usually you may contact the authority in your place of residence or work place or where your work place is located.

Objection
You have the right to object at any time to processing of your personal data which is based on point (f) of Article 6(1) GDPR on grounds relating to your particular situation or where data are processed for direct marketing purposes. In the latter case, you have in general the right to contest without providing any further reasons . Should you wish to exercise your rights in this matter, simply write us at info@kress.eu.

9. Data Security
We use the SSL process(Secure Socket Layer) in connection with the highest level of encryption allowed by your browser. You can see whether or not a page from our website has been encrypted by the locked representation or key symbol in the lower status bar of your browser.
We use appropriate technical and organizational security measures to protect your data against haphazard or purposeful manipulation, partial or complete loss, destruction or unauthorized access from third parites. Our security measures are always being improved in accordance with technological developments.

10. Mofificaiton of this data protection statement
It may be necessary to modify this data protection statement, for example, if our website is further developed or our services are changed or should legal or supervisory regulations change. The current data protection statement can be found at https://www.kress.eu/de/datenschutz.html. You may download it and print it out at any time.

11. Current version of this data protection statement
This data protection statement is current and valid and dates to May 2018.