Privacy policy
of the Volkswagen Center Fürth Pillenstein GmbH

We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation laws applicable to us. With the help of this data protection declaration, we inform you comprehensively about the processing of your personal data by Volkswagen Zentrum Fürth Pillenstein GmbH and the rights to which you are entitled.

Personal data is information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, telephone number, e-mail address, but also your IP address.

Data is anonymous if no personal reference to the user can be established.

Responsible body and data protection officer

Volkswagen Center Fürth Pillenstein GmbH, Nürnberger Str. 147, 90762 Fürth
Phone: 0911/9702-6, Fax: 0911/9702-703

Contact of the data protection officer
datenschutz@pillenstein.de

Your rights as a data subject

First of all, we would like to inform you here about your rights as a data subject. These rights are standardized in Art. 15 – 22 EU GDPR. This includes:

• The right to information (Art. 15 EU GDPR),
• The right to erasure (Art. 17 EU GDPR),
• The right to rectification (Art. 16 EU GDPR),
• The right to data portability (Art. 20 EU GDPR),
• The right to restrict data processing (Art. 18 EU GDPR),
• The right to object to data processing (Art. 21 EU GDPR).

To assert these rights, please contact: datenschutz@pillenstein.de. The same applies if you have any questions about data processing in our company or wish to withdraw your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Rights of objection

Please note the following in connection with rights of objection:

Purposes and legal bases of data processing

When processing your personal data, the provisions of the EU GDPR and all other applicable data protection regulations are complied with. The legal basis for data processing arises in particular from Art. 6 EU GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also constitute a data protection authorization provision. Before you give your consent, we will inform you about the purpose of the data processing and your right of withdrawal.

If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent. Special categories of personal data will only be processed if this is required by law and there is no reason to assume that you have an overriding legitimate interest in the exclusion of processing.

Disclosure to third parties

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, your data will not be passed on to third parties unless we are obliged to do so due to mandatory legal provisions (passing on to external bodies such as supervisory authorities or law enforcement agencies).

Recipients of the data / categories of recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In many cases, service providers support our specialist departments in performing their tasks. The necessary data protection contracts have been concluded with all service providers.

Transfer to a third country / intention to transfer to a third country

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, is required by law or if you have given us your consent to do so.

Storage duration of the data

We store your data for as long as it is required for the respective processing purpose. Please note that numerous retention periods require that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). If there are no further retention obligations, the data will be routinely deleted once the purpose has been achieved.

In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

Secure transfer of your data

We use appropriate technical and organizational security measures to protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

The exchange of data to and from our website is encrypted. We offer HTTPS as the transmission protocol for our website, using the latest encryption protocols. We also offer our users content encryption for contact forms and applications. Only we are able to decrypt this data. It is also possible to use alternative communication channels (e.g. by post).

Obligation to provide the data

Various personal data are necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the point above. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or execute the underlying contractual relationship without providing this data.

Categories, sources and origin of the data

Which data we process is determined by the respective context: this depends on whether, for example, you place an order online or enter an inquiry in our contact form, whether you send us an application or submit a complaint.

Please note that we may also provide information for special processing situations separately in a suitable place, e.g. when uploading application documents or in the event of a contact request.

We collect and process the following data when you visit our website

• Name of the Internet service provider
• Information about the website from which you are visiting us
• Web browser and operating system used
• The IP address assigned by your Internet service provider
• Requested files, transferred data volume, downloads/file export
• Information about the websites you visit on our site, including date and time
• For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is stored in accordance with Art. 6(1)(F) EU GDPR. After 7 days at the latest, anonymization takes place by shortening the IP address so that no reference to the user is established.

We collect and process the following data as part of a contact request

• Surname, first name
• Contact details
• Salutation
• Information on wishes and interests
• License plate
• Chassis number

We process the following data as part of the ordering process

• Salutation
• Surname, first name
• Date of birth
• Delivery address
• Invoice address
• E-mail address
• Data that may be permissibly processed from other sources

We collect and process the following data for online applications

• Surname, first name
• Address
• Contact details

Automated decisions in individual cases

We do not use purely automated processing to reach a decision.

Links to other providers

Our website also contains – clearly recognizable – links to the websites of other companies. Where links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee or liability can be assumed for this content. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, such links will be removed immediately.

Cookies (Art. 6 para. 1 lit. f EU-GDPR / Art. 6 para. 1 lit. a EU-GDPR with consent)

Our Internet pages use so-called cookies in several places. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard disk).

These cookies enable us to analyze how users use our websites. This allows us to tailor the website content to the needs of visitors. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it according to the thematic interests of the user, for example.

Most of the cookies we use are so-called “session cookies”. These are automatically deleted after your visit. Permanent cookies are automatically deleted from your computer when they expire (usually six months) or if you delete them yourself before they expire.

Most web browsers accept cookies automatically. However, you can usually change your browser settings if you prefer not to send the information. You can then still use the offers on our website without restrictions (exception: configurators).

We use cookies to make our website more user-friendly, effective and secure. We also use cookies to enable us to analyze how users use our websites. This enables us to tailor content to the needs of visitors. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it according to the thematic interests of the user, for example.

Cookies are stored on the user’s computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers.

Please note: If you deactivate the setting of cookies, you may not be able to use all functions of our website to their full extent.

User profiles / web tracking procedure

This website uses Google Analytics, a web analysis service of Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=de.

Web analysis with Matomo

We use Matomo, an open source analysis tool, on this website to analyze and continuously improve the use of our website. Matomo does not set cookies on this site to track visitor activity before explicit consent to the use of cookies is given.

Once you give your consent for the use of cookies, cookies are set to enable a more detailed analysis and an improved user experience. These cookies collect anonymous information, such as your interactions on our site, to optimize our services and content for you.

The cookies used by Matomo include, among others:

_pk_id: This cookie stores an anonymized visitor ID.
_pk_ses: This cookie is used to store session data during your visit.
The data collected is not passed on to third parties and is used exclusively to improve the user experience on our website.

You can adjust your cookie settings or withdraw your consent at any time.

Social plugins of social networks

Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition “Facebook Social Plugin”.
Unfortunately, we cannot carry out the competition without the mandatory fields. Participation is then not possible.
You also have the option of giving us your advertising consent in the competition mask. Of course, it is also possible to take part in the competition without giving your advertising consent.
If you give us your consent by ticking the relevant checkbox, we will also process your data in order to send you information and offers about our products/services by post or email.
You can withdraw your consent at any time without giving reasons at datenschutz@pillenstein.de

Contact form / contact by e-mail (Art. 6 para. 1 lit. a, b EU-GDPR)

There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form to contact you and answer your questions and requests.

The principle of data minimization and data avoidance is observed in that you only have to provide the data that we absolutely need to contact you. This is your e-mail address and the message field itself. In addition, your IP address is processed for technical reasons and for legal protection. All other data are voluntary fields and can be provided optionally (e.g. to answer your questions more individually).

If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your request. If you do not use the forms provided to contact us, no further data will be collected.

Newsletter (Art. 6 para. 1 lit. a EU-GDPR)

You can subscribe to a free newsletter on our website. The e-mail address and your name provided when registering for the newsletter will be used to send you the personalized newsletter.

The principle of data economy and data avoidance is observed here, as only the e-mail address (or name in the case of personalized newsletters) is marked as a mandatory field. For technical reasons and for legal protection, your IP address is also processed when you subscribe to the newsletter

We use the so-called double opt-in procedure for sending newsletters by e-mail. This means that you will only receive advertising by e-mail if you have previously expressly confirmed that we should activate the newsletter service. We do this by sending you a notification e-mail and asking you to confirm that you wish to receive our newsletter at this e-mail address by clicking on a link contained in this e-mail.

You can of course unsubscribe at any time using the unsubscribe option provided in the newsletter and thus revoke your consent. It is also possible to unsubscribe from the newsletter at any time directly via our website.

Webshop (Art. 6 para. 1 lit. b EU-GDPR)

We process the data provided by you in the order form only for the execution or processing of the contractual relationship, unless you consent to further use.

The principle of data economy and data avoidance is observed in that you only have to provide us with the data that we absolutely need to execute the contract or to fulfill our contractual obligations (i.e. your name, address, e-mail address and the payment data required for the selected payment method) or that we are legally obliged to collect.

In addition, your IP address is processed for technical reasons and for legal protection. Without this data, we will unfortunately have to refuse to conclude the contract, as we will then not be able to execute it or may have to terminate an existing contract. Of course, you can also provide more data if you wish.

Registration / customer account (Art. 6 para. 1 lit. a, b EU-GDPR)

On our website, we offer users the opportunity to register by providing personal data. The advantage of this is that you can view your order history in particular and the data you enter for the order form is saved. This means that you do not have to enter them again when you place another order.

Registration is therefore either necessary for the fulfillment of a contract (via our online store) with you or for the implementation of pre-contractual measures or possible if guest access is also provided.

The principle of data minimization and data avoidance is observed here, as only the data required for registration is marked with an asterisk (*) as a mandatory field. These are, for example, the e-mail address and password including password repetition.

For orders in our online store, we also require details of the billing address (title, first name, surname, address) for delivery. If the delivery address differs from the billing address, the above information must also be provided for the delivery address.

By registering on our website, the user’s IP address, the date and time of registration are also stored (technical background data). By clicking the “Register now” button, you consent to the processing of your data.

Please note: The password you assign is stored by us in encrypted form. Employees of our company cannot read this password. They are therefore unable to provide you with any information if you have forgotten your password.

In this case, please use the “Forgotten password” function, which will send you an automatically generated new password by e-mail. No employee is authorized to ask you for your password by telephone or in writing. Therefore, please never give your password if you receive such requests.

Upon completion of the registration process, your data is stored with us for use in the protected customer area. As soon as you log in to our website with your e-mail address as your user name and password, this data will be made available for actions you carry out on our website (e.g. for orders in our online store). Completed orders can be tracked in the order history. You can enter changes to the billing or delivery address here.

Registered persons are free to make changes / corrections to the billing or delivery address in the order history themselves. Our customer service will also be happy to make changes/corrections if you contact them. Of course, you can also cancel or delete your registration or customer account.

Payment systems (Art. 6 para. 1 lit. a, b EU-GDPR), credit check (Art. 6 para. 1 lit. f EU-GDPR)

In our online store you can pay via PayPal or in advance. For this purpose, the relevant payment-related data is collected in order to process your order and payment. In addition, your IP address is processed for technical reasons and for legal protection.

The principle of data minimization and data avoidance is observed in that you only have to provide us with the data that we absolutely need to process the payment and thus process the contract or that we are legally obliged to collect.

Without this data, we will unfortunately have to refuse to conclude the contract, as we will then not be able to execute it.

The payment system we use uses SSL encryption to protect the transmission of your data.

Note on PayPal:

PayPal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as the payment option during the ordering process in our online store, the data of the data subject is automatically transmitted to PayPal.

By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, cell phone number or other data required for payment processing.

Personal data in connection with the respective order is also required to process the purchase contract. Details on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev (for the legal situation from 25.5.2018).

Advertising purposes for existing customers (Art. 6 para. 1 lit. f EU GDPR)

Volkswagen Zentrum Fürth Pillenstein GmbH is interested in maintaining the customer relationship with you and sending you information and offers about our products / services (advertising purposes). We therefore process your data in order to send you corresponding information and offers by e-mail.