Privacy policy
of Allane SE
I. Preamble
II. Responsible person & data protection officer
III. Definition of personal data
IV. Legal bases of the processing
V. Categories of personal data
VI. Data processing at Allane SE
VII. Allane SE Group data processing
VIII. Allane Fleet data processing
IX. Allane Mobility Consulting data processing
X. Links
XI. Transfer to third countries
XII. Recipients or categories of recipients
XIII. Duration of storage
XIV. Profiling and automated processing
XV. Cookies
XVI. Rights
We take the protection of personal data and thus your privacy very seriously. We would like to outline here how the companies belonging to the Allane Mobility Group (hereinafter also "Allane companies" or "Allane") protect personal data and what it means when the Allane companies use personal data. In order to ensure the greatest possible protection of the privacy of data subjects, it is a matter of course for Allane to comply with all legal provisions on the subject of data protection.
The controller in terms of the GDPR is
Allane SE
Dr.-Carl-von-Linde-Straße 2
D-82049 Pullach
Telefon: +49 89 70 80 82 0
E-Mail: [email protected]
The data protection officer can be reached at:
Allane SE
Dr.-Carl-von-Linde-Strasse 2
D-82049 Pullach
Phone: +49 89 70 80 82 0
E-Mail: [email protected]
Before we do that, however, we would like to provide some general information about data protection at Allane Mobility Group.
Personal data is protected. This is information that identifies individual natural persons, such as your name, or information that makes you identifiable, such as your address, telephone number, or even the IP address used to identify computers on the Internet.
Personal data is collected and used by the Allane companies only to the extent necessary to operate the websites listed, including their content, and to provide the services of the Allane companies.
Allane Mobility Group only lawfully processes personal data on the basis of the following legal grounds:
Art. 6 (1) sentence 1 lit. a of the General Data Protection Regulation (DSGVO): According to this provision, processing of personal data is permissible if the data subjects have given their consent to the processing.
Art. 6 (1) sentence 1 lit. b DSGVO: According to this provision, processing of personal data is lawful if it is necessary for the performance of a contract to which the data subjects are party or for the performance of pre-contractual measures (e.g., inquiries about the conclusion of a leasing contract) that are made at the request of the data subject.
Art. 6 (1) sentence 1 lit. c DSGVO: According to this provision, data processing is lawful if it is necessary for compliance with a legal obligation to which the Allane companies are subject.
Art. 6 (1) sentence 1 lit. f DSGVO: According to this provision, the processing of personal data is lawful if it is necessary for the protection of the legitimate interests of the Allane companies responsible for the processing or a third party, unless the interests or fundamental rights and freedoms of the data subjects override these.
Depending on the website and offer, the following categories of personal data may be processed:
Master data: This includes, for example, the first name, last name, gender, date of birth, address (private and/or business, if applicable), user name for online accounts, a self-selected password and the customer number.
Communication data: These are telephone numbers communicated by data subjects (including mobile phone numbers), fax numbers, if applicable, e-mail address (private and/or business, if applicable), third-party communication data, if applicable, as well as communication content (e.g., e-mails) and, under certain circumstances, the IP address.
Contract Data: Contract Data includes all data processed under a contract entered into with one of the Allane Companies, e.g., data relating to a leased vehicle or vehicles serviced under fleet management (e.g., contract number, vehicle identification number, registration number).
Financial data: The financial data processed are account details communicated in the context of the performance of the respective contracts concluded, insofar as the account details can be attributed to natural persons. In addition, within the scope of the financial data, information is processed which is communicated within the scope of the self-disclosure, including information on the creditworthiness of data subjects (e.g. on the basis of Schufa inquiries).
Employee data: In connection with leasing contracts to major customers and fleet management, data relating to customers' employees is also processed. This includes surname, first name and, if applicable, communication data (telephone number, mobile phone number, e-mail address).
Voluntary information: If data subjects voluntarily provide the Allane companies responsible for processing (see → F: Purposes of processing) with information related to the purposes of processing described below, this data will also be processed.
Log data: In connection with the use of the websites, log data is processed that may contain personal data, such as IP addresses.
The data processing is divided into three parts
- Data processing in the Group
- Data processing in the Allane Fleet
- Data processing in Allane Mobility Consulting (AMC)
a) Responsible party
The responsible party is Allane SE, Dr.-Carl-von-Linde-Straße 2, D-82049 Pullach.
b) Processing purposes
|
Service |
Processing purpose |
Processed data |
Legal basis |
|
Contact form
|
You can send us a question on various topics via our contact form. Your data will be processed to handle these requests.
|
|
The legal basis is Art. 6 para. 1 lit. f DSGVO. We process your contact data in order to process your inquiry or to be able to answer you. If you have questions about your contract or would like to conclude a contract, the legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. |
|
Log files
|
Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so-called log files on the web server and in our system. This is necessary so that you can use our website at all. Data is also collected for the purpose of protecting our website from unauthorized access or for the purpose of tracking unauthorized access. The log files may contain personal data. However, the data is not stored together with other personal data.
|
Length of the website visit |
The legal basis for the processing, insofar as personal data is concerned, is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest is that we need to ensure and improve the functionality of our website and secure our IT systems against unauthorized access.
|
a) Responsible party
The responsible party is Allane SE, Dr.-Carl-von-Linde-Straße 2, D-82049 Pullach.
b) Processing purposes
|
Service |
Processing purpose |
Processed data |
Legal basis |
|
Conclusion and performance of contracts |
If you enter into a contract with us (e.g., for leased motor vehicles), we process the personal data required for the performance of the respective contract. |
|
The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DSGVO. |
|
Credit assessment and risk analysis
|
For the purpose of reducing the risk of non-payment, a credit check is performed prior to the conclusion of a leasing contract. We transmit personal data collected for the conclusion of the leasing contract to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden ("SCHUFA"). This involves information about the application, execution and termination of the contractual relationship and, if applicable, data about non-contractual behavior or fraudulent behavior.
|
|
The legal basis for these transfers is Article 6 (1) sentence 1 lit. b and Article 6 (1) sentence 1 lit. f DSGVO. Our legitimate interest in processing your personal data for credit assessment is that we need to protect ourselves against payment defaults.
|
|
Customer service
|
In connection with the fulfillment of the contract, we use your data, also for customer service, e.g. in case of inquiries on your part or ours regarding questions about the content of the contract. As part of our customer service, we also use master data to send you congratulations by mail on your birthday or similar occasions.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO, insofar as customer care is necessary for the fulfillment of our contractual obligations. Furthermore, the legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DSGVO, because it is in our legitimate interest to ensure customer satisfaction.
|
|
Provision of replacement vehicle
|
If a replacement vehicle is required for a leased vehicle, we process your personal data in order to provide a replacement vehicle.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Fuel cards/mineral oil companies
|
Ordering service or fuel cards.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Breakdown service provider
|
Offer roadside assistance as part of customer service.
|
|
The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Tire service
|
Offer to use tire services through our cooperation partners (e.g. exchange summer/winter tires).
|
|
The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Insurances
|
Intermediation of car insurance
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO. |
|
Maintenance services and repairs at partner workshops
|
Provision of a hotline to have repairs or maintenance carried out at our partner workshops. If such a repair or maintenance is to be carried out, the hotline will name suitable partner workshops. We process the personal data listed for the purpose of carrying out this maintenance or repair work and preparing cost estimates. In these cases, the workshop settles accounts with us. The customer will be charged for the service. |
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Workshops
|
If the customer wishes to have repairs or maintenance carried out himself and contacts a workshop directly for this purpose, this workshop will transmit personal data to us for the purpose of invoicing the workshop. |
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Surveyor
|
At the end of a leasing contract, as well as in the event that a leased vehicle has bodywork or paint damage, or that repairs are required due to a case of damage, we commission external appraisers to inspect any defects, damage or necessary repairs. |
|
The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Collection company
|
If necessary, e.g. in cases of default or non-payment of leasing installments, we commission collection agencies for the purpose of debt collection and also pass on personal data to the collection agency in the course of this.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest in passing on the aforementioned data to a collection agency is to enforce our contractually justified claims. |
|
Contact forms, telephone as well as e-mail and postal inquiries/contact
|
If you have questions about our services and products or with regard to certain situations (e.g. notification of a claim), you have the option of contacting us either by post, telephone, e-mail or via our website. In these cases, you provide us with certain data or, in the case of transmission by e-mail or contact form, enter this data in an input mask provided for this purpose, via which your data is transmitted to us and stored. We use this data to contact you or to be able to assign and process your request as quickly as possible. The inquiries can be pre-contractual inquiries as well as in connection with an already concluded contract. Depending on the situation, we process the personal data listed opposite. If you have already concluded a contract with us, we also process contract data and, if applicable, financial data and voluntary information provided to us in the case of inquiries about the contract. |
|
In the case of inquiries that are not directed to us in connection with a current or pending contractual relationship, the legal basis for the processing is Art. 6 (1) p. 1 lit. f DSGVO; because it is in our legitimate interest to answer inquiries. Otherwise, the legal basis for the aforementioned processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Customer satisfaction surveys
|
At regular intervals, we conduct customer satisfaction surveys by e-mail or telephone for the purpose of analyzing and optimizing our processes. However, this only takes place if corresponding express consents to telephone contact or e-mail for this purpose have been obtained in advance or the requirements of Section 7 (3) of the German Unfair Competition Act (UWG) have been met. Provided that corresponding consents have been obtained, we also send rating invitations by e-mail to advertise our services for public display on Google, Trustpilot (https://de.trustpilot.com) and → Trusted Shops. When submitting a rating on Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, may collect personal data from you. Details can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de#products. The same applies to Trustpilot A/S, Pilestraede 58, 5th Floor, 1112 Copenhagen K, Denmark, whose privacy policy can be found at https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms, and Momentive Europe UC (Surveymonkey) 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland, whose privacy policy can be found at https://www.surveymonkey.de/mp/legal/privacy/. |
|
The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. a DSGVO, if applicable Art. 6 para. 1 sentence 1 lit. f DSGVO in conjunction with. § Section 7 (3) UWG, whereby the legitimate interest is to conduct direct advertising.
|
|
Enrichment with further data
|
We also use the data available to us to make personally tailored offers, if necessary. In doing so, we process the data that we have collected as part of the existing contractual relationships as well as the data that is voluntarily provided to us (e.g. positive/negative experiences, wishes, the use of our website, etc.). In addition, we use the data stored with us for the purpose of risk analysis (see also → Credit assessment and risk analyses) and evaluating the success of projects and campaigns. The use of personal data stored by third parties, including our group companies and subsidiaries, for the purpose of creating personalized advertising only takes place if the express consent of the persons concerned has been obtained. This also applies to the transfer of your data to third parties for advertising purposes. In addition, we use the data in pseudonymized or anonymized form to conduct competitive or market analyses and for predictions using artificial intelligence (AI). |
|
The legal basis for this data processing is Art. 6 (1) sentence 1 lit. f DSGVO, because it is in our legitimate interest to send data for the purpose of submitting personalized offers or to assess the risks, for example, of non-payment and to conduct competitive or market analyses. The legal basis for data processing with the consent of the data subjects is Art. 6 para. 1 p. 1 lit. a DSGVO.
|
|
Digital signature
|
We offer the possibility to sign documents electronically via an online service. The provider and operator of this service is DocuSign GmbH, Neue Rothofstraße 13-19, 60313 Frankfurt am Main, Germany, which acts on behalf of Allane SE. A corresponding contract on order processing has been concluded with DocuSign GmbH. With the help of DocuSign, you can sign documents electronically in a legally secure and evidence-proof manner. In connection with the digital signature, the personal data listed in the documents to be signed are processed. The DocuSign service provider stores your data for a further 14 days after the signature has been executed before it is permanently deleted. The data required for the history is stored for a further 180 days, after which it is permanently deleted. You can view the data protection information of DocuSign GmbH via the following link: https://www.docusign.de/unternehmen/datenschutz |
|
The legal basis for the processing is Art. 6 para. 1 lit. b DS-GVO.
|
|
Contact form
|
You can send us a question on various topics via our contact form. Your data will be processed to handle these requests.
|
|
The legal basis is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is to answer the questions directed to us. Data processing in connection with questions about your contract or the conclusion of a contract is lawful pursuant to Art. 6 (1) lit. b DSGVO. |
|
Damage report
|
By entering your data in an input mask, you have the option of reporting a claim to us, which we can then settle.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Workshop search
|
By entering your data, we can provide you with an overview of the nearest partners/workshops. |
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. |
|
Log files
|
Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so-called log files on the web server and in our system. This is necessary so that you can use our website at all. Data is also collected for the purpose of protecting our website from unauthorized access or for the purpose of tracking unauthorized access. The log files may contain personal data. However, the data is not stored together with other personal data.
|
|
The legal basis for the processing, insofar as personal data is concerned, is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest is that we need to ensure and improve the functionality of our website and secure our IT systems against unauthorized access. |
|
Vehicle registration
|
Registration of the vehicles to our company (Allane SE) Registration of the vehicle to customer (company and driver possible). Admission is made via DAD.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Vehicle deregistration
|
Deregistration of the vehicle.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. |
|
Transfer and return transport
|
Delivery or collection of the vehicle to or from the customer (private / commercial address) by a transport company. |
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. |
|
Driver's license check
|
For the implementation of the Digital Driver's License Control.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Traffic Ticket Management
|
Information to authorities of the user for forwarding the fine.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Driver training
|
To carry out digital driver training for compliance with the requirements of UVV.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Invoice verification and approval
|
Review and approval of invoices (of full service products) for commercial customer (Captiv Leasing private customers). Internal audit or audit via service provider (Control Expert, Business Gateway). |
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. |
a) Responsible party
Allane Mobility Consulting GmbH, Dr.-Carl-von-Linde-Straße 2, D-82049 Pullach.
b) Processing purposes
|
Service |
Processing purpose |
Processed data |
Legal basis |
|
Conclusion and performance of contracts
|
If you enter into a contract with us (e.g., for leased motor vehicles), we process the personal data required for the performance of the respective contract.
|
|
The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Credit assessment and risk analysis
|
For the purpose of reducing the risk of non-payment, a credit check is performed prior to the conclusion of a leasing contract. We transmit personal data collected for the conclusion of the leasing contract to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden ("SCHUFA"). This involves information about the application, execution and termination of the contractual relationship and, if applicable, data about non-contractual behavior or fraudulent behavior.
|
|
The legal basis for these transfers is Article 6 (1) sentence 1 lit. b and Article 6 (1) sentence 1 lit. f DSGVO. Our legitimate interest in processing your personal data for credit assessment is that we need to protect ourselves against payment defaults. |
|
Customer service
|
In connection with the fulfillment of the contract, we use your data, also for customer service, e.g. in case of inquiries on your part or ours regarding questions about the content of the contract. As part of our customer service, we also use master data to send you congratulations by mail on your birthday or similar occasions.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO, insofar as customer care is necessary for the fulfillment of our contractual obligations. Furthermore, the legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DSGVO, because it is in our legitimate interest to ensure customer satisfaction. |
|
Provision of replacement vehicle
|
If a replacement vehicle is required for a leased vehicle, we process your personal data in order to provide a replacement vehicle.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Fuel cards/ mineral oil companies
|
Ordering service or fuel cards.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Breakdown service provider
|
Offer roadside assistance as part of customer service.
|
|
The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Tire service
|
Offer to use tire services through our cooperation partners (e.g. exchange summer/winter tires).
|
|
The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Insurances
|
Intermediation of car insurance.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Maintenance services and repairs at partner workshops
|
Provision of a hotline to have repairs or maintenance carried out at our partner workshops. If such a repair or maintenance is to be carried out, the hotline will name suitable partner workshops. We process the personal data listed for the purpose of carrying out this maintenance or repair work and preparing cost estimates. In these cases, the workshop settles accounts with us. The customer will be charged for the service. |
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Workshops
|
If the customer wishes to have repairs or maintenance carried out himself and contacts a workshop directly for this purpose, this workshop will transmit personal data to us for the purpose of invoicing the workshop. |
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Surveyor
|
At the end of a leasing contract, as well as in the event that a leased vehicle has bodywork or paint damage, or that repairs are required due to a case of damage, we commission external appraisers to inspect any defects, damage or necessary repairs. |
|
The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Collection company
|
If necessary, e.g. in cases of default or non-payment of leasing installments, we commission collection agencies for the purpose of debt collection and also pass on personal data to the collection agency in the course of this.
|
|
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest in passing on the aforementioned data to a collection agency is to enforce our contractually justified claims. |
|
Contact forms, telephone as well as e-mail and postal inquiries/contact
|
If you have questions about our services and products or with regard to certain situations (e.g. notification of a claim), you have the option of contacting us either by post, telephone, e-mail or via our website. In these cases, you provide us with certain data or, in the case of transmission by e-mail or contact form, enter this data in an input mask provided for this purpose, via which your data is transmitted to us and stored. We use this data to contact you or to be able to assign and process your request as quickly as possible. The inquiries can be pre-contractual inquiries as well as in connection with an already concluded contract. Depending on the situation, we process the personal data listed opposite. If you have already concluded a contract with us, we also process contract data and, if applicable, financial data and voluntary information provided to us in the case of inquiries about the contract. |
|
In the case of inquiries that are not directed to us in connection with a current or pending contractual relationship, the legal basis for the processing is Art. 6 (1) sentence 1 lit. f DSGVO; because it is in our legitimate interest to answer inquiries. Otherwise, the legal basis for the aforementioned processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
|
|
Customer satisfaction surveys
|
At regular intervals, we conduct customer satisfaction surveys by e-mail or telephone for the purpose of analyzing and optimizing our processes. However, this only takes place if corresponding express consents to telephone contact or e-mail for this purpose have been obtained in advance or the requirements of Section 7 (3) of the German Unfair Competition Act (UWG) have been met. Provided that corresponding consents have been obtained, we also send rating invitations by e-mail to advertise our services for public display on Google, Trustpilot (https://de.trustpilot.com) and → Trusted Shops. When submitting a rating on Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, may collect personal data from you. Details can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de#products. The same applies to Trustpilot A/S, Pilestraede 58, 5th Floor, 1112 Copenhagen K, Denmark, whose privacy policy can be found at https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms, and Momentive Europe UC (Surveymonkey) 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland, whose privacy policy can be found at https://www.surveymonkey.de/mp/legal/privacy/. |
|
The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. a DSGVO, if applicable Art. 6 para. 1 sentence 1 lit. f DSGVO in conjunction with. § Section 7 (3) UWG, whereby the legitimate interest is to conduct direct advertising.
|
|
Enrichment with further data
|
We also use the data available to us to make personally tailored offers, if necessary. In doing so, we process the data that we have collected as part of the existing contractual relationships as well as the data that is voluntarily provided to us (e.g. positive/negative experiences, wishes, the use of our website, etc.). In addition, we use the data stored with us for the purpose of risk analysis (see also → Credit assessment and risk analyses) and evaluating the success of projects and campaigns. The use of personal data stored by third parties, including our group companies and subsidiaries, for the purpose of creating personalized advertising only takes place if the express consent of the persons concerned has been obtained. This also applies to the transfer of your data to third parties for advertising purposes. In addition, we use the data in pseudonymized or anonymized form to conduct competitive or market analyses and for predictions using artificial intelligence (AI). |
|
The legal basis for this data processing is Art. 6 (1) sentence 1 lit. f DSGVO, because it is in our legitimate interest to send data for the purpose of submitting personalized offers or to assess the risks, for example, of non-payment and to conduct competitive or market analyses. The legal basis for data processing with the consent of the data subjects is Art. 6 para. 1 p. 1 lit. a DSGVO.
|
|
Digital signature
|
We offer the possibility to sign documents electronically via an online service. The provider and operator of this service is DocuSign GmbH, Neue Rothofstraße 13-19, 60313 Frankfurt am Main, Germany, which acts on behalf of Allane SE. A corresponding contract on order processing has been concluded with DocuSign GmbH. With the help of DocuSign, you can sign documents electronically in a legally secure and evidence-proof manner. In connection with the digital signature, the personal data listed in the documents to be signed are processed. The DocuSign service provider stores your data for a further 14 days after the signature has been executed before it is permanently deleted. The data required for the history is stored for a further 180 days, after which it is permanently deleted. You can view the data protection information of DocuSign GmbH via the following link: https://www.docusign.de/unternehmen/datenschutz |
|
The legal basis for the processing is Art. 6 para. 1 lit. b DS-GVO.
|
|
Log files
|
Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so-called log files on the web server and in our system. This is necessary so that you can use our website at all. Data is also collected for the purpose of protecting our website from unauthorized access or for the purpose of tracking unauthorized access. The log files may contain personal data. However, the data is not stored together with other personal data.
|
|
The legal basis for the processing, insofar as personal data is concerned, is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest is that we need to ensure and improve the functionality of our website and secure our IT systems against unauthorized access.
|
|
Vehicle registration
|
Registration of vehicles to customer (company and driver possible). Admission takes place via DAD. Admission can be through Allane or customers.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Vehicle deregistration
|
Deregistration of the vehicle.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Transfer and return transport
|
Delivery or collection of the vehicle to or from the customer (private / commercial address) by a transport company.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Driver training
|
For carrying out digital driver training to comply with the requirements of UVV.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Driver's license check
|
To perform the digital driver's license check
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
|
|
Traffic Ticket Management
|
Information to authorities of the user for forwarding the fine.
|
|
The legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. |
Our website may contain links to and from partner websites. Please note that if you click on the link to access a third party website, they will publish their own privacy policies and we do not accept any responsibility or liability for these policies.
A transfer of your personal data to third countries does not take place in principle. Any transfers to a third country take place on the basis of an adequacy decision of the European Commission. If there is no adequacy decision of the European Commission for the respective third country, the transfer to a third country takes place on the basis of appropriate guarantees within the meaning of Art. 46 (2) DSGVO. Copies of these guarantees can be requested at the above address of the Allane Mobility Group companies responsible for the processing operations. Third countries are all countries outside the European Economic Area. The European Economic Area includes all countries of the European Union as well as the countries of the so-called European Free Trade Association, namely Norway, Iceland and Liechtenstein.
The Allane companies commission external service providers to fulfill their contractual and legal obligations. These include, for example, car dealers to whom the data of data subjects are transferred for the purpose of delivering leased vehicles, or repair shops, among others, as part of key account management. The companies of the Allane Mobility Group also cooperate with dealers and service providers to whom the data is disclosed for the purpose of fulfilling orders for additional products, such as winter tires, or the use of additional services, such as maintenance work.
Other service providers include those who, for example, register leased vehicles with the relevant authorities on behalf of Allane, logistics companies or freight forwarders that Allane commissions for the purpose of delivery, or service providers who envelope mail items and make them ready for dispatch.
In addition, personal data may be transferred to other recipients for the purposes stated in each case, such as to authorities, e.g. in connection with the registration of leased vehicles, as well as to workshops, fuel card service providers, petroleum companies or insurance companies.
If service providers process personal data on behalf of the Allane Companies, the Allane Companies have entered into the legally required contracts with them on commissioned processing pursuant to Art. 28 DSGVO.
Personal data will be stored until the respective purpose underlying the processing has ceased to exist. If the aforementioned Allane companies are legally obliged to store personal data, the data will be stored for the duration of the legal obligation. Depending on the legal obligation, this may be up to thirty years. In addition, there may be retention periods in accordance with tax law (6 years in accordance with Section 146 of the German Fiscal Code) and commercial law requirements (10 years in accordance with Section 257 of the German Commercial Code). If applicable, personal data for ongoing operations will be blocked during this period, provided that there is no longer any other purpose for the processing.
Automated decision-making within the meaning of Art. 22 DSGVO does not take place.
"Cookies" are small text files that are copied from a web server to the hard drive of those who use a web page. Cookies contain information that can later be read by a web server in the domain where the cookie was issued to web page users. Cookies cannot execute programs or place viruses on the computer. The cookies used by Allane are technically necessary cookies.
When visiting the Allane websites, only a technically necessary cookie is set. This is the cookie _cf_bm of the company Cloudflare, Inc, 101 Townsend Street, San Francisco, CA/USA. The cookie is used to protect Allane's websites from harmful bots. Cloudflare places the __cf_bm cookie on end-user devices that access Allane websites protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for these bot solutions to work properly. This cookie expires after 30 minutes of continuous end-user inactivity. The information in the cookie (except for time-related information) is encrypted and can only be decrypted by Cloudflare. For further details, please refer to https://developers.cloudflare.com/fundamentals/get-started/reference/cloudflare-cookies/.
In accordance with Section 25 (2) No. 2 of the Telecommunications Telemedia Data Protection Act (TTDSG), consent is not required for the setting of technically necessary cookies. Insofar as technically required cookies process personal data, the legal basis for this processing is Art. 6 (1) sentence 1 lit. f DSGVO. The legitimate interest according to Art. 6 para. 1 sentence 1 lit. f DSGVO is to offer the websites. Technically necessary cookies cannot be deactivated manually by the user. However, users of the websites have the option to specify via their browser settings that cookies should generally be rejected. However, this may mean that the websites cannot be used.
Allane would like to inform you in the following about the rights of data subjects with regard to the processing of personal data. In case of questions regarding individual rights, data subjects may contact Allane's data protection officer at [email protected] or by mail at "Data Protection Officer at Allane Mobility Group, Dr.-Carl-von-Linde-Strasse 2, DE 82049 Pullach".
a. Withdrawal of consent (Art. 7 (3) DSGVO)
If the data processing is based on the express consent of the data subjects, the consent may be revoked at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
b. Right of access (Art. 15 DSGVO)
Data subjects have the right to request confirmation from the controllers (see → F: Purposes of processing) as to whether personal data about them are being processed. If this is the case, data subjects have the right to information about this personal data and to be provided with a copy. When personal data is transferred to a third country or an international organization, data subjects also have the right to be informed about appropriate safeguards to ensure that the recipients comply with the provisions of the GDPR.
c. Right to rectification (Art. 16 DSGVO)
Inaccurate data shall be corrected without undue delay. Taking into account the purposes of the processing, data subjects also have the right to request that incomplete personal data be supplemented, including by means of a supplementary declaration.
d. Right to erasure or the "right to be forgotten" (Art. 17 GDPR)
The Allane companies responsible for processing (see → F: Purposes of processing) shall delete personal data if, in particular, one of the following reasons applies and the storage is not necessary for the assertion, exercise or defense of legal claims of the Allane companies:
- Data is no longer required for the purposes for which it was collected or otherwise processed,
- Consent to the processing of personal data is revoked and there is no other legal basis for the processing,
- Pursuant to Article 21 (2) sentence 1 DSGVO, the data subject objects to the processing on grounds relating to his or her particular situation and there are no compelling legitimate grounds for the processing,
- The data subject objects to the processing for direct marketing purposes pursuant to Article 21 (2) sentence 2 DSGVO,
- The data has been processed unlawfully,
- The deletion of the data is necessary to fulfill a legal obligation under European or German law,
e. Right to restriction of processing (Art. 18 GDPR)
According to Art. 18 DSGVO, personal data may only be processed in a restricted manner in the following cases:
- The data subject disputes the accuracy of his or her data until its accuracy can be verified.
- The processing is unlawful, but the data subject refuses to have his or her data erased and instead requests that the use of personal data be restricted.
- The Allane companies responsible for the processing no longer need the data for the purposes of the processing, while the data subject, however, needs it for the assertion, exercise or defense of legal claims.
- The data subject objects to the processing pursuant to Article 21 (1) No. 2 of the GDPR on grounds relating to his or her particular situation, unless it is clear yet whether the legitimate grounds for the processing by the Allane companies responsible outweigh the interests of the data subject.
Insofar as processing is restricted, this data may only be stored. In this case, further processing is only permitted with the consent of the data subjects or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
f. Obligation to notify (Art. 19 GDPR)
In the event of correction or deletion of data of data subjects or restriction of processing, all recipients to whom the data have been disclosed shall be informed accordingly. This shall not apply if such information should be impossible or involve a disproportionate effort.
g. Right to data portability (Art. 20 DSGVO)
Data subjects have the right to receive the data concerning them that they have provided to the Allane companies responsible for processing (see → F: Purposes of processing) in a structured, common and machine-readable format. In certain cases, data subjects have the right to have this data transferred to a third party. However, this right must not affect the rights and freedoms of other persons, including Allane companies. Insofar as this is the case, Allane is entitled to refuse to hand over or transfer the data.
h. Right of objection (Art. 21 DSGVO)
If the Allane companies responsible for processing process personal data on the basis of a legitimate interest (Art. 6 (1) f DSGVO), data subjects have the right to object to this if the reasons for this arise from their particular situation. This also applies to profiling based on these provisions.
In this case, the data may no longer be processed unless compelling legitimate grounds for the processing can be demonstrated. These must override the interests, rights and freedoms of the data subjects, or the processing serves to assert, exercise or defend legal claims.
Objections by data subjects to the use of personal data for direct marketing purposes shall be immediately observed by the Allane companies responsible.
i. No contractual obligation
Data subjects are neither contractually nor legally obliged to provide Allane with their personal data. However, Allane points out that contracts may not be concluded if data required for the performance of the contract is not provided.
j. Right to complain to a supervisory authority (Art. 77 GDPR)
Data subjects have the right to complain to a supervisory authority. The supervisory authority responsible for the Allane companies is the
Bavarian State Office for Data Protection Supervision
PO Box 1349
91504 Ansbach
www.lda.bayern.de
Status: March 2023