Data privacy notice
This website is operated by carbovation gmbh, Otto-Lilienthal-Str. 15, DE-88046 Friedrichshafen, Germany.
Carbovation gmbh takes data protection seriously and aims to ensure that your privacy is protected when using our website. That is why carbovation gmbh has published this statement explaining the way it processes your data. Please read it carefully before using the website, as one of the things it explains is how we process personal data.
We have used the terminology set out Article 4 of GDPR (General Data Protection Regulation).
If you use this website and/or provide carbovation gmbh with your personal data, carbovation gmbh assumes that you consent to the processing of that personal data in the way specified in this privacy statement.
Controller
The Controller responsible for processing personal data pursuant to Article 4(7) GDPR is:
carbovation gmbh
Otto-Lilienthal-Straße 15
88046 Friedrichshafen
Germany
You will find further information about our company in our legal details.
Data Protection Officer
You can contact our Data Protection Officer at:
carbovation gmbh
Otto-Lilienthal-Straße 15
88046 Friedrichshafen
Germany
Tel.: +49 (0) 2 31 20 609-148
or
by email at:
gdpr(at)carbovation.de
Section 1 PERSONAL DATA
We only process and use your personal data with your consent or if the law permits. We collect, process and use the personal data that we need in order to provide our services and for you to use them, and that you provide us with voluntarily.
Personal data means any data containing information about the personal or factual circumstances of an identified or identifiable customer. This includes their email address, delivery address, gender, date of birth, telephone number and age.
The legal basis for this data processing is Article 6 (1) (1) f) GDPR. The purpose of processing is to operate this website. Our legitimate interest is to achieve the protection aims of confidentiality, integrity and availability of data.
Section 2 PURPOSE OF COLLECTING PERSONAL DATA
We need your personal data for the following purposes:
Section 2.1 Contact form
We provide a contact form on our website which you can use to request information about our products or just to get in touch. As well as providing mandatory details, which are marked with asterisks, and your message, you can also give us voluntary information.
We need these details to process your request, address you correctly and send you a reply.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR (performance of a contract and activities prior to entering into a contract).
Section 2.2 Email communication
If you provide us with your email address, we will correspond with you by email. As a rule, we will not pass on your email address to third parties without your consent. If you send an email to carbovation, personal data may be sent automatically, depending on your email program’s settings. Carbovation will also treat that data confidentially. Please note, however, that unless encrypted, an email is like a postcard: it can be read by people who don’t have permission. So you should always send confidential information to us by post or as an encrypted email attachment.
Section 2.3 Request for quotation (carbovation.de website only)
As well as the general contact form, there is a form for requesting a quote.
To make you an offer, we need more information than the general contact form provides.
Enquiries received via our website’s quotation request form are emailed to a dedicated department. After checking the request and consulting with the customer, we create a customer record and save it in our CRM system (unless one already exists) so that we can draw up an offer.
We regularly check the CRM system to see if data can be deleted. If data are no longer needed for an existing or prospective customer relationship, or if the customer has conflicting interests that outweigh their retention, we delete the relevant data, provided we are not obliged to keep them by law.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR. Data is processed in order to perform pre-contractual activities such as advising customers and preparing offers.
Section 2.4 Registration form
As well as the general contact form, there is a form for registering or re-registering your Lightweight product to claim Lightweight wheel protection and for warranty or crash replacements. As well as providing mandatory details, which are marked with asterisks, you can also give us voluntary information.
We need these details to process your registration or re-registration and to send you a confirmation.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR (performance of a contract and activities prior to entering into a contract).
Section 2.5 Newsletter
By giving your consent you can subscribe to our newsletter, which will keep you up to date about our products, promotions, competitions and news on an irregular basis, and no more than 12 times a year.
We use a double-opt-in procedure to register people for our newsletter. This means that once you have registered, we send you an email to the address you provided, asking you to confirm that you want to receive the newsletter.
The only information you have to provide to receive the newsletter is your email address. Once you have confirmed, we store your email address so that we can send you the newsletter.
You can cancel your consent to receive the newsletter and unsubscribe at any time. To do this, click on the link provided in every newsletter email, or send a message to the contact details provided in the legal section. If you register for our newsletter, your email address will be used for our advertising purposes until you unsubscribe from it.
The legal basis for this data processing is Article 6 (1) (1) a) GDPR.
Section 2.6 Customer account
When you register for our web shop, we process your first name, surname, email address and password for the purpose of creating a customer account and enabling access to it (legal basis: Article 6 (1) (1) b) GDPR).
If a customer account is set up, we store this data while you remain registered with us. The data are also stored for longer if there is a legal obligation to retain them.
Once you have registered and start to use your customer account, we process data that you voluntarily provide us with in the process of configuring it (legal basis: Article 6 (1) (1) b) GDPR). We store this data while you remain registered with us. We also process the data we need to fulfil the web shop / customer account services that you use (legal basis: Article 6 (1) (1) f) GDPR). This may sometimes include particular types of personal data such as PayPal payment approval (legal basis: Article 6 (1) (1) b) GDPR).
Section 2.7 Order processing
We collect data in order to process your product orders/deliveries and provide web shop services. (Your email address, physical address, surname, first name, telephone number and a delivery address, if different).
If you have created a customer account, this data will be stored there permanently. Provided there is no legal reason to retain them and provided you have not requested their deletion, your personal data will be deleted once they are no longer needed to fulfil the purpose for which they were stored, or if their storage becomes inadmissible for other legal reasons.
If you pay by credit card, please read Section 5.1 ‘Payment by credit card’, and if you pay by PayPal, please read Section 5.2 ‘Payment by PayPal’.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR. The purpose of collecting, storing and processing the data is to process your order.
Section 3 Cookies
Cookies are used on our websites. Cookies are small text files which your browser stores automatically on your device. Cookies are needed to enable certain features on our websites. We use session cookies, which are automatically deleted by your browser as soon as you leave the website. We also use persistent cookies for website analytics.
You can prevent cookies from being stored by setting your browser accordingly. But if you do, some of the features of our website may not work. Cookies do not install or launch any programs or other applications on your computer.
The legal basis for this data processing is Article 6 (1) (1) a) GDPR.