Version from 19.07.2024

The controller for the processing of personal data within the meaning of Art. 4 No. 7 GDPR is AZOWO GmbH, Wolfentalstraße 29, 88400 Biberach ad Riß, Germany.

Data Protection Officer

We have appointed a data protection officer.

Frank Grossmann, Grossmann GmbH, Hauptstr.54, D-89160 Dornstadt

Link:https://grossmann-datenschutz.de

E-mail address: mail@grossmann-datenschutz.de

General information

This data protection information is divided into three main sections: General, Website processing and Web & Cookies.

Sections of this data protection information

1. General

Data subject rights

Storage period

Right to lodge a complaint

Provision

Decision-making

Categories of recipients

Third countries

2. Website processing

Communication and business operations, legal obligations and regulatory requests

Contact form (simple)

3. Web and cookies

Google Analytics (a)

Hubspot (a)

I. GENERAL

Rights of data subjects: Your rights

Art. 15 GDPR: Information about your stored and processed personal data

You can request information about whether your personal data is being processed. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period or criteria for this, the existence of a right to rectification, erasure, restriction of processing, objection or the existence of a right to lodge a complaint. You can also request information about the origin of data that was not collected from you. You can also request to be informed whether there is automated decision-making, whether data is transferred to a third country or to an international organization and on the basis of which guarantees this is done. You may request a copy of the personal data concerning you, provided that this does not adversely affect the rights and freedoms of others.

Art. 16 GDPR: Rectification of your personal data stored by us

You may request the immediate rectification of inaccurate personal data or, taking into account the purposes of the processing, the completion of your stored personal data.

Art. 17 GDPR: Deletion of your personal data that is no longer required

You can request the deletion of your stored personal data if the purpose of the processing has ceased to exist due to the passage of time or other reasons, you have withdrawn your consent or objected to the processing and there are no overriding reasons for the processing or other legal bases, the legal basis for the data processing is missing or has ceased to exist and the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. If we have made your data public, we are obliged to take reasonable steps to inform each recipient that you have requested the deletion of all links to or copies of the personal data concerned.

Art. 18 GDPR: Restriction of the processing of your personal data

You have the right to restriction of processing if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or if you have objected to processing pursuant to Art. 21 GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.

Art. 21 GDPR: Right to object to data collection in special cases and to direct marketing

You have the right to object, on grounds relating to your particular situation, to processing which we are carrying out for the purposes of our legitimate interests, except where we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. You have the right to object at any time to processing that we carry out for direct marketing purposes. Your data may then no longer be processed for these purposes.

Art. 20 GDPR: Data portability

You have the right to receive the personal data you have provided to us on the basis of your consent or a contract concluded with us in a structured, commonly used and machine-readable format or to request its transmission to another controller, provided that this does not adversely affect the rights and freedoms of other persons and is technically feasible.

Art. 7 para. 3 GDPR: Revocation of declarations of consent

If processing takes place on the legal basis of your consent, you can revoke your consent at any time with effect for the future. In email newsletters, please use the unsubscribe link provided in the newsletter, if available, to withdraw your consent. If you have given your consent via a Consent Manager Tool, please use the Consent Manager Tool to withdraw your consent. You can access the tool at any time via our website.

How do I exercise my rights?

To exercise your rights, please contact us using the contact details above, unless otherwise stated above

Storage period

We only store and process your personal data for as long as this is necessary for the respective purpose. Beyond this, storage and processing will only take place if this is permitted for another purpose, for example to fulfill legal requirements (e.g. retention obligations under tax or commercial law).

In this case, we restrict further data processing to this purpose based on the legal basis for further processing.

Right to lodge a complaint

In accordance with Art. 7 GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR, the BDSG or other national data protection regulations.

Please address complaints to the data protection supervisory authority responsible for our company:

The State Commissioner for Data Protection and Freedom of Information

Link:https://www.baden-wuerttemberg.datenschutz.de

<https://www.baden-wuerttemberg.datenschutz.de/>

House address:

Königstrasse 10 a in 70173 Stuttgart

Postal address:

Postfach 10 29 32 in 70025 Stuttgart

Tel.: 0711/615541-0

Fax: 0711/615541-15

E-mail: poststelle@lfdi.bwl.de

Provision

Unless the provision of the data is based on your own activity (e.g. in the context of contacting us or providing us with your personal data), we will not process your personal data.e.g. in the context of contacting us or applying for a job), the provision of your personal data is necessary for the implementation of the aforementioned purpose or we are obliged to collect this data in accordance with the relevant legal standards. Without this data, we cannot complete or carry out the above-mentioned purposes. If there are legal obligations to collect this data, we would be in breach of the law, which could lead to sanctions and/or fines being imposed on us.

Decision-making

Automated decision-making does not take place and is not planned.

Recipient categories Internal: Internal bodies involved in the execution and fulfilment of the respective business processes, these are employees of the controller

External recipient categories: We may provide personal data in the context of cooperation with business partners and authorities if we are legitimized by a corresponding legal basis or obliged to do so by legal regulations. This includes cooperation with tax authorities, law enforcement authorities and the use of consultants, e.g. tax consultants or the data protection officer.

We sometimes use service providers that we use in accordance with the law via data processing agreements pursuant to Art. 28 GDPR. Examples of this are data centers, document shredders, printing and shipping service providers and other parties involved in the performance of the contract.

There may be other recipients in the context of operating the website. Please refer to the 'Web and cookies' section for details.

Third countries

Data transfer to countries without an EU adequacy decision may occur within the framework of the use of mechanisms integrated on the website (see section 'Web and cookies'). In general, transfers only take place in the context of contract fulfillment, necessary communication and other exceptions expressly provided for in the General Data Protection Regulation or the Federal Data Protection Act. Data is only transferred to other third countries, in particular those whose level of data protection is considered to be low, or to countries outside the EU if appropriate guarantees are in place within the framework of the exceptions provided for in the GDPR.

II. PROCESSING

Website

Purpose of processing: Operation of the website

Categories of data subjects: Website visitors

Categories of data concerned: IP address, browser identifiers, time, cookies (see section 'Web and cookies')

Legal basis: Art. 6(1)(f) GDPR - Legitimate interests - we process data on the basis of our legitimate interests or the legitimate interests of third parties after weighing up the risks and assessing your interests and reasonable expectations.

Details of recipients: There may be other recipients in the course of operating the website. Please refer to the 'Web and Cookies' section for more information.

Further information: As part of the provision of the website, log files are stored on the server that record the use of the website. These are used exclusively for possible tracking and subsequent defense against cybercrime attacks and are automatically deleted after 7 days. No further analysis or tracking of user activities takes place.

Communication and business operations, legal obligations and official enquiries

Purpose of processing: Carrying out business operations, communication and responding to inquiries Categories of data subjects: Interested parties, customers, suppliers and other business partners Categories of data concerned: As part of our communication with third parties, contact data such as e-mail address, telephone number, addresses, first and last names and the content of communication are processed. The data will be deleted after processing and fulfillment of the purpose.

Legal basis: Art. 6 para. 1 lit. f) GDPR - Legitimate interests - we process data based on our legitimate interests or the legitimate interests of third parties after weighing up the risks and assessing your interests and reasonable expectations.

When preparing offers or processing offers received: Art. 6 para. 1 lit. b) GDPR - contract and pre-contractual measures - the processing of the data is necessary for the examination, preparation and execution of the contractual relationship.

For the transfer of personal data to authorities and institutions due to legal obligations or orders, the legal basis is Art. 6 para. 1 lit. c) GDPR.

Details of recipients: Personal data is processed as far as possible exclusively internally and only made accessible to internal employees. Personal data is only transferred to recipients outside the company if we can do so in accordance with data protection regulations, e.g. after concluding an order processing agreement within the meaning of Art. 28 GDPR. However, we may have to forward personal data to authorities or institutions if we are obliged to do so by law or by order.

Information on possible transfers to other countries: We do not transfer data to recipients in third countries.

Further information: We delete personal data after the purpose has been fulfilled.

Contact form (simple)

Purpose of processing: Receiving contact requests from website users

Categories of data subjects: Users of the contact form

Categories of data concerned: Name, email address, message to us (free text)

Legal basis: Art. 6 para. 1 lit f) GDPR - Legitimate interests - we process data on the basis of our legitimate interests or the legitimate interests of third parties after weighing up the risks and assessing your interests and reasonable expectations. In particular, we assume that the use of the contact form is voluntary at your own request and therefore no conflict of interest can arise. We ask you to refrain from communicating confidential information in this way.

Details of recipients: The data is transmitted to the internal group of recipients tasked with accepting contact requests.

III. Web, mobile app and cookies

This section explains the technologies used on the website that communicate with other servers or store information (e.g. cookies) on your computer.

Google Analytics (a)

Purpose of processing: Analysis of website usage with the help of Google Analytics

Further information: We use on the basis of your consent given when accessing the website within the meaning of Art. 6 para. 1 lit. a. GDPR in conjunction with Art. 49 para. 1 lit. a GDPR Google Analytics, a web analytics service provided by Google LLC ('Google'). Google is a service provider based in the U.S. - the transfer of personal data to the U.S. constitutes a transfer to a third country - the level of data protection in the U.S. does not correspond to that of the EU. Google uses cookies. The information generated by the cookie about your use of the online offer is usually transmitted to a Google server in the USA and stored there. We use Google Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyze the activities on our pages across devices (e.g. when accessed via a laptop and later via a tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Such an assignment is made, for example, when you register for a customer account or log in to your customer account. However, no personal data is forwarded to Google. Even if Universal Analytics adds additional functions to Google Analytics, this does not mean that data protection measures such as IP masking or the browser add-on are restricted. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services (associated with the use of this online offer and the use of the Internet). Pseudonymous user profiles can be created from the processed data. We use Google Analytics in order to display the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Google (so-called 'remarketing' or 'Google Analytics audiences'). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interest of users and are not annoying.

We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; you can also prevent Google from collecting the data generated by the cookie and relating to your use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data within this website in the future (the opt-out only works in this browser and only for this domain). An opt-out cookie will be stored on your device. If you delete your cookies in this browser, you must click this link again. For more information about Google's use of data, setting and objection options, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners ('Google's use of data when you use our partners' websites or apps'), http://www.google.com/policies/technologies/ads ('Use of data for advertising purposes'), http://www.google.de/settings/ads ('Manage information that Google uses to show you advertising').

Hubspot (b)

Purpose of processing: Web analysis and tracking, contact form with appointment registration function

Further information: We use HubSpot for our online marketing activities on this website. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

This is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others: Tracking of web activities, email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources, hits, etc. ...), contact management (e.g. user segmentation & CRM), landing pages and contact forms. In particular, we have embedded an appointment form that you can access via our contact page.

When you open the appointment form, Hubspot is automatically activated for the appointment page only. The processing is carried out on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. If you have consented to the use of Hubspot in our Consent Manager, we also use Hubspot for the rest of the website and can thus better analyze the use of the website. The legal basis for this is therefore your consent in accordance with Art. 6 para. 1 lit. a GDPR. The information obtained through tracking is stored on the servers of our software partner HubSpot. It can be used by us to determine which of our company's services are of interest to our visitors. All information collected by us is subject to this privacy policy. We use all information collected exclusively to optimize our marketing measures.

Location data of the vehicle and mobile phone (c)

The app collects the location of the vehicle and your mobile phone in an encrypted form. The vehicle locator is used to provide a roadworthy vehicle at any time, especially at the beginning and end of the rental. Among other things, the locator is used for the plausibility of the distance travelled or to check technical system messages (e.g. battery status) or for other important reasons (e.g. late return, in the event of accidents or in other incidents). The tracking of your mobile phone takes place independently of the settings chosen by you (e.g. access to your location when using the app) and is used for navigation and to measure distance. In this way, we are able to show you the closest vehicles and lead you to the appropriate locations.
In addition, the provision of data helps to control our offerings as efficiently as possible; e.g. in that maintenance may be planned and carried out earlier and the availability of the vehicle pool is therefore increased. Furthermore, the location data help to constantly improve the app’s products and make them more sustainable by adjusting to user needs. Vehicle manufacturers also collect data through the vehicle software, which we have no influence upon. For this, we refer you to the respective vehicle manufacturers’ data protection statements.