Privacy Policy
Website of the D-Zwo Ulm GmbH
1. Contact Details
1.1 Name and contact details of the data controller and joint controllers
D-Zwo Ulm GmbH
Magirus – Deutz – Straße 12,
89077 Ulm
Germany
+49-157-324-39280
[email protected]
www.d-zwo-ulm.de
is responsible for data processing when visiting our websites and using the services offered there.
The location and contact details of the D-Zwo Ulm GmbH can be found here.
1.2 Contact details of the data protection officer
If you have any questions regarding data processing or data protection, you can contact us by letter post at the above address (please note ‘for the attention of the data protection officer’ on the envelope), by email at [email protected].
2. Processing your personal data when visiting and using our websites and online services
2.1 When using one of our websites
a) Technical protocol data
When you visit our website, your browser automatically transmits a number of technical data. These include the page requested, time of access, your IP address, details of the browser used, operating system and, if applicable, resolution, details of the page previously visited, the amount of data transferred and a technical status code.
We use this data for the following purposes:
Delivering of the website content to your browser
Analysis for system security and stability
For other administrative purposes
Detect abuse and eliminate faults
The legal basis for this data processing is our legitimate interest in the sense of Art. 6 I lit. f GDPR. Our legitimate interest is based on the collection of data as described above.
We store the aforementioned protocol data in our web server logs for a regular period of 14 days; in case of abuse for the duration of the analysis and a possible prosecution of the abuse.
b) Google Tag Manager
Our websites use the ‘GoogleTag Manager’ service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage cookies and control their playout, particularly in cooperation with our Consent Management. This enables us to technically secure your preferences regarding the setting of cookies.
The technical data already mentioned in section 2.1 a (in particular the IP address of the requesting device, the browser and operating system used, call time, the previously visited page as well as the amount of data transferred and a technical status code) are processed. The data is automatically made available by the browser you are using.
Without this automatically provided data the use of our websites is not possible. The Google Tag Manager itself does not set any cookies and does not process any data stored in the cookies. The legal basis for the processing is our legitimate interest in the sense of Art. 6 Par. 1 letter f GDPR in a simple and reliable control of the logic for setting cookies.
The deletion of the processed data is carried out by Google according to purpose.
c) Google Maps
Our websites used the service ‘Google Maps’ from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), e.g. to visualize our locations on a map and allow you to plan your route.
We have integrated Google Maps in a way that ensures that only with your consent (i.e. by actively clicking on the map symbol) the map is built and thus data is transmitted to Google. This is then the technical protocol data already mentioned in section 2.1 lit. a or, if approved, your current location (for further information, please see https://policies.google.com/technologies/location-data?hl=en) or a departure point you have entered for route planning. For this service the data protection regulations of Google (https://www.google.com/intl/en_en/policies/privacy/) apply, supplemented by the separate terms of use for Google Maps (https://www.google.com/intl/en_en/help/terms_maps.html).
Recipient of the data: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR.
You can find more information on the storage period of data at Google at https://policies.google.com/privacy?hl=en#inforetaining.
d) Youtube Videos
Our websites integrate video material, which is deposited on the video platform ‘YouTube’. YouTube is a service of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
When you visit one of our websites on which YouTube videos are integrated, data is transmitted to Google, e.g. the technical protocol data already mentioned in section 2.1 lit. a as well as the ID of the video accessed. We use YouTube in extended data protection mode so that only the data required for the transmission of the video is processed. You can find more information about data protection on YouTube at https://support.google.com/youtube/answer/2801895?hl=en.
Recipient of the data: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The legal basis for this data processing is your consent within the meaning of Art. 6 I lit. a GDPR. Our legitimate interest is based on our endeavor to present our products and services in a visual and moving form, thus creating easier access.
You can find more information on the storage period of data at Google within the framework of YouTube integration at https://policies.google.com/privacy?hl=en#inforetaining.
e) Social media links and Social Wall
You can also find us in selected social networks. We have designed the references to these as simple links and do not use the corresponding linking plug-ins of the providers, so that no data is automatically transferred to them.
We provide an overview of our publications in the social media by means of a local proxy, so that no data transfer to social networks takes place here either, as long as you do not actively click on corresponding content.
2.2 Cookies and web analysis
We use cookies in connection with our websites and the offers provided on our websites. Cookies are small text files containing information which are stored on your device when you visit one of our websites using your browser. The information stored in cookies can be read and processed when you visit the website again using the same device and browser. In doing so, we use processing and storage functions of the browser of your device and collect information from the memory of the browser of your device.
a) Technically essential cookies
We use so-called session cookies, which are automatically deleted when you close your browser. The session cookie enables us to recognize you during a session and can, for example, provide you with your selected language preference or manage your login status across different pages.
Technically essential cookies can only be completely prevented by adjusting your browser settings; in this case, however, the website will not be fully usable.
b) Web analysis using Google Analytics
For the purpose of web analysis, page optimization and to learn more about your interests when using our websites, we use the web analysis tool Google Analytics from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
This is done exclusively in pseudonymised and, as far as possible, anonymised form; of course, we also use the IP anonymisation function (i.e. the IP address transmitted by your browser is anonymised by shortening, i.e. deleting the last octet of the IPv4 address or the last 80 bits of the IPv6 address before saving).
The data processing is mainly done by Google, but we have deactivated the functions for further data processing by Google for our own purposes. Nevertheless, it cannot be ruled out that Google may merge the collected data, for example, if you are logged into your browser with a Google account.
In addition to the technical data already mentioned under point 2.1 a, further data categories are processed:
Google Analytics end device data (this is data generated by Google Analytics and assigned to your end device: this includes a unique ID for (re-)recognizing returning visitors (so-called ‘client ID’) as well as certain technical parameters for controlling the data acquisition for web analysis)
Google Analytics measurement data (device-related raw data (so-called ‘dimensions’ and Measured values’), which are collected and analysed by Google Analytics when using our websites. This includes information about the sources through which visitors reach our websites, information about the location, the browser and the terminal device used, information about the use of the website (in particular page views, call frequency and duration of stay on the respective page called up) as well as information about the fulfilment of certain objectives. The data is assigned to the client ID assigned to your terminal device. This results in device-related usage profiles in which all device-related raw data is combined into a client ID. The data that we collect using Google Analytics does not enable us to identify you personally (i.e. by name). We also do not merge the device-related raw data and the resulting device-related usage profiles with data that directly identifies you personally without your consent)
Google Analytics report data (data contained in aggregated segment- and device-related reports generated by Google Analytics based on the analysis of raw device-related data)
Receiver of the data: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
In exceptional cases, the data processed by Google may also be transferred to the USA, where state authorities may also have access in accordance with the regulations applicable there. Your consent also includes such a data transfer to the United States.
The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a DS-GVO. You can revoke your consent to the use of your data within the scope of our web analysis at any time with effect for the future.
Please click here to check the status of your consent, to give consent or to revoke it.
The personal data collected by us within the framework of the web analysis will be stored for 14 months and then deleted.
Of course, our website is fully usable even if you do not give your consent.
3. Your rights
You variuous legal rights towards us as the data controller to which we would like to draw your attention in the following.
You can of course also contact us by letter post. Please note ‘for the attention of the data protection officer’ on the envelope to ensure that it can be allocated and forwarded quickly. You can also reach our data protection officer by email at [email protected].
Your rights as a person affected by data processing in detail:
Right of access by the data subject (Art. 15 GDPR)
As a data subject, you have a right to information under the premises of Art. 15 GDPR.
This means in particular that you have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you also have a right of access to this personal data and to the information listed in Art. 15 I GDPR.
Right of rectification (Art. 16 GDPR)
As a data subject, you have a right of rectification under the premises of Art.16 GDPR.
This means in particular that you have the right to ask us immediately to rectify incorrect personal data concerning you and to correct incomplete personal data.
Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
As a data subject, you have a right of deletion under the premises of Art. 17 GDPR.
This means that, in principle, you have the right to require us to delete personal data relating to you immediately and we are obliged to delete personal data immediately if one of the reasons listed in Art. 17 I GDPR applies.
If we have made the personal data public and we are obliged to delete them, we are also obliged to take reasonable measures, including technical measures, taking into account available technology and implementation costs, to inform other data controllers who process the personal data that a data subject has requested them to delete all links to these personal data or copies or replications of these personal data (Art. 17 II GDPR).
The right of cancellation does not apply, by way of exception, where processing is necessary for the reasons set out in Art. 17 III of the GDPR. This may be the case, for example, if the processing is necessary for the fulfilment of a legal obligation or for the assertion, exercise or defence of legal claims (Art. 17 III lit. a, e GDPR).
Right to restriction processing (Art. 18 GDPR)
As a data subject, you have a right to restrict processing under the premises of Art. 18 GDPR.
This may be the case, for example, if you dispute the accuracy of your personal data. In this case, the processing is restricted for a period of time that enables us to verify the accuracy of the personal data (Art. 18 I lit. a GDPR).
Restriction means the marking of stored personal data with a view to limiting their future processing (Art. 4 No. 3 GDPR).
Right to data portability (Art. 20 GDPR)
As a data subject you have a right to data portability under the premises of Art. 20 GDPR.
This means that, in principle, you have the right to receive the personal data concerning you which you have provided us with in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent in accordance with Art. 6 I lit. a GDPR or Art. 9 II lit. a GDPR or on a contract in accordance with Art. 6 I lit. b GDPR and the processing is carried out by means of automated procedures (Art. 20 I GDPR).
When exercising your right to data portability, you also have the right to request that the personal data is transferred directly from us to another controller, insofar as this is technically feasible (Art. 20 II GDPR).
Right to object (Art. 21 GDPR)
As a data subject, you have a right to object under the premises of Art. 21 GDPR.
We expressly draw your attention to your right to object as a data subject at the latest at the time of the first communication with you.
The following applies in detail:
Right to object on grounds relating to the specific situation of the data subject.
As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you carried out in accordance with Art. 6 I lit. e or f GDPR, including profiling based on these provisions.
In the event of an objection for reasons arising from your particular situation, we will no longer process the personal data concerned unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
Right to object to direct mail
Where personal data are processed for the purpose of direct mail, you have the right to object at any time to the processing of personal data relating to you for the purpose of such direct mail, including profiling, insofar as it is linked to such direct mail.
In the event of an objection to processing for direct mail purposes, we will no longer process the personal data concerned for these purposes.
Right to withdraw consent (Art. 7 III GDPR)
If the processing is based on consent within the meaning of Art. 6 I lit. a GDPR or Art. 9 II lit. a GDPR, you as a data subject have the right to withdraw your consent at any time in accordance with Art. 7 III GDPR. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. We will inform you of this before giving consent.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
As a data subject, you have the right to file a complaint with a supervisory authority under the premises of Art. 77 GDPR.
Our data protection officer is also at your disposal at any time to clarify any questions you may have about data processing or to help you with your data protection concerns.
4. Data processing in third countries
If we also transfer personal data to recipients located outside the European Union or the EEA (so-called third countries), we will ensure – before the start of processing – that the recipient has an adequate level of data protection through appropriate (contractual) guarantees or recognized agreements, or that you as the data subject have given informed consent to the processing of personal data in the respective third country.
5. Automated decision making including profiling
We do not use profiling within the meaning of Art. 22 GDPR when using our websites.
Magirus – Deutz – Straße 12,
89077 Ulm
Germany
[email protected]
www.d-zwo-ulm.de
is responsible for data processing when visiting our websites and using the services offered there.
When you visit our website, your browser automatically transmits a number of technical data. These include the page requested, time of access, your IP address, details of the browser used, operating system and, if applicable, resolution, details of the page previously visited, the amount of data transferred and a technical status code.
We use this data for the following purposes:
Delivering of the website content to your browser
Analysis for system security and stability
For other administrative purposes
Detect abuse and eliminate faults
Our websites use the ‘GoogleTag Manager’ service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage cookies and control their playout, particularly in cooperation with our Consent Management. This enables us to technically secure your preferences regarding the setting of cookies.
We have integrated Google Maps in a way that ensures that only with your consent (i.e. by actively clicking on the map symbol) the map is built and thus data is transmitted to Google. This is then the technical protocol data already mentioned in section 2.1 lit. a or, if approved, your current location (for further information, please see https://policies.google.com/technologies/location-data?hl=en) or a departure point you have entered for route planning. For this service the data protection regulations of Google (https://www.google.com/intl/en_en/policies/privacy/) apply, supplemented by the separate terms of use for Google Maps (https://www.google.com/intl/en_en/help/terms_maps.html).
Recipient of the data: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Our websites integrate video material, which is deposited on the video platform ‘YouTube’. YouTube is a service of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
You can also find us in selected social networks. We have designed the references to these as simple links and do not use the corresponding linking plug-ins of the providers, so that no data is automatically transferred to them.
We use so-called session cookies, which are automatically deleted when you close your browser. The session cookie enables us to recognize you during a session and can, for example, provide you with your selected language preference or manage your login status across different pages.
For the purpose of web analysis, page optimization and to learn more about your interests when using our websites, we use the web analysis tool Google Analytics from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Google Analytics end device data (this is data generated by Google Analytics and assigned to your end device: this includes a unique ID for (re-)recognizing returning visitors (so-called ‘client ID’) as well as certain technical parameters for controlling the data acquisition for web analysis)
Google Analytics measurement data (device-related raw data (so-called ‘dimensions’ and Measured values’), which are collected and analysed by Google Analytics when using our websites. This includes information about the sources through which visitors reach our websites, information about the location, the browser and the terminal device used, information about the use of the website (in particular page views, call frequency and duration of stay on the respective page called up) as well as information about the fulfilment of certain objectives. The data is assigned to the client ID assigned to your terminal device. This results in device-related usage profiles in which all device-related raw data is combined into a client ID. The data that we collect using Google Analytics does not enable us to identify you personally (i.e. by name). We also do not merge the device-related raw data and the resulting device-related usage profiles with data that directly identifies you personally without your consent)
Google Analytics report data (data contained in aggregated segment- and device-related reports generated by Google Analytics based on the analysis of raw device-related data)
Right of access by the data subject (Art. 15 GDPR)
As a data subject, you have a right to information under the premises of Art. 15 GDPR.
This means in particular that you have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you also have a right of access to this personal data and to the information listed in Art. 15 I GDPR.
Right of rectification (Art. 16 GDPR) As a data subject, you have a right of rectification under the premises of Art.16 GDPR. This means in particular that you have the right to ask us immediately to rectify incorrect personal data concerning you and to correct incomplete personal data.
Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
As a data subject, you have a right of deletion under the premises of Art. 17 GDPR.
This means that, in principle, you have the right to require us to delete personal data relating to you immediately and we are obliged to delete personal data immediately if one of the reasons listed in Art. 17 I GDPR applies.
If we have made the personal data public and we are obliged to delete them, we are also obliged to take reasonable measures, including technical measures, taking into account available technology and implementation costs, to inform other data controllers who process the personal data that a data subject has requested them to delete all links to these personal data or copies or replications of these personal data (Art. 17 II GDPR).
The right of cancellation does not apply, by way of exception, where processing is necessary for the reasons set out in Art. 17 III of the GDPR. This may be the case, for example, if the processing is necessary for the fulfilment of a legal obligation or for the assertion, exercise or defence of legal claims (Art. 17 III lit. a, e GDPR).
Right to restriction processing (Art. 18 GDPR)
As a data subject, you have a right to restrict processing under the premises of Art. 18 GDPR.
This may be the case, for example, if you dispute the accuracy of your personal data. In this case, the processing is restricted for a period of time that enables us to verify the accuracy of the personal data (Art. 18 I lit. a GDPR).
Restriction means the marking of stored personal data with a view to limiting their future processing (Art. 4 No. 3 GDPR).
Right to data portability (Art. 20 GDPR)
As a data subject you have a right to data portability under the premises of Art. 20 GDPR.
This means that, in principle, you have the right to receive the personal data concerning you which you have provided us with in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent in accordance with Art. 6 I lit. a GDPR or Art. 9 II lit. a GDPR or on a contract in accordance with Art. 6 I lit. b GDPR and the processing is carried out by means of automated procedures (Art. 20 I GDPR).
When exercising your right to data portability, you also have the right to request that the personal data is transferred directly from us to another controller, insofar as this is technically feasible (Art. 20 II GDPR).
Right to object (Art. 21 GDPR)
As a data subject, you have a right to object under the premises of Art. 21 GDPR.
We expressly draw your attention to your right to object as a data subject at the latest at the time of the first communication with you.
The following applies in detail:
Right to object on grounds relating to the specific situation of the data subject.
As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you carried out in accordance with Art. 6 I lit. e or f GDPR, including profiling based on these provisions.
In the event of an objection for reasons arising from your particular situation, we will no longer process the personal data concerned unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.Right to object to direct mail
Where personal data are processed for the purpose of direct mail, you have the right to object at any time to the processing of personal data relating to you for the purpose of such direct mail, including profiling, insofar as it is linked to such direct mail.
In the event of an objection to processing for direct mail purposes, we will no longer process the personal data concerned for these purposes.
Right to withdraw consent (Art. 7 III GDPR)
If the processing is based on consent within the meaning of Art. 6 I lit. a GDPR or Art. 9 II lit. a GDPR, you as a data subject have the right to withdraw your consent at any time in accordance with Art. 7 III GDPR. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. We will inform you of this before giving consent.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
As a data subject, you have the right to file a complaint with a supervisory authority under the premises of Art. 77 GDPR.