Data Protection

Data Protection Policy of Fix Auto FA 17 Deutschland GmbH

The protection of your privacy is very important to us. Fix Auto FA 17 Deutschland GmbH (hereinafter: "Fix Auto") attaches great importance to the protection and confidentiality of your data. Your personal data is collected and used exclusively within the framework of the statutory provisions, in particular the applicable data protection law (EU General Data Protection Regulation - GDPR and the German Federal Data Protection Act - BDSG). In this policy we inform you in detail about the handling of your data.

Responsible Controller in terms of data protection regulations:

Fix Auto FA 17 Deutschland GmbH
Schillerstraße 4
D-60313 Frankfurt am Main
Tel.: +49 (0) 171 – 81 48 911
E-Mail: datenschutz@fixauto.com
Website: https://fixauto.com/de/en/

You can also contact our data protection officer at the address and e-mail address provided.

Personal Data

Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your first and last name, your e-mail address etc., but also your Internet Protocol (IP) address. We describe below how we process your personal data.

Provision of the website and creation of log files

You can visit our website at any time without registering or providing any personal information. However, each time our website is accessed, our system automatically collects data and information from the computer system of the calling terminal device.

Description and scope of data processing: The following data is automatically collected when a website is accessed:

• Browser type and version,
• Operating system used and its interface,
• Language and version of the browser software,
• Website(s) from which you visit us (Referrer URL),
• Website(s) that you visit at the same time,
• Access status/HTTP status code,
• Date and time of your access,
• Time zone difference to Greenwich Mean Time (GMT),
• Your IP address

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website.

Legal basis for data processing: The legal basis for the temporary storage of data and log files is Art. 6 para. 1 subpara. 1 lit. f) GDPR.

Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's terminal device. For this reason, the IP address of the user has to remain stored for the duration of the session. The purpose of storage in log files is to ensure the functionality and stability of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 subpara. 1 lit. f) GDPR.

Period of storage: The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected for. When collecting data for the provision of the website, this is the case when the respective session has ended.

Newsletter

On our website you can register for our newsletter. During the registration process your consent will be obtained for the processing of the data within the scope of a so-called double opt-in procedure and reference will be made to this data protection declaration. This means that after your registration you will receive an e-mail to your specified e-mail address in which Fix Auto asks you to confirm that you want the newsletter to be sent. In the context of the newsletter we process your data as follows:

Description and scope of data processing: The data you enter in the input mask will be transmitted to us and stored. The data will not be transmitted to third parties. The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary. This affects your following data:

• First and last name,
• Salutation/Title,
• Telephone number,
• Indication of workshop ownership yes/no,
• Individual message text

While sending the registration the following data is also stored:

• IP address of the user,
• Date and time of registration.

We would like to point out that we statistically evaluate your user behaviour when sending the newsletter. For this analysis, the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files stored on our website. For evaluation purposes, we link the above data and web beacons to your e-mail address and an individual ID. Links contained in the newsletter also contain this ID. However, such tracking is not possible if you have deactivated the display of images by default in your email program. In this case, the newsletter will not be displayed completely and you may not be able to use all functions. If you activate the display of images manually, the above-mentioned tracking takes place.

The data is collected solely in a pseudonymised form, i.e. the IDs are not linked to your other personal data so that a direct personal relationship cannot be determined.

Your provision of personal data is neither required by law nor by contract, nor is it necessary for a contract to be concluded. You are not obliged to provide us with personal data. However, failure to provide personal data will mean that we will not be able to send you a newsletter if this information is mandatory.

You can revoke your consent for receiving the newsletter at any time and unsubscribe from the newsletter for the future by clicking on the link provided in every newsletter e-mail, by e-mail to datenschutz@fixauto.com or to Fix Auto using the contact details given above.

Legal basis for data processing: The legal basis for processing the data after registration for the newsletter is the consent that you have given voluntarily and which can be revoked at any time in the future within the meaning of Art. 6 para. 1 subpara 1 lit. a) GDPR. The legal basis for statistical evaluations is Art. 6 para. 1 subpara. 1 lit. f) GDPR.

Purpose of data processing: The collection of your e-mail address and your contact data serves to send you the newsletter, to prevent misuse of the services or the e-mail address used and to ensure the security of our information technology systems. If other personal data is voluntarily provided by you as part of the registration process, this serves for individualization of the newsletter, to prevent misuse of the services or the e-mail address used and to ensure the security of our information technology systems.

Period of storage: If you do not complete your double opt-in registration within 72 hours by means of the confirmation e-mail sent to you, your information will be blocked and automatically deleted after one month.

In case of a successfully completed registration, the personal data provided by you will be stored until you revoke your consent to receive the newsletter. After receiving your revocation, your e-mail address will be blocked to document that you no longer wish to be contacted by us by e-mail in the future. The blocking notice, your e-mail address and other personal data collected with the newsletter registration will be deleted three years after the end of the calendar year in which the blocking notice was set.

Contact Form and e-mail contact:

Description and scope of data processing: By sending a contact request via our contact form in the section "Join the network – request a meeting", the data entered in the input mask are transmitted to us and saved. The data will not be transmitted to third parties. This affects your following data:

• First and last name (mandatory),
• Title (optional),
• E-mail address (mandatory),
• Telephone number (mandatory),
• Indication of workshop ownership yes/no (mandatory),
• Individual message text (optional),

At the time the message is sent, the following data is also stored:

• IP address of the user
• Date and time of message transmission.

Alternatively, our data protection officer can be contacted via the provided e-mail address "datenschutz@fixauto.com". In this case, your personal data transmitted with the e-mail will be stored.

The provision of personal data by you is neither required by law nor by contract, nor is it necessary for a contract to be concluded. You are not obliged to provide us with personal data. However, if personal data is not provided, you will not be able to contact us via the contact form if this is mandatory.

Legal basis for data processing: The legal basis for processing the data transmitted via the contact form or by sending an e-mail is Art. 6 para. 1 subpara. 1 lit. f) GDPR. Our legitimate interest is to answer the sender's contact request. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 para. 1 subpara. 1 lit. b) GDPR.

Purpose of data processing: The processing of personal data from the input mask serves us solely to process the contact request. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage: The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail this is the case when the respective conversation with you has ended, unless contractual or legal obligations preclude deletion. The conversation has ended when the circumstances lead to the conclusion that the facts in question have been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Transmission of personal data

Fix Auto will not transmit your data to third parties unless you have given your express prior consent to a transfer or the transfer is legally prescribed or permitted. Excluded from this are the service partners of Fix Auto (e.g. IT service providers, software operators etc.), who are required to process the contractual relationship and who have been commissioned by us to process personal data in accordance with our instructions within the framework of an processor contract. Fix Auto will neither sell your data to third parties nor otherwise transmit them to third parties for advertising purposes. The employees of Fix Auto are bound to secrecy and compliance with data protection regulations.

Cookies

Description and scope of data processing: In order to create a pleasant visit of our website and to enable the use of certain functions, we use cookies on our website. These are small text files that are stored locally on your terminal device. Cookies enable the recognition of the Internet browser. They also allow us to improve the comfort and quality of our services, e.g. by storing user settings. Cookies do not cause any damage to your terminate device and do not contain any viruses.

We need cookies for the following applications:

1. Record of the number of visits to a website,
2. Record of the number of visits of individual users as well as behavioral data such as time spent, pages accessed, referring website etc.,
3. Identification of users for improvement of our products and services and display of advertisements on other websites,
4. Identification and storage of your language and region preferences.

The user data collected by cookies are not used to create user profiles.

You can set your browser in such a way that you are informed about the setting of cookies and for deciding individually about their acceptance or exclusion of the acceptance of cookies for certain cases or generally. If cookies are not accepted, the functionality of our website may be limited. The following links show you how to adjust the settings in the following common browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=en

Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Internet Explorer: https://support.microsoft.com/en-ca/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/en-ca/HT201265 und https://support.apple.com/en-ca/guide/safari/sfri11471/mac

However, by blocking cookies, the functionality of this website may be impaired.

Legal basis for data processing: If personal data are processed using technically necessary cookies, the legal basis is Art. 6 para. 1 subpara. 1 lit. f) GDPR. Our legitimate interest is to improve the comfort and quality of our services by making it easier to use our website.

If personal data are processed using analysis cookies after a given consent, the legal basis is your consent which you voluntarily declared and which you can revoke at any time in the future in accordance with Art. 6 para. 1 subpara 1 subpara. 1 lit. a) GDPR.

Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For them it is necessary that the Internet browser is recognized even after a page change.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Analysis cookies tell us how the website is used. This enables us to present you with advertising geared to your surfing habits and to continuously optimize our offer for your convenience.

Period of storage: Transient cookies, i.e. cookies intended only for temporary use, are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called Session-ID, with which different requests of your browser can be assigned to a common session. This will allow your device to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies, i.e. those intended for a limited period of time, are automatically deleted after a specified period, which may differ depending on the cookie. The respective duration of function can be found below under "Website analysis". You can delete cookies at any time in the security settings of your browser.

Website analysis

If you have voluntarily given your consent within the meaning of Art. 6 para. 1 subpara 1 lit. a) GDPR to the use of cookies by clicking on "Allow cookies", we use the following analysis cookies to the extent described below:

Use of Google Analytics

The Fix Auto website uses Google Analytics, a web analytics service of Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as „Google“) in Universal Analytics mode. This allows to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and through that analyze user's activities across several devices. Google Analytics uses cookies that are stored on your end device and that enable an analysis of your use of the website. The information generated by the cookies, such as the time, place and frequency of your website visit, including your IP address, is transmitted to Google and stored there. However, since this website uses Google Analytics with the extension "_gat._anonymizeIp", your IP address will be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet use. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs will automatically be deleted after 14 months. Data whose retention period has expired is automatically deleted once a month. You can find more information on terms of use and data protection at https://marketingplatform.google.com/about/analytics/terms/us/ or at https://policies.google.com/privacy?hl=en&gl=de.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However please note that in doing so you may not be able to use the full functionality of this website.

In addition, Google offers a deactivation add-on for the most common browsers, which gives you more control over which data Google collects about the websites you visit. The add-on tells the JavaScript (ga.js) from Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the deactivation add-on for browsers from Google Analytics does not prevent information from being transmitted to us or to other web analysis services that we may use. Further information on installing the browser add-on can be found via the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Opt-out cookies prevent the future collection of your data when you visit this website. In order to prevent universal analytics across different devices, you must perform the opt-out on all systems and devices used.

As Google Analytics is the service of a third party, we have no influence on the processing of such data by Google. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights and setting options for the protection of your privacy can be found in the corresponding data protection policy of Google at: https://policies.google.com/privacy/update?hl=en&gl=en. Google possibly also processes personal data in the USA. Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) has submitted to the EU-US Privacy Shield. You can view the respective status of the agreement guaranteeing compliance with European data protection law at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Use of Google Tag Manager

Google Tag Manager is an application that allows website operators to manage website tags through a single interface. The Google Tag Manager itself (which implements the tags) is a cookie-free domain, does not collect any personal data and triggers other tags that may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, this remains valid for all tracking tags that are implemented with Google Tag Manager. For more information, read the Google Tag Manager usage guidelines at: http://www.google.de/tagmanager/use-policy.html.

Use of Campaign Manager (formerly DoubleClick Floodlight)

The Fix Auto website uses the Campaign Manager (formerly DoubleClick Floodlight by Google) web analytics service provided by Google Ireland Limited. Campaign Manager uses cookies stored on your device to display relevant ads to users, to improve reports on campaign performance or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Campaign Manager can also use cookie IDs to record conversions related to ad requests. This is the case, for example, when a user views a Campaign Manager ad and later visits the advertiser's website with the same browser. In addition, the Campaign Manager cookies used enable us to see whether you are carrying out certain actions on our website after you have visited it or clicked one of our display / video ads on Google or on another platform via Campaign Manager (conversion tracking). Campaign Manager uses these cookies to understand the content that you have interacted with on our websites so that you can later be shown advertisements based on your surfing habits outside of this website. According to Google, Campaign Manager cookies themselves do not contain any personal information.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Furthermore, Google offers a deactivation add-on for the most common browsers at https://support.google.com/ads/answer/7395996, which gives you more control over which data Google collects about the websites you have accessed will. However, the deactivation add-on for browsers does not prevent information from being transmitted to us or to other web analysis services that we may use.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google servers. Since this is a third-party service, we have no influence on the scope and further use of the data collected by Google through the use of Campaign Manager. According to our level of knowledge, we can only inform you that through the integration of Campaign Manager Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and process your IP address.

For more information on the purpose and scope of data collection and the further processing and use of the data by Google, as well as your rights and setting options to protect your privacy, please refer to the corresponding data protection information from Campaign Manager at https://marketingplatform.google.com/about/enterprise and from Google at https://policies.google.com/privacy/update?hl=de&gl=de. Google may also process personal data in the United States. Google LLC (1600 Amphitheater Parkway Mountain View, CA 94043, USA) has submitted to the EU-US Privacy Shield. You can view the respective status of the agreement guaranteeing compliance with European data protection law at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Use of Google Maps

The Fix Auto website uses Google Maps from Google Ireland Limited. This enables us to show you interactive maps of our location directly on the website and enables you to use the map function conveniently.

If you have consented to the data transfer to Google by clicking on the corresponding button, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned above under "Provision of the website and creation of log files" are transmitted. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be assigned to Google, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and / or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise them.

Since Google Maps is a third-party service, we have no influence on the processing of such data by Google. For more information on the purpose and scope of data collection and its processing and use by Google, as well as your rights and settings options to protect your privacy, please refer to Google's corresponding data protection information at https://policies.google.com/privacy?hl=en&gl=de. Google may also process personal data in the United States. Google LLC (1600 Amphitheater Parkway Mountain View, CA 94043, USA) has submitted to the EU-US Privacy Shield. You can view the respective status of the agreement guaranteeing compliance with European data protection law at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Automated decision making including profiling

There is no automated decision making including profiling.

Rights of the data subject

In case of processing your personal data, you are data subject within the meaning of the GDPR and you have the following rights vis-à-vis Fix Auto as the responsible controller:

Right of access: According to Art. 15 GDPR you have the right to obtain information about your personal data processed by us; in particular you may obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data if not collected by us and the existence of automated decision-making, including profiling and, if applicable, significant information on their respective details.

Right to correction: In accordance with Art. 16 GDPR you have the right to demand immediate correction of incorrect or completion of personal data stored by us.

Right of cancellation ("right of oblivion"): In accordance with Art. 17 GDPR you have the right to request the cancellation of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of speech and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

Right of restriction: According to Art. 18 GDPR you have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection to the processing in accordance with Art. 21 GDPR.

Right to data transferability: In accordance with Art. 20 GDPR you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another responsible controller.

Right of appeal: Under Article 77 GDPR you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our head office. The competent supervisory authority is: The Hessian Data Protection Officer, postal address: P.O. Box 31 63, D-65021 Wiesbaden; visitor address: Gustav-Stresemann-Ring 1, D-65189 Wiesbaden; Phone: +49 (0) 611-1408-0; Fax: +49 (0) 611-1408-900 or -901; e-Mail: poststelle@datenschutz.hessen.de.

Right of objection: According to Art. 21 GDPR you have the right to object at any time against the processing of personal data concerning you, which is based on Art. 6 para. 1 subpara 1 1 lit. f) GDPR, for reasons arising from your particular situation. If you file an objection, Fix Auto will no longer process your personal data unless we can prove compelling grounds for processing that prevail your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

The objection can be made free of form vis-à-vis Fix Auto under the contact details given above, e.g. to the e-mail address datenschutz@fixauto.com.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising.

Right of revocation: You have the right to revoke your consent(s) to the processing of your personal data at any time. However, the revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation. Revocation is possible at any time free of form vis-à-vis Fix Auto using the contact details given above, e.g. to the e-mail address datenschutz@fixauto.com.

Data security

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognize the encryption by the key or lock symbol in the lower status bar or the address line of your browser ("https"). We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved according to technological developments.

Changes to our data protection regulations

Fix Auto reserves the right to adjust this data protection declaration from time to time so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The current data protection declaration applies to your next visit to our website.

Last updated: April 6, 2020