Heavy rain falling on a dark Rolls-Royce Motor Car Heavy rain falling on a dark Rolls-Royce Motor Car Heavy rain falling on a dark Rolls-Royce Motor Car Heavy rain falling on a dark Rolls-Royce Motor Car

LEGAL INFORMATION

Company information

Rolls-Royce Motor Cars Berlin is responsible for the content of this website. Rolls-Royce Motor Cars Berlin has its registered office at, Hindenburgdamm 68, D-12203 Berlin, Germany.
E-mail address: kontakt@rolls-roycemotorcars-berlin.de

PRIVACY POLICY

This privacy policy informs you of the nature, scope and purpose for the processing of personal data (hereinafter “data”) within our online services as well as associated websites, features and content and external online platforms, such as our social media profiles. For definitions of the terms used, such as processing or controller, please consult Art. 4 of the General Data Protection Regulation (GDPR).

Controller
Rolls-Royce Motor Cars Berlin
Riller & Schnauck GmbH
Hindenburgdamm 68
D-12203 Berlin
Phone: +49 (0)30-790095-606
Fax:     +49 (0)30-790095-610
E-mail: kontakt@rollsroycemotorcars-berlin.de

Data protection officer
Phone: +49(0)3328-442121
Fax:     +49 (0)3328-442106
E-mail: 
datenschutz@riller-schnauck.de

Data protection

We take the protection of your personal data very seriously. We treat your data as confidential in accordance with the statutory data protection regulations as well as this privacy policy. The legal framework for data protection is the General Data Protection Regulation (GDPR) as well as the Federal Data Protection Law (BDSG). The use of our website is generally possible without indicating personal data. Insofar as personal data (for instance name, address or e-mail address) is collected on our site, this occurs on a voluntary basis wherever possible. We will not forward this data to third parties without your explicit permission.

We hereby inform you that data transmission on the internet (e.g. in communication by e-mail) may involve security vulnerabilities. Data cannot be completely protected against access by third parties.

Types of data processed

·       Master data (e.g. names, addresses)

·       Contact data (e.g. e-mail, phone numbers)

·       Content data (e.g. text entries, photographs, videos)

·       Usage data (e.g. websites visited, interest in content, date and time of access)

·       Metadata/communication data (e.g. device information, IP addresses)

Purpose of data processing

·       Provision of the online service, its features and content

·       Answering contact enquiries and communication with users

·       Security measures

·       Assessment of reach/Marketing

Collaboration with processors and third parties

Insofar as we disclose, transfer, or otherwise grant access to data with respect to other individuals or companies (so-called processors) during our processing operations, this will only occur based on legal permission (e.g. if transfer of data to third parties such as payment providers is necessary for contractual fulfilment pursuant to Art. 6 (1)(b) GDPR), if you have given consent, if a legal obligation requires us to do so or based on our legitimate interests (e.g. when engaging agents, web hosts, etc.). If we engage third parties to conduct data processing on our behalf based on a processing agreement, this will occur based on Art. 28 GDPR.

Transfer to third countries

If we process data in a third country (i.e. in a country outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs when availing of third-party services or disclosing or transferring data to third parties, this will only occur if this is necessary to fulfil our contractual or pre-contractual obligations, based on your consent, based on a legal obligation, or based on our legitimate interests. Conditional on legal or contractual permission, we will only conduct or commission data processing in a third country if specific prerequisites have been fulfilled pursuant to Art. 44 et seq. GDPR. This means that processing will occur based on specific guarantees, such as an officially recognised adequacy decision regarding a level of data protection equivalent to the EU (for example, Privacy Shield for the USA) or observation of officially acknowledge special contractual obligations (so-called standard contract clauses).

Hosting

The hosting services we make use of are necessary to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services that we employ for the purposes of offering this online service. To this end, we and our hosting provide process master data, contact data, content data, contractual data, usage data, metadata and communication data concerning customers, interested parties and visitors to this online service based on our legitimate interests in efficient and secure provision of this website pursuant to Art. 6 (1)(f) GDPR in conjunction with Art. 28 GDPR (concluding processing contracts).

Agency services

We process the personal data of our customers within the scope of our contractual services, which include conceptional and strategic consultation, planning of initiatives, software and design development/consultation or maintenance, implementation of campaigns and processes/handling, server administration, data analysis/consultation services and training services.

In this context, we process inventory data (e.g. customer master data such as names or addresses), contact data (e.g. e-mail, phone numbers), content data (e.g. text entries, photographs, videos), contract data (e.g. purpose of contract, duration), payment data (e.g. bank details, payment history), usage and metadata (e.g. within the context of analysis and measuring the success of marketing campaigns). We do not generally special categories of personal data unless they are components of commissioned processing. Data subjects include our customers, interested parties as well as their customers, users, website visitors or employees as well as third parties. The purpose of processing is to fulfil contractual services, billing and customer service. The legal basis for processing is derived from Art. 6 (1)(b) GDPR (contractual services), Art. 6 (1)(f) GDPR (analysis, statistics, optimisation, security measures). We process data that is required in order to establish and fulfil contractual services and indicate that it is necessary to provide this information. Disclosure to external parties will only occur if it is necessary during an order. When processing data handed over to us during an order, we act according to the instructions of the contracting authority as well as the statutory provisions for processing pursuant to Art. 28 GDPR, and will not process this data for any purposes except as ordered.

We will delete the data after the expiration of statutory retention obligations and similar obligations. The necessity of storing data will be reviewed once every three years; in case of statutory archiving obligations, this data will be deleted after this period has elapsed (6 years pursuant to Section 257 (1) Commercial Code (HGB), 10 years pursuant to Section 147 (1) AO). For data that the contracting authority discloses to us in the context of an order, we will delete the data according to the order stipulations, generally at the end of the order.

Administration, accounting, office organisation, contact management

We process data in the context of administrative tasks as well as the organisation of our operation, accounting and pursuing statutory obligations such as archiving obligations. In this context, we process the same data that we process when fulfilling our contractual services.

The basis for processing is Art. 6 (1)(c) GDPR, Art. 6 (1)(f) GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing concerns administration, accounting, office organisation, data archiving, tasks that serve to maintain our business activities, pursue our responsibilities and perform our services. The erasure of data concerning contractual services and contractual communication is based on the information stipulated for these processing operations.

In this regard we will disclose or transfer data to financial administrators, consultants such as accountants or auditors, as well as other billing offices and payment providers. Based on our business interest, we also store information regarding suppliers, event organisers and other business partners, for instance in order to establish contact subsequently. We generally store this data personally, the majority of which is related to companies.

Business analysis and market research

In order to operate our business economically and detect market trends, customer and user desires, we analyse the data in our position regarding business transactions, contracts, requests, etc. In this context, we process inventory data, communication data, contract data, usage and metadata based on Art. 6 (1)(f) GDPR, whereby the data subjects include customers, interested parties, business partners, visitors and users of the online service.

This analysis pursues the purpose of economic assessment, marketing and market research. In this process, we are able to consider the profiles of registered users, for instance with information about their purchase transactions. This analysis assists us in improving user-friendliness, optimising our service and operating efficiency. This analysis is used solely for internal purposes and will not be disclosed to external parties except for anonymous analysis with summarised values.

If this analysis or profiles are related to specific persons, they will be deleted or anonymised on cancellation by the user, otherwise two years after the contract is concluded. Otherwise, overall economic efficiency analysis and general trend detection will be made anonymous where possible.

Notes regarding data protection during the application process

We only process applicant data for the purpose and in the context of the application procedure in compliance with the statutory provisions. Processing of applicant data occurs to fulfil our contractual or pre-contractual obligations during the application procedure within the meaning of Art. 6 (1)(b) GDPR and Art. 6 (1)(f) GDPR, as long as this data processing becomes necessary for us, for instance during legal proceedings (in Germany, Section 26 BDSG also applies).

The application process presupposes that applicants will communicate applicant data to us. Insofar as we offer an online form, required applicant data is designated as such, otherwise the requirements are derived from job listings and generally include information about the individual, mailing and contact addresses and the documents accompanying the application, such as cover letter, CV and certificates. Applications can also voluntarily provide us with additional information. By sending the application to us, applicants consent to the processing of their data for the purposes of the application procedure according to the nature and scope outlined in this privacy policy.

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR are communicated voluntarily during the application procedure, such data will be processed additionally pursuant to Art.9 (2) GDPR (e.g. health data such as severe disability status or ethnic background). Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants during the application procedure, such data will be processed additionally pursuant to Art.9 (2)(a) GDPR (e.g. health data where this is necessary for practising the occupation).

Applicants can transfer their applications to us using an online form on our website as long as this is provided. The data will be transmitted to us in encrypted form according to the state of the art in technology. Applicants can also send us their applications via e-mail. However, please note that e-mails are not generally sent in encrypted form and that applicants need to ensure this encryption themselves.

For this reason, we are unable to accept any responsibility for the transmission route of the application between the sender and receipt on our server, and therefore recommend using an online form or postal mailing. Instead of applying through the online form or e-mail, applicants are also given the option of sending us their applications by mail.

In case of a successful application, the data provided by the applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a position is unsuccessful, the applicant’s data will be deleted. The applicant’s data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Deletion will occur, conditional on the applicant’s justified withdrawal, after a period of six months has elapsed to allow us to answer any follow-up questions regarding the application and to fulfil our obligations to provide evidence arising from the Equal Treatment Act. Invoices regarding potential reimbursement of travel costs will be archived according to the regulations under tax law.

Registration feature

Users have the option of creating a user account. During registration, users will be informed which mandatory fields are required. The data entered during registration will be used in order to utilise the service. Users can receive notification via e-mail regarding information about offers or registration, such as changes to the scope of services or technical circumstances. If users cancel their user accounts, their data concerning the user account will be deleted unless its retention is required for reasons under trade law or tax law pursuant to Art. 6 (1)(c) GDPR. It is up to users to secure their data if they cancel their accounts before the end of the contract. We are entitled to irrevocably delete all user data stored for the duration of the contract.

During the use of our registration and login features as well user accounts, we store the IP address and the date and time of each respective user activity. Storage occurs based on our legitimate interests, and the user’s legitimate interests in protecting against misuse and other types of unauthorised use. Generally, this data will not be forwarded to third parties unless it is necessary to pursue our claims or if we have a legal obligation to do so pursuant to Art. 6 (1)(c) GDPR. The IP addresses will be anonymised or deleted after 7 days at most.

Objection to advertising e-mails

Use of the contact data published in the legal information in order to send advertisements and informational materials that have not been expressly requested, is not permitted. The operators of this website expressly reserve the right to take legal action against the unsolicited sending of advertising information, for instance spam e-mails.