Data protection
Background and terms
This data protection declaration informs you about the type, scope and purpose of the processing of your personal data by the data protection officer in accordance with. Art. 13 and 14 of the General Data Protection Regulation (GDPR).
Scope of application and responsibility
This privacy policy applies to the Carwise Group website, which can be accessed under the domain https://carwisegroup.com.
The controller responsible for data processing on this website is:
CarWise
Luidsprekerstraat 18,
1322 AX Almere,
Holland
Phone: +31 (0)36 538 20 60
E-mail: info@carwisegroup.com
Data Protection Officer
We have appointed a data protection officer who can be contacted as follows:
C. Rocco Wittig
agentia Wirtschaftsdienst
Bornstraße 32,
12163 Berlin
Phone: +49 30 399944-0
Fax: +49 30 399944-99
E-mail: datenschutz@carano.de
Processing of your data at Carwise Group
How is your data processed in detail?
Below we inform you about the individual processing operations, the purpose of the data processing, the categories of processed data, the categories of recipients, whether a third country data transfer takes place, the legal basis, the obligation to provide your data and the respective storage period.
An automated decision in individual cases, including profiling, does not take place.
Data processing website
Website presentation
Purpose
We collect your data for the provision of the website (multilingual), to offer the availability of associated services, for an efficient design of the website and to ensure the security of the website.
Categories of processed data
The IP address, the Internet service provider of the accessing system, the date and time of access to the website, the browser type and version used, the operating system used by the accessing system and the website from which an accessing system accesses our website are stored.
Categories of recipients
Your data will be passed on to the website host’s employees.
Third country data transfer
There is no transfer to third countries.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract) and Art. 6 para. 1 a) GDPR (legitimate interest).
Storage period and its criteria
The data is stored for the duration of the website display.
Contact form
Purpose
We collect your data for the purpose of contacting you.
Categories of processed data
Your name, e-mail address, company data, telephone number and the notes you provide will be stored.
Categories of recipients
Your data will be passed on to Carwise Group employees.
Third country data transfer
There is no transfer to third countries.
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).
Storage period and its criteria
The deletion takes place after the purpose has ceased to exist.
Request by e-mail, phone or fax
Purpose
We collect your data for the purpose of contacting you.
Categories of processed data
Your name and the request will be saved.
Categories of recipients
Your data will be passed on to Carwise Group employees.
Third country data transfer
There is no transfer to third countries.
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).
Storage period and its criteria
The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).
Newsletter
Purpose
We collect your data to receive the newsletter, to analyze our newsletter campaign and to target the newsletter to specific recipients (e.g. by age, gender or place of residence).
Categories of processed data
Your name and e-mail address will be stored.
Categories of recipients
Your data will be passed on to employees of Carwise Group and Brevo.
Third country data transfer
There is no transfer to third countries.
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).
Storage period and its criteria
The deletion takes place after the purpose has ceased to exist.
Participation in surveys
Purpose
We collect your personal data in order to improve our service by letting you participate in surveys about new products.
Categories of processed data
The IP address, the Internet service provider of the accessing system, the date and time of access to the website, the browser type and version used, the operating system used by the accessing system and the website from which an accessing system accesses our website are stored.
When you sign in to your Google Account, your entries in the Google Form are automatically saved. This means you can work on a form on several devices or take a break without losing your progress.
Categories of recipients
Your data will be shared with Carwise Group employees and Google.
Third country transfer
Data is transferred to third countries with certification in accordance with the EU-U.S. Data Privacy Framework.
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest)
Storage period and its criteria
The results are evaluated directly and then deleted.
When you sign in to your Google account, your entries in Google forms are automatically saved for 30 days. Once the survey has been completed, the results are analyzed directly and then deleted.
Consent management
Purpose
We collect your data to obtain and store the consent of our website users to use the services offered on our website.
Categories of processed data
Your IP address, the date and time of consent, the browser information and the URL from which the consent was sent are stored.
Categories of recipients
Your data will be passed on to employees of Carwise Group and Borlabs.
Third country data transfer
There is no transfer to third countries.
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 c) GDPR (legal obligation).
Storage duration
The deletion takes place after the purpose has ceased to exist.
WPML
Purpose
We collect your data to display the website in different languages and to save the language selection on the website.
Categories of processed data
Your click data, device information, operating system and your P-address are stored.
Categories of recipients
Your data will be passed on to Carwise Group employees.
Third country data transfer
A third country transfer takes place.
(OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong)
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).
Storage duration
WPML stores cookies on your end device. Information on the storage duration of cookies can be found at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance
Data processing, analysis tools and advertising
Google Ads
Purpose
We collect your data in order to be able to show you targeted and effective advertising.
Categories of processed data
Click data, impression data, conversion data, geographic data, device information, browser information and your IP address are stored.
Categories of recipients
Your data will be passed on to employees of Carwise Group and Google.
Third country data transfer
A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.
Microsoft Advertising
Purpose
On our website, we use Microsoft Advertising, a service of the Microsoft Corporation, to display personalized advertisements and to analyze the effectiveness of our advertising measures.
Categories of processed data
Your IP address, the browser type and version, the operating system used, the referrer URL (the previously visited page), the date and time of access, your click behavior and pages visited may be stored.
Categories of recipients
Your data will be passed on to Microsoft employees.
Third country data transfer
Data is transferred to third countries with certification in accordance with the EU-U.S. Data Privacy Framework.
Microsoft Corporation
One Microsoft Way,
Redmond, WA 98052-6399, USA
Storage period and its criteria
After the end of the purpose or revocation of your consent. You can object to the collection and storage of data by Microsoft Advertising at any time by using the following opt-out options: Browser settings: You can prevent the storage of cookies by selecting the appropriate settings in your browser software. Opt-out page: Visit the Microsoft Advertising opt-out page at https://account.microsoft.com/privacy/ad-settings/signedout
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).
Microsoft Clarity
Purpose
The processing is carried out for analysis and optimization purposes. It helps us to improve the user experience on our website, identify weaknesses in the design and make the website more user-friendly.
Categories of processed data
This involves processing information about the device you are using and the operating system, your IP address (in anonymized form), the screen resolution, the browser type used and its version. In addition, interactions with the website – such as mouse movements, click behavior and scrolling activities – are recorded. The duration of your visit to the website as well as the pages you visit (navigation paths) and the referrer URL, i.e. the page you visited previously, are also processed.
Categories of recipients
Your data will be passed on to employees of Carwise Group and Microsoft.
Third country data transfer
Data is transferred to third countries with certification in accordance with the EU-U.S. Data Privacy Framework.
Microsoft Corporation
One Microsoft Way,
Redmond, WA 98052-6399, USA
Storage period and its criteria
After the end of the purpose or revocation of your consent. You can object to the collection and storage of data by Microsoft Advertising at any time by using the following opt-out options: Browser settings: You can prevent the storage of cookies by selecting the appropriate settings in your browser software. Opt-out page: Visit the Microsoft Advertising opt-out page at https://account.microsoft.com/privacy/ad-settings/signedout
Google Analytics
Purpose
We collect your data to evaluate user behavior, to recognize users and to report on website activity.
Categories of processed data
Click data, impression data, conversion data, geographic data, device information, browser information and your IP address are stored.
Categories of recipients
Your data will be passed on to employees of Carwise Group and Google.
Third country data transfer
A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.
Data processing plugins and tools
Google reCAPTCHA
Purpose
We use Google reCAPTCHA to protect our website from spam and abusive access by automated programs (bots).
Categories of processed data
The IP address, browser information, device information, operating system, referrer URL, mouse and keyboard entries as well as surfing and clicking behavior on the website are stored.
Categories of recipients
Your data will be passed on to employees of the CarWise Group and Google.
Third country data transfer
A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest). The legitimate interest lies in the security and protection of our website against misuse.
Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy
Data processing whistleblower system
Purpose
Carwise Group has legal obligations to carry out a whistleblowing process. For this purpose, we have defined a process and implemented an electronic reporting channel. This involves storing and using the personal data of whistleblowers, any suspects and witnesses as well as the respective processors.
Categories of processed data
When a report is received, the whistleblower’s e-mail address and the content of the report are stored. If specified, further contact details such as the name are also stored. When the facts of the case are investigated, further data on the accused and witnesses and information on the content of the case may be added.
The personal data listed below may be subject to processing in relation to the respective category of data subject:
Persons who report a suspected unethical or illegal situation
- Contact details (unless the report was made anonymously)
- the personally observed facts that could give rise to suspicion of unethical or illegal actions
Persons who are suspected of having behaved unethically or unlawfully as a result
- the personally observed facts that could give rise to suspicion of unethical or illegal actions
Other persons, such as witnesses
- the personally observed facts that substantiate or refute the suspicion
People who process the cases
- Documentation of the investigation activities
Categories of recipients
The initial recipient of the notification is the Data Protection Officer of Carwise Group. This person will also process the report initially. Depending on the facts of the case and the necessity, other departments may be involved in the processing. These can be internal bodies such as the HR department, the finance department and the management, but also external bodies such as law firms or law enforcement agencies. Confidentiality is observed when disclosing information.
Third country data transfer
There is no transfer to third countries.
Legal basis
The collection of your data takes place on the basis of Art. 6 para. 1 c) GDPR (processing due to legal obligations)
Storage period and its criteria
The data is stored until the purpose for which it was collected no longer applies and there are no statutory retention obligations to the contrary.
In principle, the data is stored for three years after the end of the year in which it was collected (regular limitation period under civil law). If the data became the subject of criminal, civil or administrative proceedings, the retention period is extended by the duration of the respective proceedings.
Rights of data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR. You have the following rights vis-à-vis the controller:
Those affected have the right:
- pursuant to Art. 7 para. 3 GDPR to revoke their consent once given to Carwise Group at any time. As a result, Carwise Group may no longer continue the data processing based on this consent in the future;
- to request information about your personal data processed by Carwise Group in accordance with Art. 15 GDPR. In particular, they may request information about the purposes of processing, the category of personal data, the categories of recipients to whom their data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of their data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by Carwise Group;
- in accordance with Art. 17 GDPR, to demand the deletion of their personal data stored by Carwise Group, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and Carwise Group no longer needs the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to Carwise Group in a structured, commonly used and machine-readable format or to request transmission to another controller, and
- to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, data subjects can contact the supervisory authority of their usual place of residence or workplace in Berlin.
