Information obligations under Article 13 of the EU Data Protection Basic Regulation (DSGVO)
1. Name and contact details of the controller
hese information obligations apply to the processing of personal data by the controller: ARI Fleet Germany GmbH, Liebknechtstraße 33, D-70565 Stuttgart, Germany (hereinafter “ARI Fleet”), e-mail: firstname.lastname@example.org. Phone: 0049 (0) 711-6676-0, Fax: 0049 (0)711-6676-17101.
We attach great importance to the protection of your personal data. According to Article 4 No. 1 DSGVO, personal data is all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features which are expressions of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. For example, your name or e-mail address is considered personal.
2. Contact details of the company data protection officer
The data protection officer of the responsible person can be reached at the above address of the responsible person, for the attention of Mr Paul Elion, telephone +49 (0) 6196 700 1117, or mobile +49 (0) 172 8644 893, or at the e-mail email@example.com
3. Purposes of data processing, legal basis, duration of storage
A processing of the personal data raised with the attendance of our web pages under arifleet.de takes place only under consideration of the valid data protection-juridical regulations and to the necessary extent.
a. Visit our website
When you visit our websites, the web servers of our website temporarily store each access of your terminal device in a log file. The following data is collected and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved data
- Transferred amount of data
- Message as to whether the call was successful
- Browser and operating system used
- Name of the Internet access provider
- Web page from which access is made (referrer URL)
These data are processed for the following purposes
- Enabling the use of the website (connection setup)
- Administration of the network infrastructure
- Appropriate technical and organizational measures for IT system and information security, taking into account the state of the art.
- Ensuring user-friendliness of use
- Optimization of the Internet offer
legal basis for the above processing operations:
- for processing for the purpose of visiting the websites referred to in points 1-2: Article 6(1)(b) DSGVO (necessary for the performance of the contract for the use of the website),
- for the processing operations referred to in point 3: Article 6(1)(c) DSGVO (legal obligation to implement technical and organisational measures to safeguard data processing pursuant to Article 32 DSGVO) and Article 6(1)(f) DSGVO (legitimate interests in data processing for network and information security) as well as for the processing operations referred to in point 3: Article 6(1)(c) DSGVO (legal obligation to implement technical and organisational measures to safeguard data processing pursuant to Article 32 DSGVO) and Article 6(1)(f) DSGVO (legitimate interests in data processing for network and information security).
- the processing operations referred to in points 4-6: Article 6(1)(f) of the DSGVO (legitimate interests). The legitimate interests of our data processing are to make our offer user-friendly and to optimise it. We can also deliver direct mail within the framework of legitimate interests.
If you have expressly and voluntarily consented in accordance with Article 6 paragraph 1 letter a DSGVO (consent), we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address.
You can unsubscribe from the newsletter at any time, for example via a link at the end of each newsletter. Alternatively, you can also send a cancellation request to the above-mentioned e-mail of the data protection officer at any time. Unsubscribing is at the same time a revocation of your consent.
c. Use of the contact form
For inquiries of any kind, we offer you the opportunity to contact us using the form provided on the website. In order to do so, you must provide a valid e-mail address so that we can reply to your enquiry, or, in contractual matters or to provide you with individual information, information about your identity, e.g. your name. It may not be possible to respond to enquiries without providing this information. Optionally, further information can be provided voluntarily, the non-delivery of which has no influence on the response.
Data processing for the purpose of contacting us is carried out in accordance with Article 6 paragraph 1 letter a DSGVO (consent). The personal data collected by us for the use of the contact form will be permanently deleted after you have dealt with the enquiry you have made or after any resulting follow-up business.
d. No further processing
Apart from the cases mentioned above, personal data will not be processed unless you expressly agree in advance to further processing, e.g. to receive a newsletter or a product offer.
4. Disclosure to third parties, processors, categories of recipients
The transfer of your personal data to third parties, i.e. natural or legal persons other than the data subject, the controller, the processor and the persons directly responsible for the processing of the personal data by the controller or the processor, will only take place for the purposes set out below:
- You have given your explicit and voluntary consent in accordance with Article 6(1)(a) DSGVO,
- According to Article 6 paragraph 1 letter b DSGVO, the transfer is necessary for the execution of contractual relationships with you, e.g. to suppliers or recipients of goods or services named by you.
- There is a legal obligation to pass on the data pursuant to Article 6 paragraph 1 letter c DSGVO, e.g. to financial or criminal prosecution authorities.
- According to Article 6 paragraph 1 letter f of the DSGVO, disclosure is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data; such disclosure may take place, for example, in the event of attacks on our IT systems to state institutions and criminal prosecution authorities.
Our websites are operated pursuant to Article 28 DSGVO by our parent company Automotive Rentals, Inc. in New Jersey, USA (“ARI US”), as contract processors on servers in the USA. ARI US subcontracted the hosting to Media Temple, Inc, 6060 Center Drive, 5th Floor, Los Angeles, CA 90045, USA. In the USA there is no adequate level of data protection in the sense of the DSGVO and for the USA there is no adequacy decision of the European Commission. However, we have concluded with ARI US the EU standard data protection clauses within the meaning of Article 46 of the DSGVO, a copy of which can be requested at firstname.lastname@example.org .
ARI Fleet remains responsible for data protection even if contract processors are involved. We do not intend to transfer your personal data to a third country.
We use so-called session cookies to recognise that you have already visited individual pages on our website within a session and to enable session control, e.g. to save form entries during the session. Session cookies are deleted at the latest when you close your web browser.
In addition, we also use temporary cookies to optimise and guarantee user-friendliness, which are stored for a defined period in the web browser of your terminal device. If you visit our site again, it is automatically recognised that you have already visited our website and which settings you have made so that you do not have to repeat them.
The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties pursuant to Article 6 paragraph 1 letter f DSGVO.
You may also view our web pages without cookies. However, most web browsers automatically accept cookies. You can specify in your web browser settings that the storage of cookies is prevented or that a message always appears before a new cookie is created. You can also delete cookies from your web browser. However, deleting or disabling cookies may prevent you from using all the features of our website in the same way.
6. Web analysis with Matomo [old: “Piwik”]
We use the open source software Matomo for the analysis and statistical evaluation of the use of the website. Cookies are used for this purpose (see chapter Cookies). The information generated by the cookie about website usage is transferred to our servers and summarised in pseudonymous usage profiles. The information is used to evaluate the use of the website and to enable a needs-based design of our website. The information will not be passed on to third parties. Under no circumstances will the IP address be associated with other data relating to the user. The IP addresses are made anonymous by shortening them so that an assignment is not possible (IP masking). Your visits to this website are recorded by Matomo Web Analytics. Click here (https://matamo.org/docs/privacy/) so that your visit is no longer recorded.
7. Social plug-ins
8. Rights of data subjects
You have the right:
- to request information about your personal data processed by us in accordance with Article 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period if possible, the existence of a right to rectification, deletion, limitation of processing or objection, the existence of a right of appeal, the origin of your data if not collected from you, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information on its details,
- in accordance with Article 16 DSGVO to demand the correction of incorrect or incomplete personal data stored by us without delay,
- to demand the deletion of your personal data stored by us in accordance with Article 17 DSGVO, if
- they are no longer necessary for the purposes for which they were collected or otherwise processed,
- you withdraw your consent. on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) and there is no other legal basis for the processing,
- you object to the processing pursuant to Article 21(1) and there are no overriding legitimate reasons for the processing, or you object to a processing for the purpose of direct marketing, including related profiling, pursuant to Article 21(2),
- the personal data have been processed unlawfully,
- the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject,
- the personal data relating to Information Society services offered have been collected in accordance with Article 8(1) of the DS Block Exemption Regulation (consent of a child).
- The claim to deletion does not exist insofar as the processing is necessary.
- on the exercise of freedom of expression and information,
- to fulfill a legal obligation, for reasons of public interest in the field of public health or for archival purposes in the public interest, or
- to assert, exercise or defend legal claims.
- to request the restriction of the processing of your personal data in accordance with Article 18 DSGVO, insofar as
- the correctness of the data is denied by you,
- the processing is unlawful, but you refuse to delete it,
- we no longer need the data, but you need it to assert, exercise or defend legal claims, or
- you have lodged an objection to the processing under Article 21 DSGVO.
- in accordance with Article 20 DSGVO, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible person,
- in accordance with Article 7 paragraph 3 DSGVO to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent for the future unless there is another legal basis for doing so, and
- to complain to a supervisory authority pursuant to Article 77 DSGVO. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our headquarters.
9. Right of objection
If your personal data are processed on the basis of legitimate interests pursuant to Article 6 paragraph 1 letter f DSGVO, you have the right to object to the processing of your personal data pursuant to Article 21 DSGVO if there are reasons for doing so which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without stating a particular situation.
If you wish to make use of your right of revocation or objection, you can contact us at the above contact details and send us an e-mail, for example.
10. Data security
We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when visiting our website. As a rule, this is a 256-bit encryption. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the status bar of your web browser.
We also use suitable technical and organisational measures to secure data processing, in particular to protect your data against manipulation or unauthorised access. In doing so, we take the state of the art into account. Our security measures are adapted in line with technological developments.
13. Topicality, validity and change of this data protection explanation
By using our websites you agree to the data processing described above. This data protection declaration is currently valid and dated 25 May 2018. Due to changed legal conditions, the further development of our websites and offers, the implementation of new technologies or due to changed legal or official requirements, it may be necessary to change this data protection declaration with effect for the future. You can call up and save or print out the current data protection declaration on our website at arifleet.de at any time.
12. Severability clause
Should individual provisions of this data protection declaration be or become invalid or unenforceable in whole or in part, this shall not affect the validity of the remaining provisions. The same applies in the case of gaps.