Data Protection Information
I. General Notes
I.1 Data Processing Controller
The controller pursuant to Article 4 No. 7 GDPR and service provider of the website www.autoteilewelt.de is:
EFA Autoteilewelt GmbH, Cannstatter Straße 46,
D-70190 Stuttgart, phone: +49 (0) 6031 793 0, fax: +49 (0) 6031 793 719,
info(at)autoteilewelt.de
(hereinafter "We").
I.2 Data Protection Officer
Should you have any inquiries regarding data processing, please direct them to our data protection officer.
Frey Services Deutschland GmbH
Keyword ‘Data Protection’
Cannstatter Straße 46, D-70190 Stuttgart
II. Processing of Personal Data
II.2 Contact
When you contact us by email, the data you provide (your email address, and if applicable, your name and phone number) will be stored by us in order to answer your questions.
When using our contact form, the following data entered in the form will be stored:
- first name
- last name
- email address
- phone number
- company
Unless marked as optional in the contact form, providing this information is mandatory. Without this data, we cannot process or respond to your inquiry.
The legal basis for this data processing is our legitimate interests in properly responding to customer inquiries according to Art. 6 para. 1 lit. f) GDPR. If the contact aims at concluding a contract, then an additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR.
II.3 Redirection to Our Webshop
Clicking on the ‘Directly To The Webshop’ or ‘Login to Webshop’ button redirects to our webshop at shop.autoteilewelt.de. In our webshop, commercial users can order products online. The use of the webshop requires registration with a customer account.
By clicking the ‘Become a Customer Now’ or ‘Register as a New Customer’ button, a password-protected customer account can be created. This button redirects to shop.autoteilewelt.de. where registration can be completed.
The website shop.autoteilewelt.de., registration and login in the webshop, and its use are subject to specific data protection regulations. These can be found on the website shop.autoteilewelt.de..
II.4 Applicant Portal
By clicking the ‘Career’ button, you will be redirected to the applicant portal at: jobs.emilfrey.de.
The use of the applicant portal is subject to its own data protection regulations. These can be found on the website: jobs.emilfrey.de.
II.5 Event Management Tool
We use the event management tool ‘eyevip’ provided by eyevip cloud AG, Weberstrasse 3, 8004 Zurich, Switzerland, on our website.
a) Nature and Purpose of Processing
Eyevip allows users of our website to receive information about our events and to register for events.
When using the functions of Eyevip, the following data are stored:
- first name
- last name
- email address
If data fields are not marked as optional, providing this information is mandatory. Without this data, the functions of Eyevip cannot be utilised.
The functions of Eyevip include the creation of digital guest lists, quota management, event reporting, the Check-In app, the publication of event websites, and the sending of news and updates about events. We reserve the right to use some or all of these functions in connection with events.
b) Recipients
For these purposes, data are transmitted to Eyevip cloud AG, Weberstrasse 3, 8004 Zurich, Switzerland, where they are processed. The data may also be stored on servers of Eyevip cloud AG in Switzerland.
Eyevip cloud AG acts as a data processor during data processing activities and has been contractually obligated to comply with data protection regulations in accordance with Art. 28 GDPR. Eyevip cloud AG is prohibited from selling your data or using it for purposes other than sending newsletters. A data processing agreement has been concluded with Eyevip cloud AG.
c) Legal Basis
The legal basis for the use of Eyevip and the data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.
Further information on the use of Eyevip and the data protection practices of Eyevip cloud AG can be found at: landing.eyevip.com/eyevip-datenschutzerklaerung.
II.6 Newsletter
With your consent, we use your data to send you our newsletter. By subscribing to our newsletter, you agree that the personal data you provide (name, first name, and email address) will be used by us to inform you about our current and interesting offers.
You can revoke your consent to receive the newsletter at any time and unsubscribe from it. You may do so by clicking the link provided in each newsletter email or by sending a message to the contact details listed in the imprint.
For managing subscriptions and sending the newsletter, we use the service provider Sendinblue GmbH. Your data will be transmitted to Sendinblue GmbH. Sendinblue GmbH is prohibited from selling your data or using it for purposes other than sending newsletters. Sendinblue is a certified German provider selected in compliance with the requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). A data processing agreement has been concluded with the service provider.
For more information, please visit HERE.
The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. Regarding data processing within the scope of the double opt-in process, we also process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR to fulfil a legal obligation to which we are subject.
II.7 Additional Processing Purposes
a) Compliance with Legal Obligations
We also process your personal data to fulfil other legal obligations that may arise in connection with our business activities. This includes, in particular, retention periods under commercial, trade, or tax laws. The legal basis for this data processing is the fulfilment of a legal obligation to which we are subject pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR.
b) Enforcement of Legal Claims
We also process your personal data to assert our rights and enforce our legal claims. Additionally, we process your personal data to defend ourselves against legal claims. Finally, we process your personal data as far as necessary to prevent or prosecute criminal offences. The legal basis for this data processing is the protection of our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, insofar as we assert legal claims, defend ourselves in legal disputes, or prevent or investigate criminal offences.
c) Consent
If you have given us consent to process your personal data for specific purposes (e.g., sending informational materials and offers), the lawfulness of this processing is based on your consent. Consent can be withdrawn at any time. This also applies to consent declarations made to us prior to the GDPR's effective date, i.e., before 25 May 2018. Please note that the withdrawal applies only to future processing and does not affect the lawfulness of processing carried out based on the consent prior to its withdrawal.
d) Automated Decision-Making / Profiling
We do not employ automated decision-making or profiling (an automated analysis of your personal circumstances).
II.8 Data Recipients
For some of our business processes, in particular IT services, the processing of contracts, the maintenance of customer relations and services provided to customers and interested parties, we use carefully selected and commissioned service providers.
In some cases, our service providers receive your personal data as processors and are then strictly bound by our instructions when handling your personal data.
In the following, we name further categories of recipients of your personal data: credit agencies, collection service providers, advertising and market research service providers, shipping and courier service providers, printing service providers.
II.9 Duration of Data Storage
We delete your personal data when it is no longer required for one or more of the aforementioned purposes and no legal retention obligations or statutory justifications exist. The retention periods stipulated in the German Commercial Code (HGB) and the Fiscal Code (AO) range from six to ten years. Additionally, statutory limitation periods also influence the retention duration. According to Sections 195 ff. of the German Civil Code (BGB), the regular limitation period is three years; however, in certain cases, the limitation period may extend to thirty years.
II.10 Data Security
Personal data is protected by us by means of appropriate technical and organizational measures to ensure an adequate level of protection and to safeguard the personal rights of data subjects. The measures taken serve, among other things, to prevent unauthorized access to the technical equipment used by us and to protect personal data from unauthorized disclosure to third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as your contact requests that you send to us as the site operator.
You can recognize an encrypted connection by the fact that the browser address bar changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, we would like to point out that data transmission on the Internet (e.g. when communicating by email) can have security gaps. Complete protection of the data against access by third parties is therefore not possible.
III. Your Rights
III.1 Rights Regarding Personal Data
You have the following rights with respect to us regarding personal data concerning you:
1. the right to information about your stored data (Article 15 GDPR),
2. the right to withdraw your consent (Article 7 (3) sentence 1 GDPR),
3. the right to have inaccurate data rectified or to have incomplete data completed (Article 16 GDPR) or to have this data erased (Article 17 GDPR),
4. the right to restriction of processing (Article 18 GDPR) and
5. the right to data portability (Article 20 GDPR).
You also have the right to object to the processing of your personal data (Article 21 GDPR). The right to object pursuant to Article 21 (1) GDPR applies to all data processing described above that is carried out on the basis of a balancing of interests pursuant to Article 6 (1) (f) GDPR.
You also have the right to lodge a complaint with the competent data protection supervisory authority about the processing of your personal data by us (Article 77 GDPR): The Baden-Württemberg State Commissioner for Data Protection and Freedom of Information, Lautenschlagerstraße 20, 70173 Stuttgart,