We want you to feel secure when visiting the AVW Group website (hereinafter abbreviated to AVW). We take the protection of your personal data very seriously. Therefore we have compiled the following information for you about the management of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
Collection and use of personal data
Examples of personal data include your name, email address, telephone number and postal address. AVW collects, processes and uses the personal data provided by you insofar as they are needed to process an order placed with us or an inquiry. This is the case, for example, if you sign up for our newsletter, send us details of your losses or damages using the online claim forms or get in touch with us through a contact form or feedback form.
The data you enter are encrypted before being transmitted to our web server. Therefore these data cannot be viewed by unauthorised persons.
Your personal data will be used for the stated purposes only and to the extent necessary to achieve these purposes.
We have put technical and organisational measures in place to protect your data from loss, alteration or third-party access.
IP address storage
We store the IP address transmitted by your web browser for seven days, adhering strictly to its intended purpose of use, in the interests of being able to detect, restrict and eliminate attacks on our websites. At the end of this period, we delete or anonymise the IP address.
The legal basis is Art. 6 (1) f) GDPR.
When you visit our websites, usage data are temporarily stored on our web server for statistical purposes as a record in order to improve the quality of our websites. This record consists of the following data:
the page from which the file was requested
the name of the file
the date and time of the request
the volume of data transmitted
the access status (file transferred, file not found)
the description of the type of web browser used
the IP address of the computer sending the request, shortened in such a way that it can no longer bear reference to any individual person
The log data listed above are stored in anonymous form only.
Transmission of data to third parties
We send your data to service providers who assist us with the operation of our websites (e.g. hosting and design) and with the associated processes, acting on our instructions as processors as defined in Art. 28 GDPR. Our service providers are duty-bound to follow our instructions and to adhere strictly to contractual agreements.
Use of data from Registration for the email Newsletter
You can sign up on our website for our newsletter with expert information. If you have granted us specific consent to inform you by email about our own products and services, the data will be processed in accordance with Art. 6 (1) a) GDPR (consent).
We use the so-called "double opt-in" procedure to ensure that a newsletter subscription actually originates from the owner of the registered email address. This means that after registering you will first receive an email asking you to click on a link contained in this email to reconfirm that you would like to receive our newsletter and that you are the legitimate holder of the email address. Only after confirmation will you be registered for the newsletter.
You may revoke your consent at any time without affecting the legality of the processing already carried out. If the consent is revoked, we will stop processing the data.
If you no longer wish to receive the newsletter, you can unsubscribe at any time, e.g. by sending an email to email@example.com or using the link to unsubscribe from the newsletter which you will find in every newsletter email.
We use session cookies on our websites. Processing is carried out on the basis of Art. 6 (1) clause 1 p. 1 f) GDPR and in the interest of optimising site navigation for users.
Online notification of claims (web form)
You can use our web form to report cases of loss or damage directly. In order to use our web form, we require information on the date of loss, place of loss, cause of loss, circumstances of loss, estimated amount of loss, information as to whether you are entitled to deduct input tax, and in some cases information on the claimant and contact details. On the vehicle damage form, we also require information on the vehicle and driver at the time of the accident and where the vehicle can be inspected (mandatory fields are marked with an asterisk (*)). You may provide further information but you do not have to. The legal basis for processing is Art. 6 (1) f) GDPR. Your data will only be processed to respond to your message.
You can contact us through an online form. You will need to enter your name and email address in order to use our contact form. You may provide further information but you do not have to.
The legal basis for processing is Art. 6 (1) f) GDPR. Your data will only be processed to respond to your inquiry and will be deleted immediately after processing the inquiry. The data will not be passed on to third parties.
You can send us feedback through an online form. You do not need to enter any personal data in order to use our feedback form. However, if you do provide personal data (e.g. name and email address), the legal basis for processing is Art. 6 (1) f) GDPR. Your data will only be processed to respond to your feedback and will be deleted immediately after the case has been processed. The data will not be passed on to third parties.
Your rights as a user
As a website user, you are granted certain rights under the GDPR in connection with the processing of your personal data:
1. Right of access (Art. 15 GDPR):
You have the right to request confirmation as to whether personal data relating to you are being processed and, if this is the case, you have a right of access to these personal data and to the other information listed in Art. 15 GDPR.
2. Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to request the rectification of incorrect personal data concerning you without undue delay and, where applicable, the completion of incomplete personal data.
You also have the right to request the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data are no longer required for the purposes for which they were collected.
3. Right to restriction of processing (Art. 18 GDPR):
You have the right to request a restriction on processing for the length of time required for any verification procedure if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have filed an objection to processing.
4. Right to data portability (Art. 20 GDPR)
In certain cases, as detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and the right to request the transmission of these data to a third party.
5. Right to object (Art. 21 GDPR):
If data are collected on the basis of Art. 6 (1) f) (data processing to safeguard legitimate interests), you have the right to object to their processing at any time on grounds relating to your particular situation. We will then no longer process your personal data unless there are compelling legitimate grounds for their processing which override the interests, rights and freedoms of the data subject, or if the data are processed for the establishment, exercise or defence of legal claims.
6. Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of data relating to you infringes data protection regulations. The right to lodge a complaint with a supervisory authority may be exercised in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
Send us your request to: firstname.lastname@example.org.
Contact details of the data protection officer
Our company data protection officer will be happy to provide you with information or advice on the subject of data protection:
Dipl. Ing. (FH) Nicholas Vollmer
Telefon: 02166 / 96 523 - 30
Telefax: 02166 / 96 523 - 39
The party responsible for the data collection and processing is the body named in the Imprint.
Last revised: 16. Mai 2018