Privacy Statement of geobra Brandstätter Stiftung & Co. KG for the VW configurator

 

 

 

Welcome to our website. We are delighted with the interest you have shown in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal requirements on the protection of personal data, in particular the EU’s General Data Protection Regulation (GDPR) as well as the country-specific implementation laws which apply to us. The purpose of this Privacy Statement is to inform you in detail about the processing of your personal data by geobra Brandstätter Stiftung & Co. KG and the rights to which you are entitled.  

 

“Personal data” means any information which enables a natural person to be identified. This includes, in particular, a person’s name, date of birth, address, phone number, email address and also IP address.

 

“Anonymous data” is data which enables no link of any nature whatsoever to be made to the user.

 

Controller and Data Protection Officer

Address (the company’s full address):

 

geobra Brandstätter Stiftung & Co. KG

Brandstätterstrasse 2 - 10

90513 Zirndorf

Germany

 

Contact information:

 

www.playmobil.com

Tel.: +49 (0) 911 9666-0

Fax: +49 (0) 911 9666-1120

Email: service@playmobil.de

 

Contact details of the Data Protection Officer:

dsb@playmobil.de

 

 

Your rights as a data subject

 

We would first like to inform you of your rights as a data subject. Your rights are set out in Articles 15 - 22 of the GDPR. These include:

 

 

If you wish to assert any of these rights, please contact:  dsb@playmobil.de. Please use the same contact details if you have any questions about data processing in our company or if you wish to revoke a consent you have previously given us. You also have the right to complain to a data protection supervisory authority.

 

Rights to object

 

Please note the following in connection with your rights to object:

 

 

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling to the extent that it is related to the direct marketing.

 

If you object to processing for the purposes of direct marketing, we will no longer use your data for these purposes. The objection is free of charge and does not require any specific form. Please send your objection if at all possible to: dsb@playmobil.de.

 

In the event that we process your data for the furtherance of legitimate interests, you can object at any time to the processing for reasons arising from your specific situation; this also applies to profiling based on these provisions.

 

We will then no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing is in support of the assertion, exercise or defense of legal claims.

 

 

 

Purpose and legal basis of the data processing

 

The provisions of the GDPR and the German Telecommunication-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz (TTDSG)) as well as all other applicable provisions of data protection law are observed when your personal data is processed. The legal basis for data processing arises in particular from Article 6 GDPR.

 

We use your data for the initiation of business transactions, to meet contractual and legal obligations, in the performance of contracts, to offer products and services, to strengthen our relationship with customers - something which can also include analyses for marketing purposes and direct advertising.

Your consent also constitutes the consent required under data protection law. We would now like to explain to you the purposes of data processing and your right of objection. If the consent also relates to the processing of particular categories of personal data, we will make you clearly aware of this in the consent.

 

Particular categories of personal data within the meaning of Article 9 (1) GDPR are only processed if processing is needed as a result of legal requirements and there are no grounds for assuming that your legitimate interest overrides the prohibition of processing.

 

 

Transfers to third parties

 

We will only transfer your data to third parties within the bounds set by law or with your appropriate consent. Apart from the above, data is not transferred to third parties unless we are obliged to do so by mandatory provisions of law (transfers of data to external bodies such as supervisory authorities or law enforcement agencies).

 

 

Data recipients / categories of recipients

 

Within our company we ensure that the only persons who receive your data are persons who need the data to meet contractual or legal obligations.

 

In specific cases service-providers support our departments in the performance of their duties. The contract necessary under data protection law has been concluded with all service-providers.

 

 

Transmission to third countries / purpose of transmission to third countries

 

We do not transfer your personal data to any service-provider or to a Group company outside the European Economic Area.

 

 

Data storage period

 

If your data is collected in the course of the use of the VW configurator, this data is deleted immediately after the end of the order process. No data is saved on this site.

 

 

Secure transfer of your data

 

We employ the relevant technical and organizational security measures to protect data we save against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security level is continually examined in collaboration with security experts and is amended in line with new security standards.

 

Data exchanged from and to our website is encrypted. We use HTTPS as the transfer protocol for our website and always apply the latest encryption protocols. Alternative methods of communication are also possible (e.g. ordinary mail).

 

 

Obligation of the provision of data

 

A range of personal data is needed for the establishment, implementation and termination of the obligations and the performance of the associated contractual and legal obligations. The same applies to the use of our website and the various functions which this provides.

 

We have summarized details of this for you in the above-mentioned point. In certain cases data must also be collected or provided by reason of the provisions of law. Please note that your inquiry cannot be processed or the underlying obligation performed if this data is not provided.

 

 

Categories, sources and origin of the data

 

The specific context determines the data we process: this depends, for example, on whether you are placing an order or submitting an inquiry via our contact form, or sending an application or a complaint to us.

 

Please note that we sometimes also make information for specific processing situations available at the appropriate place, for example when uploading application documents or in a contact request.

 

We collect and process the following data when you visit our website:

 

 

 

Automated case-by-case decision-making

 

We do not use any automatic processing procedures to come to a decision.

 

 

Cookies (Article 6 (1), Sentence 1, Letters a and f GDPR and § 25 (1 and 2) TTDSG)

 

Our website uses what are called “cookies”. The purpose of these is to make our website more user-friendly, effective and safe. Cookies are small text files which are placed in your terminal and saved by your browser. Cookies contain only data using pseudonyms and in most cases anonymous data. Some cookies remain for the duration of a browser session (so-called “session cookies”), while others are saved for a longer period (these are called “persistent cookies”, for example consent settings). The latter are deleted automatically after the pre-set period for each one (normally 6 months). In addition to our own cookies, further cookies are used which are controlled by third party providers. These make use of the information contained in the cookies, for example to display content on your screen or to record the pages you visited.

 

By reason of our legitimate interest (Article 6 (1), Sentence 1, Letter f GDPR) we place technically necessary cookies which are essential for the operation of the website and are needed to ensure its functionality. Without your consent we also place cookies to the extent that their sole purpose is to save or access information saved in the terminal for the transmission of messages, or that these are essential for the ability to provide the service you expressly requested § 25 (2) TTDSG.

 

Subject to your consent, additional cookies are used by means of which, for example, we or third parties are able to assess how our services are used. In this way we are able to configure the content to suit users’ needs. The cookies also enable us to measure the effectiveness of a particular advertisement and to position it, for instance, to correspond with the subjects that interest the user. The legal foundation for this is your express consent (Article 6 (1), Sentence 1, Letter a GDPR and § 25 (1) TTDSG).

 

You can revoke your consent at any time with effect for the future by using our consent banner and by changing your cookie settings. Please be aware that you must make the changes separately for each terminal.

 

If you have an account with the third party providers we use and are logged into these providers, your data can be linked with the account. You can avoid this type of amalgamation by not giving your consent to the relevant cookies or by revoking your consent, or by logging out of the relevant service-providers in advance.

 

Most browsers accept cookies automatically. You can also manually deactivate, restrict or delete cookies on your terminal by means of your browser settings or with the aid of software. If you make it impossible for us to place cookies you will be unable to use all aspects of our web-pages or only able to use them to a limited extent.

 

Please also note our comments in the section of our service that places cookies.

 

 

On-line offerings and children

 

Persons under 16 years of age may not send any personal data to us or give their consent without the agreement of their parent or legal guardian. We encourage parents and legal guardians to take an active interest in the on-line activities of their children.

 

Links to other providers

 

As can be clearly seen, our website also contains links to the websites of other companies. We have no influence on the content of the websites to which these links lead. We are therefore unable to accept any guarantee or liability for their content. The relevant provider or operator is always responsible for the content of these sites.

 

The linked sites were investigated for possible infringements of the law and identifiable breaches of rights at the time the links were created. No unlawful content was discernible at this time. However, on-going checks of the linked sites are impractical without specific indications of wrong-doing. Links of this nature are removed immediately if we become aware of any infringements of the law.