Imprint

PE Data GmbH
Essener Straße 60
42327 Wuppertal / Germany

Legal form: Company with limited liabilty (GmbH)

Headquarters: Wuppertal

Managing directors: Ralf Maurer, Christian Freitag, Markus Seitz

Registered court: HRB 27261, HRG Wuppertal District Court

Back

Data protection policy

We are very pleased about your interest in our company. Data protection is of particular importance for the management of PE Data GmbH. As a general rule, the use of the websites provided by PE Data GmbH is possible without the need to specify personal data. However, if a data subject wishes to use our company's special services through our website, the processing of personal data may be required. If the processing of personal data is required and there is no legal basis for such processing, we will generally seek the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, always takes place in accordance with the General Data Protection Regulation as well as in accordance with the country-specific data protection provisions applicable to PE Data GmbH. Through this data protection policy, our company seeks to inform the public about the nature, scope and purpose of the personal information we collect, use and process. Furthermore, data subjects are informed of their rights under this data protection policy.

PE Data GmbH, as the party responsible, has implemented a number of technical and organisational measures in order to ensure the fullest possible protection for personal data processed via this website. Nevertheless, as a general rule, data transmitted via the Internet can have security vulnerabilities, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to submit personal data to us in alternative ways, e.g. by telephone.

1. Definition of terms

The data protection policy of PE Data GmbH is based on the terminology used by the European directive and regulatory body in the adoption of the General Data Protection Regulation (GDPR). Our data protection policy should be easy to read and understand for the public as well as for our customers and business partners. In order to ensure this, we would like to explain in advance the terminology which is used.

We use the following terms in this data protection policy, including, but not limited to:

a) Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). A natural person who can be identified is considered to be identifiable, either directly or indirectly, especially by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features which expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

b) Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the party responsible.

c) Processing

With or without the aid of automated procedures, processing refers to any process or series of operations related to personal data, e.g. collecting, recording, organising, arranging, storing, adapting or modifying, reading, querying, usage, disclosure by submission, dissemination or other form of provision, matching or association, restriction, deletion or destruction.

d) Restriction of processing

Restriction of processing refers to the marking of stored personal data with the aim to limit its future processing.

e) Profiling

Profiling is any kind of automated processing of personal data that consists in using that personal information in order to analyse or predict certain personal aspects relating to a natural person, especially aspects relating to job performance, economic situation, health, personal preferences, interests, reliability, behaviour and the whereabouts or relocation of this natural person.

f) Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organisational measures which ensure that the personal data not assigned to an identified or identifiable natural person.

g) Party responsible or party responsible for the processing

The party responsible or party responsible for the processing is the natural or legal person, public authority, institution or body that, alone or together with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by EU law or the law of the Member States, the party responsible or the specific criteria for its designation may be provided for under EU or national law.

h) Processor

The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the party responsible.

i) Recipient

A recipient is a natural or legal person, authority, agency or other body to whom personal data is disclosed, whether or not it is a third party. However, authorities which receive personal data under EU or national law in connection with a particular investigative order are not considered as recipients.

j) Third party

A third party is a natural or legal person, authority, agency or other body (other than the data subject, the party responsible, the processor and the persons authorised under the direct responsibility of the party responsible or the processor) to process the personal data.

k) Consent

Consent is any deed which is given voluntarily and unambiguously expressed in the form of a statement or other unambiguous confirmatory act by the data subject for the particular case, by which the data subject indicates that they approve to the processing of the personal data concerning him/her.

2. Name and address of the party responsible for the processing

The party responsible within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions relating to data protection is:

PE Data GmbH
Essener Straße 60
42327 Wuppertal
Germany

Tel.: 0202 94798-430
E-mail: info@pe-data.de
Website: pe-data.de

3. Name and address of the data protection officer

The data protection officer of the party responsible for processing:

Andre Bienkowski
PE Data GmbH
Essener Straße 60
42327 Wuppertal
Deutschland

Tel.: 0202 94798-430
E-mail: info@pe-data.de
Website: pe-data.de

Any data subject can contact our data protection officer at any time with any queries or suggestions regarding data protection.

4. Collecting general data and information

The website of PE Data GmbH collects a series of general data and information each time the website is accessed by a data subject or an automated system. This general data and information is stored in the log files of the server. The following data can be collected: (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the internet page from which an accessing system accesses our website (referrer), (4) the sub-website pages on our website which can be controlled via an accessing system (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to fend off hazards in the event of attacks on our IT systems.

In the use of this general data and information, PE Data GmbH does not draw any conclusions about the data subject. Rather, this information is required to (1) correctly deliver the contents of our website, (2) to optimise the content of our website and to publicise it, (3) to ensure the continued functioning of our IT systems and the technology of our website, and (4) to provide law enforcement authorities with the information that is necessary for law enforcement in the event of a cyberattack. This anonymously collected data and information is therefore evaluated statistically and then further evaluated by PE Data GmbH with the aim of increasing the privacy and data security of our company in order to ultimately ensure the best possible level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

5. Routine deletion and blocking of personal data

The party responsible for processing will only process and store the personal data of the data subject for the period which is necessary in order to achieve the purpose of the storage or, if intended by the European directives and regulations legislator or a different legislator, the period stated in the laws or regulations which the party responsible for the processing is subject to.

If the storage purpose no longer applies or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

6. Rights of the data subject

a) Right to confirmation

As granted by the European directives and regulations legislator, each data subject has the right to require the party responsible or the processing to confirm whether personal data relating to him/her are being processed. If an affected person wishes to make use of this right of confirmation, they may contact an employee who works for the responsible party at any time.

b) Right to information

As granted by the European directives and regulations legislator, any data subject has the right, at any time, to obtain information concerning the personal data stored about him/her from the party responsible for processing the data, free of charge and also a copy of that information. Furthermore, the European directives and regulations legislator has entitled the data subject to the following information:

  • the purposes of the processing

  • the categories of personal data being processed

  • the recipients or categories of recipients to whom the personal data have been disclosed or is yet to be disclosed, especially recipients in third countries or international organisations

  • if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining this duration

  • the existence of a right to correct or delete personal data concerning him or to restrict the processing by the party responsible and a right to object to such processing

  • the existence of a right of appeal to a supervisory authority

  • if the personal data are not collected from the data subject: All available information concerning the source of the data

the existence of automated decision-making, including profiling, in accordance with Art. 22 para. 1 and 4 GDPR and — at least in these cases — meaningful information concerning the logic involved and the scope and intended impact of such processing for the data subject.

In addition, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organisation. If that is the case, the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.

If an interested party wishes to exercise this right to information, they may contact an employee who works for the responsible party at any time.

c) Right to correction

As granted by the European directives and regulations legislator, any data subject has the right to request the party responsible to correct inaccurate personal data concerning him/her. Furthermore, taking the purposes of the processing into account, the data subject has the right to request the completion of incomplete personal data, including completion by means of a supplementary declaration.

If a data subject wishes to exercise this right to correction, they may contact an employee who works for the responsible party at any time.

d) Right to deletion (Right to be forgotten)

As granted by the European directives and regulations legislator, any data subject has the right to request the party responsible to immediately delete personal data concerning him/her, provided that one of the following reasons is satisfied and the processing is not required:

  • the personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.

  • the data subject withdraws his/her consent upon which the processing was based in accordance with Art. 6 para. 1a GDPR or Art. 9 para. 2a GDPR and there is a lack of any other legal basis for the processing.

  • the data subject objects to the processing in accordance with Art. 21 para. 1 GDPR, and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 para. 2 GDPR.

  • the personal data have been processed unlawfully.

  • the deletion of personal data is necessary in order to fulfil a legal obligation under EU law or national law to which the party responsible is subject.

  • the personal data have been collected in relation to services offered by the IT company in accordance with Art. 8 para. 1 GDPR.

If one of the above reasons applies and a data subject wishes to arrange for the deletion of personal data stored by PE Data GmbH, they may contact an employee who works for the responsible party at any time. The employee of PE Data GmbH will arrange for the deletion request to be fulfilled immediately.

If the personal data have been made public by PE Data GmbH and if our company, as the party responsible, is obliged to delete personal data in accordance with Art. 17 para. 1 GDPR, PE Data GmbH will take appropriate measures, taking the available technology into account and the implementation costs, including those of a technical nature, to inform other parties responsible for processing the personal data that the data subject of these other parties responsible has requested all links to such personal data or copies or replications thereof to be deleted unless the processing is required. In individual cases, the employee of PE Data GmbH will arrange for the necessary work to be done.

e) Right to restrict the processing

As granted by the European directives and regulations legislator, any data subject has the right to request the party responsible to restrict the processing if one of the following conditions applies:

The accuracy of the personal data is contested by the data subject, namely for a period of time that enables the party responsible to verify the accuracy of the personal data.

The processing is unlawful, the data subject refuses to delete the personal data and instead, requests that the use of personal data restriction is restricted.

The party responsible no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend legal claims.

The person concerned has objected to the processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the party responsible outweigh those of the person concerned.

If one of the conditions mentioned above applies and a data subject wishes to request a restriction of the personal data stored by PE Data GmbH, he/she may contact an employee who works for the responsible party at any time. The employee of PE Data GmbH will initiate the restriction of the processing.

f) Right to data portability

As granted by the European directives and regulations legislator, any data subject has the right to obtain the personal data concerning him/her, which is provided to a party responsible by the data subject, in a structured, usual and machine-readable format. The data subject also has the right to transfer this data to another party responsible without hindrance by the party responsible to whom the personal data was provided, as long as the processing is based on the consent in accordance with Art. 6 para 1a GDPR or Article 9 para. 2a GDPR or on a contract in accordance with Art. 6 para. 1b GDPR and processing takes place by means of automated processes, unless the processing is necessary for the performance of a task in the public interest or exercising public authority, which has been assigned to the party responsible.

Furthermore, in exercising their right to data portability under Art. 20 para. 1 GDPR, the data subject has the right to request that the personal data are transmitted directly from one party responsible to another, insofar as this is technically feasible and this does not affect the rights and freedoms of others.

In order to assert the right to data portability, the data subject may contact an employee who works for the responsible party at any time

g) Right to object

As granted by the European directives and regulations legislator, any data subject has the right to object to the processing of personal data relating to him/her in accordance with Art. 6 para. 1e or f GDPR for reasons arising from his/her particular situation. This also applies to profiling based on these provisions.

In the event of an objection, PE Data GmbH will no longer process the personal data unless we can prove compelling reasons for the processing which are worthy of protection, which outweigh the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defending legal claims.

If PE Data GmbH processes personal data in order to operate direct mail, the data subject has the right to object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is associated with such direct mail. If the data subject objects to PE Data GmbH processing data for the purposes of direct mail, PE Data GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right, for reasons arising out of their particular situation, to object to the processing of personal data concerning them, which PE Data GmbH uses for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary to fulfil a task in the public interest.

To exercise the right of objection, the data subject may directly contact any employee at PE Data GmbH or another employee. Notwithstanding Directive 2002/58/EC, within the context of using the services of the IT company, the data subject is also free to exercise his/her right of objection by means of automated procedures using technical specifications.

h) Automated decisions in individual cases including profiling

As granted by the European directives and regulations legislator, any data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on him/her or, in a similar manner, significantly affects him/her; unless the decision (1) is necessary for the conclusion and/or performance of a contract between the data subject and the controller, or (2) is permitted by EU or Member State legislation to which the controller is subject, and that legislation provides appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject; or (3) the express consent of the data subject has been given.

If the decision (1) is required for the conclusion and/or performance of a contract between the data subject and the controller or (2) it takes place with the express consent of the data subject, PE Data GmbH shall take appropriate measures to safeguard the rights and freedoms, as well as the legitimate interests of the data subject, including at least the right to have a person intervene on the part of the party responsible in order to express his/her own position and to contest the decision.

If the data subject wishes to claim rights regarding automated decision-making, they may contact an employee who works for the responsible party at any time.

i) Right to revoke consent with regard to data protection

As granted by the European directives and regulations legislator, any data subject has the right to revoke consent to the processing of personal data at any time.

If the data subject wishes to assert their right to withdraw consent, they may contact an employee who works for the responsible party at any time.

7. Legal basis of the processing

Art. 6 I a GDPR serves our company as a legal basis for processing operations where we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfil a contract to which the data subject is a party, as is the case, for example, in processing operations necessary for supplying goods or the provision of any other service or return service, processing shall be based on Art. 6 I b GDPR. The same applies to processing operations which are necessary in order to carry out pre-contractual measures, e.g. in cases of enquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, e.g. the fulfilment of tax obligations, the processing is based on Art. 6 I c GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were to be injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. In such a case, the processing would be based on Art. 6 I d GDPR. Ultimately, processing operations could be based on Art. 6 I f GDPR. Processing operations that are not covered by any of the above legal bases are required on this legal basis if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. We are particularly granted such processing operations because they have been specifically mentioned by the EU legislator. With regard to this, a legitimate interest could be assumed if the data subject is a customer of the party responsible (recital 47, sentence 2, GDPR).

8. Legitimate interests in processing that are pursued by the party responsible or a third party

If the processing of personal data is based on Art. 6 I f GDPR, our legitimate interest lies in conducting our business for the benefit of all our employees and our shareholders.

9. Duration for which the personal data are stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfil the contract or to initiate a contract.

10. Legal or contractual provisions for the provision of personal data; Necessity of data for the conclusion of the contract; Obligation on the part of the data subject to provide the personal data; Possible consequences of non-provision

We would like to state that the provision of personal data is, in part, required by law (e.g. tax regulations) or alternatively, they may arise from contractual arrangements (e.g. details concerning the contractual partners). Occasionally it may be necessary for a contract to be concluded by us where an affected person provides us with personal data that has to be subsequently processed by us. For example, the data subject is required to provide us with personal information if our company enters into a contract with him/her. Failure to provide the personal data would mean that the contract cannot not be concluded with the data subject. Prior to any personal data being provided by the person concerned, the data subject must contact one of our employees.

On a case-by-case basis, our employee will inform the data subject whether the provision of the personal data is required by law, it is contractually required, it is required for the conclusion of the contract or whether there is an obligation to provide personal data. The data subject will also be informed of the consequences concerning the non-provision of personal data.

11. Existence of automated decision-making

As a responsible company we refrain from automatic decision-making or profiling.

This data protection policy was drawn up by the data protection policy of DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as an external data protection officer (Bremen), in cooperation with the lawyer for data protection law, Christian Solmecke

Back
×

PE Data Research wins the
Automechanika Innovation Award 2018

Discover more

Have we
piqued your interest?

If so, get in touch with us. We are happy to inform you about the system and the possibilities. We provide 'software as a service'. This means that you get everything from a single source: Consultancy, software, hardware, servicing and further development. You will get your own entity, you can benefit from our expertise and we provide utmost security when it comes to your data and with our "Trusted hosting" service, we even go one step further. Get in touch with us regarding this. We look forward to hearing from you.

Have we
piqued your interest?

If so, get in touch with us. We are happy to inform you about the system and the possibilities. We provide 'software as a service'. This means that you get everything from a single source: Consultancy, software, hardware, servicing and further development. You will get your own entity, you can benefit from our expertise and we provide utmost security when it comes to your data and with our "Trusted hosting" service, we even go one step further. Get in touch with us regarding this. We look forward to hearing from you.

Looking for a QUICK.VIN?

If so, register directly
on our demo shop.

Demo-Shop