Data protection

We are pleased that you are visiting our website. The protection of your personal data is very important for us. Hymer GmbH & Co. KG (hereafter "Hymer", "we" or "us") attaches great importance to the security of users’ data and compliance with data protection legislation.

Data Controller and Data Protection Officer

Data Controller

Hymer GmbH & Co. KG, Holzstr. 19, 88339 Bad Waldsee
Tel.: +49 7524 999-0
E-Mail: info@hymer.com

Data Protection Officer

DDSK GmbH
Tel.: +49 7542 949 21 - 00
E-Mail: datenschutz@hymer.com 

Terms

The terms used in this privacy notice should be understood as having the meanings defined in Art. 4 GDPR.

Notes on Data Processing

Table of contents:

  1. Automated Data Collection (log files etc.) 
  2. Use of Cookies (General, Functionality, Opt-Out Links, etc.)
  3. Consent Management Platforms (Consent Management)
  4. Hosting
  5. Website support and consulting, web agency
  6. Web Analysis and Optimisation
  7. Online Marketing
  8. Social Media Presence
  9. Plug-ins and Integrated Third-Party Content
  10. Newsletters and Circulars (possibly with tracking)
  11. Advertising
  12. Contact
  13. HelpCenter
  14. HYMER Original Parts
  15. Events and functions
  16. HYMER Driving Xperience
  17. Arrangement of Test Drives and Consulting Appointments
  18. Career
  19. Downloads (product information)
  20. Data Transmission
  21. Storage Period
  22. Automated Decision-Making
  23. Legal Basis
  24. Rights of Data Subjects
  25. Revocation
  26. External Links
  27. Changes

1. Automated Data Collection (log files etc.)

You can visit our site without actively providing any details about yourself personally. However, we will automatically store access data each time the website is called up (server log files) such as the name of your Internet service-provider, the operating system used, the particular website you visit us from, the date and the duration of the visit or the name of the file requested, as well as for securi-ty reasons, e.g. to identify attacks on our websites, the IP address of the computer used; and all this for a period of 30 days. This data is evaluated only to improve our offering and does not permit any conclusions to be drawn about you personally. This data will be not aggregated with other data sources. 

Legal Basis Legitimate interest, Art. 6 para. 1 lit. f) GDPR)
Legitimate interests:

Ensuring the functionality, error-free and secure operation of the website and adapting this website to the requirements of users.

2. Use of Cookies (General, Functionality, Opt-Out Links, etc.)

We use so-called cookies on our websites in order to make your visit to our website attractive and to enable the use of certain functions. This concerns a standard internet technology for the storage and to call login and other userelated information for all users of the Hymer-websites. Cookies are small text files, which are placed on your terminal device. Among other things, they enable us to store user settings, so that our websites can be displayed in a format that is customised for your device. Several of the cookies used by us are deleted again after the end of the browser session, therefore after your browser is closed (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser the next time you visit the website (so-called permanent cookies).

You can set your browser so that you are informed about the setting of cookies and can make indi-vidual decisions about their acceptance or exclude the acceptance of cookies for certain cases or generally. The cookies can furthermore be deleted subsequently in order to remove data that web-sites have lodged on your computer. The deactivation of the cookies (so-called Opt-Out) can lead to several restrictions to the functionality of the Hymer-websites.

Categories of Data Subjects: Website visitors, users of online services
Opt-Out:

Internet Explorer:
https://support.microsoft.com/en-gb/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

Firefox:
https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen

Google Chrome:
https://support.google.com/chrome/answer/95647?hl=de 

Safari:
https://support.apple.com/de-de/HT201265

Legal Basis:

Consent (Art. 6 para. 1 lit. a) GDPR); fulfilment or initiation of a con-tract (Art. 6 para. 1 lit. f) GDPR) 

The relevant legal basis in each case is specifically named with the corresponding tool.

Legitimate interests: Storage of opt-in preferences, presentation of the website, ensuring the functionality of the website, preservation of user status across the entire website, recognition for next website visitors, user-friendly online offering, ensuring chat function

3. Consent Management Platforms (Consent Management) 

We use a consent management process on our website to store and manage the consent given by website visitors in a verifiable manner in accordance with data protection requirements. 

The consent management platform we use helps us to recognise all cookies and tracking technologies and to control them based on the consent status. At the same time, visitors to our website can manage the consents and preferences they have given (optional setting of cookies and other technologies that are not necessary) via the consent management service we have integrated, or revoke their consent at any time via the button. 

The consent status is stored on the server and/or in a cookie (known as an opt-in cookie) or a comparable technology in order to be able to assign the consent to a user or their device. The time at which consent was given is also recorded.

Categories of data: Consent data (consent ID and number, time of consent, opt-in or opt-out), meta and communication data (e.g. device information, IP addresses)
Purposes of processing:    Fulfilment of accountability obligations, consent management
Legal basis:

Legal obligation (Art. 6 para. 1 lit. c) GDPR in conjunction with Art. 7 GDPR)

Cookiebot

Service used: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark
Third country transfer: Does not take place.
Data protection: https://www.cookiebot.com/en/privacy-policy/

4. Hosting

Our website is hosted by an external service provider. Data from visitors to our website, in particular so-called log files, are stored on our service provider's servers. By using a specialised service provider, we are able to provide our website efficiently. The data is not processed by the hosting provider we use for its own purposes. 

Categories of data: User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses)
Purposes of processing: Proper presentation and optimisation of the website, faster and location-independent accessibility of the website 
Rechtsgrundlagen:

Einwilligung (Art. 6 Abs. 1 lit. a) DSGVO); berechtigte Interessen (Art. 6 Abs. 1 lit. f) DSGVO)

Berechtigte Interessen: Vermeidung von Ausfallzeiten, hohe Skalierbarkeit, Verringerung der Absprungrate auf der Website

Microsoft

Service used: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Legal basis: Consent (Art. 6 para. 1 lit. f) GDPR)
Third country transfer: Based on the adequacy decision of the European Commission for the United States
Data protection: https://www.microsoft.com/en-gb/privacy/privacystatement

5. Website support and consulting, web agency

We have commissioned a web agency to provide support and advice for services and applications on our website. This agency supports us in all activities related to the design and functionality of our website. Within this framework, the web agency selected by us receives the access data for our website in order to make necessary adjustments and changes, such as the design of forms or other programming activities. 

Access to personal data, such as data from forms or log data of website visitors, cannot be ruled out. The web agency therefore acts as a so-called processor for us and acts exclusively on our instructions. Data will not be processed for any other purpose. 

Purposes of processing: Usage data (e.g. access times), meta and communication data (e.g. device information, IP addresses), contact data (e.g. email address), content data (e.g. text information)
Purposes of processing: Support with web analysis and optimisation, analysis of usage behaviour on the website (website interaction) for web optimisation and reach measurement, checking website utilisation
Legal basis: 

Legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Legitimate interests:  Support and assistance with website maintenance through a high level of technical expertise, efficiency through outsourcing

Web agency

Recipient: yukon consulting GmbH, Waldpromenade 40b, 82131 Gauting, Germany
Transfer to third countries: Does not take place.
Data protection: https://yukon-consulting.de/datenschutz/ 

Web agency

Recipient: PANSOFT GmbH, Tullastr.28, 76131 Karlsruhe, Germany
Transfer to third countries: Does not take place.
Data protection: https://pansoft.de/de/home/datenschutz/index.html 

6. Web Analysis and Optimisation

To enable us to evaluate visitor flows in relation to our online offering, we use tools for web analysis and reach measurement. To this end, we collect information about the behaviour, interests and demographic information of our visitors, such as age, gender or similar. This helps us to recognise at what time our online offering, its functions or content are most frequented and it also helps us to know how to invite repeated visits. In addition, the information we collect enables us to determine whether our online offering needs any optimisation or adjustment.

The information collected for this purpose is stored in cookies or similar processes and is used for reach measurement and optimisation. The data stored in cookies may include content viewed, online sites visited, settings and functions and systems used. As a rule, however, no clear user data is processed for the purposes described. In this case, data is changed in such a way that the actual identity of users is not known, either to us or to the provider of the tool used. The data changed in this way is often stored in user profiles.

Categories of Data Subjects: Website visitors, users of online services
Categories of Data:

User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), contact data (e.g. email address, telephone number), content data (e.g. text details, photographs, videos)

Purposes of Processing:

Website analysis, reach measurement, utilisation and evaluation of website interaction, lead evaluation

Legal Basis:

Consent (Art. 6 para. 1 lit. a) GDPR); fulfilment or initiation of a contract (Art. 6 para. 1 lit. f) GDPR)

Legitimate Interests: Optimisation and further development of the website, profit increase, customer retention and acquisition

Google Analytics

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

LinkedIn Insight Tag

Service used:  LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA
Data protection: https://www.linkedin.com/legal/privacy-policy
Opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

Matomo

Service used: InnoCraft Ltd, 150 Willis St., 6011 Wellington, New Zealand
Data protection: https://matomo.org/privacy-policy/
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

7. Online Marketing

In order to continuously increase our reach and the awareness of our online offering, we process personal data as part of online marketing, in particular with regard to potential interests and measuring the effectiveness of our marketing actions.

For the purpose of measuring the effectiveness of our marketing actions and identifying potential interests, relevant information is stored in cookies or else similar processes are used. The data stored in cookies may include content viewed, online sites visited, settings and functions and systems used. As a rule, however, no clear user data is processed for the purposes described. In this case, the data is changed in such a way that the actual identity of users is not known, either to us or to the provider of the tool used. The data changed in this way is often stored in user profiles.

In the case of storage of user profiles, data can be read out, supplemented and added to on the server of the online marketing provider whenever other online offerings that use the same online marketing process are visted.

We can determine the success of our advertisements on the basis of aggregated data supplied to us by the provider of the online marketing process (so-called conversion measurement). Within the scope of these conversion measurements, we can track whether a marketing measure has led to a purchase decision by the visitor to our online offering. This assessment process is used to analyse the success of our online marketing.

Categories of Data Subjects:

Website visitors, users of online services, interested parties, communication partners, business and contractual partners

Categories of Data: User data (e.g. web pages visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data, contact data, content data (e.g. text details, photographs, videos)
Purposes of Processing:

Marketing (partly also interest-based and behavioural), conversion measurement, target group formation, click tracking, development of marketing strategies and increasing the efficiency of campaigns

Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR); fulfilment or initiation of a contract (Art. 6 para. 1 lit. f) GDPR)
Legitimate interests: Optimisation and further development of the website, increase in profits, customer loyalty and acquisition of new customers

Facebook Connect

Service used: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland 
Data protection: 
https://www.facebook.com/privacy/explanation 

Google Tag Manager

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Legitimate interest (Art. 6 para. 1 lit. f) GDPR)
Legitimate interests: Coordination of different tools, management, ease of use and presentation

Google Analytics

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Google AdWords

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

Google Doubleclick

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)  

Google Adsense 

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)  

iGoDigital

Service used: Salesforce.com, inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA 
Privacy: https://www.salesforce.com/uk/company/privacy/
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

Meta-Pixel

Service used: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data protection: https://www.facebook.com/privacy/explanation
Opt-Out-Link: https://www.facebook.com/policies/cookies/ 
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)   

MicrosoftInvest

Service used: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Irland / Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Data protection: https://www.microsoft.com/en-gb/privacy/privacystatement
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

LinkedIn Ads

Service used: LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA
Data protection: https://www.linkedin.com/legal/privacy-policy 
Opt-Out-Link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)   

8. Social Media Presence

We maintain online presences on social networks and career platforms in order to be able to exchange information with the users registered there and to make contact with them in an uncomplicated way.

In connection with the use of social media, we also use the associated messenger services to communicate with users in an uncomplicated manner. We would like to point out that the security of individual services may depend on the user's account settings. Even in the case of end-to-end encryption, the service provider may be able to draw conclusions about whether and when users communicate with us and, if applicable, collect location data.

In some cases, the data of users on social networks is used to conduct market research and so, pursue advertising purposes. User profiles can be created via the usage behaviour of users; for example, by specifying interests, and can be used to adapt advertisements to the interests of target groups. For this purpose, cookies are regularly stored on the terminal devices of users, sometimes regardless of whether they are registered users of the social network.

Depending on where the social network is operated, user data may be processed outside the European Union or outside the European Economic Area. This can result in risks to users; for example, because it makes it more difficult to enforce their rights.

Categories of Data Subjects:

Registered users and non-registered users of the social network

Categories of Data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text data, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP address)
Purposes of Processing:

Extension of reach, networking

Legal Basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR), consent (Art. 6 para. 1 lit. a) GDPR)
Legitimate interests:

Interaction and communication on social media presence, increasing profit, insights about target groups

Instagram

Service used: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data protection: https://help.instagram.com/519522125107875 or https://www.facebook.com/about/privacy
Opt-Out-Link: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/
 

Facebook

Service used: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data protection: https://www.facebook.com/privacy/explanation or https://www.facebook.com/legal/terms/page_controller_addendum
Opt-Out-Link: https://www.facebook.com/policies/cookies/

LinkedIn

Service used: LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA
Data protection: https://www.linkedin.com/legal/privacy-policy 
Opt-Out-Link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Kununu

Service used: New Work SE, Dammtorstr. 30, 20354 Hamburg, Germany
Data protection:  https://privacy.xing.com/de/datenschutzerklaerung 

Vimeo

Service used:  Vimeo Inc., 555 West 18th Street New York, New York 10011, USA
Data protection: https://vimeo.com/privacy
Opt-Out-Link: https://vimeo.com/cookie_policy

Xing

Service used:  New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
Data protection: https://privacy.xing.com/de/datenschutzerklaerung

YouTube

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com

Messenger Service Facelift

Service Used: Facelift brand building technologies GmbH, Gerhofstr. 19, 20354 Hamburg, Germany
Data Protection: https://facelift-bbt.com/en/data-protection

9. Plug-ins and Integrated Third-Party Content

We have integrated functions and contents into our online offering, which are obtained from third-party providers. For example, videos, representations, buttons or posts (hereafter referred to as content) can be integrated.

In order to be able to display content to visitors to our online offering, the respective third-party provider processes, among other things, the IP address of the user, so that the content can be transmitted to the browser and displayed. Without this processing operation, the display of third-party content is not possible.

In some cases, additional information is collected via so-called pixel tags or web beacons, whereby the third-party provider receives information about the use of the content or visitor traffic on our online offering, technical information about the user's browser or operating system, the time of the visit or referring websites. The data obtained in this way is stored in cookies on the user's terminal device.

In order to protect the personal data of visitors to our online offering, we have taken certain security precautions to prevent automatic transmission of this data. This data is only transmitted when users use the buttons or click on the third-party content.

Categories of Data Subjects:

Users of the plug-in or embedded third-party content

Categories of Data: Usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address), contact data (e.g. e-mail address, telephone number), master data (e.g. name, address)
Purposes of Processing:

Designing our online offering, increasing the reach of social media ads, sharing posts and content, interest and behaviour-based marketing, cross-device tracking

Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR), legitimate interests (Art. 6 pa-ra. 1 lit. f) GDPR)
Legitimate interests: Ensuring the functionality of the website, error-free and secure web-site operation

Vehicle configurator 

Service used: Erwin Hymer Group SE, Holzstraße 19, 88339 Bad Waldsee, Germany
Data protection:  https://www.erwinhymergroup.com/en/footer/data-privacy
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Google Content Security Policy

Service used: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Legitimate interest (Art. 6 para. 1 lit. f) GDPR)

Google Fonts

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)

mapbox plugins and buttons

Service used:  mapbox, MapBox Inc., 740 15th St NW, Washington, DC 20005, USA
Data protection: https://www.mapbox.com/legal/privacy/
Opt-Out-Link: https://www.mapbox.com/legal/cookies
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Google ReCaptcha

Service used:  Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA 
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal Basis: Legitimate interest (Art. 6 para. 1 lit. f) GDPR) 

Pimcore

Service used: Pimcore GmbH, Söllheimer Straße 16, 5020 Salzburg, Austria
Data protection: https://pimcore.com/en/about/privacy
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Typography

Service used: Hoefler&Co., A Monotype Company, 600 Unicorn Park Drive Woburn, MA 01801, USA
Data protection: https://www.typography.com/policies/privacy
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Vimeo

Service used:  Vimeo Inc., 555 West 18th Street New York, New York 10011, USA 
Data protection: https://vimeo.com/privacy 
Opt-Out-Link: 
https://vimeo.com/cookie_policy
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)

10. Newsletters and Circulars (possibly with tracking)

On our online offering, users have the option of subscribing to our newsletter or any notifications via various channels (hereafter newsletter). Subject to legislative provisions, we only send out newsletters to recipients who have consented to receive the newsletter. We use a selected service-provider to send out our newsletter.

In order to subscribe to one of our newsletters, it is necessary to provide an e-mail address. If necessary, we collect additional data, such as an individual’s name, in order to provide our newsletter with a personal address.

Our newsletter is only sent out after the so-called double opt-in procedure has been completed. If visitors to our online offering decide to subscribe to our newsletter, they will receive a confirmation e-mail, which is used to prevent the misuse of false e-mail addresses and to exclude the possibility that a simple, possibly accidental click triggers the sending of the newsletter. Subscription to our newsletter can be terminated for the future at any time. An unsubscribe link (opt-out link) is included at the end of each newsletter.

In addition, we are obliged to provide proof that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and store their IP address and their log-in and log-out times.

Our newsletters are designed in such a way as to make it possible for us to gain insights into improvements, target groups or the reading behaviour of our subscribers. This enables us to use a so-called web beacon or a tracking pixel, which reacts to interactions with the newsletter; for example, on the basis of whether links are clicked, whether the newsletter is opened at all or at what time the newsletter is read. We may, for technical reasons, attribute this information to individual subscribers.

Categories of Data Subjects:

Newsletter subscribers

Categories of Data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times)
Purposes of Processing:

Marketing, customer retention and new customer acquisition, analysis and evaluation of the success of a campaign

Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)

Salesforce

Service used:  Salesforce.com, inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA 
Privacy: https://www.salesforce.com/uk/company/privacy/ 

11. Advertising

We also use the data provided to us for advertising purposes, in particular to provide information about news from us or our product portfolio via various channels. Any advertising communications from us will be made in accordance with the statutory provisions and, where required, after obtaining consent. 

If the recipients of our advertising do not wish to receive it, they can inform us of this at any time. We will be happy to comply with the corresponding request. 

Categories of data subjects:

Communication partners

Categories of data: Master data (e.g. name, address), contact details (e.g. email address, telephone number) 
Purposes of processing:

Direct marketing 

Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR)
Legitimate interests: Retaining existing contacts and acquiring new contacts or contractu-al partners

12. Contact

Our online offering provides the options of either contacting us directly or else obtaining information via various contact possibilities. In order for users always to have an overview of contacts, we use a management tool to process corresponding requests.

Whenever contact is made, we process the data of the person making the enquiry only to the extent needed to answer or process the enquiry. Depending on the way in which contact is made, the actual data processed may vary.

Categories of Data Subjects:

Enquirers

Categories of Data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address).
Purposes of Processing:

Processing of enquiries

Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR), fulfilment or initiation of a contract (Art. 6 para. 1 lit. b) GDPR)

Salesforce

Service used:  Salesforce.com, inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA 
Privacy: https://www.salesforce.com/uk/company/privacy/ 

Zendesk

Service used:  Zendesk, Inc., 989 Market Street #300, San Francisco, CA 94102, USA
Privacy: https://www.zendesk.de/company/customers-partners/privacy-policy/ 

13. HelpCenter

We have integrated a HelpCenter into our website, where you can find information about our services and contact our support team directly.

When you use the Help Centre, personal data is processed if you provide it to us via a contact form or by email. This typically includes information such as your name, and email address, as well as any other information and documents you provide in your enquiry.

We also offer our customers the option of contacting us via the chat function in the Service Centre. We use a chatbot for this purpose. Personal data is processed when the tool provided by us is actively used.

If you contact us, we will process the data of the person making the enquiry to the extent necessary to respond to or process the enquiry. The data processed may vary depending on how you contact us.

Categories of data subjects: 

Enquiring person HelpCenter, user of the chatbot

Categories of data: Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries), contract data (e.g. subject matter of the contract, term), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP addresses),
Purposes of processing:

Processing enquiries, increasing efficiency

Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR)
Legitimate interests: 

Assertion of legal claims and defence in legal disputes, effective processing of enquiries, in particular complaints, warranty or guarantee cases; prevention and investigation of criminal offences

Erwin Hymer Group Services GmbH

Service used: Erwin Hymer Group Services GmbH, Holzstraße 15, 88339 Bad Waldsee, Germany 
Data protection: https://hc-portal.erwinhymergroup.com/hc/articles/14883241095709
Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Chatbot

Service used: Erwin Hymer Group Services GmbH, Holzstraße 15, 88339 Bad Waldsee, Deutschland  
Data protection:  https://hc-portal.erwinhymergroup.com/hc/en-gb/articles/14883241095709
Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Ticket and document management system Zendesk

Service used: Zendesk, Inc., 989 Market Street #300, San Francisco, CA 94102, USA
Data protection: https://www.zendesk.de/company/customers-partners/privacy-policy/ 
Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) GDPR)

14. HYMER Original Parts

We offer our customers the option of requesting original accessories directly from the relevant retail partner via our website. For this purpose, we collect the following personal data: first name, last name, email address and telephone number. This information is required so that the responsible retail partner can contact you. The request can be submitted directly to the retail partner using the corresponding form on our website.

This collection, storage and transmission of data is based on your voluntary consent within the meaning of Art. 6 para. 1 sentence 1 lit. a) in conjunction with Art. 7 GDPR. You can revoke this consent at any time at datenschutz@hymer.com or by post to Hymer GmbH & Co. KG, Holzstraße 19, 88339 Bad Waldsee, Germany, with effect for the future. In addition, you can also assert your rights against the dealer. To do so, please contact your selected dealer.

15. Events and functions 

On our online offering, visitors have the option of being able to register for events and activities. The information we collect and which is required to both initiate and perform the contract is marked as mandatory information. Supplying any additional data is voluntary.

Categories of Data Subjects:

Participants, interested parties

Categories of Data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), transaction data (bank details, invoices, payment history), contract data (e.g. subject matter of contract, duration)
Purposes of Processing:

Contract initiation and performance

Legal Basis: Contract initiation and execution (Art. 6 para. 1 lit. b) GDPR), consent (Art. 6 para. 1 lit. a) GDPR)

16. HYMER Driving Xperience

You can register for a driving experience on our website. The offer is provided via the TUFA GmbH website. We hereby point out that we have no influence on the content of the linked offer and the compliance of its provider with data protection regulations.

17. Arrangement of Test Drives and Consulting Appointments

On our website you have the possibility to arrange a test drive and/or a consultation appointment. For this purpose, the necessary personal data will be collected and transmitted to the dealer selected by you: Your name, title, e-mail address, preferred vehicle type, and, provided you would like your selected dealer to contact you by phone, phone number is also collected and transmitted as voluntary information. For general assurance that the appointment will take place as agreed, we will send you an appointment confirmation and a reminder.

This collection, storage, and transmission of the data is based on your voluntarily given consent within the meaning of Article 6 paragraph 1 sentence 1 lit. a) in conjunction with Article 7 of the GDPR. You can revoke this consent at any time by sending your revocation to datenschutz@hymer.com or Hymer GmbH & Co. KG, Datenschutzbeauftragter, Holzstr. 19, 88339 Bad Waldsee with effect for the future. In addition, you can also assert your rights against the dealer. Please contact the dealer of your choice.

18. Career

Our job board offers visitors to our website a comprehensive overview of our current vacancies. If you are interested in one of the positions advertised, you can apply for the desired position by email or using the online application form provided. We process the data sent to us in connection with the application in order to assess your suitability for the position (or other open positions within Erwin Hymer Group SE, if applicable) and to carry out the application process. In addition, we process personal data that you have published on the Internet and that we are permitted to process in accordance with data protection laws. This includes, for example, your CV, professional background, etc.

If you contact us, we will process the data of the person making the enquiry to the extent necessary to respond to or process the enquiry.

Categories of data subjects:

Applicants

Categories of data: Master data (e.g. name, address), contact details (e.g. email address, telephone number), content data (e.g. CV, text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address).
Purposes of processing:

Processing of applications

Legal basis: Fulfilment or initiation of a contract (Art. 6 para. 1 lit. b) GDPR)

Onlineportal

Service used: Sage GmbH, Franklinstraße 61-63, 60486 Frankfurt am Main, Deutschland
Data protection: https://www.sage.com/en-gb/rechtliches/datenschutz-cookies/

19. Downloads (product information)

We offer the option of downloading files from our website in order to provide our visitors with current information or information relevant to them.

In order to statistically evaluate the use of this content and to improve our offering in a targeted manner, we record clicks on the respective download buttons.

In doing so, personal data, in particular the IP address, is stored to enable evaluation. This data is used exclusively for internal analysis and is not passed on to third parties.

Categories of data subjects:

Prospective customers, customers

Categories of data: Meta and communication data (e.g. device information, IP addresses), usage data (e.g. access time)
Purposes of processing:

Marketing, acquisition of new customers, increase in sales

Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

Google Analytics

Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection: https://policies.google.com/privacy
Opt-out link: https://tools.google.com/dlpage/gaoptout or https://myaccount.google.com
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR) 

20. Data Transmission

We transmit the personal data of visitors to our online offering for internal purposes (e.g. for internal administration or to the HR department in order to comply with legal or contractual obligations). Internal data transmission or disclosure of your data is only carried out in the extent necessary for this purpose, subject to compliance with the relevant data protection regulations.

We are a globally active company with headquarters in Germany. The data of visitors to our online offering is stored in our centralised customer database in Germany, subject to compliance with the relevant data protection regulations; and it is processed within this framework for internal administrative purposes throughout the Group. No processing is carried out beyond stated administrative purposes.

Legal Basis:

Legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Legitimate interests: so-called small group privilege, centralised management and administration within the company, in order to exploit synergy effects, cost savings, increasing effectiveness
Recipient:

https://www.erwinhymergroup.com/de/unternehmen/ueber-die-erwin-hymer-group

FIn the event that we transfer internal Group data to a country outside the EEA for processing purposes, we will ensure that the processing carried out in the manner we intend is lawful. For this scenario, we have concluded standard data protection clauses that include a special arrangement involving appropriate technical and organisational measures; this is in order to protect the data of data subjects in the best possible way. A copy of the guarantee used can be downloaded here https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de

21. Storage Period

We principally store your data for as long as necessary in order to provide our services or to the extent envisaged by the European legislator of directives and regulations or another legislator in laws or regulations, which the data controller responsible for the processing is subject to. In all other cases we erase your personal data after completion of the relevant purpose. This does not include any data that we are required to continue to store in order to fulfil legal obligations (e.g. we are obligated owing to tax and commercial law storage obligations to keep documents in reserve such as e.g. contracts and invoices for a certain period of time)

22. Automated Decision-Making

We do not use automated decision-making or profiling pursuant to Art. 22 DSGVO.

23. Legal Basis

Art. 6 1 lit. a GDPR is used by our company as the legal basis for processing activities, whereby we will obtain special consent for a particular processing purpose.

If the processing of personal data is necessary in order to perform a contract, to which the data subject is a contractual party; as, for example, would be the case with processing activities, which are necessary to deliver goods or supply any other service or consideration, then the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations as are needed to implement pre-contractual measures; for example, in the case of enquiries about our products or services.

If our company is subject to a legal obligation, under which the processing of personal data becomes necessary; such as, for example, to fulfil tax obligations, then the processing is based on Art. 6 I lit. c GDPR.

In rare cases, the processing of personal data might be necessary in order to protect vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were to be injured at our company and subsequently his name, his age, his health insurance details or other vital information had to be forwarded to a doctor, a hospital or some other third party. Then the processing would be based on Art. 6 I lit. d GDPR.

Finally, processing activities might be based on Art. 6 I lit. f GDPR. Processing activities not covered by any of the above legal bases would rely on this particular legal basis, where such processing is necessary in order to safeguard a legitimate interest of our company or of a third party; provided, however, that the interests, basic rights and basic freedoms of the data subject do not prevail. If the processing of personal data is based on Article 6 I lit. f GDPR our legitimate interest is to carry out our business activity for the benefit of the wellbeing of all of our employees and our customer.

24. Rights of Data Subjects 

Right of Access:

Under Article 15 of the GDPR, data subjects have the right to request confirmation regarding whether we are processing data relating to them. They can request information about this data as well as the additional information listed in Art. 15 (1) GDPR, as well as a copy of their data.

Right of Rectification:

Under Art. 16 GDPR, data subjects have the right to request the rectification or completion of data concerning them and processed by us.

Right to Erasure:

Data subjects have the right under Art. 17 GDPR to demand immediate erasure of the data concerning them. Alternatively, under Art. 18 GDPR, they may request us to restrict the processing of their data.

Right to Data Portability: Under Art. 20 of the GDPR, data subjects have the right to request that the data they have supplied to us be made available and transferred to another data controller.
Right to lodge a complaint: Data subjects also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 of the GDPR.
Right to Object: If personal data is processed based on legitimate interests under Article 6 (1) sentence 1 lit. f) GDPR, data subjects have the right to object to the processing of their personal data under Article 21 GDPR, inasmuch as there are grounds for doing so arising from their particular situation or the objection is directed against direct advertising. In the latter case, data subjects have a general right to object, which will be acted on by us without the particular situation being stated

25. Revocation 

A number of data processing activities are only possible with your express consent. You have the option of being able, at any time, to revoke consent that you have already granted. For this purpose, it would be sufficient to e-mail us an informal notice, using the following address: datenschutz@hymer.de. The lawfulness of any data processing carried out prior to the time at which consent is revoked remains unaffected by the revocation.

26. External Links

On our website you will find links to the online offers of other providers. We would like to point out here that we have no influence over the content of linked websites or, indeed, over the level of compliance with data protection regulations practised by the providers of those websites.

27. Changes

We reserve the right to adapt this privacy notice at any time in the event of changes to our online offering and in compliance with applicable data protection rules, so that it then meets legal requirements.

This Privacy Policy was created by DDSK GmbH

 

Cookie declaration

Download brochures
Dealer search
Configurator
Newsletter