Data Protection Information

1. Scope of This Data Protection Information

This Data Protection Information applies to how your personal data is processed on the website.

“Personal data” is any information about an identified or identifiable natural person. You are identifiable as a person if you can be identified directly (e.g. by your name) or indirectly (e.g. by a pseudonym email address) using this information.

“Processing” means any operation or sequence of operations performed upon personal data, whether or not by automated means.

2. Data Controller

The controller (hereinafter also “we” or “us”) responsible for your personal data processed on this website is:

Conseo GmbH

Hannoversche Str. 100, D-21079 Hamburg
E-Mail: CITT@conti.de

3. Data Protection Inquiries / Data Protection Officer

If you have any questions about data protection or data security, you can contact our Data Protection Officer by writing to Continental AG, Continental-Plaza 1, 30175 Hanover, Germany, or by sending an email to dataprotection@conti.de.

4.1. Processing on our website

The purposes pursued with data processing on our website are explained below:

4.2. Recipients of personal data

During the above-mentioned data processing, we transfer data in part to the following service providers:

The service providers process your data as our contracted processors on the basis of a corresponding data processing contract. Insofar as the service providers are located outside the European Economic Area, the transfer takes place on the basis of the standard contractual clauses provided by the EU Commission and further technical and organizational measures to safeguard the security of your data.

These cookies are technically necessary to provide the following core functions of the app and cannot be disabled by you:

• Display of website content

• De-identification of IP addresses in log files

• Cookie consent status

• Verification and identification of users

• Front-end login for sub-pages with access restrictions

Please refer to the cookie settings on our website for the specific technically necessary cookies that are used.

The legal basis governing storage of the technically necessary cookies is Section 25 (2) (2) of the German Telecommunications and Telemedia Data Protection Act (TTDSG). The legal basis governing processing personal data resulting from the cookies is Art. 6 (1) sentence 1 (f) GDPR and, accordingly, a legitimate interest on our part in providing the functions of our website.

5.2. Other technically non-necessary cookies

Other non-technical cookies are provided to make certain convenience functions available to you, to measure the performance of the website and user behavior, or to utilize third-party services. However, these are not absolutely necessary to provide the website and must therefore be activated by you independently in the cookie settingson our website. The legal basis governing storage of non-technical cookies is Section 25 (1) TTDSG.

For supplementary information on data processing in connection with individual cookies, please refer to the information in the cookie settings and the partly supplementary information of this Data Protection Information under Section 12.

5.3. Deletion of your personal data

Your personal data will only be processed for the duration of the processing purposes specified in Section 4. In addition, however, there are further retention obligations or legal bases that make processing necessary for a longer period of time.

5.4. Legal retention periods

Your personal data will be stored if required by legal retention periods, in particular within the scope of the retention periods pursuant to Section 147 of the German Fiscal Code (AO), which provides for a retention period of six years for commercial and business letters including emails, and ten years for accounting records (e.g. invoices), as well as within the scope of Section 257 of the German Commercial Code (HGB), which provides for a corresponding retention period of six or ten years. Legal basis: Art. 6 (1) sentence 1 (c) GDPR (legal obligation).

5.5. Statutes of limitations

Your personal data may also be stored to preserve evidence for the assertion of or defense against legal claims under the statutes of limitation. According to Sections 195 et seq. of the German Civil Code (BGB), these statutes of limitation can be up to 30 years, with the regular statute of limitation being three years. The regular limitation period begins at the end of the year in which the claim arose and the creditor became aware of the circumstances giving rise to the claim and of the identity of the liable party, or should have become aware of them in the absence gross negligence. Legal basis: Art. 6 (1) sentence 1 (f) GDPR (legitimate interest: assertion, exercise or defense of or against legal claim(s)).

6. General Recipients

Your personal data may also be transferred to the following categories of recipients:

• Third parties who provide the contractually agreed services on our behalf and support us in the provision of our services;
• Providers who receive data for the purpose of arranging and providing services (e.g. our social media channels, content management providers, etc.);
• Payment service providers or service providers for the purpose of checking customer creditworthiness;
• Other internet users on our social media channels, insofar as you share personal data with them on the social media platform, and internet search engines;
• Our insurance partners;
• Authorities (e.g. tax authorities);
• Lawyers and courts in the event of legal disputes.

7. Your Rights in Relation to Your Personal Data

The GDPR grants you various rights with regard to your personal data, which are described in brief below.

• Right of access

You can request information about whether your personal data is being processed. If this is the case, you can request further information, in particular on the purposes of the processing, the categories of personal data processed, the recipients, the storage period or, if this is not possible, the criteria for determining the period, as well as further information.

You can request a copy of your personal data, which will be provided to you following receipt of a request to this effect by email in a common electronic format, provided that this does not affect the rights or freedoms of other persons. For this purpose, please specify precisely which data you require.

• Right to rectification

You can immediately request the correction of incorrect personal data pertaining to your person as well as the completion of incomplete personal data.

• Right to erasure

You have the right to request the erasure of your personal data, in particular if the data is no longer necessary for the purposes for which it was processed. Your data will be deleted immediately unless an exception applies, in which case your data may continue to be stored. This is the case, for example, if there is an obligation to store pertinent data for tax or commercial law reasons. In this case, processing will be restricted and will then only take place for that purpose.

• Right to restriction

You may request the restriction of processing of your personal data, in particular if:

• you contest the accuracy of the data and the data is being verified; 
• the processing is unlawful and you object to the erasure;
• the data is no longer required, but you need it for the assertion, exercise or defense of legal claims, or 
• you have objected to processing.

In the event that processing is restricted, your personal data may in principle only be stored; specifically, it may only be processed with your consent or for the assertion or exercise of as well as for the defense against legal claims.

• Right to data portability

You may request to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format so that you can transmit it to another controller. You also have the right to have this data transmitted directly to another person responsible. However, the prerequisite for this right is that the processing of your data is based on consent, the implementation of pre-contractual measures or the performance of a contract.

• Right to object 

You may object to the processing of personal data pertaining to you if the processing is based on a legitimate interest (Art. 6 (1) sentence 1 (f) GDPR). Your right to object also applies in the case of any direct marketing (e.g. newsletter mailings), including any profiling that may be associated with this. The data will then no longer be processed unless compelling reasons are provided for such processing.

• Revocation of consent to data processing 

If you have consented to processing of your personal data, you can withdraw this consent at any time. Any processing that has taken place up to the time of revocation remains unaffected.

• Assertion of your rights

If you wish to exercise the rights described above, please contact our data protection officer (Section ).

• Right of appeal to a data protection authority

You have a right of appeal to a supervisory authority.

The supervisory authority responsible for Conseo GmbH is: 

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Ludwig-Erhard-Str. 22

20459 Hamburg

If you have any questions or complaints, please first contact us directly (see Section ) – your concern is certain to be resolved to your satisfaction.

8. Necessity to Provide Your Personal Data

You are neither legally nor contractually obligated to provide us with personal data. To the extent that our website or the social media channels used by us require the provision of personal data, this is necessary in order to provide you with these services. Insofar as the provision of personal data beyond this purpose is not mandatory and you choose not provide it, we cannot supply any separate or individual information to you (e.g. we cannot answer or process any request or complaint you may have sent to us or send you a newsletter).

9. Transfer of Your Personal Data to Third Countries

Your personal data is processed on servers within the scope of GDPR (in the EU / EEA). It will in principle not be transferred to third countries, unless explicitly stated otherwise in this Data Protection Information.

9.1. Google Analytics

For the purpose of statistical evaluation, we obtain information about your use of our website in order to improve our website and its functionalities on this basis. However, no Personal Data is transmitted or stored that can be used to identify you as a user.

For this purpose, we use the analysis tool Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website. This tool supports us in analyzing the traffic to and on our website. For this purpose, Google collects various information about your visit of our website like for example your IP address, a User or Client-ID applied to you, your first visit to the website, your click on a link to a new domain, your scrolling to the end of the website, the viewing of a video, the length of stay on the website, internal searches on the website, country and city [latitude and longitude] from where you access the website, device information [brand, model], screen resolution, browser and operating system information. This data is evaluated by Google in order to create reports, which may include, among other things, statements about your length of stay, approximate geographical origin, origin of visitor traffic, exit pages and usage processes.

Information that Google generates about your use of our website is regularly transmitted to data centers in the USA and stored there. If you are using our website within the EU, the data collected by Google Analytics is first send to a Google data center in the EU, where the IP address is analyzed in terms of longitude and latitude and associated information and then deleted before the collected dataset is transferred to other Google data centers, possibly outside the EU, for further analysis. This function ensures the anonymization of the Personal Data before any data is stored and processed within the framework of Google Analytics, so that a clear determinability of your person by Google is excluded.

As part of Google Analytics, we also use the Google Signals extension, which enables tracking across multiple devices. For this purpose, Google uses the Personal Data of users who are logged into a Google service at the same time when visiting websites and have activated the "personalized advertising" option in their Google account settings (https://adssettings.google.com/authenticated).

In Google Analytics, interactions with you as a visitor to our website are primarily recorded with the help of cookies. These cookies are used to store non-personal data and are not made accessible in browsers across domains. These cookies are only activated if you provide your consent in the cookie settings of our website. If you do not provide your consent for the use of cookies, Google Analytics will try to fill the resulting data gaps through AI-based extrapolation based on models using known user data.

The legal basis for the processing of your Personal data within the framework of Google Analytics is your consent in accordance with Art. 6 (1) p. 1 lit. a GDPR, which we also obtain via the cookie settings of our website. Hence, if you do not provide your consent to the activation of the Google Analytics cookies, you also do not consent into the processing of your Personal Data in general and no processing in google Analytics will take place.

Data Processing Agreement

We have concluded a data processing agreement with Google for data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Personal data transferred to data centers in the U.S. is processed by Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043 and its subsidiaries as sub-processor of Google. Google LLC is certified under the EU-U.S. Privacy Framework. Against this background, an adequate level of data protection is assumed and the transfer of Personal data by Google is permitted based on Art. 45 (1) GDPR.

Revocation of your Consent

You can withdraw your consent to the processing of your Personal Data within the framework of Google Analytics at any time with effect for the future as follows:

• Revocation via our Cookie Settings

You can deactivate the processing of your Personal Data within the framework of Google Analytics in the cookie settings of our website and thus withdraw the consent you have given to the processing of your Personal Data in connection with Google Analytics.

• Deactivation of Google Analytics by Browser add-on

You can deactivate Google Analytics by installing a small program, a so-called browser add-on, which you can download from the following address: https://tools.google.com/dlpage/gaoptout. The add-on prevents your Personal Data from being evaluated in Google Analytics. However, the use of the browser add-on to deactivate Google Analytics does not prevent Personal Data from being sent to our website or other web analysis services.

For more information on how Google Analytics handles Personal Data, please refer to Google's Google Analytics Privacy Notice.

10. Provision of Online Offer and Web Hosting

Data and information is automatically collected from the website visitor’s system and stored in server log files. This data stored includes:

• the browser type and version used (if transmitted by the user);
• the operating system;
• the date and time of the server request;
• the number of visits;
• the requested URL;
• the data volume transferred;
• the website previously visited (if transmitted by the user);
• the IP address of the client and loadbalance.

The storage duration of IP addresses is seven (7) days. The legal basis for processing is Article 6 (1) sentence 1 (f) GDPR. The legitimate interest for processing the IP address is to enable communication between our server and your terminal device as well as to ensure the general functionality of our website in order to track attacks on our systems. The processing of the other data serves to compile statistics.

11. Changes to This Data Protection Information

This Data Protection Information is updated on a periodic basis; changes or additions are published here. We therefore recommend that you check this page regularly.

Thank you for reading this Data Protection Information.