Data Protection Information for the vda.de Website

We are pleased that you are interested in our website. The protection of personal data is our top priority. Below we will inform you about the processing of your personal data and your rights in this regard.

1. Responsible Entity

Verband der Automobilindustrie e. V. (VDA)
Behrenstr. 35
10117 Berlin
Telephone: +49 (0) 30 897842-0
Fax: +49 (0) 30 897842-600
E-Mail: info@vda.de

2. Data Protection Officer

Lawyer Nikolaus Bertermann
daspro GmbH
Kurfürstendamm 21
10719 Berlin
datenschutz@vda.de

3. Processing of your personal data - purposes and legal bases

a. Provision of the website and storage in log files
When you visit our website, we automatically process data from your device, in particular the date, time and duration of your website visit, the URL accessed, the amount of data transferred, information about the operating system and the browser type used, your Internet service provider and your IP address. This data is also logged and stored in our system as so-called log files.

The processing of this personal data is necessary to protect our legitimate interests. These are to provide you with a technically error-free and functioning website, to ensure system security and to enable error diagnosis in order to optimize our website. The legal basis for this data processing is Art. 6 paragraph 1 letter f of the GDPR.

b. Cookies
We use so-called cookies on our website. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. Cookies enable our website to be accessed without errors, recognize the Internet browser when the website is accessed again, and analyze the behavior of website visitors.

You can decide about the use of cookies by setting your browser accordingly. If you deactivate cookies, you may not be able to use all interactive features of our website.

We use the following cookies on our website:

Technically necessary cookies
We use cookies that are technically necessary to make our website usable for you. In particular, they ensure basic functions such as page navigation and access to various areas of the website. The information necessary to provide the website is stored locally for the duration of the session. Providing a functioning website is in our legitimate interest. These cookies are absolutely necessary for the purposes mentioned within the meaning of Section 25 Paragraph 2 No. 2 TTDSG. The legal basis for this processing is Art. 6 Paragraph 1 letter f of GDPR.

Statistics and analysis cookies
We also use cookies that enable us to analyze how website visitors interact with our website. These statistics and analysis cookies record your anonymized IP address and - also anonymously - the number of your website visits and the length of time you spend on our website. The analysis of the behavior of website visitors enables us to optimize our internet offering and troubleshoot errors. Your behavior is not tracked across websites and this data is not passed on to third parties. The legal basis for this processing is your consent in accordance with Art. 6 paragraph 1 letter a of GDPR in conjunction with Section 25 paragraph 1 sentence 1 TTDSG.

Marketing cookies and third party cookies
In addition, cookies from third parties are also set via our website (so-called "third party cookies"). The cookies stored on your device save your website visits, the time you spend on the website and the user settings of your browser when you visit the website. Third parties use this information to be able to offer you user-specific advertising. These third-party services are designed and provided by the respective providers. We therefore have only limited influence on the design, content and function of these third-party services or the processing of personal data by their providers. Please contact the providers of the integrated services directly for further information.
The legal basis for this processing is your consent in accordance with Art. 6 paragraph 1 letter a of the GDPR in conjunction with Section 25 paragraph 1 sentence 1 of the TTDSG.
Further information about the use of cookies on our website and the possibility to manage your consent can be found in our Cookie Statement.

c. Analysis tools without cookies - Matomo
This website uses the open source web analysis service Matomo. Matomo enables us to evaluate your website usage in a privacy-friendly manner in order to measure the success of our offers, improve our offers and make the content more interesting. Matomo does not set cookies on your device for this purpose. Instead, so-called fingerprinting is used, which records website usage with the help of data already automatically transmitted (e.g. IP address, screen resolution, page URL) in combination with user-side browser settings. The IP address is directly pseudonymized. Due to these requirements, visits and individual page views can be recorded, but conclusions about the identity of individual users are not possible. If you generally want to prevent the recording of your page visits, you have the option of activating the Do-Not-Track function in your browser. This measure is effective for all pages you visit that belong to the domain “vda.de”. The legal basis for data processing is Art. 6 paragraph 1 letter f GDPR. Since only information that has already been automatically transmitted is used for the evaluation and no additional information is stored or read on end devices, our use of Matomo does not fall under Section 25 paragraph 1 TTDSG.

For this website, you can also prevent the recording of your page visits by using the following opt-out option. Please note that if you activate this option, a cookie will be stored on your system:

You have the option to prevent any actions you perform here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving the usability for you and other users.

Your visit to this website is currently being recorded by Matomo Web Analytics. Uncheck this box to opt out.

d. Services on the website:
To promote the interests of the automotive industry, the VDA offers various services to all interested parties on its website:

Ordering information materials
All about topics related to the automotive industry (e.g. publications, recommendations, teaching materials, training information). For this purpose, the required data must be entered into a contact form. The data is processed to fulfill contractual obligations (Art. 6 paragraph 1 letter b GDPR).

Members area
The VDA offers its members a protected area in which they can find an overview of the VDA committees as well as the respective topics, dates and interesting links. To get access, you must register with your data. The data provided during registration will only be used for the purpose of login and verification and will be processed on the basis of your consent (Art. 6 paragraph 1 letter a GDPR).

Contact form
The VDA offers direct contact. For this you must enter the data required for communication in a contact form. The data entered in the form will only be processed by the VDA for the purpose of direct communication with you and on the basis of your consent (Art. 6 paragraph 1 letter a GDPR). The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

AidaForm
Parts of the website use the form generator aidaform.com. To use the functions of aidaform, it is necessary to save the IP address of your device, the referring website, which pages your device visited and the time your device visited our website. This information is usually transferred to a server of aidaform.com and stored there. The provider of this site has no influence on this data transfer.

The use of aidaform is in the legitimate interest of the Association of the Automotive Industry (VDA) and the user for the simple transmission of stand construction data for the purpose of design and technical testing as well as the approval of your stand construction as part of the processing of your contractual relationship. This represents a legitimate interest within the meaning of Art. 6 paragraph 1 letters b and f GDPR.

Komorebi GmbH, Im Uckerfeld 14, Bonn, 53127, Germany is a data processor on behalf of the VDA. More information on how user data is handled and deleted can be found in aidaform's privacy policy: https://aidaform.com/privacy-policy.html

4. Recipients

a. Internal recipients
Within the VDA, only those departments and employees working there who absolutely require such access to perform their functions or tasks have access to your personal data.

b. External recipients
We will only pass on your personal data to external recipients if this is necessary to fulfil the purposes mentioned above, if there is another legal permission or obligation or if we have your consent to do so. External recipients may be:

Contractual Data Processors
External service providers that we use to provide (IT) services. We carefully select the processors and regularly check them to ensure that the legal requirements of data protection law are also complied with by these service providers. The service providers may only use the data provided by us for the purposes specified by us.

Banks and payment service providers

Banks and payment service providers can be recipients of data for the processing of payments and credit checks. One of the payment service providers we use in the web shop is the provider PAYONE (PAYONE GmbH, Lyoner Straße 15, 60528 Frankfurt am Main). If you pay on site at an event at a stand, we use the provider PAYONE to process payments at the payment terminals. In these cases, PAYONE also acts as an acquirer. PAYONE is responsible for processing data independently. You can find further details on data processing by PAYONE in PAYONE's data protection information: https://www.payone.com/DE-en/gdpr

The legal basis for the transmission of payment information to payment service providers is the fulfillment of the contract and the legitimate interest in carrying out payments for our purchasing transactions (Art. 6 paragraph 1 letters b and f GDPR). The legal basis for storing your data - which may be relevant for certain legal disputes - usually for three years (statutory limitation period) is the legitimate interest in defending ourselves against possible claims (Art. 6 paragraph 1 letter f GDPR). The provision of personal data is mandatory for the conclusion of the contract.

Public bodies
Authorities and government institutions, such as tax authorities, to whom we must transmit personal data for legally compelling reasons

Other bodies
Other bodies may also be granted access to your personal data in accordance with data protection requirements. In this respect, the confidentiality required by law is guaranteed.

5. Storage period and deletion of your data

The length of time your data is stored depends on the purpose of the data processing. After that, we only store your data for as long as it is necessary for the purposes for which it is processed.

If we process your personal data on the basis of your consent, we will also store your consent until the end of the third calendar year after you withdraw your consent in order to comply with our legal obligation to provide evidence and to protect our legitimate interest in being able to prove consent in a legal dispute. The legal basis for this processing is Art. 6 paragraph 1 letter c in conjunction with Art. 5 paragraph 1 letter a, paragraph 2, Art. 7 paragraph 1 GDPR or Art. 6 paragraph 1 letter f GDPR.

If the data is no longer required to fulfil the purpose, it will be regularly deleted, unless further processing is necessary for the purpose of fulfilling commercial and tax law retention obligations or for obtaining evidence within the framework of limitation periods.

All contract and accounting-related data will be stored for a period of ten calendar years after the end of the contract in accordance with the retention periods under tax and commercial law. Data that is relevant for the defense against possible claims will be stored for three years (statutory limitation period).

6. Transfer to third countries
If we transfer your data to recipients in third countries outside the EU or EEA, we ensure that either an adequacy decision is in place for the third country in question, the transfer is permitted due to legal exceptions (e.g. your express consent), or appropriate safeguards are in place to ensure an adequate level of data protection. You can contact us using the contact details above to receive a copy of the relevant appropriate safeguards.

7. Rights of data subjects
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the respective legal requirements are met:

Information: You have the right to receive information about the data processed about you.
Correction: You can request the correction of inaccurate data about you. You can also request the completion of incomplete data.

Deletion: In certain cases, you can request that your personal data be deleted.

Restriction of processing: In certain cases, you may request that the processing of your data be restricted.

Data portability: If you have provided data on the basis of a contract or consent, you can request that you receive the data you have provided in a structured, common and machine-readable format or that it be transmitted to another responsible party.

Case-specific right of objection: You have the right to object at any time to the processing of your personal data based on Article 6 paragraph 1 letter f of the GDPR for reasons related to your particular situation; this also applies to profiling based on these provisions. These personal data will then no longer be processed for these purposes unless compelling legitimate reasons for the processing can be proven which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to object to the processing of data for direct marketing purposes: In individual cases, your data will be processed in order to conduct direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Revocation of consent: If you have given your consent to the processing of your data, you can revoke this consent at any time with effect for the future. The legality of the processing of your data up to the time of revocation remains unaffected.

Asserting your rights: To exercise all of your aforementioned rights, please contact datenschutz@vda.de or write to the address provided above under point 1. Please ensure that we can clearly identify you.

Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you is unlawful.