logo

Privacy Notice

Data Protection and Security.

We take the protection of your personal data and your privacy very seriously. We therefore would like to explain how we protect your data and what it means for you when you use our services. In order to achieve transparency and to guarantee comprehensive protection of your privacy, it goes without saying that we comply with all legal regulations on data protection. The data protection information is based on the terms of the basic EU General Data Protection Regulation (GDPR).

Controller and data protection officer.

Controller is Allane SE, Dr.-Carl-von-Linde-Str. 2, DE 82049 Pullach (below-mentioned as "Allane Mobility Group"). You can also contact Allane Mobility Group’s data protection officer at any time via mail or email: Jörg Smid, DPL Consult, Drehbahn 9, 20354 Hamburg, [email protected].

What is personal data?

Personal data are defined as information through which you can be identified e. g. by your name or information that makes you identifiable, like your address, telephone number or IP-address.

Processing and personal data by Allane Mobility Group.

General Information

Personal data is only collected and processed by us if this is necessary to provide a functional and comfortable operated website as well as to provide you with our contents and services. For various services it is also necessary that you provide us with certain personal data of your own (e.g. when using the contact form, sending e-mails or when sending vehicle enquiries).

 

Corporate-related contact inquiries, such as press or potential cooperation requests, may involve processing personal data. We respond to these types of requests based on our legitimate business interests pursuant to Art. 6 para. 1 lit. f GDPR. Maintaining a good reputation and engaging with future partners and in future collaborations is a legitimate interest of Allane Mobility Group. Any personal data collected thereto shall be processed and kept on a need-to-know-basis. Allane Mobility Group will also rely on the legal basis of Art. 6 para. 1 lit. b GDPR, namely process any provided personal data prior to entering a contract with future partners (e.g. names and email addresses of employees and representatives).

 

Your data will be stored until the purpose of storage no longer applies. This can e.g. happen through time lapse but also if you exercise your data subject rights (see below). In some cases, European or national regulations, laws, or other regulations or contracts to which we are subject prescribe a longer storage period. The data will then be deleted at the end of this period.

 

If we use external service providers at your request for the execution of the contract (e.g. by calling our hotline to arrange an appointment), this will be done for the processing of your request to them. These external service providers act as controller in these cases. With regard to the processing of your data within our contractual relationship, please also observe the data protection information attached to the respective contractual documents.

 

If you would like to know more about the processing of your data, the legal basis of the processing, the purposes of processing, the storage period or deletion period as well as your data subject rights, please read the following information.

 

Logfiles

Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so called logfiles on the webserver (not in our system). The following data is processed:

  • Browser type/version
  • Operating system
  • Your Internet-Service-Provider
  • IP-Address
  • Date and time of access
  • Websites from which you can access our website
  • Websites accessed from your system through our website

 

The aforementioned data is not stored together with other personal data, thus no allocation of the requesting connection is possible.

 

It is necessary that our system temporarily stores the users’ IP address so that the website can be delivered to your computer. The legal ground for the temporary storage of data and log files is Article 6 para. 1 lit. f GDPR. The legitimate interest lies in the fact that we can improve the functionality and optimization of the website as well as secure our IT systems. The data will not be used for marketing purposes in this context.

 

A temporary storage of the IP address also takes place via a technically necessary cookie, so-called content delivery network (short: CDN). CDNs are technically necessary, e.g. to speed up the loading of the website and, e.g. not to overuse Internet bandwidths and speeds, but to use them optimally. They can also be used for language recognition depending on the geo-location. The use of CDNs is also based on Art. 6 para. 1 lit. f GDPR, as it is in Allane's legitimate interest to enable visitors to our website to browse technically flawlessly. Allane uses Cloudflare’s CDN: Cloudflare CDN | Content Delivery Network | Cloudflare. You can find Cloudflare’s Privacy Policy here: Cloudflare's Privacy Policy | Cloudflare.

 

The data is stored as long as it is necessary to achieve the purpose for its collection. If data is required for the functionality of the website, this data will be deleted after the respective session has ended. If the data is stored in log files, this is the case after 10 days at the latest.

 

Contact-Forms and Requests

If you have any questions about our services and products or certain situations, you can contact us via our website. In these cases, you enter certain data in an input mask provided for this purpose, via which your data is transmitted to us and stored. We use this data to get in contact with you and to be able to assign and process your request as quickly as possible.

 

This includes the following contact enquiries and the entry of the following data for the following purposes:

 

We process personal data from the input mask exclusively for the treatment of the establishment of contact. The data will not be passed on to third parties in this respect.

 

We delete your data as soon as it is no longer necessary to achieve the purpose for which it was collected. This case occurs, with regards to personal data inserted into the entry mask when the respective correspondence with you is terminated. Correspondence is terminated when it is obvious that the questions/reasons for sending the message have been finally clarified. Please note that we may be required by law to keep your data for longer than this period.

 

The processing of other data (e.g. connection data) during the sending process should prevent a misuse of the contact form and guarantee the security of our information technology systems. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest). Personal data additionally collected during the sending process will be deleted after a period of 10 days at the latest.

 

You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

 

reCAPTCHA

On our website, we use the reCAPTCHA service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to protect your submissions and orders via internet submission and order forms. The query serves to differentiate whether the input is made by a person or abusively by automated machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose your input will be transmitted to Google and used there. This plugin query includes the sending of the IP address and possibly other data required by Google for the Google reCAPTCHA service. For this purpose your input will be communicated to and used by Google.

 

However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided by reCAPTCHA from your browser shall not be merged with any other data from Google.

 

The legal ground for processing your data by using this service is based on Art. 6 para. 1 f GDPR as the website operator has a legitimate interest in protecting his website offers against abusive automated spying and spam.

 

Google complies with the privacy provisions of the US Privacy Shield Agreement with the EU and is registered with the US Department of Commerce's Privacy Shield Program. Google only transmits the data to third parties within the framework of legal regulations or within the framework of order processing. Google will not combine the collected data with other data collected by Google.

 

This data collection is subject to the data protection regulations of Google (Google Inc.).  For more information about Google's privacy policy, please visit https://www.google.com/intl/en/policies/privacy/ or https://www.google.com/recaptcha/intro/android.html.

 

Third Party Websites

Our websites may contain links to and from partner websites. Please note that if you click on the link to a third-party website, our privacy notice is not valid for these services, so we are not responsible or liable for their policy. Please refer to the certain Privacy Notice from the third party in this regard.

 

Your rights regarding the processing of personal data.

In this chapter, we want to inform you about your data subject rights. If you have any questions concerning your data subject rights or if you want to exercise one or several of these rights, please send us an e-mail or by post to the "Data Protection Officer at Allane SE, Dr.-Carl-v.-Linde-Str. 2, DE 82049 Pullach/Germany".

 

Right to withdraw your Consent (Art. 7 para. 3 GDPR).

In case that the processing of your data by us is based on your explicit consent, you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on consent before its withdrawal. You will be informed about this right before you give your consent.

 
Right to information (Art. 15 GDPR).

You have the right to obtain information from us as to whether we process personal data concerning you. If this is the case, you have a right to access these data and to a list of information. When personal data is transferred to a third country or an international organization, you have the right to be informed about appropriate safeguards to ensure that the recipients are also in compliance with the provisions of the GDPR.

 
Right to rectification (Art. 16 GDPR).

You can request us to correct any incorrect data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

 
Right to erasure or “right to be forgotten” (Art. 17 GDPR).

You have the right to request the immediate deletion of your data if one of the following reasons applies:

  • data is no longer necessary for the purposes for which they were collected or otherwise processed,
  • you withdrew your consent on which the processing was based and there is no other legal basis for the processing,
  • you oppose to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation and there are no overriding legitimate grounds for processing,
  • you oppose to the processing for direct marketing in accordance with Article 21 para. 2 GDPR,
  • the data have been processed unlawfully,
  • the deletion of data is necessary to fulfil a legal obligation under European or German law,
  • the data were collected in relation to an offer of information society services directly to a child provided in accordance with Article 8 para. 1 GDPR.

 

We will comply with the request for deletion, unless we are legally obliged or entitled to continue storing and processing your data. In particular, legal retention periods are considered as legal obligations. Furthermore, we are entitled to continued storage if we are unable to assert, exercise or defend legal claims without your data.

 
Right to restriction of processing (Art. 18 GDPR).

In accordance with Article 18 GDPR, we may only process data to a limited extent in the following cases:

  • you dispute the accuracy of your data until we are able to verify its accuracy,
  • the processing is unlawful and you oppose to the erasure of your data and instead request that the use of your personal data should be restricted instead,
  • we no longer need the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
  • you object to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation, as long as it is not yet clear whether the legitimate reasons for the processing by us outweigh your interests.

 

If processing has been restricted, we may only store this data. Any further processing in such case is only permissible with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the European Union or a Member State. You can withdraw your consent given in this connection at any time. You will be notified by us before the restriction is lifted.

 
Notification Obligation (Art. 19 GDPR).

We are obliged to inform all recipients to whom your data have been disclosed about a correction or deletion of your data or a restriction of the processing. This shall not apply if it is impossible or involves a disproportionate effort. We will inform you about these recipients if you have any questions in this regard.

 
Right to data transferability (Art. 20 GDPR).

You have the right to receive the data concerning you in a structured, common and machine-readable format. You also have the right to instruct us with the transmission of your data to a third party. However, this right shall not impair the rights and freedoms of other persons, including our company. If this is the case, we are entitled to refuse the surrender or transfer of your data.

 
Right to object (Art. 21 GDPR).

If we process your data on the basis of a legitimate interest (Article 6 para. 1 lit. f GDPR), you have the right to object to this if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions.

 

In this case, we will no longer process your data unless we can prove compelling reasons worthy of protection for the processing. This must outweigh your interests, rights and freedoms, or processing serves to assert, exercise or defend legal claims.

 

If we process your data for direct marketing purposes, you may object to the processing of your data. This also applies to profiling insofar as it is connected with such direct advertising.

 

After your objection, your data will no longer be processed for these purposes.

 
Right to Appeal to a Supervisory Authority (Art. 77 GDPR).

You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the GDPR-provision. Other administrative or judicial remedies that you may be entitled to remain unaffected.

The relevant local Data Protection Authority for Allane Mobility Group is:

Bayerisches Landesamt für Datenschutz (BayLDA)

Promenade 18

91522 Ansbach

Phone: +49 981 180093-0

E-Mail: [email protected]

 

 

Security, SSL technology.

Allane Mobility Group has taken technical and organizational measures to protect your personal data, in particular against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. These security measures are continuously adapted in line with technological developments. The transmission of personal data between your computer and our server is always encrypted (SSL procedure, Secure Socket Layer).

Updates to our Privacy Notice

We reserve the right to update this privacy notice regularly if the legal, technical or economic conditions change. When we update our privacy notice, we undertake appropriate measures to inform you as required about the importance of the changes we have made. We will obtain your consent to all important changes to the privacy notice if and to the extent to which this is required under applicable data privacy laws.