Data Privacy Statement

This data protection declaration is issued by

WEGMANN automotive GmbH 
Rudolf-Diesel Strasse 6 
97209 Veitshöchheim

datenschutz@wegmann-automotive.com

(hereinafter also referred to as "Wegmann") fulfils its existing legal obligation to provide information pursuant to Art. 13 of the Basic Data Protection Regulation ("DS-GVO") with regard to the processing of personal data on the website www.hofmann-powerweight.com. In the following, we therefore explain to you which of your personal data we process and in what way. Please contact us if you have any further questions. You will find our contact details above and at the end of this document.

1. INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA

In the following we provide information about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
The person responsible in accordance with Art. 4 No. 7 DS-GVO is WEGMANN automotive GmbH, Rudolf-Diesel Straße 6, 97209 Veitshöchheim (see our imprint). You can contact our data protection officer at datenschutz@wegmann-automotive.com or our postal address with the addition "The data protection officer". A contact can be found at the end of this data protection declaration. 
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us to answer your questions. We delete the data arising in this connection after storage is no longer necessary or restrict processing if there are legal storage obligations. The legal basis is Art. 6 para. 1 sentence 1 letter f DS-GVO ("legitimate interest").
If we wish to use commissioned service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.
We use CAPTCHA, which protects our website from spam and misuse. CAPTCHA prevents automated software (so-called bots) from carrying out abusive activities on the website, i.e. it checks whether the entries made are actually from a human being. To determine this, the following data is collected and processed:
- Referrer (address of the page on which the captcha is used)
- IP address of the user
- Google Account (if the user is logged into Google, this will be recognised and assigned)
- Input behaviour of the user (e.g. answering the CAPTCHA question, input speed into the form fields, order of selection of the input fields by the user) 
- Browser, browser size and resolution, browser plugins, date, language setting
- Presentation instructions (CSS) and scripts (Javascript) of the website
- Mouse or touch events within the page
The legal basis is Article 6 (1) sentence 1 letter f of the DS-GVO ("legitimate interest").
There is no automated decision-making in individual cases, including profiling pursuant to Art. 22 DS-GVO.

2. YOUR RIGHTS

You have the following rights in relation to the personal data concerning you:
              - Right to information,
              - Right of correction or deletion,
              - Right to restrict processing,
              - Right to object to the processing,
              - Right to data transferability.
Insofar as we base the processing of your personal data on the balancing of interests (Art. 6 Paragraph 1 S. 1 lit. f DS-GVO), you can lodge an objection to the processing. This is the case if the processing is not necessary, in particular, for the fulfilment of a contract with you. If you do so, please explain why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling reasons for continuing the processing.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

3. COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

If you use the website for informational purposes only, i.e. if you do not register, contact us or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO, legitimate interest):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Amount of data transmitted in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.

4. USE OF COOKIES

In addition to the above-mentioned data, cookies are stored on your computer when you use our website, if you give us your consent. 
Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information flows to the site that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
On the one hand we use technically necessary cookies. These cookies are necessary for good functionality of our website and cannot be switched off in our system. The legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO ("legitimate interest"). However, you can of course configure your browser settings according to your wishes and also reject such technically necessary cookies. Please note that you will then not be able to use our website.
Otherwise Art. 6 Paragraph 1 S. 1 lit. a DS-GVO is the legal basis for the use of cookies ("consent"). You can differentiate whether you give us consent for all cookies, only for certain types of cookies (e.g. performance cookies, statistics cookies, advertising/tracking cookies) or no consent at all. 

This consent is voluntary. You can refuse it without giving any reason and without having to fear any disadvantages. You can also revoke this consent at any time with future effect, without having to fear any disadvantages. However, we would like to point out that if you do not give your consent or if you revoke it,you may not be able to use all the functions of this website to their full extent.

Overview of the cookies used
Overview of cookies used by www.hofmann-powerweight.com
In the following overview you will find detailed information on all cookies used on the www.hofmann-powerweight.com website:

Name

Provider

Purpose

Procedure

Type

Further Information

Absolutely necessary

PHPSESSID

WEGMANN automotive

PHPs Standard Session Identification (only for Administrators relevant)

Until End of session

Transient Cookie

Fe_typo_user

WEGMANN automotive

This cookie is a standard session cookie of TYPO3. In case of a user login, it stores the session ID which is used to recognise the logged-in user in order to grant him/her access to protected areas.

Until end of session

Transient Cookie

Be_typo_user

WEGMANN automotive

This cookie tells typo3 whether the visitor is logged in to the Typo3 backend and which backend user it is.

Until end of session

Transient Cookie

dp_cookieconsent_status a

WEGMANN automotive

1 year

Persistent Cookie

cookieconsent_status a

WEGMANN automotive

1 year

Persistent Cookie

XSRF-TOKEN WEGMANN automotive Security token to prevent form spam immediately Transient Cookie
Storelocator WEGMANN automotive Session cookie Until end of session Transient Cookie
wegmann_storelocator WEGMANN automotive Saves your selection to load external content (GoogleMaps/Geolocation services) 3 years PersistentCookie

Performance

_ga

Google

Used to assign users to differentiate.

2 years

Persistent Cookie

further Information from Google

_gat

Google

Is used to set the to reduce the inquiry rate.

1 Minute

Persistent Cookie

_gid

Google

Registers a unique ID, the is used to generate statistical Data on how the visitor uses the Website uses to generate.

1 day

Persistent Cookie

Werbung/Tracking

IDE

doubleclick.net

Contains a randomly generated User-ID. With this ID you can Google the user via different websites domain-spanning recognize and personalized advertising play out.

1 year

Persistent Cookie

DSID

doubleclick.net

This cookie is used to Saving the preferences of the user. This will for example, to create individualized Display advertising

Bis Sitzungsende

Transient Cookie

NID

Google

These cookies are used on our websites to store website display information, such as your preferred language or region. For example, if your region has been saved, a website may display the local weather forecast or local traffic news. You can also use these cookies to personalize the font size and style and other areas of the website.

6 months

Persistent Cookie

further Information from Google

CONSENT

Google

1 year

Persistent Cookie

1P_JAR

Google

30 daye

Persistent Cooki

5. USE OF GOOGLE ANALYTICS

This website uses Google Analytics, a web analysis service of Google Inc. ("Google").

We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

Google Analytics uses cookies, i.e. text files which are stored on your computer and which enable an analysis of your use of the website.

Google also processes your personal data in the USA. Before you give your consent in accordance with Art. 49 Para. 1 letter a DS-GVO, we would like to point out in particular that in the USA, without a decision on appropriateness and without suitable guarantees, there may not be an adequate level of data protection, as data protection laws do not comply with the provisions of the DS-GVO, and in particular the rights of data subjects may not be enforceable.

This consent is voluntary. You can refuse it without giving any reason and without having to fear any disadvantages. You can also revoke this consent at any time with future effect, without having to fear any disadvantages. However, we would like to point out that if you do not give your consent or if you revoke it,you may not be able to use all the functions of this website to their full extent.

The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, which means that they cannot be traced back to a specific person. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: www.google.de/intl/de/policies/privacy.

6. GOOGLE TAG MANAGER

This website uses the Google Tag Manager from Google. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager. 

Google also processes your personal data in the USA. Before giving your consent in accordance with Art. 49 Para. 1 letter a DS-GVO, we would like to point out in particular that in the USA, without an adequacy finding and without suitable guarantees, there may not be an adequate level of data protection, as data protection laws do not comply with the provisions of the DS-GVO, and in particular the rights of data subjects may not be enforceable.

This consent is voluntary. You can refuse it without giving reasons and without having to fear any disadvantages. You can disable the tool via the cookie settings by accessing the cookie settings via the button at the bottom left and changing your selection there.

7. CAPTCHA

We use CAPTCHA, which protects our website from spam and abuse. CAPTCHA prevents automated software (so-called bots) from carrying out abusive activities on the website, i.e. it checks whether the entries made are actually from a human being. To determine this, the following data is collected and processed:

Referrer (address of the page on which the captcha is used)
IP address of the user
Google Account (if the user is logged into Google, this will be recognised and assigned)
Input behaviour of the user (e.g. answering the CAPTCHA question, input speed into the form fields, order of selection of the input fields by the user) 
Browser, browser size and resolution, browser plugins, date, language setting
Presentation instructions (CSS) and scripts (Javascript) of the website
Mouse or touch events within the page
The legal basis is Article 6 (1) sentence 1 letter f of the DS-GVO ("legitimate interest").

8. NO SOCIAL PLUG-INS

We do not use social plugins. We only use links to our social media pages.

9. STORELOCATOR

Our website uses a store locator so that you can quickly find our products at a retailer near you. 

To do this, we use Google Maps from Google Inc. which allows us to display interactive maps directly on the website and allows you to use the map function to find the nearest retailer based on your location for our products.

When you visit our site, no personal data is initially passed on to the provider. We provide you with the opportunity to communicate directly with the supplier via our map. Only if you give your consent will the provider receive the information that you have called up the corresponding website of our online offer. In addition, the data mentioned in the section "Collection of personal data when visiting our website" of this declaration is transmitted. This is done regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact Google to exercise this right.

Google also processes your personal data in the USA. Before giving your consent in accordance with Art. 49 (1) lit. a DS-GVO, we draw your attention in particular to the fact that in the USA there may not be an adequate level of data protection without an adequacy finding and without suitable guarantees, as data protection laws do not comply with the provisions of the DS-GVO, and in particular data subjects' rights may not be enforceable.

This consent is voluntary. You can refuse it without giving reasons and without having to fear any disadvantages. You can disable the tool via the cookie settings by accessing the cookie settings via the button at the bottom left and changing your selection there.

Further information on the purpose and scope of data collection and processing can be found in the provider's data protection declarations. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

10. FURTHER FUNCTIONS AND OFFERS OF OUR WEBSITE

In addition to the purely informative use of our website, we offer various services which you can use if you are interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.

In some cases we use external service providers to process your data. These have been carefully selected by us, checked and commissioned with regard to the data protection standards applicable there, are bound by our instructions and are checked regularly.

Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.

11. OBJECTION OR REVOCATION TO THE PROCESSING OF YOUR DATA

If you have given your consent to process your data, you can revoke it at any time. Such revocation will affect the permissibility of processing your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you. If you do so, please explain why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling reasons for continuing the processing.

Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your objection to advertising at the following contact details: datenschutz@wegmann-automotive.com.

12. RECIPIENTS OF THE DATA

We transmit your data to the specialist departments within Wegmann as far as this is necessary. 

The basis of authorisation for any further data transfer within the group is Art. 6 para. 1 sentence 1 letter f DS-GVO ("justified interest"). According to this, data processing is lawful if the processing is necessary to protect our legitimate interests, provided that the interests or fundamental rights of the data subject do not outweigh the data subject's interests. Recital 48 of the recitals to the DS-GVO specifies the legitimate interest in the transfer within a group of companies. According to this, transfer within a group of companies for internal administrative purposes with regard to the processing of customer data must be qualified as a legitimate interest on our part within the meaning of Art. 6 (1) sentence 1 letter f DS-GVO. 

In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. All requirements of Art. 28 DS-GVO are observed.

13. LOCATION OF THE DATA PROCESSING MEASURES

All processing of your personal data takes place either in Germany or in member states of the European Union. Your personal data will not be transferred by us to countries outside the member states of the European Union (so-called third countries) or to other international organisations, unless otherwise stated in this document. 

If we transfer personal data to service providers outside the EU, this will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or an agreement on the EU Commission's standard contractual clauses) are in place or if the data subject has given his or her consent (Art. 44 ff. DS-GVO). 

14. SECURITY / TECHNICAL AND ORGANISATIONAL MEASURES

We take all necessary technical and organisational measures, taking into account the requirements of Articles 24, 25 and 32 of the DS-GVO, to protect your personal data from loss, destruction, access, modification or distribution by unauthorised persons and misuse. 

For example, we comply with the legal requirements regarding the pseudonymisation and encryption of personal data, the confidentiality, integrity, availability and resilience of the systems and services related to the processing, the availability of personal data and the possibility of quickly restoring it in the event of a physical or technical incident, and the establishment of procedures for the regular review, assessment and evaluation of the effectiveness of the technical and organisational measures to ensure the security of the processing. 

Furthermore, we also observe the provisions of Art. 25 DS-GVO with regard to the principles of "privacy by design" (data protection through technology design) and "privacy by default" (data protection through data protection-friendly default settings).

15. MATOMO (formerly Piwik)

Matomo is an open source web analytics platform. A web analytics platform is used by a website owner to measure, collect and analyse visitor data in order to understand and optimise the website. If you would like to know more about what Matomo looks like, you can access a demo version at: demo.matomo.org.

2 - Purpose of the processing
Matomo is used to analyse the behaviour of website visitors and to identify possible sources of errors. For example, pages not found, search engine indexing issues and what content is viewed the most. Once the data is processed (for example, number of visitors reaching a 404 page or viewing only one page...), Matomo creates reports so that the website owners can improve the website, for example, change the page layout, publish new content and much more.
Matomo processes the following personal data:

- Cookies
- IP address
- User ID
- User-defined sizes
- User Defined Variables
- Job ID
- User location

And also:
- Date and time
- Title of the page viewed
- URL of the page viewed
- URL of the page previously viewed
- Screen resolution
- Time in local time zone
- Files clicked and downloaded
- Link clicks to an external website
- Time taken to generate pages
- Country, region, city
- Main language of browser
- User agent of the browser
- Session record, mouse events (movements, content forms and clicks)
- Interactions
- Media interactions
- A/B testing

3 - Legal regulations
Matomo's processing of personal data is based on legal regulations.
Processing your personal data, such as cookies, helps us to see what works and what doesn't on our website. For example, it helps us to see if the way we communicate is appealing and how we can better organise the structure of the website. Our team benefits from processing your personal data and acts directly on the website. By processing your personal data, you can use a website that is getting better and better.
Without this data, we would not be able to provide you with the service we currently offer. Your data will only be used to improve the user experience on the website and to improve the search function.

4 - Recipients of personal data
Personal data obtained via Matomo will be sent to:
- Our Company and
- InnoCraft's Matomo Analytics Cloud, which is based in France.
given.

5 - Details of transfers to a third country and safeguards.
Matomo data is hosted in France.

6 - Retention period or criteria for determining the retention period.
We retain personal data collected in Matomo for a period of 13 months in accordance with applicable French law.

7 - The rights of the data subject
As Matomo processes your personal data on the basis of legitimate interests, you may exercise the following rights:
- Right of access: you may obtain access to your personal data at any time.
- Right to erasure: You may at any time request us to erase any personal data we have processed about you.
- Right to object: You can object to the tracking of your personal data by using the following opt-out function:

8 – The right to lodge a complaint with a supervisory authority
If you think that the way we process your personal data with Matomo analytics is infringing the law, you have the right to lodge a complaint with a supervisory authority.

9 – Whether the provision of personal data is part of a statutory or contractual requirement; or obligation and possible consequences of failing to provide the personal data
If you wish us to not process any personal data with Matomo, you can opt-out from it at any time. There will be no consequences at all regarding the use of our website

10 – The existence of automated decision-making, including profiling and information about how decisions are made, the significance and the consequences
Matomo is not doing any profiling.

16. AMENDMENT OF THE DATA PROTECTION DECLARATION

The content of our privacy policy is regularly reviewed.

WEGMANN automotive reserves the right to change the privacy policy at any time with or without prior notice. Please inform yourself about any changes on your own initiative. Our most recent version of the document applies in each case.

Contact us:
Data protection officer of WEGMANN automotive GmbH:
Mrs Susanne Kamm
Dr. Dornbach Consulting GmbH
Anton-Jordan-Strasse 1
56070 Koblenz
e-mail: datenschutz@wegmann-automotive.com

September 2020