Privacy Policy

1. Data protection at a glance

General information

The following information provides a brief overview of what happens to your personal data when you visit our website. Personal data means any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy below.

Data collection on our website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. The operator’s contact details can be found in this website’s legal notice.

How do we collect your data?

Some of your data is collected when you provide it to us. This may, for example, include data you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This primarily consists of technical data (e.g. your internet browser, operating system or the time you access a page). This data is collected automatically as soon as you access our website.

We also process personal data that we have lawfully obtained from publicly accessible sources (e.g. commercial registers, registers of associations, registers of intermediaries, the press, the internet and other media) and that we are permitted to process.

The specific data processed and the way it is used depend largely on the services requested or agreed upon.

What do we use your data for?

We use your data to fulfil contractual obligations.

The purposes of data processing depend primarily on the specific product and may include needs assessments, advice and the execution of transactions.

Some data is collected to ensure that the website functions properly. Other data may be used to analyse your behaviour as a user.

 

What rights do you have regarding your data?

You have the right to obtain information about the source, recipients and purpose of your stored personal data at any time, free of charge. You also have the right to request the rectification, blocking, restriction of processing or erasure of this data. You can contact us at any time at the address provided in the legal notice regarding these rights or any other questions about data protection. You also have the right to lodge a complaint with the competent supervisory authority.

Analytics tools and third-party advertising

When you visit our website, your browsing behaviour may be analysed statistically. This is primarily carried out using analytics software. Your browsing behaviour is analysed anonymously and cannot be traced back to you. Apart from technically necessary cookies, we do not use any cookies, particularly third-party cookies.

2. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.

Various types of personal data are collected when you use this website. Personal data means data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purposes this takes place.

Please note that transmitting data over the internet (e.g. when communicating by email) may involve security vulnerabilities. It is not possible to provide complete protection against access to data by third parties.

Information about the controller

The controller responsible for data processing on this website is:

MotoMonster GmbH & Co KG
Hauptstraße 15
89437 Haunsheim

Represented by:
Rutz GmbH
Managing Director Elisabeth Rutz

Email: ivo@motomonster.de
Tel.: 0173-5742194

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses or similar information).

 

 

Right to lodge a complaint with the competent supervisory authority

In the event of a breach of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the data protection commissioner of the German federal state in which our company has its registered office. A list of data protection commissioners and their contact details is available at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process by automated means on the basis of your consent or in the performance of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be carried out where technically feasible.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Access, blocking and erasure

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its source and recipients, and the purpose of its processing. Where applicable, you also have the right to have this data rectified, blocked or erased. You can contact us at any time at the address provided in the legal notice regarding these rights or any other questions about personal data.

Objection to promotional emails

We hereby object to the use of contact details published as part of our statutory legal notice obligations to send advertising and information materials that have not been expressly requested. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising being sent, for example by spam email.

Access to data

Within MotoMonster GmbH & Co KG, access to your data is granted to those departments that require it to fulfil contractual and statutory obligations.

In particular, this includes insurers to whom we provide your data for the preparation of quotations, ongoing support, contractual amendments and similar purposes.

To provide our services, data may be passed on to the following recipients: IT and hosting service providers, payment service providers, accounting and tax advisers, delivery and communications service providers, event partners and, where applicable, insurers or public authorities, insofar as this is necessary for the performance of a contract or to comply with statutory obligations.

Retention period

We process and store your personal data for as long as necessary to fulfil contractual and statutory obligations. Please note that our business relationship involves ongoing contractual obligations and is intended to continue for several years.

We are also subject to various retention and documentation obligations arising from, among other legislation, the German Commercial Code (HGB), the German Fiscal Code (AO), the German Banking Act (KWG), the German Money Laundering Act (GwG) and the German Insurance Supervision Act (VAG). The retention and documentation periods stipulated in these provisions range from two to ten years.

The retention period is also determined by statutory limitation periods, which, for example, under Sections 195 et seq. of the German Civil Code (BGB), are generally three years but may be up to thirty years in certain cases.

Your data will be erased as soon as it is no longer required for the purposes stated above.

Is data transferred to a third country or an international organisation?

Personal data is transferred to entities in countries outside the European Economic Area or to an international organisation only where this is necessary to carry out your instructions.

Otherwise, no personal data is transferred to countries outside the European Economic Area or to an international organisation. In individual cases, it cannot be ruled out that an IT service provider based in a third country may gain limited access to personal data when remotely maintaining standard IT components. Where required by law, we will inform you of the details.

Where it is necessary to transfer personal data to service providers outside the European Economic Area, this will only take place if the European Commission has confirmed that the third country provides an adequate level of data protection or if other appropriate data protection safeguards are in place (e.g. EU standard contractual clauses).

3. Data collection on our website

Cookies

Our website uses only technically necessary cookies. These provide basic website functions, such as the shopping basket, login, security and session management. We do not use cookies for analytics, tracking or marketing purposes, or any third-party cookies.

Server log files

The website hosting provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not combined with data from other sources.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, reliably and without errors, and in preventing attacks and misuse.

Contact form

If you send us an enquiry using the contact form, we will store the information provided in the form, including the contact details you enter, to deal with your enquiry and any follow-up questions. We will not pass on this data without your consent.

Data submitted via the contact form is processed to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or steps taken prior to entering into a contract. In all other cases, processing is based on our legitimate interest in dealing with your enquiry in accordance with Article 6(1)(f) GDPR.

We retain the data you enter in the contact form until you request its erasure, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully dealt with). Mandatory statutory provisions, particularly retention periods, remain unaffected.

Processing data (customer and contractual data)

25. If you have given us consent to process personal data for specific purposes under Article 6(a) (e.g. granting a power of attorney or sharing data within an association or corporate group), your consent provides the lawful basis for that processing. You may withdraw this consent at any time. This also applies to the withdrawal of declarations of consent given before the General Data Protection Regulation became applicable, i.e. before 25 May 2018. Please note that withdrawal takes effect only for the future. Processing carried out before the withdrawal is not affected.
26. We collect, process and use personal data only insofar as it is necessary to establish, define the terms of or amend the legal relationship (customer master data). This is based on Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or steps taken prior to entering into a contract. We collect, process and use personal data relating to the use of our website (usage data) only insofar as this is necessary to enable the user to use the service or to bill them for it. The customer data collected will be erased once the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.
27. Personal data may also be processed to comply with legal obligations to which we are subject, in accordance with Article 6(1)(c) GDPR.
28. Where necessary, we process your data beyond the actual performance of the contract to safeguard our legitimate interests or those of third parties under Article 6(1)(f) GDPR (e.g. to review and optimise procedures for assessing needs and approaching customers directly, to assert legal claims and to defend against legal disputes).

4. Analytics tools and advertising

We do not use analytics tools, tracking technologies, cookies for analytics or marketing purposes, or third-party advertising on our website.

5. Plugins and tools

Google Fonts

The fonts used on our website are hosted locally on our own server. No connection is made to Google servers and no personal data is transmitted to Google.

We do not use any other externally loaded plugins or embedded third-party services such as Google Maps, Google reCAPTCHA or external Google Web Fonts.

6. Obligation to provide data

In the course of the business relationship, you are only required to provide personal data that is necessary to establish, maintain and end a business relationship, or that MotoMonster GmbH & Co KG is legally obliged to collect. Without this data, it is generally not possible to enter into or perform a contract.

7. Automated decision-making

As a rule, we do not use fully automated decision-making to establish and maintain the business relationship. If this procedure is used in individual cases, you will be informed separately.