1. Privacy at a Glance

What is a Privacy Policy and What Does It Cover?

Our Privacy Policy provides you with a comprehensive overview of the information we collect—particularly personal data—how we use it, and, where applicable, how we share, store, and transfer it. It also informs you about your rights.Personal data is any information that can be used to identify you personally. It is important to us that you understand how you can control your privacy. Therefore, we recommend that you read our Privacy Policy. This will enable you to use our app according to your preferences.

Who Is Responsible for Data Collection on This Website?

Data processing on this website is carried out by the website operator.

The controller responsible for data processing on this website is:

WITTE | flinkey
WITTE Automotive GmbH
Höferstr. 3-15
42551 Velbert
Germany

Phone: +49 32 221 09 75 79
E-mail: service@flinkey.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, e-mail addresses, or similar).

What Information Do We Collect?

We collect the information you provide when you register for our product and create a profile, such as your e-mail address or telephone number.

We also collect information about the phone, computer, or tablet on which you use our product.

Why and How Do We Use Your Information?

We are constantly striving to improve our product. The information we collect from you helps us achieve this.

We use the information we collect for the following purposes:

  • To determine whether a product is functioning properly
  • To identify and, where applicable, resolve errors
  • To analyze user behavior

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using analysis tools.

The information we use for these purposes is collected automatically by our IT systems, or with your consent when you visit this website. This primarily includes technical data (e.g. internet browser, operating system, or the time the page was accessed).

Your data is also collected when you provide it to us directly. This may include, for example, information that you enter into a contact form.

What Is Our Legal Basis?

Under applicable data protection law, companies require a legal basis for processing personal data.

By processing personal data, we mean the way in which we collect, use, and share your information, as described above in the previous sections of this Privacy Policy.

As a company, we rely on various legal bases when processing your information for the purposes described in this Privacy Policy.

In some cases, we may also rely on different legal bases when processing the same information for different purposes.

For each of the legal bases listed below, we explain why we process your information.

Depending on the legal basis on which we rely, you are entitled to certain rights.

In accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws, you are entitled to the following rights:

Right of Access

Pursuant to Art. 15 GDPR, you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, we must provide you with the following information:

The purposes of the processing

  • The categories of personal data being processed
  • The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
  • Where possible, the planned period for which your personal data will be stored or, if this is not possible, the criteria used to determine that period
  • The existence of the right to request rectification or erasure of personal data concerning you or restriction of processing by the controller, or to object to such processing
  • The existence of the right to lodge a complaint with a supervisory authority
  • Where the personal data are not collected from the data subject, any available information as to their source
  • The existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

Right to Rectification

Subject to applicable law and pursuant to Art. 16 GDPR, you have the right to obtain information about your personal data and to have inaccurate information corrected.

Right to Erasure of Information

Pursuant to Art. 17 GDPR, you may request that we erase personal data concerning you without undue delay if one of the grounds set out in paragraph 1 (a)–(f) applies.

An exception to our obligation to erase your personal data may arise under paragraph 3.

  • For exercising the right of freedom of expression and information
  • For compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • For reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) GDPR and Art. 9(3) GDPR
  • For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing
  • For the establishment, exercise, or defense of legal claims

Right to Restriction of Processing

Pursuant to Art. 18 GDPR, you have the right to request that we restrict the processing of your data. However, this right only exists under the conditions set out in Art. 18(a)–(d) GDPR.

Where the processing of your personal data has been restricted, such data may, with the exception of storage, only be processed with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State, pursuant to Art. 18(3) GDPR.

Transfer of Your Information

Pursuant to Art. 20 GDPR, you have the right to receive the personal information that you have provided to a controller in a structured, commonly used, and machine-readable format. If you request the direct transfer of the data to another controller, this will only be carried out where technically feasible.

Right to Withdraw Consent

Pursuant to Art. 21 GDPR, you may withdraw your consent to the processing of your information at any time where the processing is based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

In such a case, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

Your withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

If your data are processed for direct marketing purposes, you also have the right to object pursuant to Art. 21(2) GDPR.

Right to Lodge a Complaint

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Do You Have Any Further Questions?

You may contact us at any time:

Jitka Javorska
Höferstr. 3-15
42551 Velbert

E-Mail: jitka.javorska@witte-automotive.cz

How Long Do We Retain Your Information?

We retain your information for as long as necessary to provide our products, comply with legal obligations, or protect our interests or the interests of others.

However, if you effectively exercise one of the legitimate grounds mentioned above, your information may be deleted earlier.

Permanent Deletion of Your Account

Once you click “Delete Account”, all data you have previously provided will be deleted from our systems. This does not prevent you from registering again at a later date. If you register again, none of your previously linked data will be suggested or restored, as a permanent deletion has taken place.

How Do We Share Information with Third Parties (Data Transfers to the United States)?

Among other things, our website integrates various tools. When these tools are active, your personal data may be transferred to the respective companies’ servers in the United States.

Please note that, under EU data protection law, the United States is not considered a secure third country. U.S. companies are required to provide personal data to security authorities without you, as the data subject, being able to take legal action against such disclosure. Therefore, it cannot be ruled out that U.S. authorities (e.g. intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no influence over these processing activities.

SSL and TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses SSL or TLS encryption.

You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock icon displayed in your browser’s address bar.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

2. Hosting and Content Delivery Networks (CDN)
External Hosting

This website is hosted by an external service provider (hosting provider). The personal data collected on this website are stored on the hosting provider’s servers. This may include, in particular, IP addresses, contact inquiries, metadata and communication data, contract data, contact details, names, website access data, and other data generated through a website.

The hosting provider is used for the purpose of fulfilling contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will process your data only to the extent necessary to fulfill its contractual obligations and will follow our instructions with regard to such data.

We use the following hosting provider:

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

Data Processing Agreement

To ensure GDPR-compliant processing of personal data, we have concluded a Data Processing Agreement (DPA) with our hosting provider.

3. Data Collection on This Website – Cookies

What Are Cookies?

Cookies are small text files that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Where Do We Use Cookies?

Cookies serve various functions. Many cookies are technically necessary because certain website features would not function without them (e.g. the shopping cart function or the display of videos). Other cookies are used to analyze user behavior or display advertisements.

Cookies that are required to carry out the electronic communication process (necessary cookies), to provide certain functions requested by you (functional cookies, e.g. for the shopping cart function), or to optimize the website (e.g. cookies used to measure the website audience) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. Where consent has been requested for the storage of cookies, the relevant cookies are stored exclusively on the basis of your consent (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time.

How Can You Control Your Information?

You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to exclude the acceptance of cookies in certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Where cookies from third-party providers or cookies used for analytical purposes are employed, we will inform you separately within this Privacy Policy and, where applicable, request your consent.

Cookie Consent with Borlabs Cookie

Our website uses the cookie consent technology provided by Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this consent in compliance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter “Borlabs”).

When you visit our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the withdrawal of those consents are stored. This data is not shared with the provider of Borlabs Cookie.

The collected data are stored until you request their deletion, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details on Borlabs Cookie’s data processing can be found at:

You are currently viewing a placeholder content from Default. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.

More Information

The use of Borlabs Cookie consent technology is based on the legal obligation to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Contact Form

If you send us inquiries via the contact form, the information you provide in the form, including the contact details you enter, will be stored by us for the purpose of processing your inquiry and in the event of follow-up questions. We will not share this information without your consent.

The processing of these data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested.

The data you enter in the contact form will remain with us until you request their deletion, withdraw your consent to their storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Inquiries by E-mail, Telephone, or Fax

If you contact us by e-mail, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.

The processing of these data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested.

The data you send to us through contact inquiries will remain with us until you request their deletion, withdraw your consent to their storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Analytics Tools and Advertising

What Is Google Analytics?

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the website, operating systems used, and the user’s origin. This data may be combined by Google into a profile associated with the respective user or their device.

Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to and stored on a Google server in the United States.

The use of this analytics tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Where consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR. Consent may be withdrawn at any time.

The transfer of data to the United States is based on the European Commission’s Standard Contractual Clauses (SCCs). Details can be found here:

https://privacy.google.com/businesses/controllerterms/mccs/

IP Anonymization

We have activated the IP anonymization feature on this website. As a result, your IP address is shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website usage and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Preventing Data Processing by Browser Plug-in

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

Further information on how Google Analytics handles user data can be found in Google’s Privacy Policy:

https://support.google.com/analytics/answer/6004245

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Data Retention

User-level and event-level data stored by Google that are linked to cookies, user identifiers (e.g. User ID), or advertising identifiers (e.g. DoubleClick cookies or the Android Advertising ID) are anonymized or deleted after 14 months. Further details can be found at:

https://support.google.com/analytics/answer/7667196

Plugins and Tools

YouTube with Enhanced Privacy Mode

This website embeds videos from YouTube. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store information about visitors to this website before they watch a video. However, the disclosure of data to YouTube partners is not necessarily excluded by the enhanced privacy mode. Regardless of whether you watch a video, YouTube establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. In the process, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after a video has been started, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube may obtain information about visitors to this website. Among other things, this information is used to compile video statistics, improve user experience, and prevent fraud.

Further data processing operations may be triggered after you start a YouTube video, over which we have no control.

The use of YouTube is in the interest of providing an attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR. Consent may be withdrawn at any time.

Further information on data protection at YouTube can be found in their Privacy Policy:

https://policies.google.com/privacy

Audio and Video Conferences

Data Processing

To communicate with our customers, we use various online conferencing tools. The specific tools we use are listed below. When you communicate with us via video or audio conference over the Internet, your personal data are collected and processed by both us and the provider of the respective conferencing tool.

The conferencing tools collect all data that you provide or use in connection with the tool (e.g. your e-mail address and/or telephone number). In addition, the conferencing tools process the duration of the conference, the start and end time of participation, the number of participants, and other “context information” related to the communication process (metadata).

Furthermore, the provider of the tool processes all technical data required to conduct the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker information, and the type of connection.

If content is exchanged, uploaded, or otherwise made available within the tool, this content is also stored on the servers of the tool provider. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.

Please note that we do not have complete control over the data processing activities of the tools used. Our options are largely determined by the policies of the respective providers. For further information on data processing by the conferencing tools, please refer to the privacy policies of the respective providers listed below.

Purpose and Legal Basis

The conferencing tools are used to communicate with prospective or existing business partners or to provide certain services to our customers (Art. 6(1)(b) GDPR).

Furthermore, the use of these tools serves the general simplification and acceleration of communication with us and our company (legitimate interest pursuant to Art. 6(1)(f) GDPR). Where consent has been requested, the respective tools are used on the basis of that consent; consent may be withdrawn at any time with effect for the future.

Data Retention

The data collected directly by us through the video and conferencing tools are deleted from our systems as soon as you request their deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence over the retention period of your data stored by the operators of the conferencing tools for their own purposes. For details, please contact the operators of the conferencing tools directly.

Conferencing Tools Used

Microsoft Teams

Where necessary, we use conferencing tools for communication during online meetings. Within the WITTE Group, we primarily use the video conferencing tool Microsoft Teams, provided by Microsoft Corporation (hereinafter “Microsoft”), for internal meetings and conferences as well as for communication with customers, other external parties, and service providers.

Your personal data are processed in this context.

Please note: As soon as you visit the Microsoft Teams website to download the software, Microsoft Corporation is responsible for the associated data processing.

Personal data processed in connection with Microsoft Teams will generally not be disclosed to third parties. Please note, however, that Microsoft Teams, as the service provider, necessarily gains access to the data described above to the extent required for the data processing agreement with Microsoft Corporation.

By using Microsoft Teams, your personal data are transferred to Microsoft Corporation in the United States (One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft provides Standard Contractual Clauses (SCCs), which include appropriate safeguards for the transfer of personal data. Further information is available at:

https://learn.microsoft.com/microsoftteams/security-compliance-overview

Alternatively, customer-preferred conferencing tools can also be used without any issues, for example:

  • Google Meet
  • Webex
  • Zoom