Version 1.2, November 2021
With the following information, we would like to provide you with an overview of how we handle the data that we collect from you in connection with the use of our services and that we record when you visit our website iomoto.io. We would also like to inform you about your data protection rights. Which data is processed in detail and how it is used depends on the services used in each case.
The controller for the processing of your data within the meaning of Art. 4 No. 7 General Data Protection Regulation (GDPR) is
|ZF Car eWallet GmbH (limited)|
You will find further information in the imprint.
2 Personal Data
Personal data is information about you that allows conclusions to be drawn about your identity, e.g. your name, address or telephone number. Information that does not allow conclusions to be drawn about a specific or identifiable person is not included.
3 Scope of data collection, processing and use
3.1 On our website
a) Website visit
When you visit our website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the following data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
- Browser type/ browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
b) Getting in contact
You can contact us by email or via the contact form. We process the data you provide in order to be able to answer your enquiry. If you use the chat function on our site, we will answer your enquiry without you having to provide any personal details or give us your email address.
c) Appointment tool
You can make an appointment via our website, where we will present our products to you. For this we need your surname, first name and an email address. You can provide further information voluntarily. We process your data to arrange a joint appointment and, if necessary, to coordinate further questions with you in advance of the appointment.
You can post your own comments on our blog. To do this, you must enter a name under which the comment will appear. We need your email address to verify the sender. You can share blog entries via the services Xing and LinkedIn, to whose pages you will be redirected. The data protection information of the site operators applies there.
So-called cookies may be used on our website. These serve to make our offer more user-friendly, effective and secure.
Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not harm your computer and do not contain viruses. We use essential cookies on our website, which are indispensable for the operation of the website. Essential cookies save your settings such as the language selection, but also your cookie selection as described below.
When you visit our website for the first time, a so-called cookie banner opens in a separate window. There you will find further information on cookies that are actively used on our pages or – with your consent – can be used. Essential cookies, which are indispensable for the secure and trouble-free operation of our website, are activated and cannot be switched off. However, you can choose whether you want to allow the use of other cookies in addition to essential cookies in order to be able to use all the functions of our website. You must do this actively. By enabling these cookies, you help us to analyse the use of our website and thus to continuously improve the usability and content for our visitors.
You will find further information on the cookies to be enabled, in particular on the Google Analytics analysis service, in the cookie banner, where you can also enable individual cookies.
Your choice of allowed or not allowed cookies is also stored in a cookie so that you do not have to make the choice again when you return to the website. Cookies that have already been stored can be deleted at any time.
e) Social Media
On our website, we use the LinkedIn “Share Button” (plug-in) of the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. If you click on this button, a direct connection is established between your browser and the LinkedIn server. LinkedIn thereby receives the information that you have visited our website with your IP address. If you are logged into your LinkedIn user account when you click, it is also possible for LinkedIn to assign your visit to our website to you and your user account.
Further information on data protection: https://www.linkedin.com/legal/privacy-policy
You can find an opt-out option at: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
e) Google Maps
To make it easier to find us, we provide a link to the Google Maps service on our website. Google Maps is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). When using this service, personal data may be collected by Google and may be forwarded to Google servers in the USA.
Further information on the scope of data processing by Google: https://policies.google.com/privacy?hl=de&gl=de.
3.2 Applications for a job
If you send us via our website or otherwise an application with application documents, we collect and store the following data:
- Name, first name
- Telephone number
- Email address
- Application documents (cover letter, references, resume, etc.)
We do this for the purpose of processing your application for the decision on the establishment of an employment relationship. The legal basis for the processing is §26 para. 1 BDSG (German Federal Data Protection Act).
It may happen that we are currently unable to offer you a position, but that your application may be considered for subsequent job postings. In this case, we store your data in our applicant database. However, we will only do this if you have given us your express consent beforehand. In this case, the processing is based on your consent in accordance with Art. 6 (1) a) GDPR. You can revoke your consent at any time. The revocation does not affect the lawfulness of the processing prior to receipt of the revocation.
3.3 Other processing of data
We collect and store personal data when you send us enquiries, request offers, place orders and in the context of the establishment and processing of contractual relationships. In addition to company data (company, address, contact data), we also collect and store the personal data provided to us by individual entrepreneurs, applicants and contact persons in companies of our contractual partners.
4 Purpose of the processing and legal basis
We process personal data in accordance with the provisions of the GDPR and the BDSG.
4.1 For the fulfilment of contractual obligations (Art. 6 para. 1 b) GDPR)
The processing of data is carried out for the provision of our contractual services or for the implementation of pre-contractual measures, which are carried out upon request. If the purpose is to initiate or establish an employment relationship, then the processing is carried out in accordance with § 26 BDSG.
4.2 Within the framework of the balancing of interests (Art. 6 para. 1 f) GDPR)
Beyond the use for the actual performance of the contract, it may be necessary to process your data to protect the legitimate interests of us or third parties, e.g.
- Ensuring the IT security of our website
- Provision of essential functions of our website
- Assertion of legal claims and defence in legal disputes
4.3 For the fulfilment of a legal obligation (Art. 6 para. 1 c) GDPR)
In our field of activity, there are numerous legal documentation obligations that may require the storage of (also) personal data.
4.4 Based on your consent (Art. 6 para. 1 a) GDPR)
For certain purposes, we need your consent. This applies in particular if we want to use non-essential cookies (e.g. for marketing purposes). In this respect, processing only takes place if you have expressly given this consent. You can revoke your consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing prior to receipt of the revocation.
5 Recipients of the data
- Data that we collect on our website without your consent will not be transmitted to third parties.
- If you have given your consent, e.g. to the use of Google Analytics or other providers, then data will be sent to Google or these other providers. When deploying and using social media plug-ins, data is transmitted to the operators concerned. Further information can be found under the above links.
- Data will be sent to public authorities if we are obliged to do so due to a legal regulation or official measure.
6 Transfer of data to a third country
As a rule, we do not transfer personal data to recipients based outside the EU and the EEA. If, exceptionally, a transfer to a third country should come into consideration, then this will only take place in compliance with Art. 44 et seq. GDPR.
7 Duration of storage
We generally store your data for as long as the storage is required for the fulfilment of contractual and legal obligations. If the data is no longer required for this purpose, it is regularly deleted.
We regularly store applicant data for the duration of the application process. If the application is successful, we transfer the data to the personnel file. Further processing then takes place within the framework of the employment relationship in accordance with Art. 88 GDPR, § 26 BDSG.
If we are unable to offer you a position, then the data will remain stored with us for a further 5 months and will then be deleted.
With your consent, we store your data for up to 12 months from the end of the application process (hiring or rejection) before it is deleted. If you revoke your consent before then, your data will be deleted after receipt of the revocation.
Deletion shall not take place insofar as
- commercial and tax law retention obligations conflict with this,
- data must be preserved as proof of claims arising from the contractual relationship, within the regular limitation period (3 years, § 195 BGB).
If deletion does not take place according to the above sentence, the data will be blocked. We review the necessity at regular intervals.
8 Security of your data
We take all reasonable technical and organisational measures to ensure the protection of your data.
9 Your data protection rights
As a “data subject” you have the right to
- Information pursuant to Art. 15 of the GDPR,
- to rectification in accordance with Art. 16 GDPR
- on deletion according to Art. 17 GDPR
- to restriction of processing pursuant to Art. 18 GDPR
- to data portability from Art. 20 GDPR.
With regard to the right to information and the right of deletion, the restrictions according to §§ 34 and 35 BDSG apply.
You also have the right to complain to our data protection officer (see above) or to the competent data protection authority (Art. 77 GDPR in conjunction with § 19 BDSG).
10 Right of objection
If we process your data to protect legitimate interests (see above), you may object to this processing on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
11 Obligation to provide data
You are not legally obliged to provide us with data. However, if you want to send us enquiries or commission us, it is necessary that you provide us with the data that is required for the provision of our services. In order to answer your enquiry, we require an email address and a name under which we can address you. In addition to your company data, we usually need the name of a contact person and their contact details in your company in order to prepare offers. Without this data, it is not possible to use our services and we cannot conclude a contract with you.
12 Automated decision making and profiling
Automated decision-making and/or profiling in the sense of Art. 22 (1) and (4) GDPR do not take place on our website.
13 Questions on data protection
If you have any questions or comments about data protection, please send us an email at email@example.com
We reserve the right to amend the provisions of our data protection declaration from time to time. Older versions of the data protection declaration can be requested from us via the above-mentioned email address.
Berlin, November 2021