Data privacy notice
This website is operated by carbovation gmbh, Otto-Lilienthal-Str. 15, Friedrichshafen, Germany.
Carbovation gmbh takes data protection seriously and aims to ensure that your privacy is protected when using our website. That is why carbovation gmbh has published this statement explaining the way it processes your data. Please read it carefully before using the website, as one of the things it explains is how we process personal data.
We have used the terminology set out Article 4 of GDPR (General Data Protection Regulation).
If you use this website and/or provide carbovation gmbh with your personal data, carbovation gmbh assumes that you consent to the processing of that personal data in the way specified in this privacy statement.
Controller
The Controller responsible for processing personal data pursuant to Article 4(7) GDPR is:
carbovation gmbh
Otto-Lilienthal-Straße 15
88046 Friedrichshafen
Germany
You will find further information about our company in our legal details link (link).
Data Protection Officer
You can contact our Data Protection Officer at:
carbovation gmbh
Otto-Lilienthal-Straße 15
88046 Friedrichshafen
Germany
Tel.: +49 (0) 2 31 20 609-148
or
by email at:
gdpr(at)carbovation.de
Section 1 PERSONAL DATA
We only process and use your personal data with your consent or if the law permits. We collect, process and use the personal data that we need in order to provide our services and for you to use them, and that you provide us with voluntarily.
Personal data means any data containing information about the personal or factual circumstances of an identified or identifiable customer. This includes their email address, delivery address, gender, date of birth, telephone number and age.
The legal basis for this data processing is Article 6 (1) (1) f) GDPR. The purpose of processing is to operate this website. Our legitimate interest is to achieve the protection aims of confidentiality, integrity and availability of data.
Section 2 PURPOSE OF COLLECTING PERSONAL DATA
We need your personal data for the following purposes:
Section 2.1 Contact form
We provide a contact form on our website which you can use to request information about our products or just to get in touch. As well as providing mandatory details, which are marked with asterisks, and your message, you can also give us voluntary information.
We need these details to process your request, address you correctly and send you a reply.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR (performance of a contract and activities prior to entering into a contract).
Section 2.2 Email communication
If you provide us with your email address, we will correspond with you by email. As a rule, we will not pass on your email address to third parties without your consent. If you send an email to carbovation, personal data may be sent automatically, depending on your email program’s settings. Carbovation will also treat that data confidentially. Please note, however, that unless encrypted, an email is like a postcard: it can be read by people who don’t have permission. So you should always send confidential information to us by post or as an encrypted email attachment.
Section 2.3 Request for quotation
As well as the general contact form, there is a form for requesting a quote.
To make you an offer, we need more information than the general contact form provides.
Enquiries received via our website’s quotation request form are emailed to a dedicated department. After checking the request and consulting with the customer, we create a customer record and save it in our CRM system (unless one already exists) so that we can draw up an offer.
We regularly check the CRM system to see if data can be deleted. If data are no longer needed for an existing or prospective customer relationship, or if the customer has conflicting interests that outweigh their retention, we delete the relevant data, provided we are not obliged to keep them by law.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR. Data is processed in order to perform pre-contractual activities such as advising customers and preparing offers.
Section 2.4 Registration form (lightweight.info website only)
As well as the general contact form, there is a form for registering or re-registering your Lightweight product to claim Lightweight wheel protection and for warranty or crash replacements. As well as providing mandatory details, which are marked with asterisks, you can also give us voluntary information.
We need these details to process your registration or re-registration and to send you a confirmation.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR (performance of a contract and activities prior to entering into a contract).
Section 2.5 Newsletter (lightweight.info website only)
By giving your consent you can subscribe to our newsletter, which will keep you up to date about our products, promotions, competitions and news on an irregular basis, and no more than 12 times a year.
We use a double-opt-in procedure to register people for our newsletter. This means that once you have registered, we send you an email to the address you provided, asking you to confirm that you want to receive the newsletter.
The only information you have to provide to receive the newsletter is your email address. Once you have confirmed, we store your email address so that we can send you the newsletter.
You can cancel your consent to receive the newsletter and unsubscribe at any time. To do this, click on the link provided in every newsletter email, or send a message to the contact details provided in the legal section. If you register for our newsletter, your email address will be used for our advertising purposes until you unsubscribe from it.
The legal basis for this data processing is Article 6 (1) (1) a) GDPR.
Section 2.6 Customer account (shop.lightweight.info site only)
When you register for our web shop, we process your first name, surname, email address and password for the purpose of creating a customer account and enabling access to it (legal basis: Article 6 (1) (1) b) GDPR).
If a customer account is set up, we store this data while you remain registered with us. The data are also stored for longer if there is a legal obligation to retain them.
Once you have registered and start to use your customer account, we process data that you voluntarily provide us with in the process of configuring it (legal basis: Article 6 (1) (1) b) GDPR). We store this data while you remain registered with us. We also process the data we need to fulfil the web shop / customer account services that you use (legal basis: Article 6 (1) (1) f) GDPR). This may sometimes include particular types of personal data such as PayPal payment approval (legal basis: Article 6 (1) (1) b) GDPR).
Section 2.7 Order processing (shop.lightweight.info site only)
We collect data in order to process your product orders/deliveries and provide web shop services. (Your email address, physical address, surname, first name, telephone number and a delivery address, if different).
If you have created a customer account, this data will be stored there permanently. Provided there is no legal reason to retain them and provided you have not requested their deletion, your personal data will be deleted once they are no longer needed to fulfil the purpose for which they were stored, or if their storage becomes inadmissible for other legal reasons.
If you pay by credit card, please read Section 5.1 ‘Payment by credit card’, and if you pay by PayPal, please read Section 5.2 ‘Payment by PayPal’.
The legal basis for this data processing is Article 6 (1) (1) b) GDPR. The purpose of collecting, storing and processing the data is to process your order.
Section 3 Cookies
Cookies are used on our websites. Cookies are small text files which your browser stores automatically on your device. Cookies are needed to enable certain features on our websites. We use session cookies, which are automatically deleted by your browser as soon as you leave the website. We also use persistent cookies for website analytics.
You can prevent cookies from being stored by setting your browser accordingly. But if you do, some of the features of our website may not work. Cookies do not install or launch any programs or other applications on your computer.
The legal basis for this data processing is Article 6 (1) (1) a) GDPR.
Third party vendors
On this website the following third paty vendors are used:
Cookies
On this website the following cookies may be set:
Section 4 SOCIAL PLUGINS (lightweight.info website only)
Social plugins are not used on our website. All we provide are links to the following social media services:
Section 4.1 Facebook
Service provider: Facebook Inc., 1601 S. California Ave, Palo Alto, CA, 94304, USA
To find out which data are collected and how they are used, please refer to Facebook’s privacy policy: https://www.facebook.com/help
You can find ways to protect your privacy on Facebook at: https://www.facebook.com/policy.
Section 4.2 YouTube
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
To find out which data are collected and how they are used, please refer to Google’s privacy policy: https://ww.google.com/privacy
You can find ways to protect your privacy on at: https://www.google.com/dashboard.
Section 4.3 Twitter
Service provider: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA, 94107, USA
To find out which data are collected and how they are used, please refer to Twitter’s privacy policy: https://www.twitter.com/privacy
You can find ways to protect your privacy at: https://www.twitter.com/settings.
Section 4.4 Instagram
Service provider: Instagram LLC, 1601 Willow Rd, Menlo Park, CA, 94025, USA
Please read Instagram’s privacy policy to find out what data are collected and how they are used: https://instagram.com/about/legal/privacy/
Section 4.5 Strava
Service provider: Strava, Inc., 208 Utah Street, San Francisco, CA, 94103, USA
Please read Strava’s privacy policy to find out what data are collected and how they are used: https://www.strava.com/legal/privacy
Section 5 RECIPIENTS / PASSING ON OF DATA
Personal data that you provide us with are not passed on to third parties for advertising or any other purposes except the ones stated. Processing your order may sometimes entail sending your personal data to third parties. For instance, we provide our shippers with the data they need to deliver goods to you.
We use service providers to run this website and for other products of ours. It may be that they come to obtain personal data. We choose our service providers carefully, especially in view of data protection and security, and we do everything we have to under data protection law to ensure that our data processing is legal.
The legal basis for this data processing can be Article 6 (1) (1) b) GDPR (contract performance), Article 6 (1) (1) f) GDPR (legitimate interest), or processing done by a service provider, if they process personal data on our behalf (Article 28 GDPR).
Section 6 PAYMENT PROCEDURE (lightweight.info website only)
As part of contractual and other legal relationships, on account of legal obligations, and on the basis of other legitimate interests, we offer our customers efficient and secure payment methods, for which we employ payment service providers.
These payment transactions are governed by the terms and conditions and data protection policies of the payment service providers concerned, which can be viewed on their websites and transaction apps. Please refer also to these for further information and if you wish to exercise your rights as a data subject, such as those of cancellation and information.
Section 6.1 Payment by credit card
We use a module provided by VR Payment GmbH, Saonestraße 3a, 60528 Frankfurt am Main, as our credit card payment processor.
• The purposes of this processing are to provide contractual services and customer service.
• The legal basis for this is Article 6 (1) (1) b) GDPR (contract fulfilment and pre-contractual enquiries) and Article 6 (1) (1) f) GDPR (legitimate interest).
Your payment details are sent to the credit card company for the processing of credit card payments. Data disclosed to third parties are used by them only to fulfil the duties and tasks assigned to them.
Nor are your personal data sold to or shared with third party businesses for their use without your prior consent.
They will only be passed to state agencies or authorities if national legislation makes it absolutely necessary.
Section 6.2 Payment by PayPal
If you opt to pay using the online payment service provider PayPal when ordering on our website, the contact details collected when you do so are transferred to PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. In this respect, PayPal acts as a custodian and online payment service provider, and offers buyer protection services.
• The legal basis for this is Article 6 (1) (1) b) GDPR (contract fulfilment and pre-contractual enquiries) and Article 6 (1) (1) f) GDPR (legitimate interest).
The personal data sent to PayPal are first name, surname, address, telephone number and email address. Other data relating to the order, such as payment details, invoice amount and invoice details, percentage tax rate, number of items and product numbers are also transmitted, as are metadata and communication data (device information, IP address).
This data has to be sent in order to process your order with your chosen payment method, in particular to confirm your identity, process your payment and establish your customer relationship with PayPal.
If you choose PayPal as your payment method, the data privacy policy governing your PayPal account also applies during the payment process. You can view it at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Section 7 DURATION OF DATA STORAGE
We have a policy of avoiding and minimising data storage where possible. We therefore only store your personal data for as long as we need to for achieving the purposes stated, or for the various storage periods stipulated by law. Once a purpose no longer applies or a storage period expires, your personal data are routinely blocked or deleted in accordance with the law.
Section 8 RIGHTS OF THE DATA SUBJECT
Information, correction, blocking, deletion and objection
You have the right to be told about the personal data being processed by carbovation at any given time. You also have the right to have these data corrected or erased, and to restrict their processing, unless they have to be stored to perform business transactions. You can request your personal data to be sent to you in a structured, common, machine-readable format.
Furthermore, you have the right to object to the processing of your personal data, provided you do so on the legal basis of legitimate interests.
If you wish to exercise any of your rights, please contact the Data Protection Officer (contact details can be found at the beginning of this Privacy Notice).
Section 9 CONSENT
If we process your personal data on the basis of your consent, you have the right to revoke that consent at any time, without affecting the legality of processing carried out on its basis until you do so.
You can revoke your consent by notifying the Data Protection Officer (contact details can be found at the beginning of this Privacy Notice).
Section 10 COMPLAINING TO THE SUPERVISORY AUTHORITY
If you think our company is not treating your personal data properly, you have the right to complain. To do this, you can contact the supervisory authority responsible. To identify which supervisory authority is responsible for you, please click here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Section 11 VIDEO MONITORING
If you visit us at our company premises, please note that they are under video surveillance. You can obtain more information at reception.
END OF DATA PRIVACY
Date: 01/11/2022