Mobility Plus
Privacy Policy
Personal data (hereinafter also referred to simply as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
In accordance with Art. 4 No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter “GDPR”), “processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we either alone or jointly with others decide on the purposes and means of processing. In addition, we inform you below about third-party components used by us for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as controller
The provider responsible for this website in terms of data protection law is:
Phaeton GmbH
Gerhard Ernst
Tullastraße 89
79108 Freiburg
Phone: +49 761 38 36 90 00
Email: info@mobility-plus.de
The data protection officer of the provider is:
Gerhard Ernst
Phone: + 49 (0) 761 38 36 90-09
Email: info@mobility-plus.de
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data concerning them is being processed, access to the processed data, further information on data processing and copies of the data (see also Art. 15 GDPR);
- to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
- to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, where further processing is necessary pursuant to Art. 17(3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them which they have provided and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they consider that data concerning them is being processed by the provider in breach of data protection provisions (see also Art. 77 GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Arts. 16, 17(1), 18 GDPR. This obligation does not apply insofar as such notification is impossible or involves disproportionate effort. Irrespective of this, the user has a right to obtain information about these recipients.
Users and data subjects also have the right, pursuant to Art. 21 GDPR, to object at any time to the future processing of data concerning them, where the data is processed by the provider in accordance with Art. 6(1)(f) GDPR. In particular, an objection to processing for direct marketing purposes is permissible.
III. Information on data processing
Data processed when you use our website will be erased or blocked as soon as the purpose of storage ceases to apply, no statutory retention obligations prevent erasure, and no different information is provided below for individual processing operations.
Cookie Manager
To obtain consent for the use of technically non-essential cookies on the website, the provider uses a cookie manager.
When the website is accessed, a cookie containing the consent settings is stored on the user’s device so that, on a subsequent visit, the query regarding consent does not need to be repeated.
The cookie is required in order to obtain the user’s consent in a manner compliant with legal requirements.
The user can prevent or terminate the installation of cookies by adjusting the settings of their browser.
Cookies
a) Session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies which are placed and stored on your device by the internet browser you use. Through these cookies, certain information about you is processed on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the display of our website in different languages or the provision of a shopping cart function.
The legal basis for this processing is Art. 6(1)(b) GDPR, insofar as these cookies are used to process data for the initiation or performance of a contract.
If the processing does not serve the purpose of contract initiation or performance, our legitimate interest lies in improving the functionality of our website. In that case, the legal basis is Art. 6(1)(f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-party cookies
Where applicable, cookies from our partner companies, with whom we cooperate for the purposes of advertising, analysis or the functionalities of our website, may also be used in connection with our website.
Details of this, in particular the purposes and legal bases of the processing of such third-party cookies, can be found in the information below.
c) Possibility of removal
You can prevent or restrict the installation of cookies by adjusting the settings of your internet browser. You can also delete cookies that have already been stored at any time. The steps and measures required for this depend, however, on the specific internet browser you use. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, this may, however, mean that not all functions of our website can be used to their full extent.
Contact requests / contact option
If you contact us via contact form or email, the data you provide will be used to process your request. The provision of the data is necessary for processing and answering your request – without it, we cannot answer your request or can only answer it to a limited extent.
The legal basis for this processing is Art. 6(1)(b) GDPR.
Your data will be erased once your request has been finally answered and there are no statutory retention obligations preventing erasure, such as, for example, in the event of a subsequent contract processing.
To promote our products and services and to communicate with interested parties or customers, we maintain a company presence on the Facebook platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The data protection officer of Facebook can be contacted via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, can be accessed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data described below is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication as well as the sale and promotion of our products and services.
The legal basis may also be the user’s consent pursuant to Art. 6(1)(a) GDPR given to the platform operator. The user may revoke this consent at any time for the future by notifying the platform operator in accordance with Art. 7(3) GDPR.
When our online presence on the Facebook platform is accessed, Meta Platforms Ireland Limited, as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).
This user data is used to provide statistical information about the use of our company presence on Facebook. Meta Platforms Ireland Limited uses this data for market research and advertising purposes, as well as for the creation of user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, advertise users within and outside of Facebook in a manner based on their interests. If the user is logged into their Facebook account at the time of access, Meta Platforms Ireland Limited can also link the data to the respective user account.
If the user contacts us via Facebook, the personal data entered by the user on this occasion will be used to process the request. The user’s data will be erased by us if the user’s request has been finally answered and no statutory retention obligations, such as those arising in the context of a subsequent contract processing, oppose erasure.
For the processing of the data, Meta Platforms Ireland Limited may also set cookies.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by appropriate settings in the browser. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but through the corresponding settings of the Flash player. If the user prevents or restricts the installation of cookies, this may result in not all functions of Facebook being fully usable.
Further information on the processing activities, their prevention and the deletion of data processed by Facebook can be found in Facebook’s data policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that processing by Meta Platforms Ireland Limited also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
To promote our products and services and to communicate with interested parties or customers, we maintain a company presence on the Instagram platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The data protection officer of Instagram can be contacted via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, can be accessed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data described below is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication as well as the sale and promotion of our products and services.
The legal basis may also be the user’s consent pursuant to Art. 6(1)(a) GDPR given to the platform operator. The user may revoke this consent at any time for the future by notifying the platform operator in accordance with Art. 7(3) GDPR.
When our online presence on the Instagram platform is accessed, Meta Platforms Ireland Limited, as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).
This user data is used to provide statistical information about the use of our company presence on Instagram. Meta Platforms Ireland Limited uses this data for market research and advertising purposes, as well as for the creation of user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, advertise users within and outside of Instagram in a manner based on their interests. If the user is logged into their Instagram account at the time of access, Meta Platforms Ireland Limited can also link the data to the respective user account.
If the user contacts us via Instagram, the personal data entered by the user on this occasion will be used to process the request. The user’s data will be erased by us if the user’s request has been finally answered and no statutory retention obligations, such as those arising in the context of a subsequent contract processing, oppose erasure.
For the processing of the data, Meta Platforms Ireland Limited may also set cookies.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by appropriate settings in the browser. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but through the corresponding settings of the Flash player. If the user prevents or restricts the installation of cookies, this may result in not all functions of Facebook being fully usable.
Further information on the processing activities, their prevention and the deletion of data processed by Instagram can be found in Instagram’s data policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that processing by Meta Platforms Ireland Limited also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
We maintain an online presence on LinkedIn in order to present our company and our services and to communicate with customers/interested parties. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
In this respect, we would like to point out that it is possible that user data may be processed outside the European Union, in particular in the USA. This may entail increased risks for users, for example because subsequent access to user data may be more difficult. We also have no access to this user data. Access is exclusively the responsibility of LinkedIn.
You can find LinkedIn’s privacy policy at
https://www.linkedin.com/legal/privacy-policy
General links to profiles with third-party providers
The provider includes links on the website to the social networks listed below.
The legal basis for this is Art. 6(1)(f) GDPR. The provider’s legitimate interest lies in improving the quality of use of the website.
The plugins are integrated via a linked graphic. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective social network.
After the customer has been forwarded, information about the user is collected by the respective network. This is initially data such as IP address, date, time and visited page. If the user is logged into their user account of the respective network during this time, the network operator may be able to assign the collected information from the specific visit of the user to the user’s personal account. If the user interacts via a “share” button of the respective network, this information can be stored in the user’s personal user account and possibly published. If the user wishes to prevent the collected information from being directly assigned to their user account, they must log out before clicking on the graphic. There is also the option of configuring the respective user account accordingly.
The following social networks are linked by the provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy: https://www.facebook.com/policy.php
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy: https://help.instagram.com/519522125107875
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Google Analytics
We use Google Analytics on our website, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.
Google Analytics helps us analyze the use of the website and measure the effectiveness of our marketing campaigns. The legal basis for this is Art. 6(1)(a) GDPR. The user can revoke their consent to the use of Google Analytics at any time for the future in accordance with Art. 7(3) GDPR via the “cookie settings” on our website.
Information such as time, place and frequency of website visits as well as interactions with the website (e.g. click paths, ads seen/clicked, clicks on links), including the user’s IP address, is transmitted to a Google server in the USA and stored there for a maximum of 2 months.
Google LLC is part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Google also records “demographic characteristics” and can create statistics that provide information about the age, gender and interests of website visitors. This is done by automated analysis of advertising and information from third parties.
If the user has activated personalized ads in their Google account and consents to Google Analytics, Google can analyze usage behavior across devices – that is, in relation to all devices that the user has linked to their Google account. Google creates models for cross-device conversions; we only receive anonymous statistics on this, no personal data.
If the user wishes to deactivate this cross-device analysis, they can turn off the “personalized advertising” function in the settings of their Google account at the following link:
https://support.google.com/ads/answer/2662922?hl=de
We use Google Analytics with an anonymization function. This means that Google shortens the user’s IP address within EU member states or in other contracting states of the EEA Agreement.
Google uses the data collected to evaluate the user’s visit to the website and to compile reports on website activities for us. The data is also used to provide further services related to website and internet usage. Google may pass this information on to third parties if this is required by law or if third parties process this data on behalf of Google.
According to its own information, Google will not associate the user’s IP address with other data held by Google in any case. Further information and options for preventing the use of data are provided by Google here:
https://www.google.com/intl/de/policies/privacy/partners
If the user does not agree to the collection, they can also prevent it by installing the browser add-on for deactivating Google Analytics once.
Google Tag Manager
To integrate various functions on our website, we use Google Tag Manager. This product is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.
Google Tag Manager serves solely to integrate certain content on our website and to enable the management of these functions via an interface provided by Google.
When the website is accessed, the relevant functions are loaded from a Google server, which may also be located in the USA. The user’s IP address is processed in order to provide the functions.
The functions used are listed conclusively in our privacy policy. Any consents not granted by the user for certain functions are also observed when using Google Tag Manager.
Google LLC is also part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
The legal basis for use is Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Adobe Typekit
To display typography, we use external fonts from “Adobe Typekit”, a service provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland, hereinafter “Adobe”.
When the provider’s website is accessed, a connection to the Adobe server is established to enable or update the display of the font. In this process, data may be transferred to servers in the USA.
According to the view of the data protection supervisory authorities, the USA currently does not have an adequate level of data protection. Therefore, so-called standard contractual clauses exist between the provider and Adobe for the transfer of data to third countries:
https://www.adobe.com/de/privacy/eudatatransfers.html
However, these are private-law agreements and therefore have no direct effect on the powers of authorities in the USA to access data.
The legal basis for this is Art. 6(1)(f) GDPR. The provider’s legitimate interest lies in the optimization and economic operation of the website.
Through the connection, Adobe can recognize from which website a request is sent and to which IP address the display of the font is to be transmitted.
Further information, in particular on the options for preventing the use of data, is provided by Adobe at the following links:
https://www.adobe.com/de/privacy.html
https://www.adobe.com/de/privacy/policies/adobe-fonts.html
Google Fonts
We use Google Fonts to display external fonts on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”.
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Through the connection established to Google when our website is accessed, Google can determine from which website your request has been sent and to which IP address the display of the font is to be transmitted.
Google provides further information, in particular on the options for preventing the use of data, at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
Google reCAPTCHA
We use Google reCAPTCHA on our website to check and prevent interactions on our website by automated access, e.g. by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”.
This service enables Google to determine from which website a request is sent and from which IP address you use the reCAPTCHA input box. In addition to your IP address, Google may collect other information that is necessary for the provision and guarantee of this service.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our website and in the defense against unwanted, automated access in the form of spam or similar.
Google provides further information on the general handling of your user data at
https://policies.google.com/privacy
Google Maps
We use Google Maps on our website to display our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”.
If you call up the Google Maps component embedded in our website, Google stores a cookie on your device via your internet browser. In order to display our location and create directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.
If you have given consent to this processing, the legal basis is Art. 6(1)(a) GDPR. The legal basis may also be Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimization of the functionality of our website.
Through the connection thus established with Google, Google can determine from which website your request has been sent and to which IP address the directions are to be transmitted.
If you do not agree to this processing, you have the option of preventing the installation of cookies through the corresponding settings in your internet browser. Details can be found above under “Cookies”.
In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use and the Terms and Conditions for Google Maps.
Google also provides further information at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
Google AdWords with Conversion Tracking
We use the advertising component Google AdWords and, in this context, conversion tracking on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”.
We use conversion tracking to target our offering in advertising. If you have given consent to this processing, the legal basis is Art. 6(1)(a) GDPR. The legal basis may also be Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you click on an advertisement placed by Google, the conversion tracking we use stores a cookie on your device. These conversion cookies expire after 30 days and are not used to identify you personally.
If the cookie is still valid and you visit a specific page on our website, both we and Google can evaluate that you clicked on one of our ads placed with Google and were subsequently redirected to our website.
Based on the information obtained, Google compiles statistics for us on visits to our website. We also receive information on the number of users who clicked on our ad(s) and the subsequent pages of our website visited. Neither we nor third parties who also use Google AdWords are able to identify you in this way.
You can also prevent or restrict the installation of cookies by adjusting the settings of your internet browser. You can also delete cookies that have already been stored at any time. The steps and measures required for this depend, however, on the specific internet browser you use. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support.
Furthermore, Google also provides further information on this topic and in particular on the options for preventing the use of data at
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
Google Remarketing or “Similar Audiences” component of Google
We use the remarketing or “similar audiences” function on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”.
We use this function to display interest-based, personalized advertising on third-party websites that also participate in Google’s advertising network.
If you have given consent to this processing, the legal basis is Art. 6(1)(a) GDPR. The legal basis may also be Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
To enable this advertising service, Google stores a cookie with a sequence of numbers on your device via your internet browser while you visit our website. This cookie records, in anonymized form, both your visit and the use of our website. Personal data is not disclosed in the process. If you subsequently visit a third-party website that also uses Google’s advertising network, advertisements may be displayed that relate to our website and/or our offers there.
To permanently deactivate this function, Google offers a browser plugin for the most common internet browsers at
https://www.google.com/settings/ads/plugin
The use of cookies by certain providers can also be deactivated via, for example,
http://www.youronlinechoices.com/uk/your-ad-choices
or
http://www.networkadvertising.org/choices/
by way of opt-out.
Through so-called cross-device marketing, Google may also be able to track your usage behavior across multiple devices, so that you may be shown interest-based, personalized advertising even if you change devices. However, this requires that you have agreed to the linking of your browser histories with your existing Google account.
Google provides further information on Google Remarketing at
https://www.google.com/privacy/ads/
WhatsApp contact
For contacting us, the provider also enables customers to contact us via the WhatsApp messenger service. WhatsApp is a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter “WhatsApp”, a subsidiary of Facebook.
When the user communicates with the provider via WhatsApp, both the provider and WhatsApp receive the user’s mobile phone number and the information that the user has contacted the provider.
The aforementioned data is also forwarded by WhatsApp to Facebook servers in the USA and processed by WhatsApp and Facebook in accordance with the WhatsApp privacy policy, which also includes processing for their own purposes, such as improving the WhatsApp service.
According to the view of the data protection supervisory authorities, the USA currently does not have an adequate level of data protection. However, so-called standard contractual clauses exist:
https://faq.whatsapp.com/general/about-standard-contractual-clauses
However, these are private-law agreements and therefore have no direct effect on the powers of authorities in the USA to access data.
Further information on the purpose and scope of data collection and the further processing of this data by WhatsApp and Facebook, as well as related rights and setting options to protect your privacy, can be found in WhatsApp’s privacy policy:
https://www.whatsapp.com/legal/#privacy-policy
.
The legal basis for this processing and the transfer to WhatsApp is Art. 6(1) sentence 1(b) GDPR, insofar as the contact relates to an existing contractual relationship or serves to initiate such a contractual relationship. If the contact is not made for the aforementioned purposes, the legal basis is Art. 6(1)(f) GDPR. The provider’s legitimate interest lies in improving the quality of service.
