We are pleased that you are visiting our website. The protection of your personal data is very important for us. Hymer GmbH & Co. KG (hereafter "Hymer", "we" or "us") attaches great importance to the security of users’ data and compliance with data protection legislation.
Hymer GmbH & Co. KG, Holzstr. 19, 88339 Bad Waldsee
Tel.: +49 7524 999-0
E-Mail: info@hymer.com
DDSK GmbH
Stefan Fischerkeller
Tel.: +49 7542 949 21 - 00
E-Mail: datenschutz@hymer.com
The terms used in this privacy notice should be understood as having the meanings defined in Art. 4 GDPR.
Table of contents:
You can visit our site without actively providing any details about yourself personally. However, we will automatically store access data each time the website is called up (server log files) such as the name of your Internet service-provider, the operating system used, the particular website you visit us from, the date and the duration of the visit or the name of the file requested, as well as for securi-ty reasons, e.g. to identify attacks on our websites, the IP address of the computer used; and all this for a period of 30 days. This data is evaluated only to improve our offering and does not permit any conclusions to be drawn about you personally. This data will be not aggregated with other data sources.
| Legal Basis: | Legitimate interest, Art. 6 para. 1 lit. f) GDPR) |
| Legitimate interests: |
Ensuring the functionality, error-free and secure operation of the website and adapting this website to the requirements of users. |
We use so-called cookies on our websites in order to make your visit to our website attractive and to enable the use of certain functions. This concerns a standard internet technology for the storage and to call login and other userelated information for all users of the Hymer-websites. Cookies are small text files, which are placed on your terminal device. Among other things, they enable us to store user settings, so that our websites can be displayed in a format that is customised for your device. Several of the cookies used by us are deleted again after the end of the browser session, therefore after your browser is closed (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser the next time you visit the website (so-called permanent cookies).
You can set your browser so that you are informed about the setting of cookies and can make indi-vidual decisions about their acceptance or exclude the acceptance of cookies for certain cases or generally. The cookies can furthermore be deleted subsequently in order to remove data that web-sites have lodged on your computer. The deactivation of the cookies (so-called Opt-Out) can lead to several restrictions to the functionality of the Hymer-websites.
| Categories of Data Subjects: | Website visitors, users of online services |
| Opt-Out: |
Internet Explorer: Firefox: Google Chrome: |
| Legal Basis: |
Consent (Art. 6 para. 1 lit. a) GDPR); fulfilment or initiation of a con-tract (Art. 6 para. 1 lit. f) GDPR) The relevant legal basis in each case is specifically named with the corresponding tool. |
| Legitimate interests: | Storage of opt-in preferences, presentation of the website, ensuring the functionality of the website, preservation of user status across the entire website, recognition for next website visitors, user-friendly online offering, ensuring chat function |
To enable us to evaluate visitor flows in relation to our online offering, we use tools for web analysis and reach measurement. To this end, we collect information about the behaviour, interests and demographic information of our visitors, such as age, gender or similar. This helps us to recognise at what time our online offering, its functions or content are most frequented and it also helps us to know how to invite repeated visits. In addition, the information we collect enables us to determine whether our online offering needs any optimisation or adjustment.
The information collected for this purpose is stored in cookies or similar processes and is used for reach measurement and optimisation. The data stored in cookies may include content viewed, online sites visited, settings and functions and systems used. As a rule, however, no clear user data is processed for the purposes described. In this case, data is changed in such a way that the actual identity of users is not known, either to us or to the provider of the tool used. The data changed in this way is often stored in user profiles.
| Categories of Data Subjects: | Website visitors, users of online services |
| Categories of Data: |
User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), contact data (e.g. email address, telephone number), content data (e.g. text details, photographs, videos) |
| Purposes of Processing: |
Website analysis, reach measurement, utilisation and evaluation of website interaction, lead evaluation |
| Legal Basis: |
Consent (Art. 6 para. 1 lit. a) GDPR); fulfilment or initiation of a contract (Art. 6 para. 1 lit. f) GDPR) |
| Legitimate Interests: | Optimisation and further development of the website, profit increase, customer retention and acquisition |
Service used: InnoCraft Ltd, 150 Willis St., 6011 Wellington, New Zealand
Privacy: https://matomo.org/privacy-policy/
In order to continuously increase our reach and the awareness of our online offering, we process personal data as part of online marketing, in particular with regard to potential interests and measuring the effectiveness of our marketing actions.
For the purpose of measuring the effectiveness of our marketing actions and identifying potential interests, relevant information is stored in cookies or else similar processes are used. The data stored in cookies may include content viewed, online sites visited, settings and functions and systems used. As a rule, however, no clear user data is processed for the purposes described. In this case, the data is changed in such a way that the actual identity of users is not known, either to us or to the provider of the tool used. The data changed in this way is often stored in user profiles.
In the case of storage of user profiles, data can be read out, supplemented and added to on the server of the online marketing provider whenever other online offerings that use the same online marketing process are visted.
We can determine the success of our advertisements on the basis of aggregated data supplied to us by the provider of the online marketing process (so-called conversion measurement). Within the scope of these conversion measurements, we can track whether a marketing measure has led to a purchase decision by the visitor to our online offering. This assessment process is used to analyse the success of our online marketing.
| Categories of Data Subjects: |
Website visitors, users of online services, interested parties, communication partners, business and contractual partners |
| Categories of Data: | User data (e.g. web pages visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data, contact data, content data (e.g. text details, photographs, videos) |
| Purposes of Processing: |
Marketing (partly also interest-based and behavioural), conversion measurement, target group formation, click tracking, development of marketing strategies and increasing the efficiency of campaigns |
| Legal Basis: | Consent (Art. 6 para. 1 lit. a) GDPR); fulfilment or initiation of a contract (Art. 6 para. 1 lit. f) GDPR) |
| Legitimate interests: | Optimierung und Weiterentwicklung der Webseite, Gewinnsteigerung, Kundenbindung und -neugewinnung |
Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data ptrotection: https://policies.google.com/privacy
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Legal Basis: Legitimate interest (Art. 6 para. 1 lit. f) GDPR)
Legitimate interests: Coordination of different tools, management, ease of use and presentation
Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data ptrotection: https://policies.google.com/privacy
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data ptrotection: https://policies.google.com/privacy
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data ptrotection: https://policies.google.com/privacy
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data ptrotection: https://policies.google.com/privacy
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Service used: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data ptrotection: https://www.facebook.com/privacy/explanation
Opt-Out-Link: https://www.facebook.com/policies/cookies/
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Service used: Xandr Inc. 28 West 23rd Street, Fl 4 New York, NY 10010 USA
Data ptrotection: https://about.ads.microsoft.com/en-us/solutions/xandr/digital-platform-cookie-policy
Opt-Out-Link: https://monetize.xandr.com/privacy-center/captcha?next_page=/privacy-center/delete
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
We maintain online presences on social networks and career platforms in order to be able to exchange information with the users registered there and to make contact with them in an uncomplicated way.
In some cases, the data of users on social networks is used to conduct market research and so, pursue advertising purposes. User profiles can be created via the usage behaviour of users; for example, by specifying interests, and can be used to adapt advertisements to the interests of target groups. For this purpose, cookies are regularly stored on the terminal devices of users, sometimes regardless of whether they are registered users of the social network.
Depending on where the social network is operated, user data may be processed outside the European Union or outside the European Economic Area. This can result in risks to users; for example, because it makes it more difficult to enforce their rights.
| Categories of Data Subjects: |
Registered users and non-registered users of the social network |
| Categories of Data: | Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text data, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP address) |
| Purposes of Processing: |
Extension of reach, networking |
| Legal Basis: | Legitimate interests (Art. 6 para. 1 lit. f) GDPR), consent (Art. 6 para. 1 lit. a) GDPR) |
| Legitimate interests: |
Interaction and communication on social media presence, increasing profit, insights about target groups |
Service used: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data ptrotection: https://help.instagram.com/519522125107875 or https://www.facebook.com/about/privacy
Opt-Out-Link: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/
Service used: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data ptrotection: https://www.facebook.com/privacy/explanation or https://www.facebook.com/legal/terms/page_controller_addendum
Opt-Out-Link: https://www.facebook.com/policies/cookies/
Service used: LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA
Data ptrotection: https://www.linkedin.com/legal/privacy-policy
Opt-Out-Link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Service used: New Work SE, Dammtorstr. 30, 20354 Hamburg, Germany
Data ptrotection: https://privacy.xing.com/de/datenschutzerklaerung
Service used: Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland
Data ptrotection: https://twitter.com/de/privacy
Opt-Out-Link: https://help.twitter.com/de/rules-and-policies/twitter-cookies#privacy-options
Service used: Vimeo Inc., 555 West 18th Street New York, New York 10011, USA
Data ptrotection: https://vimeo.com/privacy
Opt-Out-Link: https://vimeo.com/cookie_policy
Service used: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
Data ptrotection: https://privacy.xing.com/de/datenschutzerklaerung
Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data ptrotection: https://policies.google.com/privacy?hl=de&gl=de
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
We have integrated functions and contents into our online offering, which are obtained from third-party providers. For example, videos, representations, buttons or posts (hereafter referred to as content) can be integrated.
In order to be able to display content to visitors to our online offering, the respective third-party provider processes, among other things, the IP address of the user, so that the content can be transmitted to the browser and displayed. Without this processing operation, the display of third-party content is not possible.
In some cases, additional information is collected via so-called pixel tags or web beacons, whereby the third-party provider receives information about the use of the content or visitor traffic on our online offering, technical information about the user's browser or operating system, the time of the visit or referring websites. The data obtained in this way is stored in cookies on the user's terminal device.
In order to protect the personal data of visitors to our online offering, we have taken certain security precautions to prevent automatic transmission of this data. This data is only transmitted when users use the buttons or click on the third-party content.
| Categories of Data Subjects: |
Users of the plug-in or embedded third-party content |
| Categories of Data: | Usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address), contact data (e.g. e-mail address, telephone number), master data (e.g. name, address) |
| Purposes of Processing: |
Designing our online offering, increasing the reach of social media ads, sharing posts and content, interest and behaviour-based marketing, cross-device tracking |
| Legal Basis: | Consent (Art. 6 para. 1 lit. a) GDPR) |
Service used: Getty Images, Inc., 605 5th Avenue South, Suite 400, Seattle, Washington 98104, USA
Data ptrotection: https://www.gettyimages.de/company/privacy-policy
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Service used: mapbox, MapBox Inc., 740 15th St NW, Washington, DC 20005, USA
Data ptrotection: https://www.mapbox.com/legal/privacy/
Opt-Out-Link: https://www.mapbox.com/legal/cookies
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Service used: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data ptrotection: https://policies.google.com/privacy?hl=de&gl=de
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de oder https://myaccount.google.com/
Legal Basis: Legitimate interest (Art. 6 para. 1 lit. f) GDPR)
Service used: Vimeo Inc., 555 West 18th Street New York, New York 10011, USA
Data ptrotection: https://vimeo.com/privacy
Opt-Out-Link: https://vimeo.com/cookie_policy
Legal Basis: Consent (Art. 6 para. 1 lit. a) GDPR)
On our online offering, users have the option of subscribing to our newsletter or any notifications via various channels (hereafter newsletter). Subject to legislative provisions, we only send out newsletters to recipients who have consented to receive the newsletter. We use a selected service-provider to send out our newsletter.
In order to subscribe to one of our newsletters, it is necessary to provide an e-mail address. If necessary, we collect additional data, such as an individual’s name, in order to provide our newsletter with a personal address.
Our newsletter is only sent out after the so-called double opt-in procedure has been completed. If visitors to our online offering decide to subscribe to our newsletter, they will receive a confirmation e-mail, which is used to prevent the misuse of false e-mail addresses and to exclude the possibility that a simple, possibly accidental click triggers the sending of the newsletter. Subscription to our newsletter can be terminated for the future at any time. An unsubscribe link (opt-out link) is included at the end of each newsletter.
In addition, we are obliged to provide proof that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and store their IP address and their log-in and log-out times.
Our newsletters are designed in such a way as to make it possible for us to gain insights into improvements, target groups or the reading behaviour of our subscribers. This enables us to use a so-called web beacon or a tracking pixel, which reacts to interactions with the newsletter; for example, on the basis of whether links are clicked, whether the newsletter is opened at all or at what time the newsletter is read. We may, for technical reasons, attribute this information to individual subscribers.
| Categories of Data Subjects: |
Newsletter subscribers |
| Categories of Data: | Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times) |
| Purposes of Processing: |
Marketing, customer retention and new customer acquisition, analysis and evaluation of the success of a campaign |
| Legal Basis: | Consent (Art. 6 para. 1 lit. a) GDPR) |
Service used: Salesforce.com, inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA
Privacy: https://www.salesforce.com/uk/company/privacy/
Our online offering provides the options of either contacting us directly or else obtaining information via various contact possibilities. In order for users always to have an overview of contacts, we use a management tool to process corresponding requests.
Whenever contact is made, we process the data of the person making the enquiry only to the extent needed to answer or process the enquiry. Depending on the way in which contact is made, the actual data processed may vary.
| Categories of Data Subjects: |
Enquirers |
| Categories of Data: | Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address). |
| Purposes of Processing: |
Processing of enquiries |
| Legal Basis: | Consent (Art. 6 para. 1 lit. a) GDPR), fulfilment or initiation of a contract (Art. 6 para. 1 lit. b) GDPR) |
Service used: Salesforce.com, inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA
Privacy: https://www.salesforce.com/uk/company/privacy/
Service used: Zendesk, Inc., 989 Market Street #300, San Francisco, CA 94102, USA
Privacy: https://www.zendesk.de/company/customers-partners/privacy-policy/
On our online offering, visitors have the option of being able to register for events and activities. The information we collect and which is required to both initiate and perform the contract is marked as mandatory information. Supplying any additional data is voluntary.
| Categories of Data Subjects: |
Participants, interested parties |
| Categories of Data: | Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), transaction data (bank details, invoices, payment history), contract data (e.g. subject matter of contract, duration) |
| Purposes of Processing: |
Contract initiation and performance |
| Legal Basis: | Contract initiation and execution (Art. 6 para. 1 lit. b) GDPR), consent (Art. 6 para. 1 lit. a) GDPR) |
On our website you have the possibility to arrange a test drive and/or a consultation appointment. For this purpose, the necessary personal data will be collected and transmitted to the dealer selected by you: Your name, title, e-mail address, preferred vehicle type, and, provided you would like your selected dealer to contact you by phone, phone number is also collected and transmitted as voluntary information. For general assurance that the appointment will take place as agreed, we will send you an appointment confirmation and a reminder.
This collection, storage, and transmission of the data is based on your voluntarily given consent within the meaning of Article 6 paragraph 1 sentence 1 lit. a) in conjunction with Article 7 of the GDPR. You can revoke this consent at any time by sending your revocation to datenschutz@hymer.com or Hymer GmbH & Co. KG, Datenschutzbeauftragter, Holzstr. 19, 88339 Bad Waldsee with effect for the future. In addition, you can also assert your rights against the dealer. Please contact the dealer of your choice.
We transmit the personal data of visitors to our online offering for internal purposes (e.g. for internal administration or to the HR department in order to comply with legal or contractual obligations). Internal data transmission or disclosure of your data is only carried out in the extent necessary for this purpose, subject to compliance with the relevant data protection regulations.
We are a globally active company with headquarters in Germany. The data of visitors to our online offering is stored in our centralised customer database in Germany, subject to compliance with the relevant data protection regulations; and it is processed within this framework for internal administrative purposes throughout the Group. No processing is carried out beyond stated administrative purposes.
| Legal Basis: |
Legitimate interests (Art. 6 para. 1 lit. f) GDPR) |
| Legitimate interests: | so-called small group privilege, centralised management and administration within the company, in order to exploit synergy effects, cost savings, increasing effectiveness |
| Recipient: |
https://www.erwinhymergroup.com/de/unternehmen/ueber-die-erwin-hymer-group |
FIn the event that we transfer internal Group data to a country outside the EEA for processing purposes, we will ensure that the processing carried out in the manner we intend is lawful. For this scenario, we have concluded standard data protection clauses that include a special arrangement involving appropriate technical and organisational measures; this is in order to protect the data of data subjects in the best possible way. A copy of the guarantee used can be downloaded here https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de
We principally store your data for as long as necessary in order to provide our services or to the extent envisaged by the European legislator of directives and regulations or another legislator in laws or regulations, which the data controller responsible for the processing is subject to. In all other cases we erase your personal data after completion of the relevant purpose. This does not include any data that we are required to continue to store in order to fulfil legal obligations (e.g. we are obligated owing to tax and commercial law storage obligations to keep documents in reserve such as e.g. contracts and invoices for a certain period of time)
We do not use automated decision-making or profiling pursuant to Art. 22 DSGVO.
Art. 6 1 lit. a GDPR is used by our company as the legal basis for processing activities, whereby we will obtain special consent for a particular processing purpose.
If the processing of personal data is necessary in order to perform a contract, to which the data subject is a contractual party; as, for example, would be the case with processing activities, which are necessary to deliver goods or supply any other service or consideration, then the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations as are needed to implement pre-contractual measures; for example, in the case of enquiries about our products or services.
If our company is subject to a legal obligation, under which the processing of personal data becomes necessary; such as, for example, to fulfil tax obligations, then the processing is based on Art. 6 I lit. c GDPR.
In rare cases, the processing of personal data might be necessary in order to protect vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were to be injured at our company and subsequently his name, his age, his health insurance details or other vital information had to be forwarded to a doctor, a hospital or some other third party. Then the processing would be based on Art. 6 I lit. d GDPR.
Finally, processing activities might be based on Art. 6 I lit. f GDPR. Processing activities not covered by any of the above legal bases would rely on this particular legal basis, where such processing is necessary in order to safeguard a legitimate interest of our company or of a third party; provided, however, that the interests, basic rights and basic freedoms of the data subject do not prevail. If the processing of personal data is based on Article 6 I lit. f GDPR our legitimate interest is to carry out our business activity for the benefit of the wellbeing of all of our employees and our customer.
| Right of Access: |
Under Article 15 of the GDPR, data subjects have the right to request confirmation regarding whether we are processing data relating to them. They can request information about this data as well as the additional information listed in Art. 15 (1) GDPR, as well as a copy of their data. |
| Right of Rectification: |
Under Art. 16 GDPR, data subjects have the right to request the rectification or completion of data concerning them and processed by us. |
| Right to Erasure: |
Data subjects have the right under Art. 17 GDPR to demand immediate erasure of the data concerning them. Alternatively, under Art. 18 GDPR, they may request us to restrict the processing of their data. |
| Right to Data Portability: | Under Art. 20 of the GDPR, data subjects have the right to request that the data they have supplied to us be made available and transferred to another data controller. |
| Right to lodge a complaint: | Data subjects also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 of the GDPR. |
| Right to Object: | If personal data is processed based on legitimate interests under Article 6 (1) sentence 1 lit. f) GDPR, data subjects have the right to object to the processing of their personal data under Article 21 GDPR, inasmuch as there are grounds for doing so arising from their particular situation or the objection is directed against direct advertising. In the latter case, data subjects have a general right to object, which will be acted on by us without the particular situation being stated |
A number of data processing activities are only possible with your express consent. You have the option of being able, at any time, to revoke consent that you have already granted. For this purpose, it would be sufficient to e-mail us an informal notice, using the following address: datenschutz@hymer.de. The lawfulness of any data processing carried out prior to the time at which consent is revoked remains unaffected by the revocation.
On our website you will find links to the online offers of other providers. We would like to point out here that we have no influence over the content of linked websites or, indeed, over the level of compliance with data protection regulations practised by the providers of those websites.
We reserve the right to adapt this privacy notice at any time in the event of changes to our online offering and in compliance with applicable data protection rules, so that it then meets legal requirements.
This Privacy Policy was created by DDSK GmbH
