Data Privacy Statement

This data protection declaration is issued by

WEGMANN automotive GmbH 
Rudolf-Diesel Strasse 6 
97209 Veitshöchheim

datenschutz@wegmann-automotive.com

(hereinafter also referred to as "Wegmann") fulfils its existing legal obligation to provide information pursuant to Art. 13 of the Basic Data Protection Regulation ("DS-GVO") with regard to the processing of personal data on the website www.alligator-valves.com. In the following, we therefore explain to you which of your personal data we process and in what way. Please contact us if you have any further questions. You will find our contact details above and at the end of this document.
 

1.      Information about the collection of personal data

In the following we provide information about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
The person responsible in accordance with Art. 4 No. 7 DS-GVO is WEGMANN automotive GmbH, Rudolf-Diesel Straße 6, 97209 Veitshöchheim (see our imprint). You can contact our data protection officer at datenschutz@wegmann-automotive.com or our postal address with the addition "The data protection officer". A contact can be found at the end of this data protection declaration. 
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us to answer your questions. We delete the data arising in this connection after storage is no longer necessary or restrict processing if there are legal storage obligations. The legal basis is Art. 6 para. 1 sentence 1 letter f DS-GVO ("legitimate interest").
If we wish to use commissioned service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.
We use CAPTCHA, which protects our website from spam and misuse. CAPTCHA prevents automated software (so-called bots) from carrying out abusive activities on the website, i.e. it checks whether the entries made are actually from a human being. To determine this, the following data is collected and processed:
- Referrer (address of the page on which the captcha is used)
- IP address of the user
- Google Account (if the user is logged into Google, this will be recognised and assigned)
- Input behaviour of the user (e.g. answering the CAPTCHA question, input speed into the form fields, order of selection of the input fields by the user) 
- Browser, browser size and resolution, browser plugins, date, language setting
- Presentation instructions (CSS) and scripts (Javascript) of the website
- Mouse or touch events within the page
The legal basis is Article 6 (1) sentence 1 letter f of the DS-GVO ("legitimate interest").
There is no automated decision-making in individual cases, including profiling pursuant to Art. 22 DS-GVO.

2. YOUR RIGHTS

You have the following rights in relation to the personal data concerning you:
              - Right to information,
              - Right of correction or deletion,
              - Right to restrict processing,
              - Right to object to the processing,
              - Right to data transferability.
Insofar as we base the processing of your personal data on the balancing of interests (Art. 6 Paragraph 1 S. 1 lit. f DS-GVO), you can lodge an objection to the processing. This is the case if the processing is not necessary, in particular, for the fulfilment of a contract with you. If you do so, please explain why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling reasons for continuing the processing.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

3. COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

If you use the website for informational purposes only, i.e. if you do not register, contact us or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO, legitimate interest):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Amount of data transmitted in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.

4. USE OF COOKIES

In addition to the above-mentioned data, cookies are stored on your computer when you use our website, if you give us your consent. 
Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information flows to the site that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
On the one hand we use technically necessary cookies. These cookies are necessary for good functionality of our website and cannot be switched off in our system. The legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO ("legitimate interest"). However, you can of course configure your browser settings according to your wishes and also reject such technically necessary cookies. Please note that you will then not be able to use our website.
Otherwise Art. 6 Paragraph 1 S. 1 lit. a DS-GVO is the legal basis for the use of cookies ("consent"). You can differentiate whether you give us consent for all cookies, only for certain types of cookies (e.g. performance cookies, statistics cookies, advertising/tracking cookies) or no consent at all. 

6. Google Tag Manager

This website uses the Google Tag Manager from Google. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager. 

Google also processes your personal data in the USA. Before giving your consent in accordance with Art. 49 Para. 1 letter a DS-GVO, we would like to point out in particular that in the USA, without an adequacy finding and without suitable guarantees, there may not be an adequate level of data protection, as data protection laws do not comply with the provisions of the DS-GVO, and in particular the rights of data subjects may not be enforceable.

7. Captcha

We use CAPTCHA, which protects our website from spam and abuse. CAPTCHA prevents automated software (so-called bots) from carrying out abusive activities on the website, i.e. it checks whether the entries made are actually from a human being. To determine this, the following data is collected and processed:

Referrer (address of the page on which the captcha is used)
IP address of the user
Google Account (if the user is logged into Google, this will be recognised and assigned)
Input behaviour of the user (e.g. answering the CAPTCHA question, input speed into the form fields, order of selection of the input fields by the user) 
Browser, browser size and resolution, browser plugins, date, language setting
Presentation instructions (CSS) and scripts (Javascript) of the website
Mouse or touch events within the page
The legal basis is Article 6 (1) sentence 1 letter f of the DS-GVO ("legitimate interest").

8. No Social Plug-Ins

We do not use social plugins. We only use links to our social media pages.

9. Storelocator

Our website uses a store locator so that you can quickly find our products at a retailer near you. 

To do this, we use Google Maps from Google Inc. which allows us to display interactive maps directly on the website and allows you to use the map function to find the nearest retailer based on your location for our products.

When you visit our site, no personal data is initially passed on to the provider. We provide you with the opportunity to communicate directly with the supplier via our map. Only if you give your consent will the provider receive the information that you have called up the corresponding website of our online offer. In addition, the data mentioned in the section "Collection of personal data when visiting our website" of this declaration is transmitted. This is done regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact Google to exercise this right.

Google also processes your personal data in the USA. Before giving your consent in accordance with Art. 49 (1) lit. a DS-GVO, we draw your attention in particular to the fact that in the USA there may not be an adequate level of data protection without an adequacy finding and without suitable guarantees, as data protection laws do not comply with the provisions of the DS-GVO, and in particular data subjects' rights may not be enforceable.

Further information on the purpose and scope of data collection and processing can be found in the provider's data protection declarations. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

10. FURTHER FUNCTIONS AND OFFERS OF OUR WEBSITE

In addition to the purely informative use of our website, we offer various services which you can use if you are interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.

In some cases we use external service providers to process your data. These have been carefully selected by us, checked and commissioned with regard to the data protection standards applicable there, are bound by our instructions and are checked regularly.

Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.

11. OBJECTION OR REVOCATION TO THE PROCESSING OF YOUR DATA

If you have given your consent to process your data, you can revoke it at any time. Such revocation will affect the permissibility of processing your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you. If you do so, please explain why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling reasons for continuing the processing.

Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your objection to advertising at the following contact details: datenschutz@wegmann-automotive.com.

12. RECIPIENTS OF THE DATA

We transmit your data to the specialist departments within Wegmann as far as this is necessary. 

The basis of authorisation for any further data transfer within the group is Art. 6 para. 1 sentence 1 letter f DS-GVO ("justified interest"). According to this, data processing is lawful if the processing is necessary to protect our legitimate interests, provided that the interests or fundamental rights of the data subject do not outweigh the data subject's interests. Recital 48 of the recitals to the DS-GVO specifies the legitimate interest in the transfer within a group of companies. According to this, transfer within a group of companies for internal administrative purposes with regard to the processing of customer data must be qualified as a legitimate interest on our part within the meaning of Art. 6 (1) sentence 1 letter f DS-GVO. 

In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. All requirements of Art. 28 DS-GVO are observed.

13. LOCATION OF THE DATA PROCESSING MEASURES

All processing of your personal data takes place either in Germany or in member states of the European Union. Your personal data will not be transferred by us to countries outside the member states of the European Union (so-called third countries) or to other international organisations, unless otherwise stated in this document. 

If we transfer personal data to service providers outside the EU, this will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or an agreement on the EU Commission's standard contractual clauses) are in place or if the data subject has given his or her consent (Art. 44 ff. DS-GVO). 

14. SECURITY / TECHNICAL AND ORGANISATIONAL MEASURES

We take all necessary technical and organisational measures, taking into account the requirements of Articles 24, 25 and 32 of the DS-GVO, to protect your personal data from loss, destruction, access, modification or distribution by unauthorised persons and misuse. 

For example, we comply with the legal requirements regarding the pseudonymisation and encryption of personal data, the confidentiality, integrity, availability and resilience of the systems and services related to the processing, the availability of personal data and the possibility of quickly restoring it in the event of a physical or technical incident, and the establishment of procedures for the regular review, assessment and evaluation of the effectiveness of the technical and organisational measures to ensure the security of the processing. 

Furthermore, we also observe the provisions of Art. 25 DS-GVO with regard to the principles of "privacy by design" (data protection through technology design) and "privacy by default" (data protection through data protection-friendly default settings).

15. Matomo (formerly Piwik)

1 - About Matomo
Matomo is an open source web analytics platform. A web analytics platform is used by a website owner to measure, collect, and analyze visitor data in order to understand and optimize the website. If you want to know more about what Matomo looks like, you can access a demo version at: demo.matomo.org.

2 - Purpose of the processing
Matomo is used to analyze the behavior of website visitors and to identify possible sources of errors. For example, pages not found, problems with search engine indexing and what content is viewed the most. Once the data is processed (For example, number of visitors reaching a 404 page or viewing only one page...), Matomo creates reports so that website owners can improve the website, for example, change the page layout, publish new content and more.
Matomo processes the following personal data:
Pick the data you use:
- Cookies
- IP address
- User ID
- User-defined sizes
- User defined variables
- Job ID
- User location

And also:
- Date and time
- Title of the page viewed
- URL of the page viewed
- URL of the previously viewed page
- Screen resolution
- Time in local time zone
- Files that were clicked and downloaded
- Link clicks to an external website
- Time taken to generate pages
- Country, region, city
- Main language of the browser
- User agent of the browser
- Session record, mouse events (movements, content forms and clicks)
- interactions
- Media interactions
- A/B testing

3 - Legal regulations
Matomo's processing of personal data is based on legal regulations.
The processing of your personal data, such as cookies, helps us to identify what works and what doesn't on our website. For example, it helps us to see if our way of communicating is appealing and how we can better organize the structure of the website. Our team benefits from processing your personal data and acts directly on the website. By processing your personal data, you can use a website that is always improving.
Without this data, we would not be able to provide you with the service we currently offer. Your data will only be used to improve the user experience on the website and to improve the search function.

4 - Recipients of personal data
The personal data obtained through Matomo will be sent to:
- Our Company and
- InnoCraft's Matomo Analytics Cloud, which is based in France. given.

5 - Details of transfers to a third country and safeguards.
Matomo data is hosted in France.

6 - Retention period or criteria for determining the retention period.
We retain Personal Data collected in Matomo for a period of 13 months in accordance with applicable French law.

7 - The rights of the data subject
As Matomo processes your personal data on the basis of legitimate interests, you may exercise the following rights:
- Right of access: you may obtain access to your personal data at any time.
- Right to erasure: you may at any time request us to erase any personal data we have processed about you.
- Right to object: you can object to the tracking of your personal data by using the following opt-out function:

8 – The right to lodge a complaint with a supervisory authority
If you think that the way we process your personal data with Matomo analytics is infringing the law, you have the right to lodge a complaint with a supervisory authority.

9 – Whether the provision of personal data is part of a statutory or contractual requirement; or obligation and possible consequences of failing to provide the personal data
If you wish us to not process any personal data with Matomo, you can opt-out from it at any time. There will be no consequences at all regarding the use of our website

10 – The existence of automated decision-making, including profiling and information about how decisions are made, the significance and the consequences
Matomo is not doing any profiling.

16. Usercentrics

The recipient of your data within the meaning of Art. 13 (1) (e) GDPR is Usercentrics GmbH. As part of order processing, WEGMANN automotive GmbH transmits personal data (consent data) to Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich, Germany, as processor. Consent data includes the following data: Date and time of the visit or consent / refusal, device information. The data is processed for the purpose of compliance with legal obligations (obligation to provide evidence pursuant to Art. 7 para. 1 GDPR) and the associated documentation of consent and thus on the basis of Art. 6 para. 1 lit. c) GDPR. Local storage is used to store the data. 
The consent data is stored for 1 year. The data is stored in the European Union. Further information on the data collected and contact options can be found at usercentrics.com/privacy-policy/.

17. Amendment of the Data Protection Declaration

The content of our privacy policy is regularly reviewed.

WEGMANN automotive reserves the right to change the privacy policy at any time with or without prior notice. Please inform yourself about any changes on your own initiative. Our most recent version of the document applies in each case.

Contact us:
Data protection officer of WEGMANN automotive GmbH:

DORNBACH GmbH Rechtsanwaltsgesellschaft

Anton-Jordan-Straße 1
56070 Koblenz - Germany

Telefon: +49 261 / 9431 134 (Mr. Dr. Alexander Birkhahn)
Telefon: +49 681 / 89197 1002 (Mr. Rouven Beck)
Telefax: +49 261 / 9431 111
datenschutz@dornbach.de

January 2024