Thank you for visiting our website and your interest in our company. The protection of your personal data is very important to us.
CROSSCAMP (hereinafter “we” or “us”) attaches great importance to the security of user data and compliance with data protection regulations. The CROSSCAMP website may contain links to websites of other providers to which this Data Protection Declaration does not apply. Which data the operators of these pages might collect is beyond our knowledge and influence. Information can be found in the data protection notice of the respective site. Below we inform you in detail about how we handle your data.
1. DEFINITIONS
The data protection declaration is based on the terminology of the General Data Protection Regulation (GDPR).
- “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”) (Art. 4 No. 1 GDPR). Your personal data includes information such as your master data (first and last name, address, and date of birth), your contact data (telephone number, e-mail address), your billing information (bank details), and much more.
- “Processing” means any operation or set of operations that is performed upon personal data, whether or not by an automatic process, such as collection, recording, organization, arrangement, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination, or another form of provision, comparison or combination, restriction, erasure, or destruction.
- A “data subject" means any identified or identifiable natural person whose personal data is processed by the data controller.
- A “data controller” means the natural or legal person, public authority, institution, or any other body that alone or jointly with others decides on the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by European Union or the law of the member states, a provision may be made for the data controller to be designated in accordance with European Union or the law of member states.
- A “data processor" means any natural or legal person, public authority, institution, or other body that processes personal data on behalf of the data controller.
- A “recipient” means any natural or legal person, public authority, institution, or other body to whom personal data is disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under European Union or the law of the member states shall not be considered as recipients.
- A “third party” means any natural or legal person, public authority, institution, or body other than the data subject, the data controller, the data processor, and the persons who, under the direct authority of the data controller or the data processor, are authorized to process the personal data.
- “Consent” shall mean any freely given specific and unambiguous expression of the will of the data subject, in an informed and unambiguous manner, in the form of a statement or any other unequivocal affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.
2. COLLECTION AND PROCESSING OF PERSONAL DATA
Using our internet pages is generally possible without any indication of personal data. However, if you wish to take advantage of special services offered by our company via our website, it may become necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we generally obtain the consent of the data subject.
3. PURPOSES OF COLLECTION – CATEGORY OF DATA – LEGAL BASIS FOR PROCESSING
3.1 Anonymous Data Collection
You can visit our site without actively providing personal information. However, we automatically save access data (server log files) with every visit to the website, such as the name of your internet service provider, the operating system used, the website from which you are visiting us, the date and duration of the visit, or the name of the requested file, as well as for security reasons, e.g. to identify attacks on our websites, the IP address of the computer used for a period of 7 days. This data is evaluated exclusively for the improvement of our offering and does not allow for any conclusions about your person. This data is not merged with other data sources. The legal basis for the processing of the data is Art. 6 paragraph 1 GDPR. We process and use the data for the following purposes: 1. Provision of the CROSSCAMP website, 2. Improvement of our websites and 3. Prevention and detection of errors/malfunctions and misuse of the websites. Data processing of this kind is either carried out in fulfillment of the contract for the use of the CROSSCAMP website or we pursue a legitimate interest in ensuring the functionality and error-free operation of the CROSSCAMP website and in adapting these web pages to the requirements of the users.
3.2 Use of Cookie Tracking
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on our websites. This is a standard internet technology for storing and retrieving login and other usage information for all users of the CROSSCAMP website. Cookies are small text files that are stored on your end device; they enable us to save user settings so that our web pages can be displayed in a format tailored to your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser upon your next visit (so-called permanent cookies).
You can set your browser so that you are informed about the placement of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or altogether. Furthermore, the cookies can be deleted afterwards to remove data that websites have stored on your computer. You can easily find instructions for this on the internet. The deactivation of cookies can lead to some limitations in the functionality of the CROSSCAMP websites.
3.3 Use of Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc.,1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”, which are text files placed on your computer that allow for an analysis of your use of the website. The information generated by the cookies about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
Preventing the storage of cookies
You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes established above.
IP Anonymization
We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within the member states of the European Union or in other contracting states of the agreement on the European Economic Area before it is transmitted to the USA.
Opposition to Data Collection
If you do not want Google to receive data from your browser when you visit the pages, here is the link to the opt-out solution for Google Analytics: http://tools.google.com/dlpage/gaoptout?hl=de , This plug-in prevents the browser from requesting the analytics code, so that Google does not receive any data when you visit the page. The plug-in is only available for Microsoft Internet Explorer 11, Google Chrome, Mozilla Firefox, Apple Safari, and Opera. According to Google, the browser blocks the Google Analytics script after installation. Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at http://www.google.com/intl/de/analytics/privacyoverview.html.
We would like to point out that on this website Google Analytics has been extended by the code “gat.anonymizeIp” in order to guarantee an anonymized recording of IP addresses (so-called IP-Masking).
Demographics in Google Analytics
This website uses the “Demographics" feature of Google Analytics. This makes it possible to create reports that contain statements about the age, gender, and interests of the site visitors. This data comes from interest-based advertising by Google as well as visitor data from third parties. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google Account or you can prohibit the collection of your data by Google Analytics altogether, as described in the section “Objection to Data Collection”.
3.4 Use of Google Remarketing
This website uses the Google Remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). This is a retargeting technology that enables us to re-target visitors to our website through targeted advertising on the websites of the Google advertising network. The insertion of the advertisement takes place through the use of so-called cookies.
For this purpose, cookies are placed on your computer, with the help of which third parties, including Google, record which of our web pages have been visited with your browser. With the help of this information, our ads can be presented to you at a later time on other websites, e.g. as part of a Google search or on websites of the Google network. Further information on data protection at Google and how remarketing works can be found at: https://www.google.de/intl/de/policies/privacy/. You can also deactivate the storage of cookies here through the settings of your browser and/or the collection in the context of Google Remarketing via https://www.google.com/policies/technologies/ads/widersprechen.
3.5 Use of Google AdWords
On our website we use Google Conversion Tracking, an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google AdWords places a cookie on your computer (“conversion cookie”) if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of our site and the cookie has not expired, we and Google can recognize that someone clicked on the ad and was redirected to our site. Each AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers are made aware of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they will not receive information that can be used to identify users personally.
If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies through a corresponding setting in your browser software (deactivation option). They will then not be included in the conversion tracking statistics. Further information on terms of use and data protection can be found at: http://www.google.de/policies/privacy/.
3.6 Use of Google Maps
We use Google Maps to display maps and to create directions. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using this website, you consent to the collection, processing, and use of data that was entered by you as well as automatically collected by Google, one of its representatives, or third parties.
The terms of use for Google Maps can be found at: https://www.google.com/intl/de_de/help/terms_maps.html .
You can find detailed information in the privacy section of google.com: Transparency, control options, and data protection regulations at https://policies.google.com/privacy.
3.7 Use of Google Tag Manager
This website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags. This means: No cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation was made at the domain or cookie level, it will remain in effect for all tracking tags as long as they are implemented with the Google Tag Manager.
You can find detailed information in the privacy section of google.com: Transparency, control options, and data protection regulations at https://policies.google.com/privacy.
3.8 Use of Social Media
Social media functions can be used on our website.
When accessing one of these pages, a connection to the respective social media servers can be established. They are informed that you have visited our website with your IP address. If you now comment, like, or tweet, etc. and you are logged in to your respective account, it may be possible for the social media to assign your visit to our website to you and your user account. We would like to point out that we, as the provider of these pages, have no knowledge of the content of the transmitted data or its use.
Diese Services are provided by the following companies:
• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
• Linkedin Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA
• YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
• Vimeo LCC, White Plains, Bundesstaat New York, USA
The purpose and scope of data collection and the further processing and use of the data by the providers, as well as your rights in this regard and settings options for the protection of your personal data can be found in the data protection notices of the respective providers:
• Facebook https://de-de.facebook.com/privacy/explanation
• Google https://www.google.de/intl/de/policies/privacy/
• Linkedin https://www.linkedin.com/legal/privacy-policy
• YouTube https://www.google.de/intl/de/policies/privacy/
• Vimeo https://vimeo.com/privacy
If you do not want the particular social media to associate your visit to our site with your account, you must log out of the relevant service before visiting our site.
3.9 Contact Form/ Inquiries
On our site you have the possibility to send us inquiries via contact form. Your data from the contact form (content of your inquiry, subject of your inquiry, and the date) including the contact data you entered there (name, surname, and email) will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. The legal basis for the collection and processing of data is Art. 6 paragraph 1 GDPR.
The data entered by you in the contact form remains with us until you request us to delete it, revoke your consent for storage, or the purpose for which the data was stored ceases to apply (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
3.10 E-mail Contact
If you send us inquiries or information by e-mail, your details (e-mail address, content of your e-mail, subject of your e-mail, and the date) including the contact details provided by you there (name, surname, possibly telephone number, address) will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent. The legal basis for the collection and processing of data is Art. 6 paragraph 1 GDPR.
The user is advised that e-mails can be read or changed without authorization and unnoticed on the transmission path. CROSSCAMP uses software to filter unwanted e-mails (spam filter). The spam filter can reject e-mails if they are wrongly identified as spam by certain characteristics.
The data entered by you contact form remains with us until you request us to delete it, revoke your consent for storage, or the purpose for which the data was stored ceases to apply (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
3.11 Competitions/ Special Offers
On our site you have the opportunity to participate in competitions and/or special offers. Here you participate voluntarily and independently of the other offers on our website. When registering for the competition, you will send us your e-mail address (and, if applicable, your first and last name, telephone number, date of birth, address). The purpose of the survey is to carry out the competition and to determine the winner and send the prize. The legal basis is Art. 6 paragraph 1 GDPR. Further data is not collected or only collected on a voluntary basis.
However, in the event of a win, the participants agree to provide first names (last name only with initial letters) as well as photos for editorial texts.
We only store the data provided by you until the competition has been completed. Mandatory statutory provisions – in particular retention periods – remain unaffected.
3.12 Newsletter
On our website you have the possibility to subscribe to our company’s newsletter. In this way we inform our customers and business partners at regular intervals about company offerings. For this purpose, we require a valid e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data is not collected or only collected on a voluntary basis. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered for the first time by a data subject for the newsletter using the double opt-in procedure. We use this data exclusively to send the newsletter and do not pass it on to third parties. The legal basis for the collection and processing of data is Art. 6 paragraph 1 GDPR.
When subscribing to the newsletter, we also save the IP address assigned by the internet service provider (ISP) of the computer system used by the data subject at the time of subscription as well as the date and time of subscription. The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a data subject at a later date and therefore serves to protect us.
You can revoke your consent to the storage of the data, the e-mail address, and its use for sending the newsletter at any time, e.g. via the. Alternatively, you can send your unsubscribe request at any time via e-mail to info@erwinhymergroup.com. The legality of the data processing operations already carried out shall not be affected by the revocation. After a revocation, this personal data is deleted by the data controller. Unsubscribing from the newsletter is interpreted as an automatic revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after the newsletter has been canceled.
3.12.1 Newsletter Tracking
The newsletters contain so-called tracking pixels. A tracking pixel is a thumbnail image embedded in e-mails sent in HTML format to enable log file recording and log file analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded pixel-code we can see whether and when an e-mail was opened by the data subject and which links in the e-mail were accessed by the data subject.
Such personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by us on the basis of legitimate interests in order to optimize the sending of the newsletter and to adapt the content of future newsletters even better to the interests of the data subject. The legal basis is Art. 6 paragraph 1 GDPR.
3.13 Career Section/ Online Application
On our site you have the possibility to use the career section and/or to submit applications via e-mail. The personal data (master data, contact data, attachments such as cover letter, curriculum vitae, certificates, etc.) of applicants are collected and processed for the purpose of handling the application procedure. Data may also be processed electronically. This is in particular the case when an applicant submits relevant application documents to the data controller, for example, via e-mail or via a web form available on the website. If the person in charge of processing concludes an employment contract with an applicant, the data that has been transmitted will be stored for the purpose of implementing the employment relationship, taking into account the statutory provisions. If the person in charge of processing does not conclude an employment contract with an applicant, the application documents will be deleted automatically six months after the announcement of the rejection, unless the deletion is opposed by other justified interests of the person in charge of processing. Another justified interest in this context is e.g. the obligation to provide evidence during proceedings according to the General Equal Treatment Act (AGG). The legal basis for the collection and processing of data is Art. 6 paragraph 1 GDPR.
In some cases, an external service provider can be commissioned with the selection process. This will be explicitly mentioned in the job advertisement. In this case the data protection declaration of the named service provider also applies.
3.13.1 Applicant Pool
When applying online, you have the possibility to expressly agree that we may store and use your data beyond the current application procedure. With this consent, we can then inform you of new job advertisements or vacancies that may be of interest to you.
4. TRANSMISSION OF DATA
4.1 Transmission internally, within the Erwin Hymer Group
We transmit your data internally to the administration department, personnel department, works council, and payroll department only to fulfill our contractual or legal obligations. A data transmission or disclosure of your data will only take place to the extent necessary for this purpose in compliance with the relevant data protection regulations.
4.2 Transmission company-wide/group-wide
CROSSCAMP is a brand of the Erwin Hymer Group, a globally active company based in Germany. The data you send us will be stored in our centralized customer database in Germany and forwarded within the group for administrative purposes. If data is exchanged within the group/company, this is done in order to fulfill a contract or as a condition of use for the websites. In addition, there may be an interest in disclosing this data for internal, administrative purposes. Should the processing of your data take place outside Europe, for example, in India, Brazil, Russia, China, Switzerland, Singapore, or the USA, this transfer will be carried out in compliance with all applicable data protection laws and especially in accordance with Art. 44 f. GDPR.
Data Transfer for the Purpose of a Test Drive/Consultation at the Dealer
Via our website you have the possibility to transmit your data to a dealer to arrange a test drive/consultation. For this purpose, personal data is collected and transmitted to the dealer selected by you: Name, title, e-mail address; if you wish to be contacted by telephone or mail by your selected dealer, the telephone number and/or your address is also collected and transmitted as voluntary information. This collection and transmission of data takes place on the basis of a contract initiation (Art. 6 paragraph 1 sentence 1 lit. b GDPR) to carry out a test drive/consultation at the selected dealer. The transmitted data will be processed by the dealer for the purpose of arranging a test drive/consultation with you via the contact method you have chosen. The data provided by you will be deleted by us after transmission to the dealer. The dealer regularly deletes the data after the end of the test drive, unless other retention periods (e.g. tax retention periods) conflict with this. In addition, you can also assert your rights against the dealer. To do this, contact your selected dealer.
4.3 Transmission to Third Parties
In order to provide the appropriate applications and services, we transfer your data to certain third parties (so-called “data processors”) who provide external services for us. For example, newsletter services, IT providers, tax office, etc. These only process the data in accordance with our instructions. Furthermore, they are prohibited from using this data for their own commercial purposes that do not correspond to the agreed upon purposes.
A transfer to other third parties may take place in order to fulfill our obligations (authorities, banks, social security institutions, etc.).
We must disclose personal data if we are obliged to do so as part of ongoing legal proceedings, on the basis of an order, by law or under applicable law (Art. 6 paragraph 1 lit. f GDPR).
We only pass on your personal data if:
• You have given your express consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR,
• The transfer is necessary to assert, exercise, or defend legal claims in accordance with Art. 6 paragraph 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not passing on your data,
• There is a legal obligation to do so in accordance with Art. 6 paragraph 1 sentence 1 lit. c GDPR, as well as
• This is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 paragraph 1 sentence 1 lit. b GDPR.
Should the processing of your data take place outside Europe, for example, in India, Brazil, Russia, China, Switzerland, Singapore or the USA, this transfer will be carried out in compliance with all applicable data protection laws and especially in accordance with Art. 44 f. GDPR.
4.4 Transfer to a Third State or International Organization
A transfer to a third State or an international organization shall not take place.
5. EXISTENCE OF AN AUTOMATED DECISION MAKING PROCESS INCLUDING PROFILING
As a responsible company, we avoid automatic decision making or profiling.
6. CONCLUDING PART OF THE DATA PROTECTION DECLARATION
6.1 Duration of Storage
As a matter of principle, we store your data for as long as is necessary for the provision of our service or if this is provided for by the European Directive and Regulatory Body or another legislator in laws or regulations to which the person responsible for processing is subject. In all other cases, we will delete your personal data once the purpose has been fulfilled, with the exception of data that we need to retain to fulfill legal obligations (e.g. we are required by tax and commercial law to retain documents such as contracts and invoices for a certain period of time).
6.2 Technical Security
We use technical and organizational security measures in order to protect your data managed by us against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
For reasons of security and to protect the transmission of confidential content, such as requests that you send to us as the site operator, this site uses SSL (Secure Socket Layer) encryption in conjunction with the highest encryption level supported by your browser. Generally, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in the search bar of your browser.
If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.
We would like to point out that data transmission on the internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
6.3 Legal basis of the Processing
Art. 6 I lit. a GDPR serves our company as a legal basis for processing activities for which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the fulfillment of a contract to which the data subject is party, such as processing activities necessary for the supply of goods or any other service or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations necessary for the implementation of pre-contractual measures, for example, in cases of inquiries about our products or services.
If our company is subject to a legal obligation that makes it necessary to process personal data, for example, to fulfill tax obligations, the processing is based on Art. 6 I lit. c GDPR.
In rare cases, the processing of personal data might be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were to be injured and his name, age, health insurance details, or other vital information had to be passed on to a doctor, hospital, or other third party. Then the processing would be based on Art. 6 I lit. d GDPR.
Finally, processing activities could be based on Art. 6 I lit. f GDPR. Processing activities that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, unless the interests, fundamental rights, and freedoms of the data subject prevail. If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is to carry out our business activities for the benefit of the well-being of all our employees and our customers.
6.4 Legal or Contractual Provisions for the Provision of Personal Data; Necessity for the Conclusion of the Contract; Obligation of the Data Subject to Provide Personal Data; Possible Consequences of Not Providing Data
We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may result from contractual regulations (e.g. information on the contractual partner). For a contract to be concluded sometimes it may be necessary that a data subject provides us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences would be if the personal data were not provided.
6.5 Notice for Minors
This online offering is not intended for children under 16 years. Persons who have not completed their 16th year of life may not transmit personal data to CROSSCAMP without the consent of a parent or guardian.
6.6 Rights of Data Subjects
You have the right to information about the data stored by us, the duration of the data, the purpose, and the legal basis of the storage as well as the origin and recipient of transmissions. Incorrect data must be corrected, and unlawfully stored data or data that is no longer required must be deleted. In addition, the data subject has a right of objection, a right to limit processing, and the right to data transferability.
This information will be created at your request. This information is free of charge.
They also have the right to lodge a complaint directly with a supervisory authority.
6.7 Revocation of your Consent to Data Processing
Some data processing activities are only possible with your express consent. You have the possibility to revoke an already given consent at any time. All you need to do is send an informal message to datenschutz@erwinhymergroup.com by e-mail to us. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.
6.8 Responsible Body and Contact Details of the External DPO
Responsible Body:
Erwin Hymer Group SE
Holzstraße 19
88339 Bad Waldsee
Tel.: +49 7524 999 0
E-Mail: datenschutz@erwinhymergroup.com
Contact Details of the External Data Protection Officer:
Stefan Fischerkeller
Deutsche Datenschutzkanzlei
Tel.: +49 7542 949 21 01
E-Mail: fischerkeller@ddsk.de