1. Name and contact details of the data controller responsible for the processing of the data and of the internal Data Protection Officer

This Data Privacy Policy applies to the data processing by:

Data controller:
CMS Automotive Trading GmbH (hereinafter: CMS)
SAP-Allee 2, Gewerbepark
68789 St. Leon Rot
Germany
Email: info@cms-wheels.de
Phone: +49 6227 35838-0
Fax: +49 6227 35838-33

The internal Data Protection Officer of CMS can be reached at the above address, for the attention of
Mr Holger Hermannsfeld or at Datenschutz@cms-wheels.de.

2. Gathering and storing of personal data and kind and purpose of its use

a) When visiting the website
When our website www.cms-wheels.de is retrieved, information is sent automatically from the browser used on your end device to the server of our website. This information is stored temporarily in a so-called logfile. The following information is gathered in the process without any action by you and stored until its automatic deletion:
• IP address of the requesting computer,
• date and time of the access,
• name and URL of the retrieved file,
• website from which the access was made (referrer URL),
• browser used and if applicable, operating system of your computer and the name of your access provider.

The listed data will be processed by us for the following purposes:
• ensuring that a connection with the website is established without problems,
• ensuring easy use of our website,
• analysis of system security and stability, and
• further administrative purposes.

The legal basis for the data processing is Art. 6 (1) sent. 1, lit. f) GDPR. Our justified interest results from the purposes of the data gathering as listed above. The gathered data will never be used by us for the purpose of identifying you personally.

In addition, we use cookies and analysis services during visit to our website. You can find more information about this under Sec. 4 and Sec. 5 of this Data Privacy Policy.

b) When subscribing to our newsletter
Provided that you have given your explicit consent pursuant to Art. 6 (1) sent. 1 lit. a) GDPR, we use your email address to send you our newsletter on a regular basis. Entering an email address is sufficient for receiving the newsletter.

Unsubscribing from it is possible at any time, for example, via a link at the bottom of each newsletter. In alternative, you are also welcome to send your unsubscribe request by email to Datenschutz@cms-wheels.de at any time.

c) When using our contact form
For queries of any kind, we offer you the option to contact us by means of a form that is provided on our website. When doing so, it is necessary to specify a valid email address, so that we know who has sent the query and so that we can answer it. Further information can be entered voluntarily.

The data processing for the purpose of contacting us is based on Art. 6 (1) sent. 1, lit. a) GDPR and the voluntary consent you have given.

The personal data we gather and that is required for the use of the contact form will be deleted automatically after completion of the query sent by you.

3. Transfer of data
Your personal data will not be transferred to third parties for any purposes other than those listed in the following.

We transfer your personal data to third parties only if:
You have granted your explicit consent for this pursuant to Art. 6 (1) sent. 1 lit. a) GDPR, the transfer is required pursuant to Art. 6 (1) sent. 1 lit. f) GDPR to assert, exercise or defend against legal claims and if there is no reason to believe that you have an overriding interest qualifying for protection in the non-transfer of your data, in the case that there is a legal obligation for the transfer pursuant to Art. 6 (1) sent. 1 lit. c) GDPR and if the data transfer is legally permissible as well as required pursuant to Art. 6 (1) sent. 1 lit. b) GDPR in order to process contractual relationships.

4. Cookies
We use cookies on our webpage. These are small files that are created automatically by your browser and that are stored on your end device (laptop, tablets, smartphone, etc.) when you visit our website. Cookies do not cause any damage on your end device and do not contain any viruses, Trojans or other malware.

The cookie stores information that arises respectively in connection with the specific end device that is used. This does not mean, however, that we will thereby obtain direct knowledge of your identity.

The use of cookies serves firstly for making the use of our offer more convenient for you. Accordingly, we set so-called session coolies to recognise that you have previously visited individual pages of our website. These will be automatically deleted when you leave our website.

In addition and also in order to optimise user-friendliness, we use temporary cookies that are stored on your end device for a certain period of time. If you return to our page to use our services, it will be automatically detected that you have visited us before, and which entries and settings you have made, so that you will not have repeat these entries.

Furthermore, we use cookies to record statistics of the use of our website and to analyse our offer for the purpose of optimising it for you (see Sec. 5). These cookies enable us to detect automatically upon a repeated visit to our page that you have visited us previously. These cookies will be deleted automatically after a respectively defined period of time.

The data processed by cookies is required for the purposes of protecting our and third parties’ legitimate interests pursuant to Art. 6 (1) sent. 1 lit. f) GDPR.

Most browsers are configured to automatically accept cookies. You can configure your browser in such a way, however, that no cookies are stored on your computer or that a note will appear every time before a new cookie is set. Deactivating cookies completely, however, can entail that you will not be able to use all features of our website.

5. Analysis tools
a) Tracking tools
The tracking measures used by us that are listed below are employed on the basis of Art. 6 (1) sent. 1, lit. f) GDPR. By using these tracking measures, we want to provide a design that is appropriate to needs and ensure the continuous optimisation of our website. Furthermore, we use tracking measures to record statistics of the use of our website and to analyse our website for the purpose of optimising it for you. These interests are deemed legitimate in the definition of the aforementioned regulation.

The respective data processing purposes and data categories are defined in the respective tracking tools.

i) Google Analytics
For the purpose of a design as appropriate to need and the continuous optimisation of our webpages, we use Google Analytics, an advertising analysis service of Google Inc. (https://www.google.de) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised user profiles are created and cookies (see Sec. 4) are used. The information generated by the cookie about your use of this website, such as:
• browser type/version,
• operating system used,
• referrer URL (webpage visited before),
• host name of the accessing computer (IP address, anonymised),
• time of the server request,

is transferred to a server of Google in the USA and stored there. The information is used to analyse your usage of the website, compile reports about website activities, and perform additional services for the website operator relating to the use of the website and of the internet, for the purposes of market research and design of these webpages as appropriate to needs. This information may also be transferred to third parties if and insofar, as this is mandated by law or to the extent, as third parties process the data on commission. Your IP address will never be combined with other data of Google Inc. The IP addresses are anonymised so that an attribution is not possible (IP masking).

You can prevent the installation of cookies by means of corresponding settings in the browser software; however, we inform you that you might then not be able to use all features of this website.

In addition, you can prevent that the data generated by the cookie relating to your usage of the website from being gathered (incl. your IP address) and prevent the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com).

In alternative to the browser add-on, especially in the case of browsers on mobile end devices, you can furthermore prevent the data gathering by Google Analytics by clicking on this link . An opt-out cookie will be set that prevents the future gathering of your data when you visit this website. The opt-out cookie works only in this browser and only for our website and it will be stored on your device. If you delete the cookies from the browser, you have to reset the opt-out cookie.

You can find more information on data privacy in the context of Google Analytics, for example, in Google Analytics Help (https://support.google.com).

ii) Google AdWords Conversion Tracking
To compile statistics of the use of our website and to analyse these for the purpose of optimising our website for you, we furthermore use Google Conversion Tracking. In this process, Google AdWords sets a cookie (see Sec. 4) on your computer if you have referred to our website by a Google ad.

These cookies will expire after 30 days and they are not used to identify you personally. If the user visits certain pages of the AdWords customer’s website and if the cookie has not expired yet, Google and the customer can detect that the user has clicked on the ad and referred to our page.

Each AdWords customer receives a different cookie. Cookies can consequently not be traced via the websites of AdWords customers. The information gathered by means of the conversion cookies is used to create conversion statistics for AdWords customers, which have decided to use conversion tracking. The AdWords customers find out the total number of users, who have clicked on their ad and been redirected to a page that has a conversion tracking tag. However, they do not obtain any information by which the user can be personally identified.

If you do not want to participate in tracking, you can reject that the cookie required for this is set – for example, via the browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by adjusting your browser settings, so that cookies from the “www.googleleadservices.com” domain are blocked. You can find Google’s data privacy policy regarding conversion tracking here (https://services.google.com).

iii) Matomo
We use the open source software Matomo to analyse and statistically evaluate the utilisation of the website. Cookies are used for this purpose (see Sec. 4). The information generated by the cookie about the website utilisation will be transferred to our servers and summarised in pseudonymous user profiles. The information is used to analyse your use of the website and to enable a website design as appropriate to need. The information will not be is transferred to third parties.

Google will never combine your IP address with other data relating to the user. The IP addresses are anonymised so that an attribution is not possible (IP masking).

Your visit of this website is currently being recorded by Matomo web analysis. Click here (https://matamo.org) and your visit will not be recorded anymore.

6. Social media plug-ins
On the basis of Art. 6 (1) sent. 1, lit. f) GDPR, we use social plugins of the social networks Facebook, Twitter and Instagram on our website to make our company known on these channels. The promotional purpose behind this is deemed a legitimate interest in the definition of the GDPR. The responsibility for the operation in compliance with data privacy regulations is assured by the respective provider. These plug-ins are integrated by us using the so-called double-opt-in method to facilitate the best possible protection for the visitors of our website.

a) Facebook
Our website uses social media plug-ins of Facebook to make its use more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is an offer of Facebook.

When you call up a page of our internet appearance that contains such a plug-in, your browser will establish a direct connection with the servers of Facebook. The content of the plug-in is transmitted by Facebook directly to your browser and integrated by it in the website.

Through integration of the plug-ins, Facebook receives the information that your browser has called up a corresponding page of our internet appearance, even if you do not have a Facebook account or if you are presently not logged into Facebook. This information (including your IP address) is transmitted directly by your browser to a server of Facebook in the USA and stored there.

If you are logged in at Facebook, Facebook can directly attribute the visit of our website to your Facebook account. If you interact with the plug-ins, for example by pressing the “LIKE” or “SHARE” button, the relevant information will likewise be transferred directly to a server by Facebook and stored there. The information will furthermore be published on Facebook and displayed to your Facebook friends.

Facebook can use this information for the purposes of advertising, market research and design of Facebook pages as appropriate to need. For this purpose, profiles regarding usage, interests and relationship profiles are created by Facebook, e.g. to analyse your usage of our website with regard to the ads displayed to you on Facebook, inform other Facebook users about your activities on our website, and to perform further services related to the use of Facebook.

If you do not want that Facebook attribute the data gathered via our internet appearance to your Facebook account, you have to log out of Facebook before your visit to our website.

You can find details on the purpose and scope of the data gathering, the further processing, and use of the data by Facebook, as well as your rights in this regard and optional settings for the protection of your privacy in Facebook’s data privacy policies at (https://www.facebook.com)

7. Rights of data subjects
You have the right:
according to Art. 15 GDPR to request information about the personal data relating to you that is processed by us. You can obtain information in particular about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data has been or is being disclosed, the planned storage period, the existence of a right to correction, erasure, restriction of processing or the right to object, the existence of a right to lodge complaint, the right to obtain information of the source of your data if it has not been gathered on our website, and about the existence of an automated decision-making process including profiling and, if applicable, explanatory information about the related details;

according to Art. 16 GDPR to demand the immediate correction of inaccurate data or the completion of incomplete personal data about you that is stored by us;

according to Art. 17 GDPR to demand the erasure of your personal data stored by us, provided that the processing is not required to exercise the right to free speech and information, fulfil a legal obligation, or for reasons of public interest or to assert, enforce or defend against legal claims;

according to Art. 18 GDPR to demand the restriction of the processing of your personal data to the extent, as you deny the correctness of the data or the processing is illegitimate but if you reject the deletion of the data and we no longer need the data, meanwhile you require the data to assert, enforce or defend against legal claims or you have objected to the processing according to Art. 21 GDPR;

according to Art. 20 GDPR to demand being provided with your personal data that you have made available to us in a structured, common and machine-readable format or demand the transmission of the data to another data controller;

according to Art. 7 (3) GDPR to revoke your consent previously given to us at any time. This entails that we may no longer continue with the data processing that was based on this consent in the future.

according to Art. 77 GDPR to lodge complaint with a supervisory authority. For this purpose in the normal case, you can contact the supervisory authority at the place of your residence or place of work or at the registered office of our company.

8. Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sent. 1, lit. f) GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, provided that there are reasons resulting from your personal situation or insofar as the objection is aimed against direct marketing. In case of the latter, you have a general right to object, which we will adhere to without specification of a particular situation.

If you would like to exercise your right of revocation or objection, it is sufficient to send an email to Datenschutz@cms-wheels.de

9. Data security
During the website visit, we use the common SSL procedure (Secure Socket Layer) in combination with the respectively highest encryption level that is supported by your browser. This is usually a 256-bit encryption. If your browser does not support a 256-bit encryption, we will instead use 128-bit v3 technology. You can tell whether any particular page of our internet appearance is transmitted with encryption by the key or closed lock symbol displayed in the lower status bar of your browser.

We additionally use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or access by unauthorised persons. Our security measures are being continuously improved according to technological progress.

10. Currentness and change of this Data Privacy Policy
This Data Privacy Policy is currently valid in the status of May 2018.