Privacy Policy
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
ToJa Nutzfahrzeuge GmbH & Co KG
Kamper Str. 62
47445 Moers
E-Mail: info@toja-nfz.de
Data Protection Officer:
EU-CON BeraterForum GmbH
Waldfeuchter Str. 266
52525 Heinsberg
E-Mail: r.nowack@eu-con.net
1. Privacy Policy
We appreciate your visit to our website and your interest in our offerings. Protecting your personal data is a top priority for us. In this privacy notice, we explain how we collect your personal data, what we do with it, for what purposes and on what legal grounds this occurs, and what rights and claims you have in this regard.
Our privacy notice for the use of our website and the privacy policy of ToJa Nutzfahrzeuge GmbH & Co KG do not apply to your activities on the websites of social networks or other providers that you can access via links on our website. Please refer to the websites of these providers for their privacy policies.
2. Collection and Processing of Your Personal Data
a. When you visit our websites, we store certain information about the browser and operating system you are using, the date and time of your visit, the access status (e.g., whether you were able to access a webpage or received an error message), your use of website features, any search terms you may have entered, the frequency with which you visit individual webpages, the names of files accessed, the amount of data transferred, the website from which you accessed our websites, and the website you visit from our websites, whether by clicking on links on our websites or by entering a domain directly into the address bar of the same tab (or window) of your browser in which you opened our websites. In addition, for security reasons—in particular to prevent and detect attacks on our websites or attempts at fraud—we store your IP address and the name of your Internet service provider for a period of seven days.
b. We store other personal data only if you provide it to us, e.g., as part of a registration, a contact form, a chat, a survey, a contest, or to fulfill a contract, and even in these cases only to the extent permitted by your consent or applicable legal provisions (see Section 7).
c. You are under no legal or contractual obligation to provide your personal data. However, certain functions of our websites may depend on the provision of personal data. If you do not provide personal data in such cases, this may result in functions being unavailable or available only to a limited extent.
3. Purposes of Use
a. We use the personal data collected when you visit our websites to ensure the most convenient user experience possible and to protect our IT systems from attacks and other illegal activities.
b. To the extent that you provide us with additional personal data—e.g., as part of a registration, a chat, a contact form, a survey, a contest, or to execute a contract—we use this data for the purposes stated, for customer management purposes, and—where necessary—for the processing and billing of any business transactions, in each case to the extent required for such purposes.
c. For other purposes (e.g., displaying personalized content or advertising based on your usage behavior), we and, where applicable, selected third parties use your data to the extent that you provide your consent within the framework of our Consent Management System.
d. We also use personal data to the extent that we are legally obligated to do so (e.g., storage to fulfill commercial or tax-related retention obligations, disclosure pursuant to an official or court order, e.g., to a law enforcement agency).
e. In addition, we process your personal data to the extent necessary to protect our legitimate interests. For example, we continuously tailor the features and content of our websites to your needs based on your usage behavior, and we use your personal data for internal billing purposes.
4. Transfer of Personal Data to Third Parties; Social Plug-ins; Use of Service Providers
a. Our websites may also contain third-party offers. If you click on such an offer, we will transfer data to the respective provider to the extent necessary (e.g., the fact that you found this offer on our site and, if applicable, additional information you have already provided on our websites for this purpose).
b. If we use so-called “social plugins” from social networks such as Facebook and Twitter on our websites, we integrate them as follows:
When you visit our websites, the social plugins are deactivated, meaning no data is transferred to the operators of these networks. If you wish to use one of the networks, click on the respective social plugin to establish a direct connection with the server of the respective network. If you have a user account with the network and are logged in at the time the social plug-in is activated, the network can associate your visit to our websites with your user account. If you wish to avoid this, please log out of the network before activating the social plug-in.
When you activate a social plug-in, the social network transmits the content made available through it directly to your browser, which then integrates it into our websites. In this situation, data transfers may also take place that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers that occur between the network and your system, and your interactions on that platform are governed exclusively by the privacy policy of the respective network. The social plug-in remains active until you deactivate it or delete your cookies (see Section 5.d).
c. If you click on a link to an offer or activate a social plug-in, personal data may be transferred to providers in countries outside the European Economic Area that, from the perspective of the European Union (“EU”), do not guarantee an “adequate level of protection” for the processing of personal data in accordance with EU standards. Please keep this in mind before clicking on a link or activating a social plugin, thereby triggering the transfer of your data.
5. Cookies
a. Cookies may be used when you visit our websites. Technically speaking, these are so-called HTML cookies and similar software tools such as Web/DOM Storage or Local Shared Objects (so-called “Flash cookies”), which we collectively refer to as cookies.
b. Cookies are small files that are stored on your desktop, laptop, or mobile device when you visit a website. They can be used, for example, to determine whether a connection has already existed between the device and the websites, to take your preferred language or other settings into account, to offer you certain functionalities (e.g., an online store), or to identify your interests based on your usage. Cookies may also contain personal data.
c. Whether and which cookies are used when you visit our websites depends on which areas and features of our websites you use and whether you consent to the use of cookies that are not technically necessary in our Consent Management System.
6. Sicherheit
Wir setzen technische und organisatorische Sicherheitsmaßnahmen ein, um Ihre durch uns verwalteten Daten gegen Manipulationen, Verlust, Zerstörung und gegen den Zugriff unberechtigter Personen zu schützen. Wir verbessern unsere Sicherheitsmaßnahmen fortlaufend entsprechend der technologischen Entwicklung.
d. The use of cookies also depends on the settings of the web browser you are using (e.g., Microsoft Edge, Google Chrome, Apple Safari, Mozilla Firefox). Most web browsers are set by default to automatically accept certain types of cookies; however, you can usually change this setting. You can delete existing cookies at any time. You can delete Web/DOM Storage and Local Shared Objects separately. You can find out how this works in the browser or on the device you are using by consulting the manufacturer’s instructions.
e. Consent to, as well as the rejection or deletion of, cookies is tied to the device used and also to the specific web browser in use. If you use multiple devices or web browsers, you can configure your preferences or settings differently for each one.
f. If you choose not to use cookies or delete them, you may not be able to access all features of our websites, or certain features may be available only to a limited extent.
8. Löschung Ihrer personenbezogenen Daten
Ihre IP-Adresse und den Namen Ihres Internet Service Providers, die wir aus Sicherheitsgründen speichern, löschen wir nach sieben Tagen. Im Übrigen löschen wir Ihre personenbezogenen Daten, sobald der Zweck, zu dem wir die Daten erhoben und verarbeitet haben, entfällt. Über diesen Zeitpunkt hinaus findet eine Speicherung nur statt, soweit dies gemäß den Gesetzen, Verordnungen oder sonstigen Rechtsvorschriften, denen wir unterliegen, in der EU oder nach Rechtsvorschriften in Drittstaaten, wenn dort jeweils ein angemessenes Datenschutzniveau gegeben ist, erforderlich ist. Soweit eine Löschung im Einzelfall nicht möglich ist, werden die entsprechenden personenbezogenen Daten mit dem Ziel markiert, ihre künftige Verarbeitung einzuschränken.
7. Legal Basis for Processing
a. If you have given us your consent to process your personal data, this constitutes the legal basis for the processing (Art. 6(1)(a) GDPR).
b. The legal basis for processing personal data for the purpose of entering into or fulfilling a contract with you is Article 6(1)(b) of the GDPR.
c. To the extent that the processing of your personal data is necessary to fulfill our legal obligations (e.g., for data retention), we are authorized to do so pursuant to Art. 6(1)(c) GDPR.
d. In addition, we process personal data for the purposes of pursuing our legitimate interests as well as the legitimate interests of third parties pursuant to Article 6(1)(f) of the GDPR. Maintaining the functionality of our IT systems, the (direct) marketing of our own and third-party products and services (to the extent this is not done with your consent), and the legally required documentation of business contacts are such legitimate interests. In the context of the necessary balancing of interests, we take into account, in particular, the nature of the personal data, the purpose of processing, the circumstances of processing, and your interest in the confidentiality of your personal data.
Data Subject Rights
a. As a data subject, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR).
b. If you have consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. The lawfulness of the processing of your personal data up to the point of withdrawal remains unaffected by the withdrawal. Likewise, further processing of this data based on another legal basis, such as to fulfill legal obligations (see section “Legal Bases for Processing”), remains unaffected.
c. Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Art. 6(1)(e) GDPR (data processing in the public interest) or Art. 6(1)(f) GDPR (data processing based on a balancing of interests). If you object, we will continue to process your personal data only to the extent that we can demonstrate compelling legitimate grounds for doing so that override your interests, rights, and freedoms, or to the extent that the processing serves the establishment, exercise, or defense of legal claims. If we process your personal data for direct marketing purposes to pursue legitimate interests based on a balancing of interests, you also have the right to object to this at any time without providing a reason.
d. We ask that you direct your claims or statements, if possible, to the following contact address: markschies@toja-nfz.de
e. If you believe that the processing of your personal data violates legal requirements, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).
10. Newsletter
If you subscribe to a newsletter offered on our website, the data you provide when signing up will be used solely for the purpose of sending you the newsletter, unless you consent to further use of your data. You can cancel your subscription at any time by using the unsubscribe option provided in the newsletter.
11. Transfer of Data to Recipients Outside the European Economic Area
a. When using service providers (see Section 4.d.) and transferring data to third parties with your consent (see Section 3.c), personal data may be transferred to recipients in countries outside the European Union (“EU”), Iceland, Liechtenstein, and Norway (the “European Economic Area”) and processed there, in particular in the United States and India.
b. From the EU’s perspective, the following countries offer an adequate level of protection for the processing of personal data in accordance with EU standards (so-called adequacy decision): Andorra, Argentina, Canada (limited), the Faroe Islands, Guernsey, Israel, the Isle of Man, Japan, Jersey, New Zealand, Switzerland, and Uruguay. With recipients in other countries, we agree to the application of EU Standard Contractual Clauses, binding corporate rules, or other permissible mechanisms to establish an “adequate level of protection” in accordance with legal requirements. We will be happy to provide you with information on this via the contact details listed in section 9.d. above.
12. Inquiries via MEETOVO
We use the software solution provided by MEETOVO Software GmbH, Robert-Koch-Straße 8, 21423 Winsen (Luhe), Germany, to process inquiries. The provider operates in accordance with the legal requirements of Article 28 of the GDPR. The strictest confidentiality of your data is therefore ensured at all times.
When you submit an inquiry to us, a direct connection is established between your browser and the provider’s server when you access the inquiry page. This informs the provider that you have visited our site using your IP address. The IP address is anonymized and deleted after 7 days. When you submit an inquiry via the embedded form, the personal data you enter that is necessary for the inquiry (email address, first and last name, mobile phone number or landline number) is transmitted to the provider, stored on their servers, and forwarded to us via email. All other form entries are transmitted for analysis purposes as soon as they are entered, provided you consent to this. The collection of this data is necessary to process the inquiry. Without this processing, you cannot submit inquiries.
This processing is carried out in accordance with Article 6(1)(b) of the GDPR to fulfill our contractual obligations and provide our services, as well as on the basis of our legitimate interests in handling inquiries quickly and effectively, in accordance with Article 6(1)(f) of the GDPR.
The provider deletes your data if it is no longer necessary. The provider reviews the necessity of the data every two years. Otherwise, however, the data is deleted no later than 5 years after the last inquiry. Further information on this can be found in the provider’s privacy policy at: https://meetovo.de/datenschutz
As of: November 2024