Data Protection
Privacy statement
It is important to us that you are fully informed about the personal data that we collect when you use our online offers and services, and are familiar with how we use them.
Wherever DEKRA processes personal data, such processing is carried out for the purposes defined in this data privacy statement.
Processing of personal data
Responsible Authority
DEKRA SE
Handwerkstr. 15
70565 Stuttgart
Handwerkstr. 15
70565 Stuttgart
Visiting our website
We record and save your computer's IP address in order to send the contents of our website visited by you to your computer (e.g. texts, pictures, and files provided for downloading, etc.) (cf. Art. 6 (1) lit. b GDPR). We also process these data to identify and pursue any misuse. Legal basis in this case is Art. 6 (1) lit. f GDPR. In this context, our legitimate interest in data processing is to ensure the due functioning of our website and the business transacted via the Website.
Other purposes
We also process personal data that you provide voluntarily. The data processed by us in this context include the data of customers, employees, and suppliers to the extent necessary for the purposes specified within the scope of this data privacy statement.
In as far as we process your data as described above for the purpose of accepting and processing your inquiry, appointment, or (newsletter) order, you are contractually bound to make these data available to us. We are unable to process your request without the data.
Where you have given your consent to the processing of personal data (cf. Art. 6 (1) lit. a GDPR), you can withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent up to the time of withdrawal of consent.
Contact via forms
As part of the contact with DEKRA (e.g. via forms or a-mail) personal data is collected. On our website we provide forms for various requests, such as contact with DEKRA, forms for commissioning, forms for bookings, forms for the creation of offers, forms for newsletter subscriptions and others (e.g. to order information material).
Which data is collected within each form, is evident in the respective form. This data is only saved and used for the purpose of answering your request as well as for the contact and therefore technical administration of the data. Legal basis for the processing of this data is our legitimate interest on the answering of your request according to Art. 6 para. 1 lit. f GDPR. If your contact aims the completion of a contract, Art. 6 para. 1 lit. b GDPR also applies for the processing of the data. Your data will be deleted after completion of processing of your request. The process is completed as soon as the matter concerned is finally clarified and if there are no legal retention requirements opposed.
Transfer to third parties
We generally transfer your data to the relevant DEKRA company where it is processed to deliver the service and support you requested.
This means that information may also be processed by other legal entities of the DEKRA Group. However, such processing is limited to the extent required for the purposes defined in this data privacy statement or to which the other legal entity acting as a service provider / processor has to follow the instructions given by the controller.
These service providers / processors are bound by instructions. Given this, they are subject to our requirements, which include processing of your data exclusively in line with our instructions and in compliance with the applicable Data Protection Act. In particular, they are contractually bound to treat your data with strict confidentiality, and are not permitted to process data for other purposes than the ones agreed.
Data transfer to the data processor is effected on the basis of Art. 28 (1) GDPR.
We will not sell your data to third parties or otherwise share them for commercial purposes.
Through the integration of external content (YouTube, Vimeo, Google, Facebook), data such as IP address, browser and Javascript content can be forwarded to the named third party providers when a page is loaded. If you do not want a third party provider to obtain information about you, do not consent to the processing of Marketing & Social Media cookies. As a result, you will not be able to use these functions on our website.
Beyond the above, we will transfer your personal data to prosecution authorities and, if applicable, damaged third parties without your explicit consent where this is necessary for clarifying illegal use of our services or for legal prosecution. However, such a transfer will only take place if there is concrete evidence of illegal conduct or misuse. Transfer of your data may also take place where this contributes to enforcing the conditions of use or other agreements. We are also under legal obligation to provide information to certain public bodies on request. These comprise prosecution authorities, authorities prosecuting offences punishable by a fine, and financial authorities.
The transfer of these data is based on our legitimate interest in fighting misuse, prosecuting criminal acts, and securing, asserting, and enforcing claims unless our interests are overridden by your rights and interests in the protection of your personal data, Art. 6 (1) lit. f GDPR.
Security
DEKRA takes appropriate technical and organizational measures to protect any personal data you provide to DEKRA from accidental or intentional manipulation, loss, destruction, or access by unauthorized parties. This also applies to any external services purchased. We verify the effectiveness of our data protection measures and continuously improve them in line with technological development. Any personal data entered are encrypted during transfer using a secure encryption process.
Cookies
In order to make our Internet presence more user-friendly and ensure that it meets your needs as well as possible, we use cookies in some areas. A cookie is a small file that is saved locally on your computer as soon as you visit a website. Cookies also allow us to analyze the use of our website. Decide by yourself which cookies you allow or refuse. You can change your decision at any time.
For more information see our data privacy settings.
Web Analysis Using Matomo
This website uses Matomo (
www.matomo.org
) for web analysis. This is a service offered by the provider InnoCraft Ltd., 150 Willis St., 6011 Wellington, New Zealand. Matomo uses small text files called “cookies”, which are saved on your computer and make the analysis of your use of the website possible. For this purpose, the usage information stored in the cookie (including the IP address in abbreviated form) is transmitted to our servers and saved for use analysis purposes.
Matomo does not transmit the data to any server which is outside our control. You can prevent the use of cookies by changing your browser settings accordingly. We would like to point out, however, that doing so may prevent you from enjoying the full functionality of this website.
The legal basis for the use of Matomo is point (f) of Art. 6 (1) of the GDPR. The data is then processed in order to analyze user behavior and to evaluate the use of the individual components of the website. The purpose is the constant optimization of the website and its user-friendliness. These purposes constitute the legitimate interest in the sense of point (f) of Art. 6 (1) of the GDPR. The user’s interest in protecting their personal data is safeguarded by the anonymization of the IP address. The data is not used at any point to personally identify the user and it is not merged with any other data.
The data is erased once it is no longer required for our purpose.
Right to object
If you do not agree to the saving and analysis of your data regarding your visit as described above, you have the right to object to it.
You can save an opt-out cookie by clicking below. This cookie is valid for two years. Please note that you will need to repeat the opt-out procedure again if you delete your cookies, delete the opt-out cookie, or if you change your computer or web browser. Save Matomo Opt-Out Cookie
If you do not agree to the saving and analysis of your data regarding your visit as described above, you have the right to object to it.
You can save an opt-out cookie by clicking below. This cookie is valid for two years. Please note that you will need to repeat the opt-out procedure again if you delete your cookies, delete the opt-out cookie, or if you change your computer or web browser. Save Matomo Opt-Out Cookie
Google Analytics
To the extent that you have given your consent, this website uses Google Analytics, a web analysis service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and saved there.
Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and saved there.
We use the technical enhancement "Google Signals", which allows cross-device tracking. This enables an assignment of an individual website visitor to different end devices. However, this only happens if the visitor has logged into a Google service when visiting the website and at the same time has activated the "personalized advertising" option in their Google account settings.
IP address anonymization is enabled. Due to IP anonymization, your IP address will be truncated by Google within the Member States of the European Union or another state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Purpose and legal basis of the processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
The legal basis for the use of Google Analytics is your declaration of consent according to point (a) of Art. 6 (1) of the GDPR.
Storage period
The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached, takes place automatically once a month.
The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached, takes place automatically once a month.
Recipients
Recipients of the data are/could be
Recipients of the data are/could be
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR).
- Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
- Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.
Third country transfer
The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. With the European Commission's adequacy decision of July 10, 2023, the USA is considered a safe third country under data protection law. To ensure an appropriate level of data protection, we have furthermore concluded EU standard contractual clauses with the service provider.
Right to withdrawal
You can withdraw your consent at any time with effect for the future by changing the DATA PRIVACY SETTINGS. The lawfulness of the processing carried out based on the consent until the revocation, remains unaffected.
You can withdraw your consent at any time with effect for the future by changing the DATA PRIVACY SETTINGS. The lawfulness of the processing carried out based on the consent until the revocation, remains unaffected.
You can also prevent the storage of cookies by changing your browser settings to prevent the saving of cookies. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by
a. Not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to disable Google Analytics HERE.
b. downloading and installing the browser add-on to disable Google Analytics HERE.
For more information on Google Analytics' terms of use and Google's privacy policy, please visit
https://marketingplatform.google.com/about/analytics/terms/us/
and
https://policies.google.com/?hl=en
.
Meta Tracking Pixel
If you have given your consent, a tracking pixel from Meta (Meta Platforms Ltd., 4 Grand Canal Square, Dublin 2, Ireland) is used on this website.
Scope and purpose of the processing
The pixel reports to Meta which actions you have performed on our website and may provide potentially identifying data (including details about app/browser, language settings, time, IP address, advertising ID). With this data, Meta can recognize that you have visited our website, what you have clicked on, and if you have clicked on a link on Facebook or Instagram that connects you with our website. The data collected is anonymous to us as the operator of this website; we cannot derive any conclusions about the identity of the users. However, Meta stores and processes the data, making a connection to the respective user profile possible and using the data for its own advertising purposes, according to the data use policy. This enables Meta to facilitate the placement of advertisements on platforms like Facebook and Instagram. We, as the site operator, cannot influence this use of data.
Purposes and legal basis of processing
We do not receive data about you or other users from Meta, but only statistics that show us, aggregated for all users in a certain period, how they have used our offers and ads on other Meta platforms (Facebook, Instagram). This allows the effectiveness of the advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
When transferring data collected by the pixel, we act as so-called "Joint Controllers" with Meta Platforms Ireland under Art. 26 GDPR. We have entered into a separate agreement for this (see here:
https://www.facebook.com/legal/controller_addendum
). Meta alone is responsible for further processing. If you exercise your rights to access, deletion, etc., Meta Platforms Ireland is responsible within the scope of joint responsibility for implementing your rights.
The legal basis for this data processing is your consent in accordance with point (a) of Article 6(1) GDPR
Retention period
The data will be deleted by DEKRA when it is no longer needed for our purposes. According to Meta, the information sent to Meta by the Meta Pixel is currently stored for 180 days, then encrypted and anonymized. DEKRA has no influence on this process.
Third country transfer
The company Meta is based in California, USA. The transfer of data to the USA and access by US authorities to the data stored by Meta cannot be ruled out. With the adequacy decision of the European Commission of July 10, 2023, the USA is considered a data protection safe third country. To achieve an adequate level of data protection, the data transfer to the USA is also based on standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/terms/dataprocessing
Withdrawal
You can revoke your consent at any time with effect for the future by accessing the privacy settings and changing your selection there. The legality of the processing based on consent before its withdrawal remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict functionalities on this and other websites. More information about Meta Pixel can be found in Meta's privacy policies:
https://www.facebook.com/privacy/policies/cookies/
LinkedIn (Insight Tag)
Provided you have given your consent, a tracking tag will be placed by LinkedIn (LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland) when you visit this website.
Scope and purpose of the processing
We collect information on the visitors to our website with the help of the LinkedIn Insight Tag. If a website visitor is registered with LinkedIn, we can analyze the key professional data (e.g. career stage, size of company, country, location, sector and job title) of our website visitors to enable us to target our website more effectively to the specific target groups. Furthermore, LinkedIn Insight Tags also help us to measure whether the visitors to our webpages are making a purchase or performing another action (conversion measurement). Conversion measurement can also take place across devices (e.g. from PCs to tablets). In addition, the LinkedIn Insight Tag offers a retargeting function, which helps us to show the visitors to our website targeted advertising off the website in a process in which, according to LinkedIn, the advertising recipient is not identified. LinkedIn itself also records what are known as log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are truncated or (if they are being used to reach LinkedIn members across devices) hashed (pseudonymized).
The legal basis for this data processing is your consent in accordance with point (a) of Article 6(1) GDPR.
Retention period
LinkedIn erases the direct identifiers of LinkedIn members after seven days. The remaining pseudonymized data is subsequently erased within 180 days.
Third country transfer
The operator of LinkedIn, Microsoft, is based in Washington, USA. The transfer of data to the USA and access by US authorities to the data stored by Meta cannot be ruled out. With the European Commission's adequacy decision of July 10, 2023, the USA is considered a safe third country under data protection law. In order to establish an appropriate level of data protection, data transfer to the USA is furthermore based on standard contractual clauses of the EU Commission. You will find details here:
https://www.linkedin.com/legal/l/dpa
and here:
https://www.linkedin.com/legal/l/eu-sccs
Withdrawal
You may withdraw your consent at any time with future effect by opening the
data privacy settings
and changing the option you have selected. This shall not affect the lawfulness of processing based on consent before its withdrawal. You may also object to the analysis of user behavior and targeted advertising through LinkedIn at the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
. In addition, LinkedIn members can manage the use of their personal data for advertising purposes in their account settings.
Microsoft Clarity
Provided you have given your consent, a tracking tag will be placed by Microsoft Clarity. The responsible party for users in the EU/EEA and Switzerland is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Scope and purpose of processing
Microsoft Clarity uses cookies and similar technologies to analyze how you use our website. This includes collecting information about user behavior and their end devices, such as IP addresses (anonymized), screen sizes, device types, browser information, locations (country only), preferred languages and mouse events (movement, position, clicks). Texts that you enter are not recorded by us. This data helps us create heatmaps and visitor recordings, showing scrolls, cursor movements, and clicks/taps, to visually represent website usage patterns and improve our site's design and functionality.
Microsoft Clarity uses cookies and similar technologies to analyze how you use our website. This includes collecting information about user behavior and their end devices, such as IP addresses (anonymized), screen sizes, device types, browser information, locations (country only), preferred languages and mouse events (movement, position, clicks). Texts that you enter are not recorded by us. This data helps us create heatmaps and visitor recordings, showing scrolls, cursor movements, and clicks/taps, to visually represent website usage patterns and improve our site's design and functionality.
Legal basis for this data processing is your consent in accordance with point (a) of Article 6(1) GDPR.
Retention period
Recordings data is retained for 30 days. Any labeled or favorited recordings are retained for 13 months. Heatmaps data is retained for 13 months.
Recordings data is retained for 30 days. Any labeled or favorited recordings are retained for 13 months. Heatmaps data is retained for 13 months.
Third country transfer
Microsoft Corporation, the operator of Microsoft Clarity, is based in Washington, USA. Data transfer to the USA and access by US authorities to the data stored by Microsoft cannot be ruled out. The European Commission's adequacy decision of July 10, 2023, considers the USA a safe third country under data protection law. Data transfer to the USA is also based on EU Commission's standard contractual clauses. Details can be found here .
Microsoft Corporation, the operator of Microsoft Clarity, is based in Washington, USA. Data transfer to the USA and access by US authorities to the data stored by Microsoft cannot be ruled out. The European Commission's adequacy decision of July 10, 2023, considers the USA a safe third country under data protection law. Data transfer to the USA is also based on EU Commission's standard contractual clauses. Details can be found here .
Withdrawal
You can withdraw your consent at any time with effect for the future by changing the Data privacy settings . The lawfulness of processing based on consent before its withdrawal remains unaffected. You can also prevent cookie storage by changing your browser settings. Blocking all cookies may restrict functionalities on this and other websites.
You can withdraw your consent at any time with effect for the future by changing the Data privacy settings . The lawfulness of processing based on consent before its withdrawal remains unaffected. You can also prevent cookie storage by changing your browser settings. Blocking all cookies may restrict functionalities on this and other websites.
Hotjar
We use Hotjar, an analysis software of Hotjar Ltd. ("Hotjar"), to better understand the interests of our users and to tailor our web offer accordingly. We use this analysis tool on the basis of your consent (pursuant to Art. 6 para. 1 p.1 lit. a GDPR), which we asked for when you accessed our website.
Scope and purpose of processing
Hotjar works with cookies and other technologies to collect information about the behavior of our users and about their end devices (in particular, IP address of the device (collected and stored only in anonymized form), screen size, device type (unique device identifiers), information about the browser used, location (country only), language preferred to view our web offer, mouse events (movement, position and clicks), keyboard strokes, but no specific text). Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar to identify individual users or merged with other data about individual users.
The service allows us to create so-called heatmaps of the use of our website. This records scroll, cursor movement and clicks/taps and, on this basis, creates a graphical representation of the use of our website by all users. Heavily used areas are displayed in a different color than areas that are used less. This tool also allows us to create so-called Visitor Recordings. The live recordings of activity capture
• HTML changes (our website and usage)
• Cursor and scroll movement
• Changes in browser display (size)
It is also possible to make these recordings across sites. The recording will then start on the first website where Hotjar is embedded. Texts that you enter are not recorded by us. We suppress the recording of these texts.
Retention period
The cookies that Hotjar uses have different "lifetimes"; some remain valid for up to 365 days, and some remain valid only during the current visit.
Third country transfer
For the purpose of analyzing certain technical data and for data processing and/or storage functions, Hotjar works with a limited number of trusted external service providers. These service providers have been carefully selected by Hotjar and meet high data protection and security standards. To the extent that these service providers process personal data in a third country, Hotjar enters into EU standard contractual clauses on our behalf and, if necessary, agrees on further contractual measures with these service providers. Data is disclosed to the service providers only to the extent necessary to provide the services offered, and Hotjar contractually obligates them to keep confidential all data disclosed to them by Hotjar and to use personal data only in accordance with Hotjar's instructions. For more information, please see
Hotjar's privacy policy here
.
Withdrawal
You can withdraw your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. For more information, please visit
https://www.hotjar.com/de/legal/policies/do-not-track/
. Furthermore, you have the option to determine in our
privacy settings
which types of cookies you allow or reject on this website.
Cookies
Embedding of social media plugins
Deletion of data
Rights concerning the processing of personal data
Amendment of this data privacy statement
Data Protection Officer