Data protection

The protection of your information which identifies or may identify you, such as your name, telephone number, e-mail address or IP address (so-called ‘personal data’) is important to us. Therefore, we operate this website and the services offered on it in accordance with the valid data protection legislation, in particular the EU General Data Protection Regulation (‘GDPR’) and the Bundesdatenschutzgesetz [German Federal Data Protection Act] (‘BDSG’).

We would like to explain how we process your personal data in this context.

A. The controller responsible for the processing and its data protection officer

I. Name and contact details of the controller and its representative

MAN Financial Services GmbH
Oskar-Schlemmer Str. 19-21
D-80807 Munich

II. Name and contact details of the data protection officer

Our data protection officer’s e-mail address: datenschutz.mfs@vwfs.com

B. Processing of personal data

I. Requesting the website

When you request this website, it is necessary to process your personal data, such as your IP address. Further processing of personal data when using particular services and by using cookies is explained separately below. When this website is requested, we process personal data as follows:

a) Purpose of the processing
When you request this website, we process your personal data to make this website available to you and to guarantee that it works and that it is technically secure.

b) Legal basis of the processing
The processing of your personal data when you request this website occurs based on our legitimate interest.
We have balanced our interest in providing, operating and securing this website against your interest in keeping your personal data confidential. Your confidentiality interest is thereby overridden. It is not technically possible to provide the website without processing personal data. This also applies for its operation and security. The website’s security is also in your interests.

c) Recipients/Recipient categories of your personal data
We disclose your personal data to the following company as a technical service provider:

RaySono AG
Tumblingerstraße 32
80337 Munich

d) Personal data storage period
We store your data for 3 months.

e) Obligation to provide your personal data
You are not obliged to disclose your personal data. However, you will not be able to request this website without your personal data.

II. Cookies

When you request this website, your personal data may be processed by using so-called ‘cookies’. Cookies are text files which are stored on your end device and are necessary for certain functions of this website. You can configure your browser settings as you wish and reject, for example, the acceptance of third-party cookies or all cookies. We would like to point out that in doing so you may possibly not be able to use all of this website’s functions. In the context of using cookies, we process your personal data as follows:

a) Purpose of the processing
In the context of using cookies, we process your personal data to provide you with certain functions of this website.

b) Legal basis of the processing
In the context of using cookies, we process your personal data based on our legitimate interest.
We have balanced our interest in providing functions of this website that depend on cookies against your interest in keeping your personal data confidential. Your confidentiality interest is thereby overridden. It is not technically possible to provide the functions without processing personal data. At the same time, you have the option outlined above of preventing the processing of your personal data in the context of cookies.

c) Recipients/Recipient categories of your personal data
We disclose your personal data to the following company as a technical service provider:

RaySono AG
Tumblingerstraße 32
80337 Munich

d) Personal data storage period
We store your personal data for as long as this is necessary for using cookies for your respective request of this website.

e) Obligation to provide your personal data
You are not obliged to disclose your personal data. It is possible that not all of the functions of this website will be available to you without your personal data.

III. Contact form

a) Purpose of the processing
We process your personal data to deal with your respective request.

b) Legal basis of the processing
The processing of your personal data to deal with your request occurs based on our legitimate interest.
We have balanced our interest in providing the contact form against your interest in keeping your personal data confidential. Your confidentiality interest is thereby overridden. It is not technically possible to deal with your request without processing personal data.

c) Recipients/Recipient categories of your personal data
We do not set your personal data openly opposite no technical service provider.

d) Personal data storage period
We will store your personal data for as long as it is needed to deal with your respective request.

e) Obligation to provide your personal data
You are not obliged to disclose your personal data. The fields marked with a * are mandatory. Your respective request cannot be processed without this personal data. The other information is voluntary and may help us to process your request.

IV. Web analysis with Google Analytics

We use ‘Google Analytics’ on our website, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Google Analytics uses so-called ‘cookies’ which are text files placed on your end device to help the website analyse how you use the site. The information generated by the cookies regarding your use of this website will usually be transferred to a Google server in the USA and stored there. Through the IP anonymisation activated on this website, your IP address will be shortened by Google beforehand within the European Economic Area (European Union and other Member States). Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet use. The IP address sent by your browser as part of Google Analytics will not be linked to any other data held by Google.

You can prevent the storage of cookies by configuring your browser settings; however, you then may not be able to use all of the functions on our website fully. You can also prevent the data generated by the cookie related to your usage of the website (including your IP address) from being processed by Google by downloading and installing the browser plug-in available through the following link:
http://tools.google.com/dlpage/gaoptout?hl=de

You can prevent Google Analytics from collecting your data by clicking on the following link: Disable Google Analytics. . An opt-out cookie will be installed that prevents your data from being collected when you visit this website in future.

An opt-out cookie will be installed that prevents your data from being collected when you visit this website in future.

a) Purpose of the processing
We process your personal data in order to use Google Analytics.

b) Legal basis of the processing
The processing of your personal data for the use of Google Analytics occurs based on our legitimate interest.
We have balanced our interest in using Google Analytics against your interest in keeping your personal data confidential. Your confidentiality interest is thereby overridden. Google Analytics is considerably important for our website to operate cost-effectively. At the same time, you have the option outlined above of preventing the processing of your personal data in the context of Google Analytics.

c) Recipients/Recipient categories of your personal data
We disclose your personal data to Google.

d) Personal data storage period
We store your personal data for as long as this is necessary for using Google Analytics in connection with your respective visit to our website.

e) Involvement of third countries in the processing of your personal data
Google processes your personal data in the USA. The USA does not provide a sufficient level of data protection. However, the processing by Google takes place on the basis of an adequacy decision (EU US Privacy Shield) (Article 45 GDPR).

f) Obligation to provide your personal data
You are not obliged to disclose your personal data. If you have not used any of the functions mentioned above to disable tracking by Google Analytics, it is not possible to request this website without your personal data being processed in the context of Google Analytics.

C. Your rights as a data subject

You may withdraw consent with respect to data protection law at any time and with future effect; we will explain this in more detail in the declaration of consent. Processing carried out before a withdrawal shall remain unaffected by the withdrawal.

You have the right to request access at any time to your personal data that we process. Should your personal data be incorrect or incomplete, you have a right to rectification and completion. You may request that your personal data is erased at any time if we are not legally required or entitled to continue to process your data. If the legal prerequisites exist, you may request a restriction of the processing of your personal data.

You have the right to object to the processing if the data processing is carried out for the purposes of direct marketing or profiling. If the processing is carried out based on the balancing of interests, you may object to the processing on grounds which relate to your particular situation.

If the processing is carried out based on your consent or in the context of a contract, you have a right to portability of the data you have provided as long as this does not affect the rights and freedoms of other people.

You may exercise the rights stated above with respect to the processing of your personal data outlined in this Privacy Policy by e-mailing our data protection officer.

You also have the right to lodge a complaint with a supervisory authority at any time if you consider data processing to be in breach of the applicable laws.

D. Existence of automated decision-making, including profiling

Automated decision-making/profiling does not take place on this website.