EnglishChange
  1. Data Protection Statement App

Data protection statement

General Information

KIRCHHOFF Automotive/KIRCHHOFF Group appreciates your interest in our company. We take the protection of your personal data seriously and hereby inform you about the type and scope of the personal data we collect when you visit our app. The following data protection declaration applies to the K>APP.

The use of our app is generally possible without providing personal data. Regarding how personal data (such as name, address, or e-mail addresses) is collected on our pages, this is always done, as much as possible, on a voluntary basis. This data will not be passed on to third parties without your expressed consent.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete data protection against access by third parties is not possible.

All personal data will be collected, processed, and used in accordance with the applicable regulations for the protection of personal data.

 

Use of Cookies

This app uses cookies. Cookies are text files that are placed and stored on a computer system via an internet browser.

The use of cookies makes it possible for the websites and servers visited to distinguish the individual browser of the person, separate from others.

Through the use of cookies, KIRCHHOFF Automotive/the KIRCHHOFF Group can improve the user-friendliness of this app and provide services that would not be possible without cookies. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website, because this is handled by the website and the cookie stored on the user's computer system.

By changing the settings of one’s respective internet browser, the cookie settings for all internet pages can be prevented. Cookies that have already been set can be deleted again. This is possible in all common internet browsers, but the function of the website is then partially restricted.

 

Analysis Tools and Advertising

Matomo (formerly Piwik)
This app uses the open source web analytics service Matomo, an InnoCraft company (InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand). Matomo uses "cookies". These are text files that are stored on your device and enable an analysis of your use of the app.

For this purpose, the information generated by the cookie about the use of this app is stored on our server. The IP address is anonymized before storage.

Matomo cookies remain on your terminal device until you delete them. The storage of Matomo cookies is voluntary and only takes place with your consent in accordance with Art. 6 para. 1 lit. a DSGVO.

The information generated by the cookie about the use of this app will not be disclosed to third parties.

 

Purpose of the Data Collection and Transmission (if Applicable)

Personal data is only collected by us if you provide it voluntarily, for example in the context of an inquiry. Data is entered in the areas described below:

Contact forms
The contact form offers interested parties the opportunity to send inquiries directly to KIRCHHOFF Automotive. Due to legal regulations, the app also contains information (e.g. in the imprint) that enables a quick electronic contact to our company (e.g. via e-mail address). If a person contacts us by e-mail or via a contact form, the personal data transmitted by the person is automatically stored. Data transmitted during this contact are stored for the purpose of processing or contacting the person(s) concerned. In most cases, the e-mails sent are delivered to general mailboxes of departments, representatives, or assistants of senior staff. Unless required for processing, this personal data is not passed on to third parties outside the group’s companies.

Application
For the processing of personal data in the application process, an additional privacy policy has been created, which can be viewed before submitting the data.

Online presence in social media
We provide online presences on social networks in order to be able to communicate with the interested parties and inform them about us.

User data may be processed by the service provider outside the European Union. This may result in risks for the users, because, for example, the enforcement of the rights of the users could be made more difficult.

As a rule, the service provider processes the users' data for market research and advertising purposes. For example, the interests of users resulting from their usage behaviour can be used to place advertisements within and outside the platforms that could correspond to the interests of the users. Cookies are usually stored on the users' computers for this purpose. In addition, data can also be stored in the usage profiles independently of the devices used (especially if the users are members of the respective platforms and are logged in to them).

We inform you about the following regarding our processing of your personal data within the framework of the online presences provided by us. In its ruling of 5 June 2018, the ECJ confirmed the joint responsibility of the service providers and the site operator.

The social media site you visit offers you the opportunity to respond to our posts, comment on them, create a user post yourself, and send us private messages with personal concerns. The data you provide in this context and which may be accessible to us (e.g. username, pictures, interests if applicable, contact data) will be used by us exclusively for the purpose of customer and interest communication. It is in our interest to provide you with a platform on which we can display up-to-date information, and where you can address your request(s) to us and receive a prompt reply.

We do not process any data other than the basic functions through the site. Please note that the service provider may use tracking tools and cookies independently of our use of the site.

For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers.

Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, you can contact us.

 

Name and Address of the Person Responsible for Processing

The responsible party regarding the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is KIRCHHOFF Automotive GmbH. Contact details can be found in the imprint.

Name and address of the data protection officer
The data protection officer of the controller is:

External:
VIA Consult GmbH, Mrs. Dr. Hanni Koch
Martinstraße 25
57462 Olpe
+49 (2761) 83668 - 0
datenschutz@via-consult.de

Any data subject may contact our data protection officer at any time with questions or suggestions regarding data protection.

 

Legal Basis of the Processing

If we obtain consent for certain processing operations, this is based on Art. 6 I lit. a DS-GVO. If the processing of personal data is necessary for the performance of a contract, e.g. for the delivery of goods or for pre-contractual measures, e.g. in the case of inquiries, the processing is based on Art. 6 I lit. b DS-GVO. If our company is subject to a legal obligation by which a processing of personal data becomes necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DS-GVO. If a processing of personal data is not based on any of the aforementioned legal grounds, we process data to protect a legitimate interest of our company pursuant to Art. 6 (I) (f) DSGVO (improvement of the performance of business activities). In this context, we always ensure that no protectable interest of the affected party, which outweighs our legitimate interest, conflicts with this.

Duration for which personal data is stored
The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfilment of the contract or the initiation of the contract.

If you send applications to KIRCHHOFF Automotive, please note the additional data protection declaration for career applications, for information on the storage period.

If you send us an e-mail via the contact form, your e-mails will be received by the respective mailboxes and will be archived there for an unlimited period of time.

Your data, which is stored in the course of the use of our online presences, is - as much as possible for us - deleted when the operation of the site is discontinued.

Data subject rights
You have the right at any time to obtain information about the data we have stored about you and the purpose for which we have stored it. You can revoke your consent to the storage or use of your personal data in writing at any time. In addition to the revocation, you have the right to demand the correction as well as the restriction of processing, blocking, and/or deletion of your data. Furthermore, you have the right to object to processing for legitimate interest.

You have the right to contact the relevant supervisory authority (for NRW: The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia in Düsseldorf) for complaints. In addition, you have the right to receive the data you have submitted in a machine-readable format for transmission.

If you have any questions regarding the processing of your personal data, you can also contact us directly (responsible office: see imprint). For all questions and requests for information, applications, or complaints, you can also contact our external data protection officers directly.

 

Security

KIRCHHOFF Automotive/the KIRCHHOFF Group uses technical and organizational security measures in order to protect your provided data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

Our security measures are not only continuously improved in line with technological developments, but are also protected by an integrated information security management system (ISMS).

 

Whistleblowing

On our homepage under "Corporate Governance" > "Code of Conduct", it is described and outlined how violations can be reported. The reports are made by phone or email. Anonymous reporting is also possible. However, the whistleblower can voluntarily provide their identity, in order to receive feedback. The report is sent directly to a KIRCHHOFF Automotive authorized representative (Global Compliance Expert, Compliance Delegate, Managing Director, responsible manager) or to an ombudsman (external lawyer).

Reports usually include the identity of person(s) concerned by the reported event, as well as data of the whistleblower for non-anonymous reports. Other personal data is only collected if necessary to fulfill the purpose and is therefore legally permissible.

The processing of the personal data of both the (non-anonymous) whistleblower and the person(s) concerned by the reported event, serves the purpose of preventing violations of the law and of investigating violations in the interests of the injured party.

The processing of personal data takes place to protect legitimate interests in accordance with Art. 6 Para. 1 f) GDPR. The sincere interest here is to maintain compliance: compliant processes at KIRCHHOFF Automotive and equal and fair opportunity to conduct investigations.

If the whistleblowing is confirmed, the responsible manager and/or the HR Manager are informed. Possibly, personal data will then also be sent to government authorities, e.g. Prosecutor or courts. In the event of a breach affecting the global organization, the personal data will be transmitted to the Global Compliance Expert in Germany or to the countries where KIRCHHOFF Automotive operates and where investigations can take place. In all other cases, no personal data is shared to a third-party country. Any recipients only have access to the information necessary for their respective task(s).

The duration of the storage of the personal data of the person(s) concerned by the whistleblowing depends on the specific circumstances: personal data will be deleted if there is no initial suspicion or if the whistleblowing is deemed unfounded as soon as the corresponding determination has been made. If the internal investigation has confirmed the notification, the personal data will be deleted at the time when all legal measures have been completed. The endorsements in the personnel file resulting from confirmatory examinations, are subject to the deletion periods applicable to personal files.

The storage duration of personal data for a (non-anonymous) whistleblower corresponds to the storage duration of the relevant process according to the previous paragraph.

In the event of deliberately incorrect or defamatory notices by whistleblowers, deletion periods apply accordingly with regard to the investigations into the misconduct of the whistleblower.

Natural persons from whom we process personal data, are affected in the sense of General data protection regulation (GDPR). The rights of the data subject apply (Art 15-21 GDPR).