The protection of your personal data is important to us. Therefore, Knorr-Bremse processes your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and further applicable laws on data protection and data security.
This privacy notice details how we process your personal data when you use the Knorr-Bremse CVS Customer Portal on behalf of a Knorr-Bremse customer. For details on how we process your personal data during your visit to our website, please refer to our website privacy notice.
The controller in accordance with data protection law is
Knorr-Bremse Systeme für Nutzfahrzeuge GmbH
Moosacher Str. 80
Phone: +49 89 3547-0
Contact Details of the Data Protection Officer:
Corporate Data Protection Officer
Moosacher Str. 80
Purpose and Legal Basis for the Processing of Personal Data
We collect and process your personal data to provide you with the use of our Webshop for purchasing and ordering goods on behalf of your organization.
Legal Basis for the processing of your personal data is the performance of our contract in accordance of Art. (1) b GDPR (where we have concluded a sales agreement directly with you as our customer) or our legitimate interest in fulfilling our contract with your organization (our customer) in accordance with Art. 6 (1) f GDPR.
We collect your personal data either directly from you via your registration for the Webshop or via the person authorized by our customer to administer your organization within the Webshop (Customer Administrator).
Disclosure and Transfer of Personal Data
We use service providers to operate and support the CVS Customer Portal and which process your personal data only for the purpose of providing these services. Where such service providers are located outside the European Economic Area, we ensure an adequate level of data protection by entering into the EU Standard Contractual Clauses (copy available upon request) with these providers.
We may also disclose your personal data to third parties if this is necessary to fulfill the contract with your organization, e.g. transport or logistic companies.
We store your personal information to enable your use of our Webshop. We will delete your personal data if your Customer Administrator requests the deletion of your account or the underlying contract with your organization ends.
Your Customer Administrator can at any time request the deletion of your account.If legal obligations (e.g. tax or commercial laws) require that we store your personal data further, your personal data is deleted after the expiration of the statutory retention period.
Data Subject Rights
If you would like to have your account in our Webshop deleted or your personal data amended, please contact your Customer Administrator.
Additionally, you have the right to:
- access to your personal data;
- the rectification of incorrect or incomplete data;
- deletion of your personal data;
- restriction of the processing of your personal data;
- the right to receive your personal data in structured, commonly used and machine-readable format and the transfer of that the data to another controller;
- object to the processing of your personal data.
If you have provided us with your consent for the processing of your personal data, you can withdraw that consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal
If we process your data in order to pursue our legitimate interests, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing which would override your interests, rights and freedoms. We will be entitled to continue processing which serves to assert, exercise or defend our legal claims.
If you have questions regarding this privacy notice or would like to exercise your rights as a data subject, please contact us at firstname.lastname@example.org.
We take your requests very seriously and are committed to address any of your concerns. Nonetheless, you have the right to file a complaint with a competent data protection authority at any time. In Bavaria the competent data protection authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach.