Data Controller

The controller in accordance with data protection law is

Knorr-Bremse Systeme für Nutzfahrzeuge GmbH
Moosacher Str. 80
80809 Munich
Phone: +49 89 3547-0
Email: info@knorr-bremse.com

Contact Details of the Data Protection Officer:

Corporate Data Protection Officer
Moosacher Str. 80
80809 Munich
Email: dataprotectionofficer@knorr-bremse.com

Purpose and Legal Basis for the Processing of Personal Data

We collect and process your personal data to provide you with the use of our Webshop for purchasing and ordering goods on behalf of your organization.

Legal Basis for the processing of your personal data is the performance of our contract in accordance of Art. (1) b GDPR (where we have concluded a sales agreement directly with you as our customer) or our legitimate interest in fulfilling our contract with your organization (our customer) in accordance with Art. 6 (1) f GDPR.

We collect your personal data either directly from you via your registration for the Webshop or via the person authorized by our customer to administer your organization within the Webshop (Customer Administrator).

Disclosure and Transfer of Personal Data

We use service providers to operate and support the CVS Customer Portal and which process your personal data only for the purpose of providing these services. Where such service providers are located outside the European Economic Area, we ensure an adequate level of data protection by entering into the EU Standard Contractual Clauses (copy available upon request) with these providers.

We may also disclose your personal data to third parties if this is necessary to fulfill the contract with your organization, e.g. transport or logistic companies.

Data Deletion

We store your personal information to enable your use of our Webshop. We will delete your personal data if your Customer Administrator requests the deletion of your account or the underlying contract with your organization ends.

Your Customer Administrator can at any time request the deletion of your account.If legal obligations (e.g. tax or commercial laws) require that we store your personal data further, your personal data is deleted after the expiration of the statutory retention period.

Cookies

Cookies are small text files that are stored on your computer and saved by your browser. We use cookies to provide you with the functionalities of our Webshop. The cookies we use do not store any personal data. They are session cookies that are automatically deleted at the end of your visit.

Data Subject Rights

If you would like to have your account in our Webshop deleted or your personal data amended, please contact your Customer Administrator.

Additionally, you have the right to:

• access to your personal data;
• the rectification of incorrect or incomplete data;
• deletion of your personal data;
• restriction of the processing of your personal data;
• the right to receive your personal data in structured, commonly used and machine-readable format and the transfer of that the data to another controller;
• object to the processing of your personal data.

If you have provided us with your consent for the processing of your personal data, you can withdraw that consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal

If we process your data in order to pursue our legitimate interests, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing which would override your interests, rights and freedoms. We will be entitled to continue processing which serves to assert, exercise or defend our legal claims.

If you have questions regarding this privacy notice or would like to exercise your rights as a data subject, please contact us at privacy@knorr-bremse.com.

We take your requests very seriously and are committed to address any of your concerns. Nonetheless, you have the right to file a complaint with a competent data protection authority at any time. In Bavaria the competent data protection authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach.