Privacy policy

I. Privacy Policy

We are delighted that you are visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this privacy policy, we would like to inform you about the extent to which data is collected when you use our website and for what purposes we use this data. We would also like to inform you about your rights in this regard.

II. Responsible party

DKM & KKB GmbH
Greenwichstr. 2
66482 Zweibrücken
Germany
Telephone: +49 (0) 6332 479770
Email: info@dkm-kkb.com

III. Competent data protection supervisory authority:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Tel.: +49 (0) 6131 8920-0
Email: poststelle@datenschutz.rlp.de

IV. Data protection officer

DKM & KKB GmbH
Greenwichstr. 2
66482 Zweibrücken
Tel.: +49 (0) 6332 479770
Email: datenschutz@dkm-kkb.com

V. General information and notes

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Below, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

When you contact us, we store the data you provide (your email address, your name and your telephone number, if applicable) in order to answer your questions. We delete the data collected in this context once it is no longer necessary to store it, or restrict its processing if there are legal retention obligations.
This data is processed on the basis of Art. 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us.
If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the criteria for the storage period.

VI. Rights of data subjects

You have the following rights vis-à-vis us with regard to your personal data:

Right to information,
Right to rectification or erasure,
Right to restriction of processing,
Right to object to processing,
Right to data portability.

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

To exercise your rights regarding your personal data, please contact datenschutz@autoakademie.de

Please note that in the event of a request for information, we will store both this request and our subsequent response for a period of three years for verification purposes regarding the proper provision of information.

VII. Objection or revocation of the processing of your data

If you have given your consent to the processing of your data, you can revoke this consent at any time. Such revocation affects the permissibility of the processing of your personal data after you have notified us of your revocation.
Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if the processing is not necessary to fulfil a contract with you, which is explained by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either cease or adapt the data processing or point out to you our compelling legitimate reasons for continuing the processing.
You can, of course, object to the processing of your personal data for advertising and data analysis purposes at any time.

VIII. Use of the website

General

When using the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.
If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Art. 6(1)(f) GDPR):
- IP
address - Date and time of the
request - Time zone difference to Greenwich Mean Time (GMT) -
Content
of the request (specific page) - Access status/HTTP
status code -
Amount of data transferred in each case - Website from which
the request originates -
Browser - Operating system and its interface
- Language and version of the browser software.
In addition to the informational use of our website, we offer various services that you can use if you are interested. To do so, you will usually need to provide additional personal data, which we use to provide the respective service and to which the aforementioned principles of data processing apply.

Data transfer to service providers & partners

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer.
If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you in the description of the offer.

IX. Application

Purpose and legal basis of processing

We process your personal data for the purpose of establishing an employment relationship in accordance with Art. 6 (1) (b) GDPR in conjunction with Art. 88 GDPR. The processing is carried out exclusively for the purpose of assessing your suitability, qualifications and professional performance with regard to the position for which you are applying.

We also process your personal data for specific purposes (e.g. for longer storage) if you have given us your consent to data processing within the meaning of Art. 6 (1) (a) GDPR in conjunction with Art. 7 GDPR.

We may be obliged to process your personal data in accordance with Art. 6 (1) (c) GDPR. Various legal obligations may apply in this regard (e.g. obligations under the Commercial Code; the Tax Code; for the storage of tax-relevant data; under the Social Security Code; under the General Equal Treatment Act; or other relevant regulations).

Type of data categories processed

We process personal data that we receive from you during the application process, e.g. through application letters, CVs, references, correspondence, telephone or verbal information.

The following data categories may be affected:

Personal details (surname, first name, date of birth)
Address data (address, place of residence)
Contact details (telephone number, e-mail address)
Application data (cover letter, references, CV)

Special personal data (health data such as illnesses and disabilities)

Recipients or categories of recipients of the data

Your data will initially be accessed by our HR and accounting departments, but also by the department to which you have applied. Our administrators and processors have the technical ability to access data processed by IT systems. They are strictly bound by our instructions and may not process the data for their own purposes. In certain cases, we may need to disclose your personal data to third parties, such as our bank if you receive a reimbursement, or the post office if we communicate with you by letter.

Furthermore, third parties may receive data for specific purposes if this is required by law in the context of your application (e.g. notification to the Federal Employment Agency).

Duration of data storage

Your personal data will be stored for as long as is necessary to fulfil our contractual and legal obligations in the application process. If your application is successful, your personal data will be stored in your personnel file and used for the purpose of implementing and terminating the employment relationship.

If we are currently unable to offer you employment, we will process your data on the basis of our legitimate interests in accordance with Art. 6 (1) (f) GDPR for up to 6 months after sending the rejection letter in order to be able to defend ourselves against any legal claims.

If the data is no longer required for the fulfilment of contractual or legal obligations, it will be deleted unless storage is required due to statutory retention periods (e.g. to comply with commercial and tax law retention periods of ten years).

X. Contact

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Enquiries by email or telephone

If you contact us by e-mail, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of processing your
request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.

The data you send us via contact enquiries will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

XI. Other tools

Google Web Fonts (local hosting)

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers.
Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy: policies.google.com/privacy.

XII. Integration of OpenStreetMap

On this website, we use the open source map service "OpenStreetMaps" (also known as "OSM") from the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom, to display geo-data.
OSM is used to provide an interactive map on our website that shows you how to find and reach us. This service enables us to present our website in an appealing way by loading map material from an external server. The following data is transferred to the OSM servers during display: the pages of our website that you have visited and the IP address of your device.
The legal basis for the processing of your data in relation to the "OSM" service is Art. 6 (1) (1) (f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to present our online offering in an appealing manner and to make it easy to find the locations listed on our homepage.

For more information on the handling of user data, please refer to the OSM privacy policy.

XIII. Social media

General information

We maintain publicly accessible profiles on social networks. The specific social networks we use can be found below.

Social networks can usually analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media profile triggers numerous data processing operations that are relevant to data protection.

Personal data

If you are logged into your social media account and visit our social media profile, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both inside and outside the respective social media profile. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.

Note on risks

We would like to point out that the respective providers may process user data outside the European Union. This may result in risks for users, as it could, for example, make it more difficult to enforce user rights. With regard to US providers who offer guarantees of a secure level of data protection, e.g. through EU standard contractual clauses, we would like to point out that they are thereby committing themselves to comply with EU data protection standards.

Purpose of processing/legal basis

The processing of personal data on our social media sites is based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR in order to provide information about our services, make posts more attractive, find the right time for publication, and communicate with customers, interested parties and users who are active there. We have no influence on any further processing by the providers.

The legal basis for setting the aforementioned cookies is your consent in accordance with Art. 6 (1) (a) GDPR. Details can be found above under "Cookies" or "Social media plugins".

Joint responsibility

When you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit.

Please note that, despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Exercising your rights

You can assert your rights both against us and against the operator of the respective social media portal.

However, we would like to point out that these can be most effectively asserted with the operators. Only the operators have access to the users' data and can take appropriate measures and provide information directly. If you still need help, please feel free to contact us.

Storage period

The data collected directly by us via the social media profile will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, you revoke your consent to its storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Data protection of providers

For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer you to the privacy policies and information provided by the providers of the respective social media networks, over which we have no influence and which apply when you visit the respective sites.

XIV. Existing social media profiles

Facebook

Own profile: www.facebook.com/dkmkkb

Service provider: Facebook Ireland Ltd., also Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA;
website: https://www.facebook.com;
privacy policy: https://www.facebook.com/about/privacy

"Insights data"

Furthermore, Facebook provides us with statistical data of various categories (so-called "Insights data") when we use our fan page, which we can access accordingly. These page insights are summarised data that provide us with information about how people interact with our page. This includes: the total number of page views, likes, page activity, post interactions, video views, post reach, comments, shared content, replies, proportion of men and women, origin in terms of country and city, language, views and clicks in the shop, clicks on route planners and clicks on telephone numbers.

For more information about "Insights data", including how to exercise your rights, please visit: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Joint responsibility

According to Art. 26 GDPR, the fan page operator and Facebook have joint responsibility.

A corresponding agreement has been concluded with the fan page operators (available at: https://www.facebook.com/legal/terms/page_controller_addendum).

Facebook assumes primary responsibility under the GDPR for the processing of Insights data and will fulfil all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

You can contact Facebook's data protection officer via the general contact form at https://www.facebook.com/help/contact/540977946302970.

Instagram

Own profile: www.instagram.com/dkmkkbgmbh

Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Website: https://www.instagram.com;
Privacy policy: http://instagram.com/about/legal/privacy

LinkedIn

Own profile: www.linkedin.com/company/dkm-kkb-gmbh

Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;

Website: https://www.linkedin.com;

Privacy policy: https://www.linkedin.com/legal/privacy-policy;
Opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Linking to social media profiles via graphics or text links

We also link to social media profiles on the platforms listed above on our website. The integration takes place via a linked graphic or a text link to the respective platform. The use of this link prevents the automatic establishment of a connection to the respective server of the platform when a website with a social media link is accessed in order to display a graphic of the respective platform itself. Only by clicking on the corresponding graphic is the user redirected to the service of the respective platform.

After the user is redirected, information about the user is collected by the respective provider. It cannot be ruled out that the data collected in this way may be processed in the USA. Please
note our information on data transfers to the USA.

This initially includes data such as IP address, date, time and page visited. If the user is logged into their user account on the respective platform during this time, the operator may be able to assign the information collected about the user's specific visit to their personal account. If the user interacts via a "share" button on the respective platform, this information may be stored in the user's personal user account and published if necessary. If the user wishes to prevent the collected information from being directly assigned to their user account, they must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.