Privacy policy
1. Privacy Policy
We are pleased about your visit on our website www.manthey-racing.de (subsequently called "Manthey Racing").
Manthey Racing attaches great importance to the protection of personal data to safeguard your personal rights. Data protection is an essential quality feature for us in the design and implementation of our business processes. With this privacy policy we would like to inform you about our data protection principles when processing and using personal data.
Personal data is all information about your identity, for example your name, your e-mail address, your postal address. However, communication data such as telephone and fax numbers and even the IP address of the device you used to access this website are also considered personal data.
Every time you use the Internet, you leave traces in the form of personal data, whereby two ways of transmitting this data can be distinguished. On the one hand, due to the technology used when using the Internet, personal data is automatically transmitted as protocol data, such as the IP address. However, an unambiguous personal reference can only be established for these data with a disproportionate amount of effort. The other way of data transfer is the voluntary provision of personal data by you as the user. For example, if you request information from us via the Internet, we need at least your valid e-mail address to respond. If you want us to send you something by post, you would have to give us your name and postal address. We delete the data arising in this connection after storage is no longer necessary or restrict processing if there are legal storage obligations.
1.1 Changes to this privacy policy
The use of collected data is always subject to the privacy policy which is current at the time the data is collected.
We reserve the right to amend the privacy policy in order to adapt it to a changed factual and legal situation. In this case we will publish the new and then current version of this privacy policy on our website. When the occasion arises, we will point out any changes to this privacy policy in a suitable place. This applies in particular if we intend to use data already collected in deviation from the original purpose.
If the use of your personal data is based on your consent, we will always use your data only to the extent to which you have consented, irrespective of any changes to this privacy policy in the meantime.
1.2 Scope of application
This website contains links to the websites of providers that are not connected to Manthey Racing or created by Manthey Racing. This privacy policy does not apply to these pages. The content or privacy principles of linked, external sites are the sole responsibility of their operators.
2. Collection, processing, use and disclosure of personal data
Within the scope of the services offered via the website, we collect personal data. In the survey, the input fields that we require to provide a service are usually marked as required information. If you provide us with additional data, this is done voluntarily. This applies in particular to data which you provide us with when you apply for a job online, take part in a survey or a competition.
All personal data provided will be stored, processed and used in accordance with the laws on data protection and data security applicable in the Federal Republic of Germany and other legal requirements and regulations.
The data processing centre responsible in accordance with Art. 4 Para. 7 DS-GVO for this Internet presence is Manthey Racing GmbH, Rudolf-Diesel-Straße 11-13, 53520 Meuspath, represented by:
Managing Directors Nicolas Raeder and Martin Raeder
Phone: +49 (0) 2691 / 9337-0
Fax: +49 (0) 2691 / 9337-50
e-mail: info@manthey-racing.de
In addition to the purely informative use of our website, we offer various services which you can use if you are interested. To do so, you will generally have to provide additional personal data which we use to provide the respective service and to which the data processing principles listed here apply. In order to answer your enquiries, process your order or provide you with access to special information or offers, it may be necessary to transfer data within the Group. All data transfers between the individual Group companies are carried out in compliance with the relevant legal provisions.
To carry out some business processes, Manthey Racing also uses external service providers within the scope of order data processing, for example forwarding agencies, IT service providers for the hosting of our websites, call centres for the handling of complaints within the scope of contract processing or for the destruction of files and paper. When selecting and commissioning external service providers, Manthey Racing strictly ensures that the data protection regulations are fulfilled and that the requirements, instructions and guidelines of Manthey Racing, to which the service providers are bound, are strictly observed. Furthermore, we may pass on your personal data to third parties if we offer campaigns, competitions, contract conclusions or similar services together with partners. You will receive more detailed information when you provide your personal data.
All employees working in a company belonging to Manthey Racing are obliged to maintain data secrecy and confidentiality. Your personal data will not be passed on to third parties outside of Manthey Racing GmbH. Of course, we will not pass on, sell or otherwise market your personal data, even in extracts.
In the event of a credit risk we will transfer your data (name, address, e-mail address, details of the company and, if applicable, contract and receivables data) to cooperating credit agencies (Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss, Germany) for the purpose of debt collection processing. The legal basis for this transfer is Article 6 I b of the Basic Data Protection Regulation (DS-GVO) and Article 6 I f of the DS-GVO. Transmissions on the basis of Art 6 I f DS-GVO may only take place to the extent that this is necessary to protect the legitimate interests of our company and does not outweigh the interests or fundamental rights and freedoms of the persons concerned, which require the protection of personal data. For the purpose of deciding on the foundation, implementation or termination of the contractual relationship, we also collect or use automatically generated probability values, in the calculation of which address data, among other things, can be included.
2.1 Use of personal data for marketing purposes
With your consent, we will also use your personal data (e.g. surname, first name, address, telephone number, e-mail address) for marketing or market and opinion research purposes.
If you have given such consent to process your data, you can revoke it at any time. Such revocation does not affect the legitimacy of the processing of your personal data carried out on the basis of your consent until revocation.
2.2 Automatically collected, non-personal or only indirectly personal data
It is technically impossible to prevent the temporary storage of the IP address or the domain name or the name of the Internet service provider of the computers accessing our Internet pages. When using the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security:
IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Web page from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer
Name of the website you last visited
Names of the websites you have visited on the Manthey Racing website (www.manthey-racing.de)
Name of the file that was accessed
transmitted data volume
Access status (file transferred, file not found etc.)
Date and time of all calls, transactions
This information is not evaluated on a personal basis, but in an anonymised manner. Through these statistical evaluations Manthey Racing receives information about the use and acceptance of your internet presence. They are used to improve the attractiveness, content and functionality of the websites.
3. Cookies and similar technologies
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small files that are stored on the hard disk of your terminal device and contain information that is directly related to a visited website. For this purpose, the web server on which the website you are visiting is stored sends a request to the Internet browser on your terminal device to save information temporarily or permanently as a file (cookie). The web server itself, the foreign PC, has no direct access to your hard disk, it can neither read data from your hard disk nor write data to it.
Cookies do not pose any danger to your end device.
Whether cookies can be accepted and stored on your terminal device depends on the settings of the Internet browser you use.
The full use of some Internet pages or their functionality is sometimes only possible with the help of cookies, for example if an Internet offer contains a shopping basket function. The cookie notes which articles are ordered in which quantities etc. and on which pages the associated article information is or was located. Such cookies are usually only active for the duration of the Internet session and are deleted when the browser is closed or the Internet is left (so-called transient cookies).
However, there are cookies which are not deleted when the browser is closed, but are stored by the browser in a special cookie directory (so-called persistent cookies). In addition to the user ID, these cookies usually contain other personal data and thus allow the user to be recognised. This may have the the consequence that a user is greeted by name when calling up a certain website again, or that information such as name and address are already pre-filled in input fields, or that the user is immediately shown a certain page content. These cookies are automatically deleted by the browser only if an expiry date assigned to the cookie has occurred or, in the case of intensive Internet use, the directory used by the browser to store cookies reaches its maximum capacity and therefore old cookies are overwritten by new ones.
Furthermore, so-called flash cookies may be used. These are not recorded by your browser, but by your Flash plug-in. We may also use HTML5 storage objects, which are stored on your end device. These objects store the required data regardless of the browser you use and have no automatic expiry date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode.
Most Internet browsers are set by default to automatically accept all cookies. However, you can, for example, set your Internet browser not to accept cookies at all or to notify you each time a cookie is sent, so that you can decide for yourself whether to accept the cookie. Please note that you may not be able to use all functions of this website. Even if you tolerate the automatic acceptance of cookies or have explicitly agreed to the acceptance of a cookie, you can at any time cause the browser to delete all stored cookies. The user-controlled deletion function of the browser can also be used to delete other data that your browser logs and saves with every Internet access, in particular the content of history. Using the History function, you can call up not only the addresses of all the Internet pages you have visited, but also any entries you may have made in the process, such as passwords, account details, etc.
The manual deletion options offered by the Internet browser for cookies, history, temporary data etc. should be used regularly. The possible setting and deletion options are documented in the instructions for the browsers used.
3.1 Cookies set by Manthey Racing
Manthey Racing also uses cookies. Legal basis for the processing of the IP address is Art. 6 para. 1 lit. f Data Protection Basic Regulation (DS-GVO). Our justified interest in data collection results from the fact that we need the use of cookies to optimise our offers.
Of course, the majority of our websites can be accessed and viewed if all cookies sent by us are rejected. However, for some sites, e.g. the websites reserved for a closed user group only, the setting of transient cookies is required for full use and functionality. After visiting our website, you can use the delete function of your browser to delete any existing cookies without any concerns.
3.2 Use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be shortened by Google within member states of the European Union or in other states which are part of the Agreement on the European Economic Area.
Only in exceptional cases the full IP address is tranferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.
The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being passed on to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in a shortened way, so that a personal reference can be excluded. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is therefore deleted immediately.
We use Google Analytics to analyse the use of our website and to improve it regularly. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f DS-GVO.
Information provided by a third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use: http://www.google.com/analytics/terms/de.html, Overview on data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.
3.3 Social Media Plug-Ins
This website also contains programs ("plug-ins") of the social networks Facebook, Twitter, Pinterest and Instagram, which are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") and Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google+), Twitter Inc.: 539 Bryant St. Suite 402, San Francisco, CA 94107, USA (Twitter), Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA (Pinterest) and Instagram, Inc. 181 South Park Street, Suite 2, San Francisco, CA 94107, USA.
We use the so-called two-click solution. This means by visiting our website, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the mark on the box, by its initial letter or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider will receive the information that you have called up the corresponding website of our online offer. In addition, the data mentioned in the next but one paragraph will be transmitted. In the case of Facebook, the IP address is anonymised immediately after it has been collected, according to the respective provider in Germany. By activating the plug-in, your personal data is transferred to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data particularly via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, but in order to exercise this right you must contact the respective plug-in provider. Via the plug-ins we offer the possibility to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f DS-GVO.
The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider will also save this information in your user account and publicly share it with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as you can then avoid being assigned to your profile with the plug-in provider.
For further information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the following privacy policy statements of these providers. There you will also receive further information on your rights and settings to protect your privacy:
Facebook http://de-de.facebook.com/privacy/explanation.php
Twitter http://twitter.com/privacy
Pinterest http://pinterest.com/about/privacy/
Instagram http://instagram.com/legal/privacy/
3.4 Youtube Plug-Ins
We use the provider YouTube for the integration of videos. YouTube is operated by YouTube LLC with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
On some of our Internet pages we use plug-ins from the provider YouTube. When you visit the pages of our website that are equipped with such a plug-in, a connection to the YouTube servers is established and the plug-in is displayed. This tells the YouTube server which of our Internet pages you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. If you use the plug-in, e.g. by clicking on the start button of a video, this information is also assigned to your user account. You can prevent this association by logging out of your YouTube account and other accounts of YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of these companies.
Further information on data processing and notes on data protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/.
3.5 Vimeo Plug-Ins
We use the provider Vimeo for the integration of videos. Vimeo is operated by Vimeo, LLC with headquarters at 555 West 18th Street, New York, New York 10011.
On some of our websites we use plugins from the provider Vimeo. When you visit the web pages of our website that are equipped with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our Internet pages you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When you use the plugin, such as when you click on the start button of a video, this information is also assigned to your user account. You can prevent this association by logging out of your Vimeo account before using our website and deleting the corresponding cookies from Vimeo.
For more information on data processing and Vimeo's privacy policy, please visit https://vimeo.com/privacy.
3.6 Google Maps
This website uses the product Google Maps to display interactive maps and to create directions. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website you agree to the collection, processing and use of automatically collected data by Google Inc., its representatives and third parties. The terms of use of Google Maps can be found under terms of use of Google Maps. For the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights in this regard and setting options for the protection of your privacy, please refer to the data protection information of Google (https://policies.google.com/privacy?hl=de).
4. Active contents
Active content is defined as the execution of non-visible functions in an Internet page. These are mostly programs or scripts that are hidden in the website. These are executed as soon as the relevant Internet page is called up or the content is displayed. The best known are: Java Applets, ActiveX Controls, JavaScript or VBScript. With the development of active content, the usability and functional range of internet pages has been considerably extended. They make it possible to play videos on a website, add music to pages, enable animated graphics, fade in current news texts in a running line on the page and much more. In contrast to cookies, active contents represent a high security risk. Since some of them install themselves on your terminal device, viruses, dialers and Trojans can also be installed. In contrast to cookies, active content involves the risk of a third party gaining unrestricted access to your terminal device and thus to your data.
As with cookies, almost all Internet browsers are set by default to automatically accept active contents so that they can be executed or are executed. Because of the immense threat posed by this active content, you should at least change your browser settings for active content so that you are generally informed at the prompt as soon as a website contains active content and wants to install or launch it. There are no binding security guidelines for the developers of such content. If you do not want to generally prevent active content, but want to determine its approval yourself by means of the control prompt, then the so-called certified, secure, signed or otherwise trustworthily marked content must not be excluded. The catch when deactivating or rejecting active content is that you will lose a great deal of comfort when surfing the Internet pages, your browser will no longer be able to display some content at all or will suppress it in some areas, functions will not be executed and, of course, you will often be asked for input.
4.1 Active contents in internet pages of Manthey Racing
Unfortunately, the extensive functionality of this website is also based on active content. Even though we can guarantee that we use active content exclusively for reasons of functionality and at no time intend to harm you or even access your data, we have not yet found a solution to be able to completely dispense with this content when programming our pages without compromising the functionality of individual pages. Therefore, if you have deactivated active content in your browser settings, some of our websites may not be displayed correctly, functions and content may be missing or inaccessible.
5. Use of our webshop
If you would like to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information required for the processing of contracts is marked separately, further information is voluntary. We process the data provided by you to process your order. For this purpose we can pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO. When you create a customer account, your data will be stored revocably for you as a service for further purchases at a later date. The legal basis for this is Art. 6 para. 1 lit. b DS-GVO. You can always delete all other data, including your user account, in the customer area. Your data will only be stored as long as you have an account in our webshop. Due to commercial and tax law requirements, however, we are obliged to store your address, payment and order data for a period of ten years. After deletion of your account, your data will therefore only be used to comply with legal obligations. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information. The legal basis is Art. 6 para. 1 sentence 1 lit. f) DS-GVO. Our justified interest in collecting data results from the fact that we need the data for the purpose of optimising our offers.
To prevent unauthorised access to your personal data by third parties, in particular financial data, the ordering process is encrypted using TLS technology.
6. Payment details
Payment data is collected during the ordering process. For orders on our website you have the possibility to choose between different payment methods. For each payment method, Manthey Racing stores personal data (name, first name, street, house number, postcode, city, country and IBAN). The legal basis for the data processing is Art. 6 para. 1 b) DS-GVO, as the processing of the data is necessary for the execution of the contract. In addition, the following applies to the payment methods "credit card" and "PayPal":
(a) Credit card:
If you pay by credit card,
Adyen NV, German Branch
Friedrichstrasse 63
10117 Berlin
collects the following data:
Name of the credit card holder
Credit card number
Credit card validity period
Security code
The legal basis for the data processing is Art. 6 para. 1 b) DSGVO, as the processing of the data is necessary for payment by credit card and thus for the execution of the contract. Manthey Racing does not collect and store the payment data for credit card payments itself, but these data are collected directly by the mentioned service providers. The service providers only have knowledge of the order number and the invoice amount, without being able to assign this information to other information (such as your address or e-mail address). Manthey Racing adheres to the highest security and data protection standards when working with this service provider. The service provider is therefore certified according to Level 1 of the PCI standard (DSS 3.2 - for further information please refer to: https://www.adyen.com/de_DE/plattform/zertifizierungen)
(b) PayPal:
If a payment is made via the online payment service PayPal, please note the following: PayPal allows online payments to be made to third parties. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie S.C.A., 22-24 Boulevard Royal, 2449 Luxem-bourg. If you choose PayPal as your payment method, your data required for the payment process will be automatically transmitted to PayPal. The following data are regularly involved:
Name
Address
Company
e-mail address
Phone and mobile number
IP address
The data transmitted to PayPal may be transmitted by PayPal to credit agencies. The purpose of this transmission is to check identity and creditworthiness. PayPal may also pass on your data to third parties if this is necessary for the fulfilment of contractual obligations or if the data is to be processed on behalf of an order. The privacy policy of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.
The legal basis for the data processing is Art. 6 para. 1 b) DSGVO, as the processing of the data is necessary for the payment with PayPal and therefore for the execution of the contract.
7. Data that we process when you order our news
When registering for a user account and on our website, you can also order the sending of news about our products and services (hereinafter referred to as "newsletter"). The sending of the newsletter requires that you have a valid e-mail address and that you have registered to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address you entered for the first time for sending the newsletter using the double opt-in procedure. This confirmation e-mail is used to check whether you, as the owner of the e-mail address, authorise receipt of the newsletter. The registration only becomes effective after you have clicked on the link in the confirmation email. Both when you subscribe to our newsletter and when you click on the confirmation link and register as a registered user, your respective Internet Protocol address (IP address) is saved together with the current date and time. This data is stored to ensure the provision of our services and to prevent their misuse. If necessary, this data makes it possible to clarify criminal offences committed and to enforce the private rights of third parties. In this respect, the storage of this data is necessary for our protection, is therefore in our legitimate interest and is based on Art. 6 Paragraph 1 Sentence 1 Letter f) DS-GVO.
Subject to your consent, we process your data as follows:
The personal data collected in the course of registering to receive the newsletter is used to send the newsletter. Furthermore, you can be informed by e-mail if this is necessary for the operation of the newsletter service or for registration (e.g. changes to the range of news or changes to technical conditions). You can cancel the sending of the newsletter at any time. There is a link at the end of every newsletter e-mail. You can also unsubscribe from the newsletter directly on our website at any time. By registering for our newsletter service, you agree to receive the newsletter and to the processing of this data in accordance with the above. In this respect, the data processing is based on Art. 6 Paragraph 1 Letter a) DS-GVO.
When you order our newsletter, your internet protocol address (IP address), the date and time of registration are saved. This data is stored to ensure the provision of our services and to prevent their misuse. If necessary, this data makes it possible to clarify criminal offences committed and to enforce the private rights of third parties. In this respect, the storage of this data is necessary for our protection, is therefore in our legitimate interest and is based on Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. The data collected in the course of ordering the newsletter will be stored until you unsubscribe from the newsletter. Storage beyond this is possible in the cases mentioned in section 4.
8. What are your rights?
You have the following rights regarding the use of your data. You can assert these rights against us as the person responsible. You are welcome to contact our data protection officer directly.
8.1 Right to information
You have the right to receive free information from us at any time about the personal data stored about you and to receive a copy of this information. You also have the right to receive information about the following:
the processing purposes
the categories of personal data processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organisations
if possible, the planned duration for which personal data will be stored or, if this is not possible, the criteria for determining this duration
the existence of a right of rectification or deletion of personal data concerning you or of a right of opposition to or limitation of the processing by the controller
the existence of a right of appeal to a supervisory authority
if the personal data are not collected from the data subject: all available information on the origin of the data
the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the DPA and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing on the data subject
You also have a right of information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to be informed about the appropriate guarantees in connection with the transmission.
If you would like to make use of this right of information, you can contact our data protection officer or another of our employees at any time.
Your right to information is essentially based on Art. 15 DS-GVO.
8.2 Right to have incorrect data corrected and incomplete data added
You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
If you wish to exercise this right of correction, you can contact our data protection officer or another of our employees at any time. Your right to correct incorrect and complete incomplete data is based on Art. 16 DS-GVO.
8.3 Right to data deletion (right to be forgotten)
You have the right to ask us to delete the personal data concerning you immediately if one of the following reasons applies and if the processing is not necessary:
The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
You withdraw your consent on which the processing was based in accordance with Article 6 paragraph 1 letter a DS-GVO or Article 9 paragraph 2 letter a DS-GVO and there is no other legal basis for the processing.
You object to the processing in accordance with Art. 21 (1) DS-GVO and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) DS-GVO.
Personal data were processed illegitimately.
We are obliged to delete your personal data in order to fulfil a legal obligation under Union law or the law of the Member States.
The personal data were collected in relation to information society services that were offered in accordance with Article 8 paragraph 1 of the DS-GVO.
If one of the above reasons applies and you wish to have personal data stored by us deleted, you can contact our data protection officer or another of our employees at any time. Our data protection officer or our employee will ensure that the request for deletion is complied with immediately.
Your right to data deletion is based on Art. 17 DS-GVO.
8.4 Right to restrict processing
You have the right to demand that we restrict processing if one of the following conditions is fulfilled:
The accuracy of the personal data is disputed by you for a period of time that allows us to verify the accuracy of the personal data.
The processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data.
We no longer need the personal data for the purposes of processing, but you do need the data to assert, exercise or defend legal claims.
You have appealed against the processing in accordance with Art. 21 para. 1 DS-GVO and it is not yet clear whether the legitimate reasons of our company outweigh your rights.
If one of the above-mentioned conditions is fulfilled and you wish to request the restriction of personal data stored with us, you can contact our data protection officer or another of our employees at any time. Our data protection officer or another employee will ensure that the processing is restricted.
Your right to restrict processing is based on Art. 18 DS-GVO.
8.5 Right to data transmission
You have the right to receive the personal data concerning you and provided to us by you in a structured, common and computer readable format. This includes the right to transfer this data to another responsible party without hindrance from us, provided that (i) the processing is based on the consent pursuant to Art. 6 paragraph 1 letter a) DS-GVO or Art. 9 paragraph 2 letter a DS-GVO or on a contract pursuant to Art. 6 paragraph 1 letter b) DS-GVO and (ii) the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task in the public interest or in the exercise of official authority delegated to us. Furthermore, when exercising your right to data transferability, you have the right to request that personal data is to be transferred directly from one person responsible to another, insofar as this is technically possible and provided that this does not affect the rights and freedoms of other persons (Art. 20 para. 1 DS-GVO).
Your right to data transfer in this respect is based on Art. 20 DS-GVO.
8.6 Right of appeal
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6(1)(e) or (f) of the DPA. This also applies to profiling based on these provisions.
We no longer process personal data in the event of an objection, unless we can prove compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to our processing for direct marketing purposes, we will no longer process your personal data for these purposes.
In addition, you have the right to object, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out by us for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1 of the DS-GVO, unless such processing is necessary for the performance of a task carried out in the public interest. To exercise your right of objection, you can contact our data protection officer or any other of our employees directly. You are also free to exercise your right of objection in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, by means of automated procedures involving technical specifications.
Your right of objection is based on Article 21 of the DS-GVO.
8.7 Automated decisions in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way, except where such decision is necessary for the conclusion or performance of a contract between you and us or is authorised by Union or national law to which we are subject and such law contains appropriate measures to safeguard your rights, freedoms and legitimate interests or with your explicit consent.
If the decision is necessary for the conclusion or performance of a contract between you and us or is made with your express consent, we will take reasonable measures to protect your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the part of our company, to present our point of view and to challenge the decision.
If you wish to assert rights with regard to automated decisions, you can contact our data protection officer or another of our employees at any time.
These rights are based on Art. 22 DS-GVO.
8.8 Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data in whole or in part at any time.
Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
If you wish to exercise your right to revoke your consent, you can contact our data protection officer or another of our employees at any time. You will find the contact details above this data protection notice, directly before the summary.
Your right to revoke a granted consent under data protection law is based on Art. 7 para. 3 DS-GVO.
8.9 Right of complaint to the Authority
You have the right to submit a complaint to the supervisory authority. This right is based on Art. 56 (2) DS-GVO.
9. Data security
Manthey Racing takes technical and organisational measures to protect your personal data against accidental or intentional manipulation, falsification, loss, destruction or access by unauthorised persons. These measures are continuously adapted, improved or extended according to the technological development. Access to your personal data is restricted to the employees required to fulfil the purpose.
10. Questions on data protection and contact persons
For questions regarding the processing of your personal data, requests for information, suggestions and complaints, please contact the data protection officer of Manthey Racing. You can reach our data protection officer by e-mail or by writing to our postal address with the additional information "data protection officer".
10.1 Data protection officer:
Manthey Racing GmbH
Datenschutzbeauftragter
Rudolf-Diesel-Straße 11-13
53520 Meuspath
datenschutz@manthey-racing.de
In the event that your inquiry should be treated in strict confidence, please contact our data protection officer by mail with the remark "private and confidential".
10.2 Further contact address:
Of course, you can also contact the following address for any questions regarding the processing of your personal data, requests for information, suggestions, to exercise your rights and for complaints: Manthey Racing GmbH, Rudolf-Diesel-Straße 11-13, 53520 Meuspath, e-mail: info@manthey-racing.de.
