Privacy Policy
Introduction
We are committed to protecting your personal data. This policy provides detailed information about how we collect, use, store, and protect personal data, strictly complying with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), ePrivacy Directive (Directive 2002/58/EC), other national data protection laws of the Member States, and other applicable EU regulations. This policy is specifically intended for a business-to-business (B2B) audience, particularly car dealerships, and not for end consumers.
- Responsible party
The responsible party within the meaning of the GDPR (General Data Protection Regulation) is
Name: CAS GmbH – Anthony Picknell
Address: Taunustor 1, Stock 18
60310 Frankfurt am Main, Deutschland
Email: [email protected]
Phone: +49 69 50 50 60 4504 - Data Collection
This website primarily serves as an information platform about our offers for authorised dealers as end customers of C GmbH (us).
However, we also offer some features for collecting data about you if you would like to receive information from us or send us individual enquiries.
We collect and process personal data. According to Art. 4 (1) GDPR, personal data is any information relating to an identifiable or identifiable natural person – a natural person who can be identified directly or indirectly. This includes,- your name,
- email address,
- postal address,
- IP address,
- Enquiry by email
If you send us a contact enquiry by email, we collect and store your email address and the data contained in the email.
Legal Basis – The legal basis in this cases is Art. 6 para. 1 sentence 1 a) GDPR, as you consent to the processing of your data when using an email.
Once the purpose has been fulfilled, the data will be deleted as soon as the matter relating to the enquiry has been conclusively clarified. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent given.
You can find information on your right to erasure and access under ‘Data subject rights’. - Enquiry by contact form
When you use our contact form, we collect and store the following mandatory information:- Name
- Company name
- Country
- What you are interested in (sales, partnership, logistics, media, compliance)
- Your specific enquiry
In addition, we offer you the option of providing your telephone number so that we can contact you by telephone to respond to your enquiry.
Use of Hubspot CRM – If you send us enquiries via the contact form on our website and the personal data transmitted will be stored on servers of our software partner HubSpot CRM. Information on the processing of personal data when using HubSpot CRM can be found under ‘7. Enquiry by contact form and newsletter – Use of HubSpot CRM’ –
Legal Basis – The collection and processing is based on Art. 6 para. 1 sentence 1 b), as this is necessary for the fulfilment of a pre-contractual or possibly subsequent contractual relationship.
Once the purpose has been fulfilled, the data will be deleted as soon as the matter relating to the enquiry has been conclusively clarified. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent given.
You can find information on your right to erasure and access under ‘Data subject rights’.
- Newsletter for commercial customers and dealers
By sending your enquiry via the contact form, you can also subscribe to our newsletter. We will inform you about the content of our newsletter for commercial customers and dealers, the registration, dispatch and statistical evaluation procedures, and your rights of objection with the following information. By subscribing to our newsletter, you agree to receive it and to the procedures described.
Content – We send newsletters, emails and other electronic notifications with promotional information (hereinafter referred to as ‘newsletters’) via our partner company HubSpot CRM – information on the processing of personal data when using HubSpot CRM can be found under ‘7. Enquiry by contact form and newsletter – Use of HubSpot CRM’ – only with the consent of the recipient or with legal permission. If the content of the newsletter is specifically described when you register for it, this description is decisive for the consent of the users. Otherwise, our newsletters contain information about our services and about us.
Registration – Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration for the newsletter. This is to ensure that no one can register to receive our newsletter using someone else’s email address. Registrations for the newsletter and the desired content are logged in order to be able to prove the registration process in accordance with legal requirements.
This includes- storing the time of registration
- storing the time of confirmation
- and, in both cases, the IP address.
For the newsletter registration, we use your name for personal communication and your email address, which you provided with your request and registration for the newsletter, for sending the newsletter.
Legal basis – The newsletter is sent on the basis of the recipient’s consent in accordance with Art. 6 para. 1 lit. a), Art. 7 GDPR in conjunction with § 7 para. 2 no. 3 UWG (German Unfair Competition Act) or on the basis of the legal permission in accordance with § 7 para. 3 UWG.
- Use of HubSpot CRM for enquiry by contact form and newsletter
If you send us enquiries via the contact form on our website and, if applicable, subscribe to a commercial newsletter, the personal data transmitted will be stored on servers of our software partner HubSpot CRM. The data stored in HubSpot CRM may be used by us to contact you and to determine which offers or topics are of interest to you and, if you have given your consent, also to send you newsletters and promotional emails. You can revoke your consent at any time with future effect. When you submit a contact request via our contact form, we transfer the following data to HubSpot: name, email address, IP address, company name, your interest, your request and, if provided, your telephone number. We use HubSpot for our online marketing activities and to respond to your enquiries. This is an integrated software solution that we use to cover various aspects of our customer service and analytics.
These include, among other things:- Reporting (e.g. traffic sources, accesses, etc.)
- Contact management (e.g. user segmentation & CRM)
- Your Rights Under GDPR
You possess rights under GDPR, including:- Access (Art. 15 DSGVO): You have the right to request confirmation of whether your personal data is being processed, and if so, to access your personal data and related processing details.
- Rectification (Art. 16 DSGVO): You can request correction or completion of your personal data if it is inaccurate or incomplete.
- Erasure (Art. 17 DSGVO: Under certain conditions, you can request the deletion of your personal data (“right to be forgotten”).
- Restriction (Art. 20 DS-GVO): You may request the restriction of processing your data, which means limiting the ways in which we process your data under certain circumstances.
- RIGHT TO OBJECT (Art. 21 GDPR): You can object to the processing of your data, particularly if the processing is based on our legitimate interests.
- Data Portability: You have the right to request your data in a structured, commonly used, and machine-readable format and to transfer this data to another service provider.
- Right to Lodge a Complaint: If you believe your rights under GDPR have been violated, you have the right to lodge a complaint with a supervisory authority in your jurisdiction.
To exercise your rights, please contact us using the information below.
Name: CAS GmbH – Anthony Picknell
Address: Taunustor 1, Stock 18
60310 Frankfurt am Main, Deutschland
Email: [email protected]
Phone: +49 69 50 50 60 4504
- Purpose and Legal Basis
We process your personal data based on clear legal grounds under GDPR:- Fulfilment of a contract (Art. 6 para. 1 lit. b GDPR) – We base the processing on Art. 6 para. 1 lit. b GDPR, insofar as this is necessary for the performance of the services you have requested.Consent (Art. 6 para. 1 lit. a GDPR) – If you have expressly consented to processing, we base the processing on Art. 6 para. 1 lit. a GDPR.
- Compliance with legal obligations (Art. 6(1)(c) GDPR) – We base the processing on Art. 6 para. lit. c GDPR, if and to the extent necessary to fulfil regulatory and compliance requirements.
- Legitimate interests (Art. 6(1)(f) GDPR) – The processing of personal data is carried out in accordance with Art. 6 para. 1 lit. f GDPR, insofar as this corresponds to our legitimate interest and the interests, fundamental rights and freedoms of the data subject do not outweigh our interest, in particular to improve the functionality of our website, user-friendliness, security, for marketing purposes and for the management of dealer relationships and sales processes.
- Public interest (Art. 6(1)(e) GDPR) – We base the processing of personal data on Art. 6 para. 1 lit e GDPR if the processing is necessary for tasks carried out in the public interest or in the exercise of official authority.
- Data Storage and Security
Personal data is securely stored using industry-standard security protocols to protect against unauthorized access, disclosure, alteration, or destruction. Data retention aligns with GDPR principles of data minimization and storage limitation. Personal data is retained only as long as necessary for the intended purposes or required by law. Consent of the custodian is obtained according to Art. 8(1) GDPR where necessary. - Data Sharing and Transfers
We do not sell your personal data. However, data may be shared with trusted third-party providers who assist in operational aspects such as analytics, hosting, payment processing, customer support, and managing dealer networks. We ensure third-party compliance through binding agreements aligned with GDPR.
Transfers outside the EU are safeguarded using Standard Contractual Clauses or adequacy decisions approved by the European Commission. - Cross-border transfer of your data
Your personal data will be processed in accordance with European data protection regulations, so that transfers to recipients outside the EU are protected by standard contractual clauses or adequacy decisions approved by the European Commission.
Specifically, this means that transfers to recipients in so-called third countries, i.e. recipients whose registered office or place of business is not in a member state of the EU or the EEA, will only take place on the following bases:- On the basis of adequacy decisions issued by the European Commission (Art. 45 GDPR),
- to countries without an adequacy decision, provided that appropriate and sufficient safeguards for data transfers pursuant to Art. 46 et seq. GDPR are in place,
- or on the basis of the exceptions pursuant to Art. 49 GDPR.
- How long do we store your data?
We only store your data in identifiable form for as long as this is necessary to fulfil the purposes of processing stated in this privacy policy or to comply with our legal and official obligations.
This results in the following cases for storage:- for as long as this is necessary to provide the services you have requested (e.g. enquiries);
- for as long as this is necessary for legal prosecution or defence or to assert a legitimate interest of ours or a third party;
- there is a legal obligation to store your data (e.g. statutory storage and documentation obligations in accordance with the German Commercial Code (HGB))
- if you have expressly consented to storage, until you revoke your consent.
Linked websites
The third parties accessed from our websites are independent. Therefore, the data you provide to third parties in these cases is not subject to our control, but to their own privacy policies.
- Linked websites
The third parties accessed from our websites are independent. Therefore, the data you provide to third parties in these cases is not subject to our control, but to their own privacy policies. - Amendment of the Privacy Statement
We reserve the right to update or modify this Privacy Policy at any time. Updates become effective upon posting. Continued use of the website after amendments constitutes acceptance of the updated Privacy Policy.