Data protection information GDV Dienstleistungs-GmbH

The protection of your personal data is an important matter for us. We are informing you of our handling of your personal data with this data protection information.

1. Scope

This data protection information applies to processing of personal data in the sense of Art. 4, No. 2 EU General Data Protection Regulation (“GDPR”) in the context of accessing the website/application of GDV Dienstleistungs-GmbH. In this process, various information is exchanged between your end device and our server. This can also involve the exchange of personal data (e.g. your IP address) in the course of this exchange of information. The information gathered in this way is used to, among other things, optimise our website or present advertising in the browser of your end device.

Services or applications can also be accessed via our website that require the entry of personal data. This data protection declaration therefore also applies when reference is made to them in the context of these services or applications, irrespective of the way you access or use the services or applications.

This data protection declaration applies for the following websites operated by GDV Dienstleistungs-GmbH:

abschleppzentrale.de
asz-portal.gdv-dl.de
babonline.gdv-dl.de
evb-online.com
gdv-dl.de
schadenportal.tgic.de
umd-portal.de
vuonline.gdv-dl.de
zaonline.gdv-dl.de
zentralruf.de

Our websites may contain links to other websites to which this data protection declaration does not apply.

2. Service provider and responsible instance

Service provider in the sense of § 2, Clause 1, No. 1 German Teleservices Act ("TMG") and responsible instance in the sense of Art. 4, No. 7 GDPR for these websites is
GDV Dienstleistungs-GmbH
Frankenstraße 18
20097 Hamburg
Tel.: 040 33449-0
E-mail: info(at)gdv-dl.de

3. Object of data protection

Object of data protection is personal data in the sense of Art. 3, Number 1 GDPR.

4. Information obligations for the processing of personal data

GDV Dienstleistungs-GmbH generally only processes personal data to the extent that this is allowed or decreed by the GDPR or another legal provision, or when you have submitted a corresponding declaration of consent as a user of our websites.

No obligation of provision
There exists neither a contractual nor a legal obligation to provide personal data. You are not obligated to provide data.

Consequences of failure to provide information
In the case of necessary data (data designated as compulsory information when entering), the failure to provide information has the consequence that the corresponding service cannot be provided. Otherwise, the failure to provide information may have the consequence that our services cannot be provided in the same form and quality.

Consent
At various places on our web pages you have the possibility to also (possibly for part of the data) provide us with your consent in subsequent processing in connection with the types of processing represented in the following. In this case, we will inform you separately about all modalities and the extent of the consent and of the aims we pursue with this processing in connection with the submission of any required declaration of consent.

Storage period
We do not store your data any longer than we require them for the respective processing purposes. When the data are no longer required for the fulfilment of contractual or legal obligations, these are regularly deleted unless their limited storage is still required. Reasons for necessary storage can include:

  • the fulfilment of obligations of storage pursuant to commercial and fiscal law, in particular pursuant to the German Commercial Code (HGB) and German Fiscal Law (AO) (generally 4 to 10 years) or

  • the preservation of evidence in the context of legal statute of limitation regulations pursuant to §§ 195 ff. of the German Civil Code (BGB) (statutes of limitation of up to 30 years), whereby the regular statute of limitations is three years.

It is also possible for us to continue to save your data when you have expressly provided your consent.

To the extent that we are active as a German information office with our “Zentralruf” (Central service centre) and you have provided your consent to the recording of data relating to damage on behalf of the determined insurance company and to the forwarding of this data to the insurance company, these additionally recorded data are deleted after a period of 18 weeks.

Categories of processed data

4.1    Processing of personal data during your visit of our websites

When you visit our websites, it is principally necessary that you actively provide information concerning your person. Nonetheless, we record certain data anonymously or using pseudonyms for the purpose of evaluating your user behaviour. In addition, so-called cookies, among other things, are used on our websites. Cookies are small data packages that are generated by our web server and are filed on the hard drive of your computer in the course of communication between your computer and the web server. When you visit our websites, as a standard our web servers save the name of your Internet service provider, the website from which you are visiting us, the websites of ours that you visit, as well as the date and the duration of the visit. We use cookies to trace preferences of visitors and to optimally design the websites. When we transmit a cookie, you are informed and can object to the transmission.

In the following, we describe how we process your personal data when you access our website. We draw your attention to the fact that the transmission of access data to external content providers (see under b.) is unavoidable in the Internet due to the technical functionality of the transmission of information.

Information on processing, recipients of personal data

4.2    Processing of personal data in the context of online information by the Zentralruf der Autoversicherer (central call centre of automotive insurers)

GDV Dienstleistungs-GmbH is the information instance pursuant to § 8a Compulsory Insurance Act (PflVG) for determining the other third-party liability insurance company in the event of traffic accidents. When you attempt to acquire online information from the Zentralruf der Autoversicherer, processing of personal data takes place as follows:

Information on processing, recipients of personal data

4.3    Processing of personal data in the login area

4.3.1    Processing when registering

When you register for a service of GDV Dienstleistungs-GmbH in the login area, we process your data as follows:

Information on processing, recipients of personal data

4.3.2   Processing of personal data when logging in

When you register for a service at our homepage in the login area, we process the following data during the login:

Information on processing, recipients of personal data

4.4    Processing of personal data when ordering newsletters

We here describe what happens with your personal data in connection with a subscription to our newsletter:

Information on processing, recipients of personal data

4.5    Applications

When you address an application to us through one of our websites, we process your personal data in the following way:

Information on processing, recipients of personal data

Online application procedure

4.6    Processing when using the contact form

The following information describes how your personal data is processed when you use the contact form at our website:

Information on processing, recipients of personal data

4.7    Processing when using the press mailing list

The following information describes how your personal data is processed when you register for our press mailing list at our website:

Information on processing, recipients of personal data

4.8   Processing of personal data through cookies

This Internet site also works with cookies. These are understood as small files or short texts that are transferred from the web server to the browser of the user and filed temporarily or permanently; they contain no viruses and cause no damage to the computer. The cookies to some extent enhance security or are necessary for the representation of the website. Using browser settings, you yourself have the possibility to choose settings regarding the placement of cookies or to delete cookies.

4.8.1    Session cookies

We mainly use session cookies. Session cookies are necessary to be able to see the Internet page as you are seeing it now. These cookies are temporarily stored and automatically deleted immediately following your visit to the site. They are thus only placed by the server for the duration of a session.

4.8.2    Address cookies

In contrast with session cookies, address cookies offer the opportunity to be “recognised” when calling up the Internet site again and thus guarantee the automatic filling out of relevant data fields. Placing cookies requires consent, whereby you can also delete this cookie again at any time.

4.8.3    Ad cookies (third-party cookie)

GDV Dienstleistungs GmbH uses no ad cookies on its Internet presence. Ad cookies serve the purpose of the analysis of user behaviour at the website and are generally passed on to third parties with the goal of showing the user relevant advertising (online marketing). GDV Dienstleistungs-GmbH passes on no analysis data to third parties.

5. Matomo

We use the open source web analysis service Matomo (formerly Piwik) to analyse the usage of and continually improve our website. With the acquired statistics, we can improve our offering and design it to be more interesting to you as a user.
 
Only anonymised data (e.g. abbreviated IP addresses, date and time of day of the page access, length of stay or the page from which they have arrived at our website) are saved and used. The IP addresses are immediately anonymised after processing and prior to saving. They allow no identification of visitors of this website. There is no forwarding of your data to third parties. Matomo also uses so-called “cookies”.
 
The legal basis for the use of Matomo is Art. 6, (1) (f) GDPR. You have the option of objecting to the analysis. When you call up our website, we show a so-called “banner”. You have the possibility there to prevent analysis by Matomo by clicking “Save selection”. In addition to this, you can object to the analysis by clicking the “Revocation and withdrawal of consent / web analysis” below. No analysis of the use of our website then takes place. In this case, a so-called opt-out cookie is set that ensures that no usage data are analysed. If you delete your cookies, this has the consequence that the opt-out cookie is also deleted and you may have to activate it again.
 
You can find information on the data protection of Matomo under: https://matomo.org/privacy-policy/.

Revocation and withdrawal of consent / web analysis
Consent for the use of cookies and data processing when using social plug-ins, sharing functions and the display of videos can be withdrawn taking effect for the future by clicking the following “Revocation and withdrawal of consent / web analysis” link. You can also object to analysis of your use of this website by clicking this link.

Revocation and withdrawal of consent / web analysis

6. Transmission of your data to third parties

We principally do not transmit personal data that we acquire through these websites to states outside of the European Union or the European Economic Area. Personal data can be given to companies external to GDV Dienstleistungs-GmbH that we deploy in connection with data processing within the framework of legal provisions. The transmission of your data to such companies for their own business purposes does not principally take place when you have not submitted a separate declaration of consent.

6.1    Transmission of personal data to third countries

When we transmit data to third countries, meaning countries outside of the European Union, the transmission only takes place subject to the legally regulated admissibility criteria.
The admissibility criteria are regulated by Art. 44-49 GDPR.

6.2    Transmission to state authorities

We transmit personal data to state authorities (including law enforcement agencies) when this is necessary for the fulfilment of a legal obligation to which we are subject (legal basis: Art. 6, Par. 1 c) GDPR) or when it is necessary for the assertion, exercise or defence of legal claims (legal basis: Art. 6, Par. 1 f) GDPR).

7. Right to withdraw in the case of consent-based processing

When you have submitted a declaration of consent for the processing of your personal data in the context of usage of our website (for example, for the subscription to a newsletter), you may withdraw this declaration of consent taking effect for the future at any time pursuant to Art. 7, Par. 3 GDPR. The withdrawal of a declaration of consent has no influence on the legality of the processing that has taken place prior to the withdrawal. Any withdrawal shall be addressed to

GDV Dienstleistungs-GmbH
Unternehmenskommunikation
Frankenstraße 18
20097 Hamburg

The withdrawal requires no special form. The withdrawal results in no costs for you, apart from possible transmission or connection fees.

In the event of the withdrawal of provided consent, we will no longer use your data for the purposes that made consent necessary.

8. Social media plug-in

GDV Dienstleistungs-GmbH uses links for sharing information in social networks and media. No plug-ins are used for this purpose. If you do not click on the link of a social network in order to share content there, no data will be sent to the respective networks. As soon as you click on a link, you will be directed to a website of the respective social network.

9. Your rights as the affected party

You have the right to receive information, to correct, delete (insofar as no legal or contractual obligations of storage contradict this) and/or restrict the processing of your personal data. You also have the right to have the provided data sent to you or a third party, as well as the right to submit a complaint with the responsible regulatory body.

9.1    Right to information pursuant to Art. 15 GDPR

You have the right to demand information concerning your personal data processed by us. In particular, you can demand information concerning the purposes of processing, the category of the personal data, the categories of recipients to whom your data has been or will be revealed, the planned duration of storage, the existence of a right to correction, deletion or restriction of the processing or objection, the existence of a right to complain, the origin of your data when these have not been collected by us, as well as concerning the existence of an automated decision-making process, including profiling and, where applicable, meaningful information concerning their details.

9.2    Right to correction pursuant to Art. 16 GDPR

You have the right to the immediate correction of inaccurate data, or the completion of your personal data stored with us.

9.3    Right to deletion pursuant to Art. 17 GDPR

You have the right to the deletion of your personal data stored with us, insofar as the processing is not necessary for us for the exercising of the right to freedom of expression and information, the fulfilment of a legal obligation (e.g. legal periods of retention), for reasons of public interest or for the assertion, exercising or defence of legal claims.

9.4    Right to restriction of processing pursuant to Art. 18 GDPR

You have the right to demand the restriction of processing of your personal data, insofar as you dispute the accuracy of the data, the processing is illegal, but you reject the deletion and we no longer require the data, but you require it for the exercising or defence of legal claims or you have submitted an objection to processing pursuant to Art. 21 GDPR.

9.5    Right to portability of data pursuant to Art. 20 GDPR

You have the right to receive the personal data you have provided to us in a structured, usual and mechanically legible format and to demand transmission to another responsible person.

9.6    Right to objection pursuant to Art. 21 GDPR

You have the right at any time to submit an objection to the processing of your data, which takes place based on Art. 6, Par. 1, Clause 1 f) GDPR (data processing on the basis of a weighing of interests) or Art. 6, Par. 1, Clause 1 e) GDPR (data processing in the public interest), when reasons apply that result from your special situation. This also applies to profiling based on this provision in the sense of Art. 4, No. 4 GDPR.

Should you submit an objection, we will no longer process your personal data, unless we can document compelling reasons for the processing worthy of protection that outweigh your interests, rights and freedoms, or processing serves the purpose of the assertion, exercising or defence of legal claims.
    
We may also process your personal data to pursue direct advertising. If you would not like to receive any advertising, you have the right at any time to submit an objection to this; this also applies to profiling to the extent it is related to such direct advertising. We will observe this objection in future. We will no longer process your data for purposes of direct advertising when you object to processing for these purposes.

9.7    Right to complaint pursuant to Art. 77 GDPR

You have the right to register a complaint with a regulatory body, especially in the Member State of your usual place of residence, place of work or in the jurisdiction of the alleged violation.
The regulatory bodies responsible for GDV Dienstleistungs-GmbH can be found under Number 10.

9.8    Exercising your rights pursuant to Numbers 8.1 to 8.6

You can assert your rights in writing or by e-mail with the data protection officer of GDV Dienstleistungs-GmbH:

Datenschutzbeauftragter
GDV Dienstleistungs-GmbH
Frankenstraße 18
20097 Hamburg
Tel. +49 40 33449-0
E-mail: datenschutz(at)gdv-dl.de

10. Responsible data protection regulatory body

For GDV Dienstleistungs-GmbH, the Hamburg data protection officer is responsible as a regulatory body of the Free and Hanseatic City of Hamburg.

To the extent that we are active as a German information provider in the form of our “Zentralruf der Autoversicherer” (Central call centre of automotive insurers) service, the Federal Commissioner for Data Protection is responsible as a regulatory body.