Data protection information

The protection of your personal data is an important matter for us. With this data protection information, we would like to inform you about our handling of your personal data.

This data protection declaration applies to processing as defined by Art. 4, Number 2 EU General Data Protection Regulation (“GDPR”) of personal data in the context of calling up the website/application of the GDV Dienstleistungs-GmbH. In the process, various information is exchanged between your end device and our server. This exchange of information can involve the exchange of personal data (e.g. your IP address). The information acquired in this way is used to, among other things, optimise our website or to display advertising in the browser of your end device.

It is also possible to call up services or applications through our website that require the provision of personal data. This data protection declaration therefore also applies when reference is made to it in the context of these services or applications, irrespective of the channel through which you call up or use the services or applications.

This data protection declaration applies for the following websites operated by GDV Dienstleistungs-GmbH:

Our websites may contain links to other websites to which this data protection declaration does not apply.

Service provider as defined by § 2, Clause 1, No. 1 Teleservices Act ("TMG") and responsible person as defined by Art. 4, No. 7 GDPR for these websites is

GDV Dienstleistungs-GmbH
Glockengießerwall 1
20095 Hamburg
Tel.: 040 33449-0
Fax: 040 33449-7050
E-mail: info(at)gdv-dl.de

The object of data protection is personal data as defined by Art. 3, No. 1 GDPR.

GDV Dienstleistungs-GmbH generally only processes personal data to the extent that the GDPR or another legal regulation allows or decrees this, or when you as the user of our websites have provided us with a corresponding declaration of consent.

No obligation of provision
There is neither a contractual nor a legal obligation to provide the personal data. You are under no obligation to provide data. 

Consequences of failure to provide data
In the case of necessary data (data designated as mandatory data when entering), failure to provide the data has the consequence that the relevant service cannot be provided. The failure to provide data otherwise has the consequence that our services cannot be provided in the same form and quality.

Consent
At various places at our websites you have the possibility to provide us with your consent to subsequent processing measures in connection with the following processing measures shown (possibly for another part of the data). In this case, we inform you separately in connection with any issuing of a required declaration of consent of all modalities and the scope of the consent, as well as of the goals we pursue with these processing measures.

Storage duration
We don’t store your data any longer than we require it for the respective processing purposes. When the data is no longer required for the fulfilment of contractual or legal obligations, these are regularly deleted, unless their temporary retention remains necessary. Reasons for required retention can include the following:

  • The fulfilment of commercial and fiscal retention obligations, especially in accordance with the German Commercial Code (HGB) and the German Tax Code (AO) (generally four to ten years) or
  • The maintaining of evidence in the context of statute of limitations regulations in accordance with §§ 195 ff. of the German Civil Code (BGB) (statute of limitations terms of up to 30 years), whereby the regular term for statute of limitations is three years.


It is also possible for us to continue to store your data when you have provided us with your express permission to do so.

  Categories of processed data 

4.1    Processing of personal data during your visit to our websites

When you visit our websites, it is principally not necessary for you to actively provide information on your person. Nonetheless, we record certain kinds of anonymised data, or using pseudonyms for the purpose of evaluating your usage behaviour. To this purpose, so-called cookies, among other measures, are used at our websites. Cookies are small data packages that are generated by our web server and filed on the hard drive of your computer during communication of your computer with the web server. When you visit our websites, as a standard our web servers save the name of your Internet service provider, the website from which you are visiting us, the websites of ours that you visit, as well as the date and the duration of the visit. We use cookies in order to trace preferences of visitors and to be able to optimally design the websites. When we transmit a cookie, you are informed and have the opportunity to object to the transmission.
In the following we describe how we process your personal data when you call up our website. In particular, we draw your attention to the fact that the transmission of access data to external content suppliers (see under b.) is unavoidable due to the technical functionality of information transmission in the Internet.

  Information on processing, recipients of personal data


4.2    Processing of personal data for the online information in the Zentralruf der Autoversicherer (Central call centre of automotive insurers)

GDV Dienstleistungs-GmbH is the information provider in accordance with § 8a Compulsory Insurance Act for the determination of opposing liability insurance for road accidents. When you engage in the process of online information with the Zentralruf der Autoversicherer (Central call centre of automotive insurers), the processing of personal data takes place as follows:

  Information on processing, recipients of personal data


4.3    Processing of personal data in the registration area

4.3.1    Processing when registering

When you register for a service of GDV Dienstleistungs-GmbH in the login area, we process your data as follows:

   Information on processing, recipients of personal data


4.3.2    Processing of personal data when registering

When you register for a service at our website in the login area, we process the following data during registration:

   Information on processing, recipients of personal data


4.4    Processing of personal data when ordering newsletters

What happens with your personal data in connection with a subscription to our newsletter is described here:

   Information on processing, recipients of personal data


4.5    Applications

When you address an application to us through our websites, we process your personal data as follows:

   Information on processing, recipients of personal data


4.6    Processing when using the contact form

The following information describes how your personal data are processed when you use the contact form at our website:

   Information on processing, recipients of personal data


4.7    Processing when using the press mailing list

The following information describes how your personal data are processed when you register for our press mailing list at our website:

   Information on processing, recipients of personal data


4.8    Processing of personal data by cookies

Our website uses cookies. Cookies are small text files that are stored locally in the cache of the Internet browser you are using. Among other things, the cookies enable the recognition of the Internet browser. The data acquired by us through the cookies (including your pseudonymised IP address) are processed on our servers. You can exercise your right to refuse cookies at any time. Should you wish to do so, you can set your browser correspondingly, irrespective of other possibilities of objection presented in the following. Detailed information on this can be found with the Help function of your browser.
When you do not accept cookies, you may not be able to utilise the entire breadth of website functions.


4.8.1    Session Cookies

Session cookies are used to improve the representation and navigation. These lose their validity after you leave our websites.

    Information on processing, recipients of personal data

We principally do not transmit personal data we acquire through these websites to states outside of the European Union or the European Economic Area. Personal data can be forwarded to companies outside of GDV Dienstleistungs-GmbH that we deploy in connection with data processing within the framework of the legal provisions. The transmission of your data to such companies for their own business purposes does not principally take place when you have not provided a separate declaration of consent.

5.1    Transmission of personal data to third countries 
When we transmit data to third countries, meaning countries outside of the European Union, this transmission takes place exclusively with the observance of the admissibility criteria regulated by law. 
The admissibility criteria are regulated by Art. 44-49 GDPR.

5.2    Transmission to government authorities 
We transmit personal data to government authorities (including law enforcement agencies) when this is necessary to fulfil a legal obligation to which we are subject (legal basis: Art. 6, Par. 1 c) GDPR) or this is required to assert, exercise or defend legal claims (legal basis: Art. 6, Par. 1 f) GDPR).

When you have issued a declaration of consent to the processing of your personal data in the context of using our website (for example, when subscribing to a newsletter), you can withdraw this declaration of consent at any time with effect for the future in accordance with Art. 7, Par. 3 GDPR. The withdrawal of a declaration of consent has no influence on the legality of processing prior to the withdrawal. Any withdrawal of consent is to be addressed to

GDV Dienstleistungs-GmbH
Unternehmenskommunikation
Glockengießerwall 1
20095 Hamburg

The withdrawal requires no special form. The withdrawal results in no costs for you, with the exception of any fees for transmission or connection.

In the event of a withdrawal of already issued consent, we will no longer use the data for the purposes made necessary by the consent.

GDV Dienstleistungs-GmbH uses links for sharing information in social networks and media. No plug-ins are used to this purpose. As long as you don’t click on the link of a social network to share content there, no data will be sent to the respective networks. As soon as you click on a link, you will be forwarded to the website of the respective social network.

You have the right to information, correction, deletion (to the extent this is not contradicted by any legal or contractual retention obligations) and/or limitation of the processing of your personal data. You also have the right to have the provided data transferred to yourself or to a third party, and the right to register a complaint with the responsible supervisory authority. 

8.1    Right to information in accordance with Art. 15 GDPR 
You have the right to demand information concerning your personal data processed by us. In particular, you can demand information concerning the purposes of processing, the category of the personal data, the categories of recipients to whom your data has been or will be revealed, the planned duration of storage, the existence of a right to correction, deletion and limitation of the processing or objection, the existence of the right to register a complaint, the origin of your data, insofar as this has not been acquired by us, as well as concerning the existence of automated decision making, including profiling and possibly meaningful information concerning their details. 

8.2    Right to correction in accordance with Art. 16 GDPR 
You have the right to demand without delay the correction of incorrect data or the completion of your personal data stored with us. 

8.3    Right to deletion in accordance with Art. 17 GDPR 
You have the right to demand the deletion of your personal data stored with us when the processing is not necessary for us in order to exercise the right to free speech and information, for the fulfilment of a legal obligation (for example, legal retention periods), for reasons of public interest or to assert, exercise or defend legal claims. 

8.4    Right to limitation of processing in accordance with Art. 18 GDPR 
You have the right to demand the limitation of the processing of your personal data when you wish to dispute the accuracy of the data, when the processing is not taking place in accordance with the law, but you reject deletion and we no longer require the data, but you require it to assert, exercise or defend legal claims, or have submitted an objection to processing in accordance with Art. 21 GDPR. 

8.5    Right to the transferability of data in accordance with Art. 20 GDPR 
You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format, or to demand transmission to another responsible person. 

8.6    Right to complaint in accordance with Art. 77 GDPR 
You have the right to register a complaint with a supervisory authority, especially in the Member State of your usual place of residence, your place of work or the place of the putative violation.
You can find the supervisory authorities responsible for GDV Dienstleistungs-GmbH under Number 10. 

8.7    Exercising of rights in accordance with Numbers 8.1 to 8.6 
You can assert your rights in writing or by e-mail with the data protection officer of GDV Dienstleistungs-GmbH. 
Data protection officer of GDV Dienstleistungs-GmbH is:

Mr Conny Langkam
Datenschutzbeauftragter
GDV Dienstleistungs-GmbH
Glockengießerwall 1, 20095 Hamburg
Tel.: +49 40 33449-3281
E-mail: datenschutz(at)gdv-dl.de

For GDV Dienstleistungs-GmbH & Co. KG, the Hamburg data protection officer is responsible as a supervisory authority of the Free and Hanseatic City of Hamburg.

Freie und Hansestadt Hamburg
Der  Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Prof. Dr. Johannes Caspar
Ludwig-Erhard-Straße 22, 20459 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-mail: mailbox(at)datenschutz.hamburg.de

To the extent that we are active as a German information provider in the form of our Zentralruf der Autoversicherer (Central call centre of automotive insurers) service, the Federal Commissioner for Data Protection is responsible as a supervisory authority.

Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Husarenstr. 30
53117 Bonn
Tel.: +49 (0)228 997799-0
Fax: +49 (0)228 997799-5550
redaktion(at)bfdi.bund.de