Privacy policy

The purpose of processing your personal data (hereinafter referred to as “data”) is to provide information on vehicle repair, the sale of vehicles and spare parts, towing and recovery services, as well as the offering of products and services related to these topics. In this privacy policy, we inform you about, among other things,

• the name and contact details of the responsible party
• all purposes for which your data is processed
• the legal basis on which the processing activities are based, including our legitimate interest, if applicable
• all recipients of your data
• any possible transfer of your data to a third country and the legal basis for this
• the storage period of your data or the criteria for determining the duration
• the categories of your data that are processed
• the origin of your data
• the rights of the data subjects

Responsible for data protection is Reich Nutzfahrzeuge GmbH or, depending on the contractual partner, Reich Christian GmbH, both A-4932 Kirchheim im Innkreis, Alleenweg 4, Tel: 0043-7755-67110, Email: office@reich-kfz.at.

A data protection officer has not been appointed as it is not legally required.

You have the following rights regarding your personal data:

• Right to access
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw your consent

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

For this purpose and for any further questions on the subject of personal data, you can contact us at any time.

Right to Access

You have the right to obtain from us, at any time and free of charge, information about the personal data stored concerning you and to receive a copy of this information. This includes details about:

• the purposes of processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly in the case of recipients in third countries or international organizations
• if possible, the planned duration for which the personal data will be stored, or if this is not possible, the criteria used to determine this duration
• the existence of a right to rectification or erasure of personal data or to restriction of processing by us or the right to object to such processing
• the existence of a right to lodge a complaint with a supervisory authority
• if the personal data is not collected from the data subject, any available information about the source of the data
• the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, you have the right to be informed about whether personal data is transferred to a third country or to an international organization. If this is the case, you also have the right to be informed about the appropriate safeguards related to the transfer.

Right to Rectification

You have the right to request the immediate rectification of inaccurate personal data concerning you.

Furthermore, considering the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to Erasure

You have the right to request that we delete your personal data without undue delay, provided one of the following reasons applies and the processing is not necessary:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw your consent on which the processing is based according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• The personal data has been unlawfully processed.
• The deletion of the personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
• The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Right to Be Forgotten

If we have made the personal data public and our company as the controller is obliged to delete the personal data pursuant to Article 17(1) GDPR, we will take reasonable measures, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers processing the published personal data that you have requested the deletion by such controllers of any links to, or copies or replications of, this personal data, to the extent that processing is not required.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data if one of the following conditions is met:

• You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful, and you oppose the deletion of the personal data and request the restriction of their use instead.
• We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims.
• You have objected to processing pursuant to Article 21(1) GDPR, pending the verification whether our legitimate grounds override yours.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format.

You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, in exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that the rights and freedoms of others are not adversely affected.

Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, we will no longer process your personal data for such purposes.

Additionally, you have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, provided the decision (1) is not necessary for entering into, or performance of, a contract between you and us, or (2) is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or (3) is based on your explicit consent.

Right to Withdraw Consent

You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Our website and our services are not intended for use by minors, and we do not intend to collect data from minors. If a parent or guardian believes that their child may have provided us with personal data, they should contact us using the contact information provided below, and we will delete such personal data, subject to applicable law and this policy.

We employ appropriate technical and organizational measures and safeguards (TOMs) designed to prevent unauthorized access, unlawful processing, and unauthorized or accidental loss of your data.

This includes, for example, encrypting your communication with us via this website using the Secure Socket Layer (SSL) encryption protocol.

You can check the quality of our encryption here: https://www.ssllabs.com/ssltest

It is important to note that data transmission over the Internet may have security vulnerabilities, as complete protection against access by unauthorized third parties is not possible.

The servers hosting this website are located in Germany and are operated by Mittwald CM Service GmbH & Co KG, with whom a (sub-)data processing agreement has been concluded.

For more details, please refer to https://www.mittwald.de/datenschutz.

Each time you access our website, an automated system collects a series of general data and information.

These general data and information are stored in the log files of our server by Mittwald CM Service GmbH & Co KG in Germany.

The data collected may include:

• the types and versions of browsers used
• the operating system used by the accessing system
• the website from which an accessing system arrives at our website (so-called referrers)
• the sub-websites that are accessed via an accessing system on our website
• the date and time of access to the website
• an Internet Protocol (IP) address
• the Internet service provider of the accessing system
• any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, we do not draw any conclusions about you.

These information are needed to:

• correctly deliver the content of our website
• optimize the content of our website as well as its advertising
• ensure the long-term functionality of our information technology systems and website technology
• provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyberattack.

We statistically evaluate these anonymously collected data and information with the aim of increasing data protection and data security in our company, ultimately ensuring an optimal level of protection for you. We are permitted to process these data based on our legitimate interest according to Article 6(1)(f) GDPR.

The logs are stored separately from all personal data provided by you and are also deleted after a maximum of 90 days.

Information about the use of cookies and details about your corresponding choices and rights can be found in our cookie banner.

At present, you can contact us by email, contact form, telephone, fax, post, or in person. Please note that unencrypted emails sent over the Internet are not sufficiently protected against unauthorized access by third parties.

If you contact us to obtain information, we process your data for this purpose. If you contact us to enter into a contract, we process your data for this purpose.

For the processing of your order or purchase, including customer support

If you provide your data for vehicle repair, the purchase of vehicles and spare parts, or inquiries to our towing and recovery service via email or contact form, contact us by phone, fax, mail, or in person, the data you provide, including your personal data, will be processed by us and the recipients mentioned below within the scope of our business relationship with you for (pre-)contractual processing. This is to process and manage your contract, conduct customer satisfaction surveys, and to support and inform you as a customer. This information includes invitations to product events, notifications about technical innovations related to vehicles, tire changes, technical inspections, customer magazines, insurance offers, service information and service campaigns, follow-up offers at the end of a leasing financing contract, as well as new purchase options for vehicles.

Marketing (General)

We process data to initiate business and enhance relationships with existing and potential customers.

If you contact us to obtain information, we are allowed to process your data based on your consent according to Article 6(1)(a) GDPR or Article 6(1)(f) GDPR. If you contact us to enter into a contract, we are allowed to process your data based on Article 6(1)(b) GDPR and possibly store it according to Article 6(1)(c) GDPR.

Order

The processing of your data, including the personal data you provide, is carried out by us and the recipients listed below on the legal basis of Article 6(1)(b) GDPR, in order to identify you as a customer, properly process the contract of work or purchase in question, and correspond with you. The data processing is carried out at your request and is necessary for the appropriate handling of your order for the purposes mentioned.

Marketing (General)

The legal basis is our legitimate interest according to Article 6(1)(f) GDPR. The legitimate interest is our interest in initiating and intensifying the business relationship with existing and potential customers.

In general, we expressly ask you not to disclose any data that is likely to have little or no relevance to the purpose you intend; this particularly applies to special categories of personal (“sensitive”) data. Providing information is purely voluntary on your part.

Information

If you contact us to obtain information, we process the data you provide.

General order processing

For the execution of contracts, we process the necessary mandatory information; additional information is optional.

Marketing (General)

Depending on what you have voluntarily provided to us, the data we process may include:

• Your contact details (name, address, phone number, email address, etc.)
• Content of previous orders

Your data may be disclosed in whole or in part, but always only to the extent necessary, to the following controllers:

• Banks (payment transactions – Austria)
• Tax advisors (accounting – Austria)
• Collection agencies (debt collection – Austria)
• Legal representatives (legal enforcement – Austria)
• Courts (legal enforcement – Austria)
• Administrative authorities (Austria)
• Federal Agency “Statistik Austria” (intrastat report – Austria)
• Mercedes-Benz Österreich GmbH (Austria)
• Daimler Truck Austria GmbH (Austria)

Additionally, your data may be shared with the following recipients as (Sub-)Processors; contracts have been concluded with all of them, and the appropriate Technical and Organizational Measures (TOMs) have been verified:

• innpuls Werbeagentur GmbH (marketing agency, Austria)
• Mittwald CM Service GmbH & Co KG (web hosting, webmail, Germany)
• incadea GmbH (cloud-service, Germany)

Information

By providing your data via contact form or email, or by contacting us by phone or in person, you expressly consent that your data, including any personal data you provide as well as any unsolicited and voluntarily provided special categories of personal data, will be processed by us and the recipients listed above for the duration of processing the information request.

If you contact us solely to obtain information, your data will be deleted either immediately or after an appropriate period corresponding to the content of the communication.

Upon withdrawal of your consent, we will delete all your data from all databases.

Order

We are required by corporate and tax law to store your address, payment, and order data for a period of 7 years. If you contact us to enter into a contract, the data will be deleted at the end of the 7th year after the last record has been posted (§ 132 BAO). In the event of a contract conclusion, all data from the contractual relationship will be stored until the end of this period.

Legal/contractual retention obligations or obligations towards customers regarding warranties or compensation, or towards contractual partners, are another basis for continuing to store your data (Article 6(1)(c) GDPR; Article 17(3)(e) GDPR).

The data categories name, address, purchased goods, and purchase date are additionally stored until the expiration of product liability (10 years).

Marketing (General)

Marketing data will be retained for up to 3 years after the last contact.