Data Controller

The controller in accordance with data protection law is

Knorr-Bremse Systeme für Nutzfahrzeuge GmbH
Moosacher Str. 80
80809 Munich
Phone: +49 89 3547-0
Email: info@knorr-bremse.com

Contact Details of the Data Protection Officer:

Corporate Data Protection Officer
Moosacher Str. 80
80809 Munich
Email: dataprotectionofficer@knorr-bremse.com

Smart Label, QR Code Process:

{}By scanning the QR code on the smart label of a Knorr-Bremse packaging, you start the preparations for a product authenticity check.

This takes you to the mytruckservices.knorr-bremse.com website and makes the IP address of your smartphone available for communication use as part of the authenticity check and the product-relevant data for the authenticity check itself.

The IP address, which is categorized as personal information, is therefore only required to send the result of the authenticity check back to the smartphone.

For this purpose, we assert our legitimate interest as a legal basis.

Immediately after this dialog has been completed, the IP address is anonymized and is then no longer available as private information.

The anonymized IP address can only be used for a rough location estimate. This is used if the GPS data of the scanning smartphone has not been shared. This information would then be used as minimum information for analyses.

Location data / GPS:

You have the option of controlling the sharing of GPS data as location data yourself. When you first visit the mytruckservices.knorr-bremse.com website via a QR code scan, you set the availability or handling of the GPS data according to your wishes.

You can make changes to these settings at a later date directly on your smartphone.

This location information in connection with an anonymized IP address is no longer personal data and is therefore used for analyses of QR code usage.

If the GPS data is not available, the anonymized IP address described above is used for the analyses instead.

The location data is not used with reference to the mobile device.

Collaboration with our processor:

We transmit the IP address and GPS data (if made available) to our service provider or processor.

The processing explained above takes place there according to the instructions of Knorr-Bremse Truck Services GmbH. The processor is contractually obliged to comply with the applicable data protection requirements.

Purpose and Legal Basis for the Processing of Personal Data

We collect and process your personal data to provide you with the use of our Webshop for purchasing and ordering goods on behalf of your organization.

Legal Basis for the processing of your personal data is the performance of our contract in accordance of Art. (1) b GDPR (where we have concluded a sales agreement directly with you as our customer) or our legitimate interest in fulfilling our contract with your organization (our customer) in accordance with Art. 6 (1) f GDPR.

We collect your personal data either directly from you via your registration for the Webshop or via the person authorized by our customer to administer your organization within the Webshop (Customer Administrator).

Disclosure and Transfer of Personal Data

We use service providers to operate and support the CVS Customer Portal and which process your personal data only for the purpose of providing these services. Where such service providers are located outside the European Economic Area, we ensure an adequate level of data protection by entering into the EU Standard Contractual Clauses (copy available upon request) with these providers.

We may also disclose your personal data to third parties if this is necessary to fulfill the contract with your organization, e.g. transport or logistic companies.

Data Deletion

We store your personal information to enable your use of our Webshop. We will delete your personal data if your Customer Administrator requests the deletion of your account or the underlying contract with your organization ends.

Your Customer Administrator can at any time request the deletion of your account.If legal obligations (e.g. tax or commercial laws) require that we store your personal data further, your personal data is deleted after the expiration of the statutory retention period.

Cookies

Cookies are small text files that are stored on your computer and saved by your browser. We use cookies to provide you with the functionalities of our Webshop. The cookies we use do not store any personal data. They are session cookies that are automatically deleted at the end of your visit.

Data Subject Rights

If you would like to have your account in our Webshop deleted or your personal data amended, please contact your Customer Administrator.

Additionally, you have the right to:

• access to your personal data ;
• the rectification of incorrect or incomplete data ;
• deletion of your personal data ;
• restriction of the processing of your personal data ;
• the right to receive your personal data in structured, commonly used and machine-readable format and the transfer of that the data to another controller ;
• object to the processing of your personal data.

If you have provided us with your consent for the processing of your personal data, you can withdraw that consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal

If we process your data in order to pursue our legitimate interests, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing which would override your interests, rights and freedoms. We will be entitled to continue processing which serves to assert, exercise or defend our legal claims.

If you have questions regarding this privacy notice or would like to exercise your rights as a data subject, please contact us at privacy@knorr-bremse.com.

We take your requests very seriously and are committed to address any of your concerns. Nonetheless, you have the right to file a complaint with a competent data protection authority at any time. In Bavaria the competent data protection authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach.