This external link is not available in presentation mode.

To the top
Menu

Privacy notice

Last updated: 7 January 2020

We are delighted that you are interested in our website. We take the protection of personal information very seriously and pay close attention to this aspect in our online activities. The processing of your personal information by Brose takes place in compliance with statutory requirements and – if necessary – based on your consent. The most important statutory basis for this is the European General Data Protection Regulation (GDPR) . We also comply with all other applicable data protection legislation, in particular Germany’s Data Protection Act (Bundesdatenschutzgesetz, BDSG) and Telemedia Act (Telemediengesetz, TMG).

In the following we would like to inform you in detail about the applicable legal requirements, particularly those of the GDPR, concerning the processing of your personal data when you visit our website.

1. Controller

You are on the website “brose.com”. Brose Fahrzeugteile SE & Co. Kommanditgesellschaft, Coburg (“Brose”) is responsible (the “controller”) for data processing associated with your use of the website.

2. Visiting pages on brose.com

  • For what purposes do we process your data?
    When you visit our website, your browser contacts our web server to retrieve the pages you wish to visit. You generally do not need to register or identify yourself to use this function. However, our server uses your IP address to allocate requests and responses, which could potentially be used to identify you.

    In particular, personal data such as your IP address is transmitted to our web server as part of an HTTP/S call. This connection data is processed by our web server to allow access to the website. In some cases form data may also be processed containing data you have entered.

    In addition, the respective HTTP/S calls are logged in a log file. We use this file for technical troubleshooting as well as to block and resolve attacks on our systems. We also utilize the already saved log files to create reports that we use to optimize our websites. The actual analysis is always anonymous, i.e. through a pooling of call data and thus it is no longer possible to use the data to identify a person.

  • On what legal basis do we process your data?

    The legal basis of any processing of your data that takes place depends on the specific purpose of your visit:

    - When you visit our website to initiate contracts or business relationships with us, the legal basis for the processing of your data is Art. 6 para. 1 (b) GDPR (initiation or performance of a contract).
    - Also, as a general rule, processing takes place based on our legitimate interests in accordance with Art. 6 para. 1 (f) GDPR. Our legitimate interest is to operate a website for general information and communication purposes as well as to present our company.

    Processing of log files takes place as a general rule based on our legitimate interests in accordance with Art. 6 para. 1 (f) GDPR. Our legitimate interest is to protect our plants and systems against attacks and, if necessary, to take legal action against attackers as well as to continue to develop our websites for commercial purposes.

  • Is there an obligation for you to provide your data and what happens if you choose not to?

    It is not possible to use this website or its forms without processing your connection or form data.

  • Is your data shared with anyone? Or, who participates in the processing of my data?

    As a general rule, processing is automatic. Our IT department has access to the log files. The competent internal departments use these files for the above mentioned purposes and, if necessary, the data is also transmitted to external recipients (in particular law enforcement agencies to prosecute attacks).

  • How long is your data stored?

    The log files are stored for 14 days. All other data is deleted immediately after executing the HTTP/S call.

3. Contact form, communication by email

  • For what purposes do we process your data?
    On our site we offer the possibility to contact us by email and/or via a contact form. In this case the information you provide is stored for the purpose of processing your contact request and for any follow-up questions. If you contact us with a request or we contact you, we also process your personal data such as your name, address, phone number and the content of the communication for the purpose of exchanging information with you

  • On what legal basis do we process your data?
    The processing of your data as part of communication via the contact form or by email takes place on the basis of Art. 6 para. 1 (b) GDPR, provided the exchange is in conjunction with the initiation or performance of a contract with you.

    For the remainder, the legal basis depends on the purpose of the exchange; Art. 6 para. 1 (f) GDPR (our legitimate interest, business correspondence or, for example, to answer requests related to data protection) will apply in most cases.

  • Is there an obligation for you to provide your data and what happens if you choose not to?
    Your are not required to provide your data. However, communication by email or via the contact form is not possible without processing your personal data.

  • Is your data shared with anyone? Or, who participates in the processing of my data?
    We only share your data internally with the department that is responsible for your request. In some cases, it may also be forwarded to another Brose Group company.

  • How long is your data stored?
    Your personal data is deleted when it is no longer required for the exchange of information with you. In some cases the data may be held longer on the basis of Art. 6 para. 1 (c) GDPR in conjunction with the applicable statutory retention periods (in particular in accordance with trade, tax and revenue law). In the case of business correspondence, this is usually six to ten years after the end of the year in which it is received.

4. Cookies

Like virtually every other website, we use cookies and similar technologies. A cookie is a small text file consisting of letters and numbers that is stored on your device when you visit a website. A cookie contains information that is stored when you visit this website on your computer or mobile device for the duration of your visit (“session cookies”) or for a longer period of time (“permanent cookies”). When you visit pages on this website, our system – or another website that recognizes this cookie – can query the cookie. This makes it possible to distinguish your device from other devices when you visit our website.

More specifically, these cookies or similar technologies make it possible to save your user preferences or credentials for the duration of your visit or until your next visit or, for example, to offer you shopping cart or application functions across multiple pages of our website. Moreover, we use specific cookies to collect information about how visitors use our website, e.g. which pages were visited and the duration of the visits. Pseudonymized user profiles may be created for this purpose.

We use cookies on your website brose.com as part of the following processing operations:

4.1 Technically required cookies

  • For what purposes do we process your data?
    We use the CDN from Akamai Technologies GmbH (Parkring 20 – 22, 85748 Garching, Germany) for the basic features of our website and the service provider Brightcove, Inc. (290 Congress Street, 4th Floor, Boston MA 02210, USA) for the delivery of videos. Usage data is collected automatically on the servers of Akamai and Brightcove for the purpose of delivery, acceleration and protection of Brose web content.

  • On what legal basis do we process your data?
    Data processing and the required storage of cookies takes place based on our legitimate interests as per Art. 6 para. 1 (f) GDPR. Our legitimate interests relate to the smooth and accelerated display of our web content on brose.com and thus serve our business interests to operate a website for general information and communication purposes as well as to present our company.

  • Is your data shared with anyone? Or, who participates in the processing of my data?
    Your usage data is shared with Akamai and Brightcove where it is automatically processed on our behalf. Brose has no possibility to analyze this data.

  • How long is your data stored?
    Your usage data is stored by the cookies of Akamai and Brightcove only for the duration of your visit to the website and then automatically deleted (“session cookies”).

  • Is there an obligation for you to provide your data and what happens if you choose not to?
    It is not possible to use the website without processing your usage data.

More information about privacy and the processing of your personal data by Akamai is available here. More information about privacy and the processing of your personal data by Brightcove is available here .

4.2. Web analysis using etracker

  • For what purposes do we process your data?
    We use the “etracker” service, which enables data traffic analysis for our website (web analytics). This helps us continuously improve the information and the design of our website. We use etracker for various purposes such as to analyze which sections and subpages of our website were visited – and how often and for how long – and where our users come from (other websites).

    etracker GmbH (Erste Brunnenstraße 1, 20459 Hamburg, Germany) processes different usage data for this purpose and assigns an anonymous identifier to it. Additionally, certain information of the operator of website from which you came to us (in particular the URL of the previous page, any related search engine, any related search terms) may be processed. This usage data is used to create non-personalized reports on the use of our website.

  • On what legal basis do we process your data?
    Data processing and the required storage of cookies takes place based on your consent as per Art. 6 para. 1 (a) GDPR.

  • Is your data shared with anyone? Or, who participates in the processing of my data?
    Your usage data is shared with etrackerGmbH where it is automatically processed on our behalf. In principle, analysis options are used only internally by our IT and marketing department.

  • How long is your data stored?
    See table below.

  • What rights do I have?
    You may reject (as per Section 15 (3) TMG or Art. 21 para. 1 DSGVO)) data processing and the use of cookies at any time for the future or revoke your consent (as per Art. 7 Abs. 3 GDPR) as follows: Please refer to Section 7.

etracker cookies

Name, Type, Purpose, Deletion

  • etcamp/etcampi, Permanent, Campaign allocation (external/internal). Placed in the event of a campaign contact, 30-180 days
  • etrp_STATID, Session, Tags referrals. Placed only when campaign referrals are used, Current session
  • cntcookie, Permanent, Exclusion from count, 4 years after last visit
  • et_id, Permanent, Visitor identification campaign control, 2 years after last visit
  • _et_coid, Permanent, Cookie identification campaign control, 2 years after last visit
  • _vv, Permanent, Stores status of Visitor Voice invitation. Placed only when Visitor Voice is used, 30 minutes to 30 days
  • _vmu, Permanent, Stores status of Visitor Motion recording. Placed only when Visitor Motion is used, 30 days
  • _vms, Permanent, Stores status of Visitor Motion session. Placed only when Visitor Voice is used, current session 30 days
  • et_overlay, Session, Stores the overlay settings, duration of session, Current session
  • onpageConfiguration.SID, Session, Identification for the onpageconfigurator, Current session
  • et_ocookie, Session, Stores the session for the overlay, Current session
  • Alphanumeric (32 characters), Session, Stores the session ID so that the session cannot be viewed with another browser, Current session

More information about privacy and the processing of your personal data by etracker is available here .

4.3. Use of Dynamic Yield

Opt-Out-Link

  • For what purposes do we process your data?
    The recommendation tool of Dynamic Yield (Highlands House, Basingstoke Road, Spencers Wood, Reading, Berkshire, England RG7 1NT) is used to optimize our website to turn your visit into a personalized experience with recommendations and content specifically tailored to your preferences. To do this we use the page content you previously accessed to recommend similar or thematically related products or other content that might be relevant to you.

    Dynamic Yield processes different usage data for this purpose. Cookies are used exclusively to save pseudonymized information under a randomly generated ID (pseudonym). Your IP addresses are only saved in anonymized form in the process. This means that it is not possible to associate the data to any particular user and that it cannot be (re)stored at a later time.

  • On what legal basis do we process your data?
    Data processing and the required storage of cookies takes place based on your consent as per Art. 6 para. 1 (a) GDPR.

  • Is your data shared with anyone? Or, who participates in the processing of my data?
    Your usage data is shared with Dynamic Yield where it is automatically processed on our behalf. In principle, analysis options are used only internally by our IT and marketing department.

  • How long is your data stored?
    See table below.

  • What rights do I have?
    You may reject (as per Section 15 (3) TMG or Art. 21 para. 1 DSGVO)) data processing and the use of cookies at any time for the future or revoke your consent (as per Art. 7 Abs. 3 GDPR) as follows: Please refer to Section 7.

Dynamic Yield Cookies

Personal Identifiers

Name, Type, Purpose, Deletion

  • DYID, Permanent, Dynamic Yield unique anonymous identifier, 2 years
  • _dyid, Permanent, Dynamic Yield unique anonymous identifier, 30 days
  • __cfduid, Permanent, Used to identify individual clients behind a shared IP address and apply security settings on a per-client basis, 1 year
  • DYSES, Session, Dynamic Yield session identifier, Current session

Experimentation

Name, Type, Purpose, Deletion

  • _dy_ses_load_seq, Permanent, Internal state in experimentation to detect browser sessions, 30 days
  • _dy_soct, Permanent, Indicates the last time an action occurred, used for frequency settings (once per day, etc.), 1 year
  • _dy_csc, Permanent, Keeps track of events for the “Elapsed time” condition
  • _dyexps/_dy_att_exps, Permanent, Keeps state of experiment selections and attribution
  • _dy_c_exps/_dy_c_att_exps, Permanent, Keeps state of persistent experiment selections (legacy, empty entry for most customers), 30 days
  • _dy_device, Permanent, Caches coarse device data (brand, and Tablet vs Smartphone)
  • _dyprd, Permanent, Legacy key for variations returned by predict. Used by large publishers only
  • _dyprdobj, Permanent, Stores variations returned by predict. Used by large publishers only

Mechanics

Name, Type, Purpose, Deletion

  • _dy_csc_ses, Session, Empty session cookie to notice close of browser, Current session
  • _dy_toffset, Permanent, Validation for client’s clock drift (for computers that don’t sync their clock with the Internet – was observed a lot in Eastern Europe), 30 days
  • _dyus_, Permanent, Superficial usage data, 30 days
  • _dyrc, User engagement actions that are yet to be verified to be sent successfully to server from previous pageview. Should indicate whether another attempt to send should be done, Cleaned up on the next pageview
  • _dyfs, Session, Indicates the first session, Current Session
  • _dybatch, User engagement actions that are yet to be verified to be sent successfully to server from previous pageview. Should indicate whether another attempt to send should be done, Cleaned up on the next pageview
  • _dycmc, Permanent Assists in markup of cookie-deleter users, 30 days

Segmentation

Name, Type, Purpose, Deletion

  • _dy_df_geo, Permanent, Human-friendly country/state/city, 30 days
  • _dy_geo, Permanent, Machine-friendly country/continent/area/city, 30 days
  • _dy_svar_, Permanent, Cached Site Variables values, 30 days
  • _dyaud_sess, Permanent, User state of the Real-time Audiencing System (session-oriented), 30 days
  • _dyuss_, Session, Superficial usage data (session-oriented), Current session
  • _dynuss_, Session, Superficial usage data (session-oriented), Current session
  • _dy_cweather_, Cached weather data (if applicable)
  • _dy_weather_, Cached weather forecast data (if applicable)
  • _dy_tsrc Cached “traffic source”
  • _dyaud_nchc, User state of the Real-time Audiencing System
  • _dyaud_page, Non-user state of the Real-time Audiencing system
  • _dy_device, Caches coarse device data (brand, and Tablet vs Smartphone)

More information about privacy and the processing of your personal data by Dynamic Yield is available here .

5. Integrated third party tools

5.1 Google Maps

  • Who is the controller for the Google Maps service?
    Our website uses a map service called “Google Maps”. We have marked Brose group locations on Google Maps and embedded this map on our website under “Company/Locations”. Controller under data privacy protection laws: Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We have no access to the data that Google collects in the scope of this map service. Google is solely responsible for any data processing that takes place.

    Nevertheless, in order to be as transparent as possible, we would like to provide you with some information on how data is processed in connection with the Google Maps service.

    For more information, please see Google’s privacy statement at policies.google.com/privacy.

  • What is the purpose of the Google Maps service?
    We have marked the location of the Brose Group on Google Maps and embedded this map on our website under “Company/Locations” in order to enable visitors to find our locations quickly and to make our website as appealing as possible.

  • On what legal basis do we process your data?
    The processing of your personal data in connection with the Google Maps service takes place based on the legitimate interests of Brose on the basis of Art. 6 para. 1 (f) of the European General Data Protection Regulation (GDPR). Our legitimate interest is to optimize our website in order to promote business and enable users to quickly find Brose Group locations. For more information on the legal basis for processing your personal data, please see the privacy statement of Google, the controller, at policies.google.com/privacy.

  • Is there an obligation for you to provide your personal data and what happens if you choose not to?
    You are not required to provide your personal data. However, if your personal data cannot be processed, you will not be able to use our website brose.com or the Google Maps service embedded on our website.

  • Is your data shared with anyone? Or, who participates in the processing of my data?
    We do not have any access to your personal data in connection with the Google Maps service, and we do not share any information with third parties. For more information on how Google, the controller, may share your personal data, please see Google’s privacy statement at policies.google.com/privacy.

  • Is your data shared with a third country or an international organization?
    We will not transmit the personal data you share in connection with the Google Maps services with a third country or international organization. If the Google Maps service connects with the servers of Google, the controller, and your personal information is transmitted in the process, then further information on this is available in Google’s privacy statement at policies.google.com/privacy.

  • How long is your data stored?
    We do not store any personal data in connection with the Google Maps service. For more information on how Google, the controller, may store your personal data, please see Google’s privacy statement at policies.google.com/privacy.

5.2 Google Tag Manager

  • Google Tag Manager enables us to manage website tags via a single interface. However, the Tag Manager that uses the tags itself functions without cookies and does not collect any personal information. Your IP address is only transmitted to Google in anonymized form.

  • The Tag Manager only triggers other tags, which may collect data of their own in certain circumstances. This privacy statement provides information on the respective third parties (eTracker). However, Google Tag Manager does not use this data. If you have disabled cookies in your settings or by some other means, this will be observed for all tracking tags that were set with the Google Tag Manager; i.e. the tool does not modify your cookie settings.

  • Google may ask you for permission to share product data (e.g. your account information) with other Google products in order to enable certain features, e.g. to make it easier to add new conversion tracking tags for AdWords. In addition, Google developers review data concerning product usage from time to time in order to further optimize the product. However, Google will never share data of this kind with other Google products without your consent.

6. Applicant portal

  • Who is responsible?
    We offer you the possibility of applying for job openings at our company via the applicant portal on our website.

    In addition to Brose Fahrzeugteile GmbH & Co. Kommanditgesellschaft, Coburg, Germany, which initially receives all applications, the party responsible for the processing of your personal data is the respective Brose Group company responsible for your application.

  • For what purposes do we process your data?
    Personal data such as your name, contact information, educational background, training data and job experience ("applicant data") that you provide to us as part of your application is treated confidentially and electronically stored and used solely for the purpose of application processing and, if necessary, to carry out the subsequent employment relationship.

    We need the data processed as part of the application process to potentially enter into an employment relationship or make a decision on hiring you. We process this personal data to verify your suitability for the respective position, for the purpose of application processing and to contact you.

    By means of a separate declaration you can consent to being included in our applicant pool should your application not be accepted following the respective hiring process. This makes it possible for us to contact you again in case of suitable job postings that match your profile.

  • On what legal basis do we process your data?
    The processing of your personal data as part of the application process is carried out on the basis of Art. 6 para. 1 (b) GDPR (initiation or performance of a contract) and any applicable national rules on the protection of employee data (e.g. Section 26 (1) sentence 1 BDSG in Germany).

    Any further storage of your data in the applicant pool takes place based on your consent as per Art. 6 para. 1 (a) GDPR.

  • Is there an obligation for you to provide your data or is this required for the conclusion of a contract and what happens if you choose not to?
    Please note: You are not required to provide your data as part of the application process. However, it is not possible to execute the application process and establish an employment relationship without processing your data and hence your application unfortunately cannot be considered without providing your data.

    Refusal to consent to the inclusion in our applicant pool will not result in any disadvantages for the concrete hiring process. But we will not be able to contact you then for other job openings.

  • Is your data shared with anyone? Or, who participates in the processing of my data?
    We share your data within the Brose Group with the company or department responsible for your application within the company.

    We also use contract processors. Your data will be passed on to them in strict compliance with the obligation of confidentiality and the requirements of the GDPR. The contract processors commissioned by us may process the data only for us and not for their own purposes. In such cases, responsibility for data processing remains with Brose.

  • Is your data shared with a third country or an international organization?
    Data may be shared with a third country outside of the EU depending on which company within the Brose Group is responsible for your application. In this case we guarantee that appropriate safeguards are taken to protect your personal data, in particular through the conclusion of standard data protection clauses pursuant to Art. 46 para. 1 (c) GDPR.

  • How long is your data stored?
    Your personal data is deleted as soon as it is no longer required for the application process (e.g. if your application is rejected or a negative decision is made). This does not apply if statutory provisions prevent deletion or if further storage is required for evidentiary purposes. For example, personal data may be stored for evidentiary purposes for the period in which it is possible to make claims against our company (e.g. such as those pertaining to the General Act on Equal Treatment in Germany (Allgemeines Gleichbehandlungsgesetz, AGG)).

    If you consent to the inclusion of your application in our applicant pool your application will be stored for a maximum of 48 months; your data is automatically deleted after this period. You can use the contact information below (please refer to Section 8) to contact our privacy officer at any time even before the end of this 48-month period and request the deletion of your data from the applicant pool. The data will be deleted immediately. If your application results in the conclusion of a contract, then your data will be stored and used for the purpose of the usual organizational and administrative processes in compliance with relevant regulations.

7. Data security

We secure our website and other systems with up-to-date technical and organizational measures to prevent your data from being lost, destroyed, accessed, modified or disseminated by unauthorized persons. When sending personal data, we make use of encryption technology to ensure extremely high levels of confidentiality. Our servers use various security mechanisms and permission processes to make unauthorized access difficult. You should keep your access information secret at all times and close your browser window once you have finished communicating with Brose. This will ensure that no one apart from you can access your personal data if you share your computer with other people.

8. Your rights

If our company processes your personal data you have the following rights within the respective legal scope:

  • Right of access, especially to obtain information from the controller concerning the personal data its stores and how it is processed (Art. 15 GDPR),
  • Right to rectification of inaccurate or incomplete data (Art. 16 GDPR),
  • Right to erasure, e.g. of unlawfully processed or no longer necessary data (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability, provided the processing takes place based on consent or to perform a contract or by means of an automated process (Art. 20 GDPR) and
  • Right to object the processing, in particular if this takes place to safeguard the legitimate interests of the controller (Art. 21 GDPR).

If the processing is based on consent that you have provided (Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR), you have the right to revoke your consent at any time. This shall not affect the lawfulness of processing carried out on the basis of consent prior to your revocation.

In addition, you have the possibility of sending a complaint

  • to our data protection officer Thomas Grimm, Max-Brose-Straße 1, 96450 Coburg, Germany, email: datenschutz@brose.com and
  • the competent regulatory agencies. For Brose Fahrzeugteile GmbH & Co. Kommanditgesellschaft, Coburg, Germany, this is Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany, email: poststelle@lda.bayern.de.

Our social media appearances

Data processing through social networks

Brose has publicly accessible profiles on social networks. The social networks we use are listed below.

Social networks such as Facebook or Twitter et cetera can generally comprehensively analyze your behavior as user when you are visiting their website or a website with integrated social media content (e.g. like-buttons or advertising banners). When you visit our social media sites, various data protection relevant processing operations are being triggered. In detail:

If you are logged into your social media account and visit our social media site, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in. Even if you do not have an account with the relevant social media portal, your personal data can still be collected. In this case, the data is collected, for example, via cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social networks can create user profiles in which your preferences and interests are stored. In this way, interest-related advertising can be displayed inside and outside the respective social media presence. If you have an account on the social network, interest-based advertising can be displayed on all devices on which you are logged in or where you have been logged in.

Please also note that we cannot trace all processing steps on the social media networks. Depending on the provider, the operators of the social media portals may therefore carry out further processing operations. Details can be found in the terms of use and data protection regulations of the respective social media network.

Legal basis

Our social media sites should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).

The responsible and the assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are responsible, together with the operator of the social media platform, for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data portability and complaints) basically both against us and against the operator of the respective social media network (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our possibilities depend largely on the corporate policy of the respective provider.

If you have any questions, please contact us via datenschutz@brose.com

Storage time

The data collected directly by us via our social media sites will be deleted from our systems as soon as the purpose for its storage ceases to apply, you request that we delete it, you revoke your consent for storage or the purpose for data storage ceases to apply. Stored cookies remain on your device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data, which are stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their data protection declaration, see below).

Social networks in detail

  • Facebook

    We have a profile at Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

    Through the Controller Addendum, we have agreed with Facebook to share responsibility for the processing of data (joint controllership). This agreement specifies the data processing operations that we or Facebook are responsible for when you visit our Facebook fan page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
  • You can customize your advertising settings independently in your user account.
    Just click on the following link and log in:
    https://www.facebook.com/settings?tab=ads

    Details can be found in the privacy policy of Facebook:
    https://www.facebook.com/about/privacy/

  • Twitter

    We use the short message service Twitter. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter is certified under EU-US-Privacy-Shield.

    You can customize your Twitter privacy settings in your user account yourself. Please click on the following link and log in: https://twitter.com/personalization

    Details can be found in the privacy policy of Twitter:
    https://twitter.com/en/privacy

  • Instagram

    We have a profile at Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how your personal data is handled, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875

  • XING

    We have a profile at XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. For details on how your personal data is handled, please refer to XING´s privacy policy: https://privacy.xing.com/en/privacy-policy

  • LinkedIn

    We have a profile at LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified according to the EU-US Privacy Shield. LinkedIn uses advertising cookies.
    If you would like to deactivate LinkedIn advertising cookies, please use the following link:
    https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

    Details on how they handle your personal data can be found in LinkedIn's privacy policy:
    https://www.linkedin.com/legal/privacy-policy

  • YouTube

    We have a profile on YouTube. Provider is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA

    For details on how they handle your personal data, please refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=en

  • kununu

    We have a profile at kununu. The provider is kununu GmbH, Neutorgasse 4-8, Top 3.02, 1010 Wien, Austria. For details on how your personal data is handled, please refer to kununu´s privacy policy: https://privacy.xing.com/en/privacy-policy

merchandise

Data Privacy Statement in accordance with the General Data Protection Regulation for Merchandise Sales

We wish to comply with our obligation to provide information under Article 13 of the General Data Protection Regulation (GDPR) with the following statement.

1. Controller

The controller within the meaning of the GDPR is Brose Fahrzeugteile SE & Co. Kommanditgesellschaft, Coburg (Max-Brose-Straße 1, 96450 Coburg, Germany).

2. Purpose of processing and legal basis

We process your personal data (name, contact data, order data) for the purpose of selling and handling shipments of merchandise (such as motor racing calendars). The legal basis within the meaning of the GDPR for processing of your personal data is Article 6 (1) point (b) GDPR.

3. Disclosure of data and period of storage

Your personal data is provided to the departments at the controller which need it to fulfill the above purposes. Your personal data is not passed on to third parties.

Your personal data is erased as soon as it is no longer required for achieving the purpose for which it was collected. If your personal data is processed as part of selling and handling shipments of merchandise (such as motor racing calendars), it is erased when all claims from the contractual relationship have become time-barred and there are no statutory retention periods standing in the way of that.

4. Your rights

You have the right under the applicable data protection legislation to:

- information, in particular on the data stored at the controller and the purposes for which it is processed (Article 15 GDPR),

- rectification of inaccurate or completion of incomplete data (Article 16 GDPR),

- erasure, for example of data that has been unlawfully processed or is no longer required (Article 17 GDPR),

- restriction of processing (Article 18 GDPR),

- data portability, if data processing is based on consent or is carried out to fulfill a contract or using automated processing methods (Article 20 GDPR).

5. Contact person

We will be pleased to assist you if you have any questions on the subject of data protection at Brose. If you have a complaint or wish to exercise your rights, you can contact our Data Protection Officer at datenschutz@brose.com.

If you believe that Brose has not adequately addressed your misgivings or complaint, you have the right to lodge a complaint with the responsible supervisory authority.