Data protection

Data protection AL-KO Vehicle Technology Group

We are pleased with your interest in our website. Protecting your privacy is very important to us. In accordance with the EU General Data Protection Regulation, we will provide you in detail below with information about how we handle your data.

General information on data protection

Personal data is only collected, used and disclosed by AL-KO Vehicle Technology Group (AL-KO VT) if this is permitted by law or if you have demonstrably given your consent.
Personal data means data that can be used to personally identify you. This privacy notice explains which data we collect and what we use it for. It also explains how and for what purpose this takes place.

We adhere to the principles for the processing of personal data in accordance with Art. 5 GDPR. The processing of your data is based on the principles of lawfulness, processing in good faith, transparency

for specified, explicit, and legitimate purposes
processing is restricted to what is necessary for the purposes ('data minimisation')
factually correct and, where necessary, kept up to date
only for as long as necessary for the purposes for which it is being processed, and
including an adequate guarantee of the security of personal data.

If we use external service providers to fulfil our business processes, they receive data to the extent necessary in accordance with Art. 28 GDPR. Please understand that we do not readily disclose individual service providers. However, your rights under data protection law are fully ensured according to the requirements of commissioned data processing.

General information on IT security

AL-KO VT takes extensive precautions to ensure the security of your personal data. We base our measures on ISO/IEC 27001 and have established technical and organisational measures that protect your data against loss of integrity, availability, and confidentiality.
For further information on the processing of your personal data, please refer to the relevant privacy notice.

Status: 31.07.2026

Information in accordance with Article 13 GDPR for website visitors

When you use this website, various personal data is collected. As the operator of these pages, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy notice. However, we would like to point out that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of the data against access by third parties is not possible.

Controller and Data Protection Officer

The data controller for data processing on this website is:

AL-KO Vehicle Technology Group
Ichenhauser Str. 14
89359 Kötz
Phone: +49 (8221) - 970
E-mail: info@alko-tech.com

Data Protection Officer
If you have any questions regarding data processing or data protection at AL-KO Vehicle Technology Group, you can contact us using our contact details or directly contact our external Data Protection Officer at Kulitz & Twelmeier GmbH.
You can reach them by mail at the address above (please note 'Attn. Data Protection Officer' on the envelope), by e-mail at dataprotection@alko-tech.com or in confidence via our data protection portal.

Scope of data collection on our website

Your data is collected firstly by you providing it to us. This may, for example, be data you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This mainly concerns technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.

Purpose and legal basis for processing personal data

Some data is collected to ensure the website is provided without errors. Other data can be used to analyse your user behaviour.

Data processing based on your consent (Art. 6(1)(a) GDPR)
If we have obtained your consent for processing personal data for specific purposes (for example, to receive personalised advertising, for identification), the processing is lawful on that basis. Consent given can be withdrawn at any time. This also applies to the withdrawal of consent declarations you gave us before the application of the GDPR from 25 May 2018. The withdrawal of consent is effective for the future and does not affect the lawfulness of the data processed up to the withdrawal.
Data processing on the basis of legitimate interests (Art. 6(1)(f) GDPR)
We process your data as permitted to protect our legitimate interests. This includes the use of your personal data to:
- inform you about our products and services
- implement measures to improve and develop services and products in order to offer you tailored communication and optimised services
- assert legal claims and defend in legal disputes
- clarify or prevent criminal offences
- use your data in anonymised form for analytical purposes

Should we intend to process your personal data for a purpose not previously stated, we will inform you of this in accordance with statutory regulations before doing so.

Data processing for the purpose of contract initiation and performance (Art. 6(1)(b) GDPR)

Further personal data, such as your name, address, telephone number or email address, is not collected when you visit the website unless you provide this information voluntarily, e.g. to receive a contract offer. Your information is stored to process your enquiry and handle it accordingly.

Recipients of the data / transfer of data / third countries

Your data may be passed on to technical service providers (e.g. providers for website maintenance) carefully selected by us and with whom we have concluded a commissioned data processing agreement, for the purposes of providing this website and for the aforementioned purposes. Apart from this, your data will only be passed on to other third parties and transmitted to third countries if this is expressly mentioned in this privacy notice or if we are obliged to do so by law.

Retention period for data

We store your personal data for the above-mentioned purposes. Your data will be processed from the time it is collected, insofar as you or a third party provides it to us. We delete your personal data, which you have provided to us, when the contractual relationship with you has ended or you have withdrawn your consent and all mutual claims have been fulfilled and there are no other statutory retention requirements or legal justifications for storage.
For Google Analytics, we use the option to limit the storage period for your data to 26 months.

Rights of data subjects / your rights

Every data subject has the right to

information (Art. 15 GDPR),
rectification (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR), and
the right to object to processing to the extent provided by law (Art. 21 GDPR).

For the right to information and erasure, the restrictions according to §§ 34 and 35 BDSG apply.

Right to object

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time for reasons arising from your particular situation to the processing of your personal data; If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or the processing is for the assertion, exercise or defence of legal claims (objection according to Art. 21(1) GDPR).

Right to withdraw consent

If you have given us separate consent to process your data, you may withdraw this consent at any time in accordance with Art. 7(3) GDPR. Such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If we process your personal data for the purpose of direct marketing, you can object to this processing in accordance with Art. 21(2) and (3) GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.

Right to lodge a complaint with the competent supervisory authority

If you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right, in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority.

Contact person for data protection

If you have any questions about the collection, processing, or use of your personal data, or for information, rectification, blocking, or erasure of data as well as the withdrawal of consents, please contact dataprotection@alko-tech.com or contact us using the above contact details.
You may withdraw your consent at any time, in whole or in part. Please address your withdrawal by e-mail to dataprotection@alko-tech.com or to our postal address.

Analysis tools and tools from third-party providers

When you visit our website, your surfing behaviour may be statistically evaluated. This is mainly carried out using cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools.

Cookies

Cookies are small text files that are stored on your device by your browser. Cookies help to make our offering more user-friendly, effective, and secure. Most of the cookies we use are so-called 'session cookies.' They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. If cookies are not accepted, the functionality of our website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions you desire are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically accurate and optimised provision of its services.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address

This data is not combined with data from other sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this, the server log files must be collected.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form including the contact details you provide there will be temporarily stored by us for the purpose of processing the enquiry and in case of follow-up questions. The processing of data entered into the contact form thus takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR). When using our contact form, your data is stored on our server. If you do not wish your data to be stored, you can withdraw your consent to the storage of your data at any time by sending an informal e-mail to dataprotection@alko-tech.com or by written notification to AL-KO Vehicle Technology Group, Ichenhauser Str. 14, 89359 Kötz.

Product registration on this website

You can register a product on our website. The mandatory fields required during registration must be completed in full. Otherwise we will refuse the registration. For product registrations carried out via our website, we collect and store your first name, last name, address, email address and telephone number. For important changes, such as changes to the scope of services or technically necessary changes, we use the email address provided during registration to inform you in this way. Processing of data entered during registration takes place for the performance of a contract or for pre-contractual measures (Art. 6(1)(b) GDPR). The storage of your personal data provided as part of product registration is also carried out by Jotform Inc., 111 Pine St. Suite 1815, San Francisco, CA 94111, USA ("Jotform"). When using our contact form, your data is stored on the Jotform server. If you do not wish your data to be stored by Jotform, you can withdraw your consent to the storage of your data at any time by sending an informal e-mail to dataprotection@alko-tech.com or by written notification to AL-KO Vehicle Technology Group, Ichenhauser Str. 14, 89359 Kötz.

Conclusion of a commissioned data processing agreement

We have entered into a commissioned data processing contract with Jotform and fully implement the strict requirements of the German data protection authorities when using Jotform.

Analytics tools and advertising

Google Analytics

This website uses features of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called 'cookies'. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is generally transmitted to and stored on a server by Google in the USA. The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website offering and its advertising.

IP anonymisation

We have activated the IP anonymisation feature on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Objection to data collection

You can prevent the storage of all cookies by adjusting your browser settings accordingly. However, please note that you may not be able to use the full functionality of this and other websites in this case. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. We also offer you the possibility to disable the collection of your website-usage data for this website by clicking on the following link: Disable data collection by Google Analytics for this website. In this case, a special opt-out cookie will be set that prevents future collection of your usage data when visiting this website.

Order processing

We have entered into a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic features with Google Analytics

This website uses the 'demographic features' function of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of visitors to the site. These data come from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the advertisement settings in your Google account or generally prohibit the collection of your data by Google Analytics as described under 'Objection to data collection'.

Retention period

Data stored by Google at user and event level, linked to cookies, user IDs (e.g. User ID), or advertising IDs (e.g. DoubleClick cookies, Android advertising ID), are anonymised or deleted after 26 months. For details, see the following link: https://support.google.com/analytics/answer/7667196?hl=de

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ('Google').
As part of Google AdWords, we use the so-called conversion tracking. If you click on an advert placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advert and was redirected to that page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by deactivating the cookie in the user settings of your internet browser. You will then not be included in the conversion tracking statistics.
The storage of 'conversion cookies' and the use of this tracking tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website offering and its advertising. Further information about Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.

Google Tag Manager

Google Tag Manager is a solution from Google Inc. that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags which may in turn collect data. Google Tag Manager does not access these data. If deactivation has been carried out on the domain or cookie level, this remains in force for all tracking tags implemented using Google Tag Manager.

Facebook Pixel

Our website uses the visitor action pixel from Facebook for conversion measurement, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ('Facebook').
This makes it possible to track the behaviour of site visitors after they have clicked on a Facebook ad to reach the provider's website. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised. The data collected is anonymous to us as the operator of this website, and we cannot draw any conclusions about the identity of users. However, the data is saved and processed by Facebook, so a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This allows Facebook to enable the placement of ads on Facebook pages and outside of Facebook. This use of data cannot be influenced by us as site operator.
The use of Facebook Pixel is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures including social media. You can find further information on protecting your privacy in Facebook's privacy policies: https://de-de.facebook.com/about/privacy/.
You can also deactivate the remarketing function 'Custom Audiences' in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/.

CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organise and analyse newsletter distribution.
The data you enter for the purpose of newsletter subscription (e.g. email address) is stored on servers of CleverReach in Germany and/or Ireland. Our newsletters sent with CleverReach allow us to analyse the behaviour of newsletter recipients. For example, it can be analysed how many recipients opened the newsletter message and how often which link in the newsletter was clicked. With the aid of conversion tracking, it can also be analysed whether a previously defined action (e.g. the purchase of a product on our website) takes place after clicking on the link in the newsletter. Further information on newsletter analytics by CleverReach can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time as described above by unsubscribing from the newsletter. If you do not wish to be analysed by CleverReach, you must unsubscribe from the newsletter.
We will store the data you provide for the purpose of receiving the newsletter until you unsubscribe from the newsletter and delete it from both our servers and the servers of CleverReach after unsubscribing. Data that has been stored for other purposes with us remains unaffected. For further details, see the data protection provisions of CleverReach at: https://www.cleverreach.com/de/datenschutz/.

Conclusion of a commissioned data processing agreement

We have entered into a commissioned data processing contract with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

Plugins and tools

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Maps will store your IP address. This is then generally transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission by Google Maps. Further information on handling user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Social Wall with Flockler

This website uses the "Social Media Wall" from Flockler to compile posts from various social networks in which we are mentioned or where a hashtag with our name or the name of a campaign is included. This includes mentions of posts we publish on social networks and posts published by users. Content is automatically obtained from the respective social networks in accordance with the conditions and permissions of the authors, and users can object to the display at any time. In principle, the authors are responsible for the content of the posts.

The parties responsible for processing the data in connection with displaying posts and their content are the providers of the respective social networks. Please refer to the information provided by the respective social networks in this privacy notice. Without prejudice to users' rights, we recommend that users contact the respective authors or social network providers (also) if they have requests for information or complaints about posts not authored by us, in order to have posts removed at source or to exercise their data protection rights.

Technical implementation by: Flockler Oy, Rautatienkatu 21 B, 33100 Tampere, Finland; Website: https://flockler.com/de; Privacy policy: https://flockler.com/privacy-policy; Order processing agreement: https://flockler.com/dpa;Sicherheitsmaßnahmen by Flockler: https://flockler.com/technical-and-organisational-measures.

Sharing buttons

On the website, we use privacy-safe “Shariff buttons”. Shariff was developed by specialists from the computer magazine c't to enable greater privacy online and to replace the usual “Share” buttons of social networks.

Information in accordance with Article 13 GDPR for online presences in social media

We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and users active there, and to inform them about our services.

Please note that user data may be processed outside the European Union. This may pose risks for users, for example, by making it more difficult to enforce users' rights. Furthermore, user data is usually processed for market research and advertising purposes. For example, user usage profiles can be created from usage behaviour and the resulting interests. These usage profiles can in turn be used to place adverts inside and outside the platforms that presumably correspond to users’ interests. For these purposes, cookies are generally stored on users' computers, in which usage behaviour and users' interests are stored. In addition, data may also be stored in the usage profiles regardless of the devices used by the users.

The processing of users’ personal data is based on our legitimate interests in effective information provision for users and communication with users in accordance with Art. 6(1)(f) GDPR.

For a detailed description of each form of processing and methods of objection (opt-out), please refer to the links from the respective providers below.

Also, in the case of requests for information and the assertion of user rights, we would like to point out that these are most effectively asserted with the providers. Only the respective providers have access to users’ data and can take direct action and provide information. If you need further assistance, you can contact us.

Facebook, pages, groups, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) based on an agreement on joint data processing – Privacy Policy: https://www.facebook.com/about/privacy/, specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Policy https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Privacy Policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

Controller and Data Protection Officer

The data controller for data processing on this website is:

Rights of data subjects / your rights

Every data subject has the right to

information (Art. 15 GDPR),
rectification (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR), and
the right to object to processing to the extent provided by law (Art. 21 GDPR).

For the right to information and erasure, the restrictions according to §§ 34 and 35 BDSG apply.

Right to object

Right to withdraw consent

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

Right to lodge a complaint with the competent supervisory authority

If you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right, in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority.

Contact person for data protection

Information in accordance with Article 13 GDPR for customers and suppliers

We hereby inform you as a customer or supplier about the processing of your personal data by AL-KO VT and about your rights under data protection law.

Controller and Data Protection Officer

The data controller for data processing is:

The data controller for data processing on this website is:

AL-KO Vehicle Technology Group
Ichenhauser Str. 14
89359 Kötz
Phone: +49 (8221) - 970
E-mail: info@alko-tech.com

Data Protection Officer
If you have any questions regarding data processing or data protection at AL-KO Vehicle Technology Group you can contact us using our contact details or directly contact our external Data Protection Officer at Kulitz & Twelmeier GmbH.
You can reach them by mail at the address above (please note 'Attn. Data Protection Officer' on the envelope), by e-mail at dataprotection@alko-tech.com or in confidence via our data protection portal.

Sources

We process personal data that we have received from you as part of our business relationship or from publicly accessible sources.

Scope and purpose of processing

We only process your data if the processing is permitted by law or if we have received your consent to data processing. Relevant personal data includes names, address data, and telecommunications data. These may also include enquiry, offer and order data, data from fulfilling our contractual obligations, documentation data as well as other data comparable with the aforementioned categories.
Data is collected in order to:

identify you as our supplier,
execute the contractual relationship,
communicate with you,
process any potential liability claims and assert possible claims against you.

Legal basis for processing

Data processing for the purpose of fulfilling the contract or carrying out pre-contractual measures (Art. 6(1)(b) GDPR)
Processing of your personal data is primarily for the purpose of properly executing the contractual relationship.
Data processing based on your consent (Art. 6(1)(a) GDPR)
If we have obtained your consent to process personal data for specific purposes (e.g. for submitting offers), the processing is lawful on that basis. Consent given can be revoked at any time. This also applies to the withdrawal of consent declarations you gave us before the application of the GDPR on 25 May 2018. The withdrawal of consent is effective for the future and does not affect the lawfulness of the data processed up to the withdrawal.
Data processing on the basis of legitimate interests (Art. 6(1)(f) GDPR)
We process your data as permitted to protect our legitimate interests. This includes the use of your personal data to:
- assert legal claims and defend in legal disputes
- clarify or prevent criminal offences

Should we intend to process your personal data for a purpose not previously stated, we will inform you of this in accordance with statutory regulations before doing so.

Requests by e-mail, phone, or fax

If you contact us by e-mail, phone, or fax, your request including all personal data arising from it (name, enquiry, etc.) will be stored and processed by us for the purpose of processing your enquiry. This data is not passed on without your consent. This processing is based on Art. 6(1)(b) GDPR, provided your request is related to the performance of a contract or is necessary for the execution of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR).

Retention period for data

We will store your data as long as it is required for our business purposes as well as beyond that in accordance with statutory retention, documentation, and limitation periods.

Recipients of the data

At AL-KO VT those departments and employees will have access to your personal data who require it to fulfil our contractual and legal obligations or to safeguard legitimate interests. In addition, service providers and agents used by us may receive data for these purposes. We may only pass on information about you if legal provisions permit this, you have consented, we are legally authorised to provide information or transfer data, and/or commissioned processors are equally bound to confidentiality as well as compliance with the requirements of the GDPR and the German Federal Data Protection Act. Under these conditions, the following recipients may receive data:

affiliated companies of AL-KO VT
service providers & service providers
credit rating agencies
public authorities to fulfil legal reporting obligations, e.g. tax authorities, social insurance institutions, law enforcement
banks, credit card companies
IT service providers
data disposal companies
auditing companies
debt collection service providers
website management service providers
insurers

Data transfer to recipients outside the EEA

Data will only be transferred to countries outside the EU or the EEA if this is necessary for the execution of contracts with customers, suppliers and service partners (e.g. material procurement, manufacturing, logistics), if you have given us your consent, or within the framework of commissioned data processing. Data exchange also takes place with affiliated AL-KO VT companies in third countries.
If service providers in third countries are used, they are, in addition to written instructions, obliged to comply with the level of data protection in the EU by agreement of the EU standard contractual clauses. Corresponding contractual agreements exist with affiliated AL-KO VT companies.

Rights of data subjects / your rights

Every data subject has the right to

information (Art. 15 GDPR),
rectification (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR), and
the right to object to processing to the extent provided by law (Art. 21 GDPR).

For the right to information and erasure, the restrictions according to §§ 34 and 35 BDSG apply.

Right to object
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time for reasons arising from your particular situation to the processing of your personal data; If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or the processing is for the assertion, exercise or defence of legal claims (objection according to Art. 21(1) GDPR).

Right to withdraw consent
If you have given us separate consent to process your data, you may withdraw this consent at any time in accordance with Art. 7(3) GDPR. Such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If we process your personal data for the purpose of direct marketing, you can object to this processing in accordance with Art. 21(2) and (3) GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.

Right to lodge a complaint with the competent supervisory authority
If you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right, in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority.

Contact person for data protection

Information in accordance with Article 13 GDPR for applicants

We offer you the opportunity to apply to us (for example, by post or via our online application form). Below we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data complies with applicable data protection law and all other legal requirements, and that your data will be treated as strictly confidential.

Controller and Data Protection Officer

The data controller for data processing on this website is:

AL-KO Vehicle Technology Group
Ichenhauser Str. 14
89359 Kötz
Phone: +49 (8221) - 970
E-mail: info@alko-tech.com

Data Protection Officer
If you have any questions regarding data processing or data protection at AL-KO Vehicle Technology Group you can contact us using our contact details or directly contact our external Data Protection Officer at Kulitz & Twelmeier GmbH.
You can reach them by mail at the address above (please note 'Attn. Data Protection Officer' on the envelope), by e-mail at dataprotection@alko-tech.com or in confidence via our data protection portal.

Scope, purpose, and legal basis for data collection

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes from interviews, etc.) to the extent necessary to decide on the establishment of an employment relationship.

The legal basis is § 26 BDSG-neu under German law (establishment of an employment relationship), Art. 6(1)(b) GDPR (general contract initiation), and – if you have given consent – Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. Your personal data will only be shared within our company with those involved in handling your application. If your application is successful, the data you have submitted will be stored in our data processing systems based on § 26 BDSG-neu and Art. 6(1)(b) GDPR for the purposes of conducting the employment relationship.

Retention period for data

If we are unable to make you a job offer, you reject a job offer, withdraw your application, withdraw your consent to data processing, or ask us to delete the data, the data you have submitted (including any remaining physical application documents) will be stored or kept for a maximum of six months and seven days after the conclusion of the application process (retention period) so we can understand the details of the application process in the event of discrepancies (Art. 6(1)(f) GDPR).

If we find your profile of interest for other vacancies and wish to check further potential opportunities, we will ask you if you agree to be included in the applicant pool. The same applies to unsolicited applications. If you agree to further storage of your data, we will add your data to our applicant pool. The data will then be deleted after 12 months.

Once the retention period has expired, the data will be deleted unless there is a statutory retention obligation or another legal ground for further storage. If it is apparent that storage of your data will be necessary after the expiry of the retention period (e.g. due to pending or imminent legal disputes), deletion will not take place until the data is no longer required. Other legal storage obligations remain unaffected.

Recipients of personal data

To register your applicant data, we use the online portal of d.vinci HR-Systems GmbH. As a service provider, they may also gain knowledge of your personal data in connection with the maintenance and care of the systems. We have concluded a commissioned data processing agreement with this provider, which ensures that data processing is carried out legally.
Your application data will be reviewed by the HR department after receipt. Suitable applications are then forwarded internally to the responsible department heads for the respective open position. The further process is then coordinated. In principle, only those individuals within the company who require your data for the proper execution of our recruitment process will have access to it.

Transfer of data to third parties

We do not pass on personal data to third parties as part of the application process.

Rights of data subjects / your rights

Every data subject has the right to

information (Art. 15 GDPR),
rectification (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR), and
the right to object to processing to the extent provided by law (Art. 21 GDPR).

For the right to information and erasure, the restrictions according to §§ 34 and 35 BDSG apply.

Right to object
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time for reasons arising from your particular situation to the processing of your personal data (objection according to Art. 21 GDPR); If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or the processing is for the assertion, exercise or defence of legal claims. If we process your personal data for the purpose of direct marketing, you can object to this processing in accordance with Art. 21(2) and (3) GDPR.

Right to withdraw consent
If you have given us separate consent to process your data, you may withdraw this consent at any time in accordance with Art. 7(3) GDPR. Such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with the competent supervisory authority
If you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right, in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority.