Skintechnology - Maintenance mobile

1. Scope of application

The protection of personal data is very important to us. With the following information on data protection, we want to explain to you which personal data we process for which purposes while you are using our website.

The following information applies to all content on the website https://www.revimobil.de/ (hereinafter "offer"). 

The legal basis for data protection can be found in the EU General Data Protection Regulation (hereinafter "GDPR") and the German Federal Data Protection Act.

2. Definitions

Personal data

"Personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Types of personal data

Access data

Access data is data about every access to the server on which our website is located. Access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Input data

If you contact us via our website or by other means (e.g. telephone, e-mail), we process the personal data that you enter in the respective form or communicate to us by other means (e.g. surname, first name, e-mail address, address).

Order and registration data

This is the data that you provide for booking the service vehicle and registering as a customer.

4. Purposes of the processing

Access data

Our hosting provider collects access data on our behalf for security reasons for fraud and abuse control as well as for statistical recording of website usage. The legal basis for the processing is Art. 6 para. 1 sentence 1 f) GDPR. For processing of the IP address by third-party providers, see section 6. 

Input data

If you use our website or provide us with your personal data by other means, we will use it to process your request (legal basis Art. 6 para. 1 sentence 1 a, f) GDPR). If you communicate with us by e-mail, your e-mails and the personal data communicated in them will be transported on our behalf to the servers of our e-mail hosting provider in order to be stored on their servers and our servers (legal basis Art. 6 para. 1 sentence 1 a, f GDPR).

Our legitimate interest in data collection within the meaning of Art. 6 para. 1 f) GDPR follows from the fact that we cannot process your request (contacting you, processing your request) without your data.

Order and registration data

We process order data for contract processing (legal basis is Art. 6 para. 1 sentence b GDPR). In addition, we collect usage data such as your IP address with every order for the purpose of fraud and abuse control (legal basis is Art. 6 para. 1 sentence 1 f GDPR).
We process registration data to open and manage your account (legal basis is Art. 6 para. 1 sentence b GDPR). We process further data in the customer area in order to make your purchase as convenient and time-saving as possible (legal basis is Art. 6 para. 1 sentence 1 f GDPR).

Service offers by e-mail

As a customer of ours, you will receive service offers from us by email at irregular intervals, provided you have provided us with an email address. You will receive these offers from us regardless of whether you have subscribed to a newsletter. We use the email address you provide when using our services to advertise our own services that are similar to those that you have already booked with us (legal basis is Art. 6 para. 1 sentence 1 f) GDPR).

If you do not wish to receive offers by e-mail, you can object to receiving them at any time at info@reviderm.com and at the end of each offer e-mail without incurring any costs other than the transmission costs according to the basic rates.

Postal advertising / telephone advertising

We also use your name and address for direct postal advertising (legal basis is Art. 6 para. 1 sentence 1 f) GDPR). We only undertake telephone advertising measures if you have given your consent (legal basis is Art. 6 para. 1 sentence 1 f) GDPR).

5. Data processing by third parties

Hosting

Our website is operated on the servers of our hosting provider. This provider processes the personal data mentioned under point 3. on our behalf for the operation of our website and for abuse control. The legal basis for this is Art. 6 para. 1 sentence 1 f) GDPR.

6. Categories of recipients of personal data

Web hosting provider

The data mentioned in section 3 is processed by our web hosting provider on our behalf and on our instructions for the purpose of operating our website and for fraud and abuse control. If you communicate with us by e-mail, your e-mails and the personal data communicated therein will be stored on our behalf on the servers of our web hosting provider (legal basis is Art. 6 para. 1 sentence 1 a, f GDPR).

IT service providers

Our IT service providers receive access to the data mentioned in section 3 on our behalf and on our instructions, insofar as this is necessary for technical reasons and for website optimization and system care and maintenance (legal basis is Art. 6 para. 1 sentence 1 f GDPR).

Shipping service provider / logistics service provider

If we deliver goods, we use shipping service providers to whom your first and last name and your delivery address and, if applicable, your telephone number will be transmitted with your consent (legal basis is Art. 6 para. 1 sentence 1 b GDPR).

Integration of third-party services and content

With regard to the integration of third-party services and content on our website and the related data transmissions, see section 6.

Tax consultants and auditors

For the purpose of accounting and filing tax returns, we transmit your data to our tax advisors and auditors to the extent necessary (legal basis is Art. 6 para. 1 sentence 1 f GDPR).

Other recipients

Your data will only be passed on to other third parties in the following cases:

• if necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (legal basis is Art. 6 para. 1 sentence 1 f GDPR);
• we are legally obliged to disclose data in connection with official inquiries, court orders or legal proceedings.  

We work together with service providers as processors or joint controllers and have concluded a contract in accordance with Art. 28 or Art. 26 GDPR.

7. Voluntary nature of the provision of data

The provision of personal data when visiting our website is neither required by law or contract nor is it necessary for the conclusion of a contract. You are also not obliged to provide personal data when you visit our website, although access data is collected automatically when you visit our website. If you register as a customer and wish to use our login area, the registration data is required.

8. Duration of the processing

Access data

The access data is stored by our hosting provider for security reasons (e.g. to investigate misuse or fraud) for a maximum period of 6 months and then deleted. Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified. 

Cookies, third-oarty providers

If IP addresses are processed by third-party providers, we have no influence on the duration of processing. In section 6 you will find the links to the data protection declarations of the third-party providers. There you can find out about the duration of processing. We also inform you about the duration of the cookie sessions or cookie runtimes in the cookie bar or data protection settings.

Postal advertising

We use your personal data for postal advertising until you object to this.

Input data

We process personal data that you provide via our forms or communicate to us in any other way for the duration of the processing of your request, unless this data is subject to retention periods under tax and commercial law or consent justifies continued storage. In any case, the data will be stored until the expiry of the limitation periods for claims for damages.

Order and contract data

For evidentiary purposes, we must retain order data for three years from the end of the year in which the ordered item was delivered. Any claims expire at the earliest at this time in accordance with the statutory limitation period. In addition, this data may be subject to longer retention periods under tax and commercial law, which amount to 6-10 years. 

9. Objection

You have the right to object at any time to the personal data processed on the basis of Art. 6 para. 1 sentence 1 f) GDPR, provided that there are reasons for the objection arising from your particular situation. However, your personal data will continue to be processed if there are compelling legitimate grounds for continuing to process the data that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to the processing of your personal data for the purpose of such marketing at any time without giving reasons (Art. 21 GDPR).

10. Further rights of data subjects

If you have given your consent, you have the right to withdraw it. We would like to point out that a revocation does not change the legality of the processing granted until the revocation (no retroactive effect of the revocation).

Under the GDPR, you have the right to request information free of charge about the personal data we hold about you (Art. 15 GDPR). 

Furthermore, in accordance with the GDPR, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR) and portability (Art. 20 GDPR) of your personal data.  

You also have the right to lodge a complaint with the competent data protection supervisory authorities in justified cases (Art. 77 GDPR). 

You can assert your rights under the GDPR by email or in writing. You can find the provider's contact details below.

11. Contact details

Provider as responsible body:

REVIDERM AG
Robert-Bosch-Str. 7
DE-82054 Sauerlach
Phone: (+49) 08104 / 8873-0
Fax +49 08104 / 8873-999

Data protection officer:
E-Mail: datenschutz@reviderm.com

Data protection supervisory authority:

Bavarian State Office for Data Protection Supervision 
Postal address
P.O. Box 606
91511 Ansbach
Ansbach, Germany
Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
E-mail: poststelle@lda.bayern.de

A list of all data protection supervisory authorities with contact details can be found here: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

Status: June 2023