As one of the leading global suppliers to the automobile industry we process information from business partners as well as existing and prospective customers all over the world. They must be confident that the data disclosed to us is treated confidentially and processed only by authorized employees.
Responsible according the general data protection regulation (GDPR) is:
Data protection officer:
MAHLE has pledged to strictly comply with all national and international laws and regulations in order to preserve the right to informational self-determination.
When collecting, storing and processing personal information, we observe European regulations on data privacy and all relevant national laws derived from these regulations. As a company headquartered in Germany, we are primarily subject to the General Data Protection Regulation (GDPR), the New German Federal Data Protection Act (BDSG New), the German Telecommunications Act (TKG), and the German Telemedia Act (TMG).
During your visit to our website, we automatically anonymize and store the name of your Internet service providers, the website from which you are visiting us, the pages of our website you are visiting, the websites that you go on to visit from our website, as well as the date and duration of your visit. We can evaluate this information anonymously. Other personally identifiable information is then collected and stored only if you give us express permission to do so. Our data protection notice applies only when you are visiting our website and does not apply to your activities on social networking websites or those of other providers that you access via links on our website. Please refer to the websites of these providers for information about their data protection policies.
We store other personally identifiable information only if you provide this information to us in the context of a contact form. We store this data in accordance with consent given by you or under relevant legislation (see “Legal basis for processing”). There is no legal or contractual obligation for you to provide your personally identifiable information. However, certain functions on our website may depend on the transfer of personally identifiable information. If you do not transfer personally identifiable information in these cases, these functions may be restricted or unavailable.
Vandervell.co.uk uses a WordPress CMS Form Plugin called “Ninja forms” to process and store form entries in the CMS. A successful submission triggers a notification email to allen.graham@gb.mahle.com.
Ninja Forms is configured to store form data within the CMS powering the website for 730 day, after which point it is deleted. Data cannot be recovered.
Ninja Forms is integrated with technology named “Zapier” which transfers data submitted via the Contact Form on www.vandervell.co.uk to a Google Spreadsheet. Personal information is retained within this sheet for a maximum of 3 years, unless it is necessary to retain for longer to complete/manage business operations, processes or relationships.
Your personally identifiable information will be used only for the purpose for which you have voluntarily provided this information to us and to protect our IT systems against attacks and other unlawful activity. Should you transfer other personally identifiable information, for example, in the context of a contact form, survey, contest, registration, or for the execution of a contract, we will use this information for the purposes mentioned, for the purposes of customer administration, and, if necessary, for the purposes of processing and invoicing any business transactions, to the extent necessary in each case. Our employees and service providers are contractually bound to the strictest confidentiality.
We use cookies to identify your user interests and preferred areas of our website. We then use this information to improve the design of our website and make it even user-friendlier. We also employ the Google Analytics analysis tool for the same purpose, which may also implement cookies.
Should IP anonymization be activated on this website, your IP address will first be truncated by Google within the Member States of the European Union or in other countries party to the European Economic Area Agreement. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the website operator, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for the website operator, and providing other services to the website operator relating to website activity and Internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with any other data held by Google.
You can always visit any websites of MAHLE GmbH anonymously, i.e., without telling us who you are.
We use organizational and technical measures to ensure that your information that we process is protected against manipulation, loss, destruction, and access by unauthorized persons. Our security measures in this respect are continuously upgraded in line with state-of-the-art technology.
By using this internet site, you are authorising us to store and use your data as described in this statement. We reserve the right to revise and supplement the data protection statement. The current version of the published data protection statement applies.
If you have given us your consent for the processing of your personally identifiable information, this represents the legal basis for processing (Art. 6(1)(a) GDPR).
For the processing of personally identifiable information for the purposes of initiating or fulfilling a contract with you, the legal basis is Art. 6(1)(b) GDPR.
Insofar as the processing of your personally identifiable information is necessary to meet our legal obligations (e.g., for the storage of data), we are authorized for this purpose under Art.
In addition, we process personally identifiable information for the purposes of safeguarding our legitimate interests and the legitimate interests of third parties in accordance with Art.
The maintenance of the functionality of our IT systems, the marketing of our own and third-party products and services, as well as the legally required documentation of business contacts are such legitimate interests.
We delete the IP address stored for security reasons and the name of your Internet service provider after seven days. We also delete your personally identifiable information as soon as the purpose for which we have collected and processed this information no longer applies. Beyond this point in time, information is stored only if this is required by the laws, regulations, or other legislation of the European Union or a Member State of the European Union to which we are subject.
Please note that, as a data subject, pursuant to the EU General Data Protection Regulation (EU GDPR), you have the following rights in connection with the processing of your personal data:
If you have consented to the processing of your personally identifiable information by us, you have the right in accordance with Art. 21 GDPR to withdraw your consent to the collection, processing/storage, and use of your personally identifiable information at any time. The lawfulness of the processing of your personally identifiable information until the withdrawal of consent is not affected by the withdrawal of consent. The further processing of this information owing to another legal basis, such as for the fulfilment of legal obligations (see “Legal basis for processing”), remains equally unaffected.
You have the right to object at any time on account of reasons arising from your own specific situation to processing on the basis of Art. 6(1)(e) GDPR (data processing in the public interest) or Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests) of personally identifiable information that concerns you. If you object, we will process your personally identifiable information only if we can prove compelling legitimate reasons that outweigh your interests, rights, and freedoms or if the processing serves to establish, exercise, or defend legal claims.
If you consider that the processing of your personally identifiable information infringes legal requirements, you have the right to lodge a complaint with a competent data protection supervisory authority in accordance with Art. 77 GDPR.
If you have any queries relating to data protection at MAHLE or you would like to make use of your right of access or statements as a data subject, please contact the data protection officer at our company. The data protection officer can be contacted via the official MAHLE GmbH address or via e-mail: dataprivacy@mahle.com
Looking for something in particular or need some advice…