Data protection notice

As one of the leading global suppliers to the automobile industry we process information from business partners as well as existing and prospective customers all over the world. They must be confident that the data disclosed to us is treated confidentially and processed only by authorized employees.

Responsible according the general data protection regulation (GDPR) is:

  • MAHLE GmbH (We) Pragstraße 26-46 70376 Stuttgart Germany
  • email:

Data protection officer:

  • MAHLE GmbH
    Corporate officer for data protection Peter Rodenstein
    70376 Stuttgart

Statutory requirements

MAHLE has pledged to strictly comply with all national and international laws and regulations in order to preserve the right to informational self-determination.
When collecting, storing and processing personal information, we observe European regulations on data privacy and all relevant national laws derived from these regulations. As a company headquartered in Germany, we are primarily subject to the General Data Protection Regulation (GDPR), the New German Federal Data Protection Act (BDSG New), the German Telecommunications Act (TKG), and the German Telemedia Act (TMG).

Collecting and processing your personally identifiable information

During your visit to our website, we automatically anonymize and store the name of your Internet service providers, the website from which you are visiting us, the pages of our website you are visiting, the websites that you go on to visit from our website, as well as the date and duration of your visit. We can evaluate this information anonymously. Other personally identifiable information is then collected and stored only if you give us express permission to do so. Our data protection notice applies only when you are visiting our website and does not apply to your activities on social networking websites or those of other providers that you access via links on our website. Please refer to the websites of these providers for information about their data protection policies.

  • We exclude, as long as legally possible, the liability for damages caused by the usage of linked websites.

We store other personally identifiable information only if you provide this information to us in the context of a contact form. We store this data in accordance with consent given by you or under relevant legislation (see “Legal basis for processing”). There is no legal or contractual obligation for you to provide your personally identifiable information. However, certain functions on our website may depend on the transfer of personally identifiable information. If you do not transfer personally identifiable information in these cases, these functions may be restricted or unavailable.

How we store & process data submitted via our Contact Form uses a WordPress CMS Form Plugin called “Ninja forms” to process and store form entries in the CMS. A successful submission triggers a notification email to​.

Ninja Forms is configured to store form data within the CMS powering the website for 730 day, after which point it is deleted. Data cannot be recovered.

Ninja Forms is integrated with technology named “Zapier” which transfers data submitted via the Contact Form on ​​ to a Google Spreadsheet. Personal information is retained within this sheet for a maximum of 3 years, unless it is necessary to retain for longer to complete/manage business operations, processes or relationships.

Purpose of personally identifiable information

Your personally identifiable information will be used only for the purpose for which you have voluntarily provided this information to us and to protect our IT systems against attacks and other unlawful activity. Should you transfer other personally identifiable information, for example, in the context of a contact form, survey, contest, registration, or for the execution of a contract, we will use this information for the purposes mentioned, for the purposes of customer administration, and, if necessary, for the purposes of processing and invoicing any business transactions, to the extent necessary in each case. Our employees and service providers are contractually bound to the strictest confidentiality.

Statement on cookies

Information on the use of cookies, the evaluation of usage data, and the use of analysis tools:

We use cookies to identify your user interests and preferred areas of our website. We then use this information to improve the design of our website and make it even user-friendlier. We also employ the Google Analytics analysis tool for the same purpose, which may also implement cookies.

Function and use of cookies

  • Cookies are small files that are stored on your desktop, notebook, or mobile device by a website that you have visited. We can use them to tell whether there is already a link between your device and our website, or which language and other settings you prefer, for example. Cookies may also contain personally identifiable information.
  • When you use our website, you agree to the use of cookies. You can also visit our website without agreeing to the use of cookies. In this case, you can refuse the use of cookies and delete them at any time by selecting the appropriate settings on your device. You can do this as follows:
    • The default setting for most browsers is to accept cookies. You can change this setting by activating the “do not accept cookies” option in your browser.
    • You can delete existing cookies at any time. For more detailed information about this process, refer to the manufacturer’s instructions for your browser or device.
    • Just like the use of cookies, the rejection or deletion of cookies is linked to the device and the browser that are being used. You must therefore reject and delete cookies separately for each of your devices and, if you use more than one, for each browser.
  • If you decide against the use of cookies, some functions on our website may not be available to you and others may be restricted.

Evaluation of usage data; use of analysis tools

  • We would like to tailor the content of our website as precisely as possible to your interests and thus improve the service we offer you. To identify usage preferences and preferred areas of the website, we use the analysis tool Google Analytics.
  • When using this analysis tool, data may be transferred to and processed on servers located in the USA. Please note that the European Union considers that there is no “adequate level of protection” that complies with EU standards for the processing of personally identifiable information in the USA. However, for some companies, this level of protection may be replaced by certification under the “EU–U.S. Privacy Shield.”
  • If you do not wish us to collect and evaluate information about your visit to our website using the above mentioned analysis tools, you may object to this at any time for the future (opt out).
  • We take account of your objection by placing an opt-out cookie in your browser. This cookie serves only to identify your objection. Please note that for technical reasons an opt-out cookie is only effective in the browser in which it was placed. If you delete all of your cookies or use another browser or end device, you will need to opt out again.
  • You will find information on the providers of the analysis tools we use and the respective opt-out options below:
    • Google Inc. (“Google”)
    • Google is certified under the EU–U.S. Privacy Shield. You can prevent the transfer of your data and its collection and processing by Google. Google provides information about this in the following link:

Browser add-on to deactivate Google Analytics (beta) – deactivate Google Analytics

Should IP anonymization be activated on this website, your IP address will first be truncated by Google within the Member States of the European Union or in other countries party to the European Economic Area Agreement. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the website operator, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for the website operator, and providing other services to the website operator relating to website activity and Internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with any other data held by Google.

You can always visit any websites of MAHLE GmbH anonymously, i.e., without telling us who you are.


We use organizational and technical measures to ensure that your information that we process is protected against manipulation, loss, destruction, and access by unauthorized persons. Our security measures in this respect are continuously upgraded in line with state-of-the-art technology.


By using this internet site, you are authorising us to store and use your data as described in this statement. We reserve the right to revise and supplement the data protection statement. The current version of the published data protection statement applies.

Legal basis for processing

If you have given us your consent for the processing of your personally identifiable information, this represents the legal basis for processing (Art. 6(1)(a) GDPR).

For the processing of personally identifiable information for the purposes of initiating or fulfilling a contract with you, the legal basis is Art. 6(1)(b) GDPR.

Insofar as the processing of your personally identifiable information is necessary to meet our legal obligations (e.g., for the storage of data), we are authorized for this purpose under Art.

6(1)(c) GDPR.

In addition, we process personally identifiable information for the purposes of safeguarding our legitimate interests and the legitimate interests of third parties in accordance with Art.

6(1)(f) GDPR.

The maintenance of the functionality of our IT systems, the marketing of our own and third-party products and services, as well as the legally required documentation of business contacts are such legitimate interests.

Deletion of your personally identifiable information

We delete the IP address stored for security reasons and the name of your Internet service provider after seven days. We also delete your personally identifiable information as soon as the purpose for which we have collected and processed this information no longer applies. Beyond this point in time, information is stored only if this is required by the laws, regulations, or other legislation of the European Union or a Member State of the European Union to which we are subject.

The data subject’s rights

Please note that, as a data subject, pursuant to the EU General Data Protection Regulation (EU GDPR), you have the following rights in connection with the processing of your personal data:

  • Right of access under Article 15 EU GDPR
  • Right to rectification under Article 16 EU GDPR
  • Right to erasure under Article 17 EU GDPR
  • Right to restriction of processing under Article 18 EU GDPR
  • Right to data portability under 20 EU GDPR

If you have consented to the processing of your personally identifiable information by us, you have the right in accordance with Art. 21 GDPR to withdraw your consent to the collection, processing/storage, and use of your personally identifiable information at any time. The lawfulness of the processing of your personally identifiable information until the withdrawal of consent is not affected by the withdrawal of consent. The further processing of this information owing to another legal basis, such as for the fulfilment of legal obligations (see “Legal basis for processing”), remains equally unaffected.

Right to object

You have the right to object at any time on account of reasons arising from your own specific situation to processing on the basis of Art. 6(1)(e) GDPR (data processing in the public interest) or Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests) of personally identifiable information that concerns you. If you object, we will process your personally identifiable information only if we can prove compelling legitimate reasons that outweigh your interests, rights, and freedoms or if the processing serves to establish, exercise, or defend legal claims.

If you consider that the processing of your personally identifiable information infringes legal requirements, you have the right to lodge a complaint with a competent data protection supervisory authority in accordance with Art. 77 GDPR.


If you have any queries relating to data protection at MAHLE or you would like to make use of your right of access or statements as a data subject, please contact the data protection officer at our company. The data protection officer can be contacted via the official MAHLE GmbH address or via e-mail:

Next Steps

Looking for something in particular or need some advice…