Data protection

This data protection declaration is issued by Scania Deutschland GmbH,
August-Horch-Str. 10, 56070 Koblenz, Germany, phone: +49 (0) 261 / 897-0,
e-mail: datenschutz@scania.de

and Scania Vertrieb und Service GmbH,
August-Horch-Str. 10, 56070 Koblenz, phone: +49 (0) 261 / 897-0,
e-mail: datenschutz@scania.de

and Scania Österreich Ges.m.b.H.
Johann-Steinböck-Straße 4, 2345 Brunn am Gebirge, phone: +43 (0) 2236/3902-0,
e-mail: datenschutz@scania.de

(hereinafter collectively also referred to as "SCANIA") has fulfilled its existing legal obligation to provide information pursuant to Article 13 of the General Data Protection Regulation ("GDPR") with regard to a processing of personal data on the joint website. In the following, we therefore explain which of your personal data we process and in what way.

For further information on data processing by Scania CV AB (Group Headquarters), SE-151 87 Södertälje, Sweden, please visit www.scania.com/group/en/home/admin/misc/privacy-statement.html.

Please contact us if you have any further questions. Our contact details can be found above and at the end of this document.

Personal data

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes, for example, information such as your name, address, telephone number, e-mail address, bank details or date of birth.

Processing of personal data

Processing of personal data means any operation or series of operations which is performed upon personal data, whether or not by automatic means. In particular, data processing includes the collection, recording, organization, arrangement, storage, adaptation, alteration, retrieval, interrogation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

We process personal data in accordance with the requirements and conditions set out below within the framework of automated processing based on a relevant legal basis of authorization.

With regard to the fulfillment of legal obligations, Art. 6 (1) sentence 1 lit. c GDPR is the relevant legal basis. We process your personal data depending on the respective legal obligation.

We present corresponding legal bases for other data processing below.

Automated decision-making in individual cases, including profiling pursuant to Art. 22 GDPR, does not take place.

Collection of personal data when visiting our website

When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect in particular the following data, which is technically necessary for us to display our website to you and to ensure stability and security.

- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes (referrer, if given)
- Operating system and its interface, screen resolution and color depth
- type, language and version of the browser software

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR ("legitimate interest").

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. As a rule, you will generally have to provide additional personal data for such purposes that we will then use to provide the relevant service. We explain this to you in this document.

Use of cookies

In addition to the data referred to above, cookies will be stored on your computer when you use our website, provided that you have given us your consent to do so.

Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and functional.

On the one hand, we use technically necessary cookies. These cookies are necessary for good functionality of our website and cannot be switched off in our system. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR ("legitimate interest"). However, you can of course configure your browser setting according to your wishes and also reject such technically necessary cookies. We would like to point out that you will then not be able to use our website.

Otherwise, Art. 6 (1) sentence 1 lit. a GDPR is the legal basis for the use of cookies ("consent"). You can differentiate whether you give us consent for all cookies, only related to certain types of cookies (for example, performance cookies, functional cookies, targeted cookies, social media cookies) or no consent at all.

This consent is voluntary. You can refuse it without giving reasons, without having to fear any disadvantages because of it. You can also withdraw this consent at any time with future effect under Cookie Settings without incurring any disadvantages as a result. However, we would like to point out that if you do not give your consent or if you withdraw it, you may not be able to use all the functions of this website to their full extent.

We will also provide you with further information on the use of cookies in the following sections, insofar as cookies are used.

You will also find detailed information in the following table.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google").

We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user.

Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site.

Google also processes your personal data in the USA. Before giving your consent in accordance with Art. 49 (1) a GDPR, we would like to point out in particular that without an adequacy decision and without suitable guarantees, there may not be an adequate level of data protection in the USA, as data protection laws do not comply with the requirements of the GDPR, and in particular data subject rights may not be enforced. The setting of cookies only takes place if you give us your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR ("consent"). This consent is voluntary. You can refuse it without giving reasons, without having to fear any disadvantages because of it. You can also withdraw this consent at any time with future effect under Cookie Settings, without any disadvantages for you.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, which means that they cannot be traced back to a specific person. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

User conditions: www.google.com/analytics/terms/de.html,
Overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html,
as well as the data protection declaration: www.google.de/intl/de/policies/privacy.

Inquiry and contact form

When you contact us by e-mail or via a contact form, the data you provide will be processed by us. Mandatory data are only offer content, name, phone number, your message and e-mail address. You can provide further personal data on a voluntary basis if you wish (if you want us to send you information material by post, we need your address). Your personal data will be stored by us to answer your questions and to fulfill your requests. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

The legal basis is Art. 6 para. 1 sentence 1 lit. b, f GDPR ("pre-contractual negotiation", "legitimate interest").

Google Tag Manager

This website uses the Google Tag Manager from Google. Google Tag Manager is a solution that marketers can use to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Google also processes your personal data in the USA. Before giving your consent pursuant to Art. 49 (1) (a) of the GDPR, we would like to point out in particular that, in the absence of an adequacy decision and suitable safeguards, there may not be an adequate level of data protection in the USA, as data protection laws do not comply with the requirements of the GDPR and, in particular, data subjects' rights may not be enforced.

The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR ("consent"). This consent is voluntary. You can refuse it without giving reasons, without having to fear any disadvantages because of it. You can also withdraw this consent at any time with future effect under Cookie Settings, without any disadvantages for you.

Google Maps

On this website we use the offer of Google Maps from Google. This allows us to show you interactive maps directly on the website and enables you to use the map function comfortably.

We offer you the opportunity to communicate directly with the provider via the map. Only if you give us your consent, the provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned in the section "Collection of personal data when visiting our website" of this declaration will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Google also processes your personal data in the USA. Before giving your consent pursuant to Art. 49 (1) (a) of the GDPR, we would like to point out in particular that, in the absence of an adequacy decision and suitable safeguards, there may not be an adequate level of data protection in the USA, as data protection laws do not comply with the requirements of the GDPR and, in particular, data subjects' rights may not be enforced.

The above will only take place if you give us your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a DS-GVO ("consent"). This consent is voluntary. You can refuse it without giving reasons, without having to fear any disadvantages because of it. You can also revoke this consent at any time with future effect under Cookie Settings without any disadvantages for you.

For more information on the purpose and scope of data collection and processing, please refer to the provider's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy.

Duration of processing

The maximum duration of storage depends on the purpose for which the data processing serves. The duration of storage depends in particular on the period for which storage is required to fulfill the purpose. In addition, the data is processed for the fulfillment of legal obligations (e.g. commercial and tax retention obligations pursuant to Section 257 of the German Commercial Code ("HGB"), Section 147 of the German Fiscal Code ("AO") for up to ten years).

Recipients of the data

We transmit your data to the specialist departments within SCANIA as far as this is necessary.

The authorization basis for any further data transfer within the SCANIA Group is Art. 6 para. 1 sentence 1 lit. f GDPR ("legitimate interest"). Accordingly, data processing is lawful if the processing is necessary to protect our legitimate interests, unless the interests or fundamental rights of the data subject prevail. Recital 48 of the recitals to the GDPR specifies the legitimate interest for transfers within a group of companies. According to this, the transfer within a group of companies for internal administrative purposes with regard to the processing of customer data qualifies as a legitimate interest of us within the meaning of Art. 6 (1) sentence 1 lit. f GDPR.

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. All requirements of Art. 28 GDPR are observed.

Location of the data processing measures

All processing of your personal data takes place either in Germany or in member states of the European Union. A transfer of your personal data by us to countries outside the member states of the European Union (so-called third countries) or to other international organizations does not take place in principle, unless otherwise stated in this document.

If Scania transfers personal data to service providers outside the EU, this will only be done if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other adequate data protection guarantees (e.g. binding corporate data protection regulations or an agreement of the standard contractual clauses of the EU Commission) are in place or if the consent of the data subject is available (Art. 44 et seq. GDPR).

Security / Technical and organizational measures

We take all necessary technical and organizational measures, taking into account the requirements of Articles 24, 25 and 32 GDPR, to protect your personal data against loss, destruction, access, alteration or dissemination by unauthorized persons and against misuse.

Thus, we comply with the legal requirements for pseudonymization and encryption of personal data, confidentiality, integrity, availability and resilience of systems and services related to processing, availability of personal data and the ability to quickly restore it in the event of a physical or technical incident, as well as the establishment of procedures for regular review, assessment and evaluation of the effectiveness of technical and organizational measures to ensure the security of processing.

Furthermore, we also comply with the requirements of Art. 25 GDPR with regard to the principles of "privacy by design" (data protection through technology design) and "privacy by default" (data protection through data protection-friendly default settings).

Your rights

You have a right to free information about your personal data and, if the legal requirements are met, a right to rectification, blocking and deletion of your data, to restriction of processing, to data portability and a right of objection.

Insofar as we base the processing of your personal data on the balance of interests (Article 6 (1) sentence 1 lit. f GDPR), you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the merits of the case and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

You also have the option of complaining to a competent supervisory authority (e.g. in Germany: State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Prof. Dr. Dieter Kugelmann, Hintere Bleiche 34, 55116 Mainz, or in Austria: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Wien).

If you have any questions regarding the processing of your personal data, or if you have any questions regarding the aforementioned rights, or if you wish to exercise these rights or make suggestions, please contact us or our external data protection officer:

CDV Consulting GmbH
Dr. Thomas Kehr
Ferdinand-Sauerbruch-Straße 28
56073 Koblenz, Germany
Telephone: 0049 (0) 261-88 44 699
E-Mail: datenschutzbeauftragter@scania.de
Status: January 2022 (V2)
Our most current version of this document applies.