PRIVACY POLICY FOR THE WEB SHOP CONTISHOP.EU
Last updated 15th October 2023

1    GENERAL:
Personal data entered by you is collected and processed by Joint Controllers listed below for the purpose of contract execution within the framework of your use of the website contishop.eu.
Joint controllers are responsible for data processing, namely:
a)    Continental Adria d.o.o., Zagrebška cesta 104, 2000 Maribor, Slovenija, EU Tax Nr.: SI87515300, Branko Lukman, adria@conti.de
b)    CONTINENTAL Hungária Kft., Edison utca 2, 2040 Budaörs, Magyarország , EU Tax Nr.: HU10505506, Attila Szabó, adatvedelem@continental.com
c)    Continental Automotive Products SRL, Strada Avram Imbroane nr.9, 300129 Timișoara, România, EU Tax Nr.: RO11269196, Florin Gheorghescu,  florin.gheorghescu@conti.de

In ensuring the provision of the website contshop.eu (e.g., technical support), we transmit data to our service provider as data processor:
Spark Promotion Kft. 1029 Budapest, Kőfejtő u. 2
This information is a commitment by the controllers in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and the relevant legislation of the Member States.
This information may be amended and / or altered by the Data Controllers at any time, with the simultaneous notification of the Data Subjects. The information will be provided by publishing on the website or by notifying the Data Subjects directly, depending on the nature of the change.

2    Data processing activities

2.1    Operation of contishop.eu webshop.
Providing a platform for B2B account registration, purchasing, delivery, complaints handling and customer communication via phone, email and regular mail. Only representative of business entities (companies or sole proprietors) having contract with any of the Controllers can register.
    Data:  Name, email address, phone number, delivery address, TAX no.
    Legal base: Legitimate interest  (GDPR Article 6 (1) (f)). It is the legitimate interest of the Controllers and its business partners to use modern technology platforms for business operations.
Retention time: Until the termination of the underlying business agreement or objection of the data subject
Recipient of data: Webshop operator and developer, shipping companies, 

2.2    Invoicing, book keeping
Issuing and retaining invoices and related mandatory documentation for delivery.
    Data:  Name, email address, phone number, invoicing address, delivery address.
    Legal base: Legal obligation (GDPR Article 6 (1) (c)).
Retention time: Retention time determined by accounting legislations.
Recipient of data: Accounting subcontractor, Tax authorities

2.3    Legal proceedings for the collection of unpaid claims
Should a partner fail to complete payments the claims may be passed to legal proceedings.
Data: contact details, and data on invoices
    Legal base: Legitimate interest  (GDPR Article 6 (1) (f)). It is the legitimate interest of the Controllers to use all legal means to collect outstanding payments
Retention time: Until necessary for legal proceedings
Recipient of data: Legal representative

2.4    Direct marketing
Controllers process your email address for commercial purposes in order to send newsletters
Data: Name, email address
Legal base: Consent of data subject interest  (GDPR Article 6 (1) (a)).
Retention time: Until retrieval of consent
Recipient of data: Webshop operator and developer,


3    DISCLOSURE OF PERSONAL DATA:
Personal data will be forwarded to our contracted partners who have the status of data processors and with whom we have concluded contracts in accordance with Article 28 of the GDPR. Data will be accessible by authorities as required by legislations.

4    TRANSFER TO THIRD COUNTRIES:
We do not transfer your personal data outside the European Union or outside the territories of countries for which a adequacy decision has been made.

5    OBLIGATION TO PROVIDE PERSONAL DATA:
The scope of the data processed within contishop.eu is limited to the necessary data that is required to register and perform the purchase service on contishop.eu.

6    DATA SUBJECT RIGHTS:
a) Right to rectification: If we process your personal data that is incomplete or incorrect, you can ask us to correct or complete it at any time.
b) Right of access: You have the right to receive confirmation of whether we are processing your personal data or not, and where that is the case, under the conditions of Art. 15 of the General Data Protection Regulation, you can request access to that data.
c) Right to erasure: You can request that we delete your personal data if we have processed it unlawfully or if that processing constitutes disproportionate interference with your protected interests. Please note that there are reasons that prevent immediate deletion, such as the obligation to keep data in accordance with legal obligations.
d) Right to restriction of processing: You have the right to request that we restrict the processing of your data if you dispute the accuracy of the data during the period that allows us to verify the accuracy of that data, if the processing of the data was unlawful but you refuse to delete it and instead request restriction of the use of the data, if we no longer need the data for the intended purposes but you still need it to assert legal claims, or if you have objected to the processing.
e) Right to data portability: You have the right to request that we provide you with the data you have provided us for archiving purposes in a structured, commonly used, machine-readable format if we process this data on the basis of consent you have given us and which you can revoke, or to fulfill our contract and if the processing is carried out by automated means.
f) Right to object: If we process your data for the performance of tasks in the public interest or in the exercise of official authority, or we rely on our legitimate interests in the processing of your data, you may object to such processing if there is an interest in protecting your data.
g) Right to lodge a complaint: If you believe that we have violated European data protection regulations in the processing of your data, please contact any pf the Controllers to clarify any issues. You have the right to lodge a complaint with the competent supervisory authority.

Slovenia: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, SI-1000 Ljubljana
Hungary: National Authority for Data Protection and Freedom of Information, 1055 Budapest, Falk Miksa utca 9-11
Romania: National Supervisory Authority for the Processing of Personal Data, 28-30 G-ral Gheorghe Magheru Bld., District 1, post code 010336, Bucharest, Romania

h) Exercise of rights: If you wish to exercise any of the above rights, please contact us at the email address adria@conti.de.
i) Identity verification: In case of doubt, we may request additional information to verify your identity. This serves to protect your rights and privacy.
j) Abuse of rights: If you use any of the above rights too often and with an obvious intention of abuse, we may charge an administrative fee or refuse to process your request.

7    AUTOMATED DECISION-MAKING:

We do not carry out automated decision-making processes regarding your personal data.

8    CHANGES TO THIS STATEMENT:
We may amend this statement, and you will be notified in a timely manner.