Privacy policy
We are pleased that you are visiting a website of Volkswagen Sachsen GmbH, Glauchauer Str. 40, 08058 Zwickau, internet.vws@volkswagen.de, registered in the commercial register of the Chemnitz District Court under the number HRB 1666. In the following, we inform you about the collection, processing and use of your data.
Protecting your privacy when using our website is important to us. These declarations on data protection do not apply to the websites of other providers that can be accessed via links (references).
1. Data collection when accessing and using the website
1.1. Access data
The processing of your IP address is an indispensable technical prerequisite for visiting our website. However, you can visit the website www.glaesernemanufaktur.de Volkswagen Sachsen GmbH without telling us who you are. The provider commissioned by us automatically collects and stores information in so-called server log files, which your browser transmits to us. These are:
- Pages visited
- Time of the server request
- Browser type and version
- operating system used
- Device data and location data (geospatial data)
- IP address
The server log data is generally deleted after seven days at the latest, unless it is still needed to resolve a current malfunction. The legitimate interest of Volkswagen Sachsen GmbH is to ensure the proper operation of our data processing system, in particular the elimination of faults and the detection of unlawful attacks. The basis for this data processing is Art. 6 (1) (f) GDPR in conjunction with recital 49 GDPR (network and information security as an overriding legitimate interest).
1.2. Use of Cookies & Tracking Tools
Your access data will be evaluated anonymously for statistical purposes in order to optimize the reach and functionality of our website. This data will not be merged with other data sources.
Our website uses Matomo. This analysis service is a so-called reach measurement for website optimization. To protect your privacy, your IP address is not stored in full. Two bytes of the IP address are escaped (i.e. IPv4: 217.110.0.0 instead of 217.110.196.152, IPv6: 2001:db8:0:8d3:0:0:0:0 instead of 2001:db8:0:8d3:0:8a2e:70:7344), so that an assignment to the calling computer is no longer possible. Matomo is installed on-premise on our web server. The information about your use of this website will not be passed on to third parties.
The basis for this data processing is Art. 6 (1) (f) GDPR (safeguarding legitimate interests).
1.3. Session cookies
A cookie is a small piece of data that is stored on your device. This data record is generated by the web server with which you have established a connection via your web browser and sent to you.
As soon as you are active on our website, a session cookie is temporarily generated in which a session identifier is stored. The session cookie is required for the full functionality of the website. When you click "Next" on forms, the connection with your previous entries is preserved. The session cookie is stored until the end of your session.
1.2.1 General Information
Volkswagen Sachsen GmbH uses various cookies on its websites. Cookies are small files containing configuration information that are stored on your device. Cookies can basically be divided into three categories. There are cookies that are essential for the functionality of the website (so-called functionality cookies), cookies that increase the convenience of a website visit and e.g. Store your language settings (so-called comfort cookies) and cookies on the basis of which a pseudonymised user profile is created (so-called tracking cookies).
The processing of functional cookies is necessary to enable you to visit the website (cf. Art. 6 para. 1 lit. b GDPR).
The legal basis for the comfort cookies is a legitimate interest (Art. 6 para. 1 lit. f GDPR). The legitimate interest lies in providing a comfort when visiting the website.
Tracking cookies are only set if the website visitor has consented to them (Art. 6 para. 1 lit. a GDPR). Consent is given via the so-called cookie banner, which must be actively clicked.
To manage your cookie preferences, we process your IP address and use Ensighten Privacy, a product of our processor CHEQ Technologies (UK) LTD, C/O Summate Limited, TN6 2QX Crowborough, United Kingdom (hereinafter referred to as CHEQ). The processing of your personal data always takes place in the region from which you access the website. For support purposes, access from the United Kingdom (UK) cannot be ruled out. For the United Kingdom, there is an adequacy decision of the European Commission in accordance with Art. 45 (1) GDPR, which confirms that an adequate level of data protection prevails in this country. Therefore, a transfer of personal data to our service provider in the UK is lawful without further specific safeguards.
If you have not given your consent to the use of tracking cookies, the processing of this data is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in being able to track your decision. Your IP address will be anonymized within 90 days.
If you have given your consent (Art. 6 para. 1 lit. a GDPR), we use so-called marketing technologies (these are described in the following subchapters). The embedding of these marketing technologies can be done in two technologically different variants, resulting in different deletion deadlines:
- Variant a) Marketing technologies can be classically embedded in the website, in which case we store your IP address as proof of your consent, which will be anonymized within 90 days.
- Variant b) In addition, we use so-called "server-side tagging", which means that the corresponding marketing technologies are no longer embedded directly in the website, but in a virtual browser context on a CHEQ server. Benefits include a faster loading speed of our website because less data needs to be loaded onto your device, and greater control over your data, as we can control exactly what data is shared with marketing service providers. In order for us to be able to offer the setting of cookie preferences in variant b without technical errors, technical analyses are carried out if necessary. Your IP address and unique identification number. This is done on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) to be able to offer functions on this website without errors. We store your personal data for 3 years to ensure correct functioning and to prove the consent of server side tagging.
You can object to data processing at any time with effect for the future by preventing the storage of cookies by setting them in your browser or by clicking on the following link and changing your currently set preferences in our Cookie Consent Manager:
1.2.2. Adobe Analytics
If you have given your consent to the processing of cookies for the purpose of analytics and personalization, cookies will be stored on your device for the evaluation and information will be collected about them. For this purpose, we use the web analysis service Adobe Analytics to evaluate user access to this website.
A direct personal reference to the information stored on the Adobe servers is excluded, as Adobe Analytics is used with the activated setting "Obfuscate IP address". These settings ensure that your IP address is completely anonymized after the so-called geolocation.
Data processing is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
We use Volkswagen Software Management GmbH with the subcontractor Adobe Systems Software Ireland Limited ("Adobe") as a processor. Access to the information by subcontractors of Adobe based in the USA cannot be ruled out, so that corresponding EU standard data protection clauses have been concluded as appropriate safeguards for data processing in non-European countries. You can access the EU standard contractual clauses used here.
You can revoke your consent to the data processing described at any time with effect for the future by clicking on this link.
In order to optimize common content and functions, Volkswagen Sachsen GmbH provides anonymous analysis results of user behavior to selected Group companies such as e.g. Volkswagen AG.
1.2.3. Adform
This website uses the web tracking tool Adform. Adform is a demand side platform and is used as a tool for programmatic purchasing of digital advertising space. Adform uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Adform uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Adform also uses this cookie to understand the content you have interacted with on our websites in order to be able to send you targeted advertising later. In addition, Adform can use cookie IDs to record conversions related to ad requests. This is the case, for example, if a user sees an Adform ad and later uses the same browser to visit the advertiser's website and buy something there. Data processing is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future by clicking on the link below and changing your currently set preferences in our Cookie Consent Manager:
https://www.glaesernemanufaktur.de/en/rechtliches/datenschutzerklaerung.html?open=true
The basis of data processing is user data. The IP address, website URL, URL of a previously visited page, marketer domain, Adform cookie ID, user agent, timestamp and referrer are processed. Access to collected data is limited to Volkswagen AG, Adform A/S and phd Germany GmbH. The duration of data storage is 13 months.
For more information about Adform, please visit https://site.adform.com and data protection at Adform A/S Denmark in general: https://site.adform.com/privacy-center/overview.
1.2.4. The Trade Desk
This website uses The Trade Desk (TTD for short), a so-called targeted advertising service. The company provides technology that helps advertisers manage digital advertising campaigns across many channels such as websites or apps. The advertising campaigns run by Volkswagen AG help pay for the content you like. TTD collects and uses data as a processor to ensure that the ads you see on the internet are relevant and to measure and evaluate their effectiveness.
The platform collects and processes pseudonymized - i.e. non-directly identifying - data about users, devices and ads, as well as where they are shown. TTD acts as a sub-processor for the company PHD Germany GmbH. PHD Germany GmbH is a processor of Volkswagen AG. Corresponding contracts for order processing have been concluded.
The processed data includes: cookie ID, mobile device ID, IP address, interest information, web browser and device information, information about which advertisements have already been shown to you, timestamps and website URLs.
The cookie data used helps to distinguish and recognize web browsers and devices in order to tailor our advertising more specifically to you and your interests. The TDID (the cookie set by TTD) has a lifespan of 1 year from the last time you received an ad from the platform (TTD). This lifespan can be updated every time you interact with the platform. As a result, the year begins again. The cookie collects technical web browser profile data and the user's surfing behavior (e.g. data about users, devices and ads, as well as their placement) (see above). All data is stored exclusively in pseudonymized form.
In order to be able to transfer requests for ads and other data about users or devices between sellers and buyers, and to show you ads that match your likely interests, TTD performs cookie synchronization, which means that the TTD cookie IDs are matched with the cookie IDs of TTD's customers and partners. TTD may use other sub-processors in individual cases and makes your data available to third parties in order to fulfil the order. For the transfer of personal data to recipients who receive the data for the purpose of order data processing, the Standard Contractual Clauses for the transfer of personal data to processors in third countries apply. These have been agreed with the sub-processors.
These standard contractual clauses will remain in force until the European Commission decides otherwise, even after the GDPR comes into force on 25.05.2018.
https://eur-lex.europa.eu/legal-content/de/TXT/?uri=CELEX%3A32021D0914
Data processing is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future by clicking on the following link and changing your currently set preferences in our Cookie Consent Manager: Adjust preferences.
In addition, you have the option of directly removing the data already stored in the cookie via TTD's cookie page adsrvr.org and thus no longer receive personalized advertising via the platform. In this case, the so-called opt-out setting means that you will no longer be shown targeted advertising across TTD customers / partners. Further information on The Trade Desk can be found here: https://www.thetradedesk.com/, as well as on data protection at The Trade Desk, https://www.thetradedesk.com/general/privacy
1.2.5. Google Marketing Platform
On the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), we use various analysis, marketing and remarketing services of Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: Google Ireland), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google USA).
We use these services to show you relevant advertisements on digital advertising spaces and to measure and control the success of those ads and advertising campaigns, as well as to limit the frequency of an ad.
The Services use so-called Floodlight tags and cookies on the Website to record and process users' website activities ("conversions") and related online identifiers (e.g. cookie IDs). The processing is carried out on a pseudonymous basis, so that we cannot recognize which user has carried out which interactions or which advertisements have been displayed. With the pseudonymous information obtained, we create specific target groups in order to be able to display relevant advertising to them. These target groups are created on an aggregated basis, so that individual users cannot be identified here either.
We transmit the personal data to Google Ireland, where it is stored for 9 months (IP address) or 18 months (browser and cookie data).
Google Ireland acts as a sub-processor for the company PHD Germany GmbH based in Germany. PHD Germany GmbH is a processor of Volkswagen AG. Corresponding contracts for order processing have been concluded.
Please note that the data may be subject to change. are transferred by processors to third countries that currently do not offer an adequate level of data protection and, in particular, there is a risk that the data may be processed by public authorities for control and monitoring purposes without you being entitled to legal remedies. Through our order processing agreements, we have contractually agreed that in the event of a transfer to a third country without an adequate level of data protection, our processors must also conclude suitable safeguards within the meaning of the GDPR.
Both the setting of cookies, where relevant, and the data processing are carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future by clicking on the following link and changing your currently set preferences in our Cookie Consent Manager: Adjust preferences.
In addition to revoking your consent in the cookie settings, you can prevent the transmission of your data collected on this website to Google Ireland by following the instructions available below at the following link, which provides information on how to disable data collection by Google on your computer or mobile device: https://support.google.com/ads/answer/7395996.
General information on data processing by Google can be found here: https://policies.google.com/privacy?hl=de and https://support.google.com/google-ads/answer/9028179
Additional descriptions of the listed services can be found at: https://support.google.com/displayvideo/answer/9015629.
1.2.5.1. Campaign Manager 360
On our website, we use the "Campaign Manager 360" service, a web-based ad management system from Google Ireland, for the central creation, management and optimization of Volkswagen AG's digital advertising campaigns across various media channels. By means of cookies placed in the browser, the Service collects the following personal data (in pseudonymized form) for the aforementioned purposes: Online identifiers (including cookie IDs, IP addresses and device IDs), geographical location data and browser identifiers.
1.2.5.2. Search Ads 360
On the website, we use the "Search Ads 360" service from Google Ireland, a web-based ad management system from Google Ireland for the central creation, management and optimization of Volkswagen AG's advertising campaigns for search engine marketing across different search engines. Using cookies placed in the browser, the Service collects the following personal data (in pseudonymized form) for the aforementioned purposes: online identifiers (including cookie IDs, IP addresses and device IDs) and browser identifiers.
1.2.6. Sophus3
This website uses the web analysis service Sophus3 to evaluate user access to this website. Data processing is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
For the evaluation, cookies are stored on your device and information is collected about them, which is also stored on the servers of our processor Sophus3 Limited Cyprus ("Sophus3"). The cookies contain session IDs and visitor IDs.
In web analytics, page views and actions (e.g. clicks) on the website are recorded sequentially, i.e. one after the other. The resulting data sets are isolated. A unique session ID, which is stored together with the page views and actions, allows page views and actions to be subsequently assigned to the common session. A unique user ID makes it possible to do this across different website visits. The data is used to analyse user behaviour on the website.
A direct personal reference of the information stored on the Sophus3 servers is excluded. A random number is assigned as the visitor ID. The IP address is made unrecognizable (hashed) and shortened (the last two octets are removed). A digital fingerprint (DF) is created. However, it uses the shortened IP address. The DF itself is a hash value and thus a reference is excluded.
Geolocation does not take place. No geodata is collected.
The data will be deleted after 12 months.
You can revoke your consent at any time with effect for the future by clicking on the link below and changing your currently set preferences in our Cookie Consent Manager: https://www.glaesernemanufaktur.de/de/rechtliches/datenschutzerklaerung.html?open=true
If you have not consented to the use of tracking mechanisms for the purpose of "Analytics & Personalization" via our Cookies Banner or Cookie Consent Manager, the analysis service will not be activated. Data collection does not take place in this case.
1.2.7. Traci Script
The Traci Webscript is a small program developed by Volkswagen that has no direct interfaces to third parties. It is used to add or continue dynamic parameters on the Volkswagen.de website (https://www.volkswagen.de/de.html).
The Traci Web Script can add information to a defined Uniform Resource Locator (URL) as a user moves around the website.
It's a simple text expansion feature. The function takes URL information without personal data, strings it together based on the click path and passes on this URL supplemented by the text.
When leaving the Volkswagen Sachsen GmbH website to the Volkswagen Financial Services (https://www.vwfs.de/) website, the dynamically added URL parameters are transferred to the Volkswagen Financial Services website, provided that the user accepts the Cookie Policy / Privacy Policy when accessing the Volkswagen Financial Services website. No data is processed.
2. Data collection via email templates
Personal data will only be processed if you provide it to us voluntarily by sending the corresponding e-mail template on our website. When you enter the data, you will be informed of the exact scope of the data processed.
2.1 Request for a visit / Event request
With your data transmission in connection with visit or event requests, we process, for example, your contact details, information on the desired date, the desired management language and your other communications in text form.
The personal data collected by your input will only be used for the purpose of processing, initiating and processing your inquiries in this regard. The basis for data processing is Art. 6 (1) (b) GDPR (performance of a contract to which the data subject is a party).
Unless otherwise stated, the storage period is a maximum of 3 years. If retention periods exist in individual cases in accordance with the provisions of commercial law, the storage period for the relevant data is extended to up to 15 years.
Personal data stored by Volkswagen Sachsen GmbH is processed in secure operating environments and is not accessible to the public. The www.glaesernemanufaktur.de website uses Transport Layer Security (TLS) technology to protect the transmission of personal data. The communication between you and the corresponding servers of Volkswagen Sachsen GmbH is encrypted in order to counteract misuse of the data by third parties. Most browsers indicate whether the security protocol is active by means of a small dialog box or an icon. You can find more information under the help function of your browser.
3. General communication
Information on the handling of your personal data in the context of general communication, including when contacting us by e-mail, can be found under https://www.volkswagen-sachsen.de/de/Datenschutz1.html.
4. Commissioned data processing
As part of the processing of your inquiries and your use of our services, we commission service providers. These service providers are contractually obliged to comply with data protection regulations, but are not considered controllers for the data processing described here. You can assert the rights listed under point 7 directly against Volkswagen Sachsen GmbH.
5. Links to other websites
Our online offer contains links to other websites. We have no influence on whether their operators comply with data protection regulations, how and for what purposes they process your data. You can only assert your rights against the respective controller.
6. Changes to this Privacy Policy
The rapid development of the Internet makes it necessary for us to make adjustments to our privacy policy from time to time. In this regard, please refer to the current version of our privacy policy.
7. Your rights
You can assert your following rights against Volkswagen Sachsen GmbH at any time free of charge:
7.1. Right to information
You have the right to obtain information from us about the processing of your personal data.
7.2. Right to rectification
You have the right to request that we correct any inaccurate or incomplete personal data concerning you.
7.3. Right to erasure
You have the right to request the deletion of your data if the conditions specified in Art. 17 GDPR are met. After that, you can, for example, request the deletion of your data if it is no longer necessary for the purposes for which it was collected. You can also request erasure if we process your data on the basis of your consent and you withdraw this consent.
7.4. Right to restriction of processing
You have the right to request the restriction of the processing of your data if the requirements of Art. 18 GDPR are met. This is the case, for example, if you dispute the accuracy of your data. For the duration of the verification of the accuracy of the data, you can then demand the restriction of processing.
7.5. Right to object
If the processing is based on an overriding interest or your data is used for the purpose of direct marketing, you have the right to object to the processing of your data. An objection is permissible if the processing is either in the public interest or in the exercise of official authority or on the basis of a legitimate interest of Volkswagen Sachsen GmbH or a third party. In the event of an objection, we ask you to inform us of your reasons for objecting to data processing.
7.6. Right to data portability
If the data processing is based on consent or performance of a contract and is also carried out using automated processing, you have the right to receive your data in a structured, commonly used and machine-readable format and to transmit it to another data processor.
7.7. Right of withdrawal
If the data processing is based on consent, you have the right to revoke the data processing within the framework of consent with effect for the future at any time free of charge using the contact details listed below.
7.8. Right of appeal
You also have the right to complain to a supervisory authority (e.g. the Saxon Data Protection Commissioner) about our processing of your data.
A central data subject rights office has been set up to exercise your rights!
Further information can be found here.
8. Data Protection Officer
Our data protection officer is available to you as a contact person for data protection-related concerns:
Volkswagen Sachsen GmbH
Data protection supervisor
Glauchauer Str. 40
08058 Zwickau
Landline: +49 375 55 3753
E-mail: datenschutz-vws@volkswagen.de