PRIVACY POLICY
Privacy Notice
1. General Information
These privacy notices apply to the website, employment relationship, and services of EVAG Emder Verkehrs und Automotive Gesellschaft mbH and its subsidiary ELAG Emder Lagerhaus und Automotive GmbH.
We appreciate your interest in our company, products, and services. This Privacy Notice explains what data we collect, how we use it, and how you may object to such use.
Use of our websites is generally possible without providing personal data. Certain services offered via our website may require the processing of personal data. Our websites may also contain links to third-party websites that are not covered by this Privacy Notice.
2. Data Controller
EVAG Emder Verkehrs und Automotive Gesellschaft mbH
Schweckendieckplatz 1, 26721 Emden, Germany
Phone: +49 4921 895-0
Email:
ELAG Emder Lagerhaus und Automotive GmbH
Schweckendieckplatz 1, 26721 Emden, Germany
Phone: +49 4921 895-0
Email:
Questions regarding data protection may be addressed to:
Data Protection Officer of Volkswagen AG
Berliner Ring 2, 38440 Wolfsburg, Germany
Email:
https://datenschutz.volkswagen.de
3. Data Collected and Purpose of Processing
We collect and process personal data only for specified and legitimate purposes arising from technical requirements, contractual obligations, or explicit user requests.
Personal data may be required to perform contracts, including order processing, collection, delivery, picking, returns handling, goods movements, payment processing, credit checks, shipment, cancellations, refunds, logistics services, and workshop services.
Technical data collected during website visits may include date and duration of visit, pages visited, browser and operating system identification data, and the referring website.
4. Legal Basis for Processing
Processing may be based on:
• Consent pursuant to Art. 6(1)(a) GDPR.
• Contract performance or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
• Compliance with legal obligations pursuant to Art. 6(1)(c) GDPR.
• Legitimate interests pursuant to Art. 6(1)(f) GDPR, including business improvement, product development, advertising, market research, legal claims, fraud prevention, IT security, and credit assessments.
• Recruitment and employment processing pursuant to Art. 6(1)(b), Art. 88 GDPR and Section 26 BDSG.
5. Disclosure of Data
Data may be shared with service providers acting on our behalf, including data centers, logistics providers, and other contractual partners.
Data transfers outside the EU/EEA only occur where appropriate safeguards exist, including EU Standard Contractual Clauses or adequacy decisions.
6. Retention Periods
Personal data is retained only as long as required for the relevant purpose or as required by law. Contract-related data is stored at least until the contractual relationship has ended and thereafter for statutory retention periods.
7. Rights of Data Subjects
You have the right to:
• Obtain information about the data stored concerning you.
• Request correction, deletion, or restriction of processing where legally permitted.
• Withdraw consent at any time with future effect.
• Lodge a complaint with the competent data protection authority.
8. Examples of Individual Processing Activities
Newsletter: Email addresses are collected for newsletter distribution and related information. Registration data may include anonymized IP address, system information, date, and time.
Prize Draws: Personal data may be collected for participation in competitions.
Advertising: Contact details may be used for postal advertising, market research, and customer communications where permitted by law.
Contact Forms and Inquiries: Data submitted via email, telephone, or contact forms is used to process inquiries.
Payment Processing: Bank account, payment card, contact, and identification data may be processed for payment transactions.
Video Surveillance: Certain non-public areas may be monitored for security, crime prevention, evidence preservation, insurance claims, and protection of company property.
9. Applicant Data Protection
Applicant data is processed for recruitment purposes. Applications may be submitted electronically.
Relevant personal information such as name, address, email address, position applied for, qualifications, and professional background may be processed.
Applications may be considered for other positions within the group where consent has been granted.
Applicant data may be compared with sanctions lists where required by anti-terrorism regulations.
If an employment contract is concluded, applicant data becomes part of employment records. If not, application documents are generally deleted three months after rejection unless retention is justified by legal interests.
Applicants may also request deletion of their data subject to legal retention obligations.
For readability reasons, gender-specific wording may not always be used; all references apply equally to all genders.
10. Processing Within the Employment Relationship
Personal data is processed primarily to establish, perform, administer, and terminate employment relationships.
Processing may include:
• Hiring, onboarding, transfers, and termination.
• Personnel administration.
• Work organization and supervision.
• Payroll and compensation.
• Employee benefits.
• Leave administration and time recording.
• Training and development.
• Occupational health measures.
• Company pension arrangements.
Additional processing may occur on the basis of consent, legitimate interests, or statutory obligations.
Special categories of personal data, such as health data, biometric data, trade union membership, religious beliefs, political opinions, ethnic origin, or other sensitive information, are processed only where legally permitted.
Source of Data
Data is obtained directly from employees, personnel forms, employment processes, supervisors, internal systems, authorities, social insurance institutions, and other legitimate sources.
Deletion of Employee Data
Employee data is retained only for as long as required for the relevant purpose and applicable retention periods.
Disclosure of Employee Data
Data may be exchanged within the Volkswagen Group and affiliated companies where necessary, and may also be disclosed to authorized external recipients such as tax authorities, social insurance institutions, banks, insurance companies, auditors, and contractors.
Data Overview
Details regarding categories of personal data, purposes, recipients, and access permissions are available in document 08_440_V007_D001.
11. General Information on the Use of Our Websites
Anonymous technical information is processed to provide website content, improve services, maintain IT systems, optimize advertising, and support cyber security.
Cookies
Cookies are small files stored on your device to improve website functionality and navigation. The website may be used without non-essential cookies.
Browser Settings
Users may block cookies, activate Do-Not-Track settings, or restrict third-party cookies via browser settings.
12. Encryption of Data Transmission
Internet communications are generally not completely secure. Connections to our website are protected using Transport Layer Security (TLS) encryption with at least 256-bit transport encryption. For highly confidential information, we recommend using contact forms or postal mail rather than email.
13. Updates to this Privacy Notice
This Privacy Notice may be updated to reflect legal, technical, or operational changes. Users should review it periodically.
Version: December 2024