Data privacy policy

Continental Middle East DMCC. is using the smartphone application COC (hereinafter referred to as the "mobile app") provided by Continental Reifen Deutschland GmbH. The mobile app enables you to order products from the Continental Tire Division as well as checking the availability and delivery dates of products. In addition to ordering functionality, an overview of the order status is also provided within the mobile app.

Continental Middle East DMCC. and Continental Reifen Deutschland GmbH process your Personal Data in the context of app use within the framework of the applicable legal regulations. Processing is also carried out in accordance with Continental´s Binding Corporate Rules.

1.1 General

The definitions of Article 4 GDPR apply.

1.2 Controller

Continental Middle East DMCC. 27th Floor, Silver Tower, Jumeriah Lake Towers, P.O Box 336519

1.3 Processing of data and purpose of data processing

The Controller processes your personal data as follows:

Data Processing and Purpose	Legal Basis	Retention Period
In case you make an order, we process the following categories of data to proceed with the order process and enable the delivery of the products: · Name, · Shipping address, · Telephone/Fax, · e-Mail address In most of the cases, this data does not refer to a identified or identifiable natural person, but to a legal entity as a customer.	In cases where the information has to be considered as Personal Data, the processing is necessary for the performance of the contract according to Art. 6 para 1 lit. b) GDPR- if you as the data subject are a contracting party , or - if you as the data subject are not a contracting party - the processing is based on our legitimate interest to fulfill our contractual obligation with the respective business partner making the order/concluding the contract.	This data is stored and used exclusively for the purposes listed on the left. It will be deleted once the purpose has been fulfilled or no longer applies, unless legal retention obligations prevent deletion. Deletion will also occur upon the legitimate assertion of a right to erasure.
In case you make a product related complaint, no personal data is processed. Instead, the complaint is assigned on the basis of a purely technical complaint number and customer number, which do not refer to a natural person.	No legal basis required, as non-personal data. Technical numbers are processed to fulfill our contractual obligations.	n.a.
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable your name and telephone number, etc.) are stored by us to answer your questions.		This data is stored and used exclusively for the purposes listed on the left. It will be deleted once the purpose has been fulfilled or no longer applies, unless legal retention obligations prevent deletion. Deletion will also occur upon the legitimate assertion of a right to erasure.

When downloading the mobile app, the required information is transmitted to the respective App Store, in particular user name, e-mail address and customer number of your account, time of download and the individual device identification number. In addition, the app store independently collects various data for analysis purposes. We have no influence on this data processing and are not responsible for it.	The processing is necessary for the performance of the contract according to Art. 6 para 1 lit. b) GDPR	n.a.

Google Analytics

This website uses Google Analytics, a web analysis tool from Google Inc. (“Google”). Google Analytics uses cookies, which are text files that are stored on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of these websites will be transmitted to and stored on a Google server in the USA.

In case of activation of the IP address anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. This website uses active IP anonymization. On behalf of the website provider, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for the website provider and providing other services associated with website activity and internet usage to the website provider.

Google will not associate your IP address with any other data held by Google. Cookies on our site are used only on the basis of your consent. Furthermore, you can permanently prevent cookies from being stored by making the appropriate changes in your browser settings. We wish to point out, however, that if you do so, you may not be able to make full use of all the functions of this website. Furthermore, you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=en

The cookies required for Google Analytics display advertising are also set on our website only on the basis of your consent. In addition, you can permanently prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all the functions of this website in full. You can also opt out of Google Analytics for display advertising directly from Google and customize your ads on the Google Display Network by visiting the ad settings at https://www.google.com/settings/ads.

1.4 Art. 22 GDPR

An automated decision in individual cases, including profiling, does not take place.

1.5 Recipient

Recipients are all entities (natural persons or legal entities or authorities) to which Personal Data is disclosed. In particular

• Employees of Continental and its affiliated companies who manage the mobile app as a processor;

• Continental’s service providers:

· Azure; Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopards town. Dublin 18, D18 P521, Irland

· Adobe Systems Software; Ireland Ltd 4-6 RIVERWALK / DUBLIN 24 / IRLAND

· Google Analytics; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

• Lawyers and courts in the event of legal claims.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you accordingly.

1.6 Third country transfer

Personal data may be transferred to countries outside the European Economic Area (EEA). In such cases, an adequate level of data protection is ensured in accordance with applicable data protection regulations. This is achieved, where applicable, through Continental´s Binding Corporate Rules (BCRs) for intra-group data transfers, adequacy decisions issued by the European Commission, or the use of the European Commission’s Standard Contractual Clauses (SCCs).

1.7 Contact details data protection officer

For questions regarding data protection and this data protection information, you can also contact the data protection officer:

dataprotection@conti.de

1.8 Rights of the data subject

We would like to point out that as a data subject you have the following rights under the EU GDPR in connection with the processing of your personal data:

· Information rights according to Article 13 and Article 14 EU GDPR

· Right to information according to Article 15 EU GDPR

· Right of rectification according to Article 16 EU GDPR

· Right to erasure according to Article 17 EU GDPR

· Right to restriction of processing according to Article 18 EU GDPR

· Data portability according to Article 20 EU GDPR

· Right to complain to a supervisory authority Article 77 EU GDPR

In accordance with Article 21 GDPR, you are free to object at any time if your personal data is processed on the legal basis of Article 6 (1) lit. f) GDPR.

The objection must be made in writing to Continental Middle East DMCC. 27th Floor, Silver Tower, Jumeriah Lake Towers, P.O Box 336519 or by e-Mail to: customersupport.cme@conti.de. If compelling legitimate grounds for the processing can be proven which outweigh your interests, rights and freedoms, or serve to assert, exercise or defend legal claims, the processing of Personal Data necessary for this purpose may take place despite your objection or request for deletion.

You can contact our data protection officers in writing (including e-mail) with questions or complaints at any time, e-mail: dataprotection@conti.de.

You may also contact the relevant data protection authority if available.

1.9 Protection of the stored data

We take data privacy seriously and use reasonable precautions to protect the Personal Data that we collect and process. We use technical and organisational security measures in order to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorised persons. The security measures are continuously improved and adapted according to the state of the art.

To mitigate risks, you should (a) use secure usernames and passwords and carefully protect them from disclosure and (b) implement up-to-date security and virus protection on your device.