Data protection
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we inform you about the processing of your personal data within the framework of the use of the Mercedes-Benz Retailworld Webshop (www.retailworld.mercedes-benz.de, www.retailworld.mercedes-benz.com, www.retailworld.mercedes-benz.fr) and your data protection rights in this respect.
1. CONTACT INFORMATION OF THE CONTROLLER
STAR DISTRIBUTION GmbH,
Frank Drechsler and Felix Walter (Managing directors),
Otto-Lilienthal-Straße 5, 71034 Böblingen
Phone number: +49 7031 6288 3448
E-Mail-Adress: ordermanagement@star-cooperation.com
2. CONTACT INFORMATION OF THE DATA PROTECTION OFFICER
STAR COOPERATION GmbH, Datenschutzbeauftragter
Otto-Lilienthal-Straße 5, 71034 Böblingen
E-Mail-Adress: datenschutz@star-cooperation.com
3. DATA PROCESSING | REGISTRATION AS CUSTOMER
| Description of the data processing | Personal data is only collected if you give us this information when you open a customer account. |
| Data categories | Contact data, address data |
| Purpose of the processing | Opening of a customer account |
| Legal basis of the processing | Art. 6 (1) b GDPR Initiation of contract, Art. 6 (1) c GDPR Legal obligation |
| Data Storage | The duration of data storage is based on the statutory retention requirements and is usually 10 years. |
| Recipients | STAR COOPERATION GmbH and its subcontractors and sub-service providers, smart Europe GmbH, external service providers or other contractors |
| Transfers to a third country | no |
4. DATA PROCESSING | USE OF THE CONTACT FORMS
| Description of the data processing | On our website we offer you the possibility to contact us by e-mail and|or via a contact form. When using this service, we only collect personal data to the extent provided by you. In this case, the information provided by the user will be stored for the purpose of processing his contact inquiry. |
| Data categories | Contact data, address data |
| Purpose of the processing | Processing of inquiries |
| Legal basis of the processing | Art. 6 (1) b GDPR Initiation of contract |
| Data Storage | The duration of data storage is based on the statutory retention requirements and is usually 10 years. |
| Recipients | STAR COOPERATION GmbH and its subcontractors and sub-service providers, smart Europe GmbH, external service providers or other contractors |
| Transfers to a third country | no |
5. DATA PROCESSING | CREDIT ASSESSMENT AND COLLECTION
|
Description of the data processing | Basically, we offer you various payment options. If you choose an insecure payment method (e.g. purchase on account), we have a legitimate interest in protecting ourselves against possible payment defaults. For this purpose, we may obtain a credit report from a credit assessment company before granting this payment method. For this purpose, we transmit the personal data required for a credit assessment and use the information received on the statistical probability of a payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship. If invoices are not paid despite several reminders, we reserve the right to pass on the data required for collection to third-party companies for the purpose of recovering the debt. |
| Data categories | Contact data, address data, account data |
| Purpose of the processing | Protection against payment defaults, securing incoming payments |
| Legal basis of the processing | Art. 6 (1) f GDPR Legitimate interest |
| Data Storage | The duration of data storage is based on the statutory retention requirements and is usually 10 years. |
| Recipients | STAR COOPERATION GmbH and its subcontractors and sub-service providers, credit assessment company, third-party companies for the purpose of recovering the debt, smart Europe GmbH, external service providers or other contractors |
| Transfers to a third country | no |
6. DATA PROCESSING | ORDER HANDLING
| Description of the data processing | Personal data is only collected if you provide us with this information when placing an order, contacting us or opening a customer account. |
| Data categories | Contact data, address data, account data |
| Purpose of the processing | Contract execution, order handling, shipping execution, invoicing, payment processing, processing of inquiries |
| Legal basis of the processing | Art. 6 (1) b GDPR Initiation and execution of contract, Art. 6 (1) c GDPR Legal obligation |
| Data Storage | The duration of data storage is based on the statutory retention requirements and is usually 10 years. |
| Recipients | STAR SYSTEMS GmbH and its subcontractors and sub-service providers, transport companies and its subcontractors, STAR COOPERATION GmbH and its subcontractors and sub-service providers, PayPal (Europe) S.à r.l. et Cie, S.C.A., smart Europe GmbH, external service providers or other contractors |
| Transfers to a third country | Within the scope of contract implementation, contract processors outside the European Union can also be used. |
7. DATA PROCESSING | NEWSLETTER REGISTRATION
| Description of the data processing | Within registering for our newsletter, you provide us with your e-mail address and optionally other personal and socio-cultural data. The data you enter when register for our newsletter will be stored by us until you unsubscribe from our newsletter. You can unsubscribe at any time using the link provided in the newsletter or by sending us a message. By unsubscribing, you object to the use of your e-mail address. |
| Data categories | Contact data, socio-cultural data |
| Purpose of the processing | Newsletter dispatch |
| Legal basis of the processing | Art. 6 (1) a GDPR Agreement |
| Data Storage | The duration of data storage is based on the statutory retention requirements and is usually 10 years. |
| Recipients | STAR COOPERATION GmbH and its subcontractors and sub-service providers, Newsletter provider Sendinblue GmbH / Brevo, external service providers or other contractors |
| Transfers to a third country | Within the scope of contract implementation, contract processors outside the European Union can also be used. |
8. USE OF "COOKIES"
This website uses its own "cookies" to enhance usability ("cookies" are data records that are sent from the web server to the user's browser and stored there for later retrieval). No personal data is stored in our own "cookies". You can generally prevent the use of "cookies" if you prohibit the storage of "cookies" in your browser.
9. POSSIBILITIES OF CONTRADICTION
If the processing of your personal data takes place in order to uphold legitimate interests pursuant point (e) or (f) of Article 6(1) GDPR, you have the right pursuant Article 21 GDPR to object to the processing of your personal data if your special situation causes reasons that conflict with the processing. We will then terminate this processing, unless the processing serves overwhelming, compelling protectable interests on our part or the assertion, exercise or defense of legal claims.
10. RIGHTS OF THE DATA SUBJECT
You have the right:
- pursuant Article 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been disclosed, the planned period of data storage, the existence of the right to request rectification or erasure of personal data or restriction of processing concerning the data subject, the existence of the right to lodge a complaint, the source of your data, if not collected from us, the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
- pursuant Article 16 GDPR, to obtain from the controller without undue delay the rectification of inaccurate personal data and to demand to have incomplete personal data completed, including by means of providing a supplementary statement;
- pursuant Article 17 GDPR, to obtain the erasure of personal data concerning him or her as far as the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or for enforcement, exercise or defense of legal claims;
- pursuant Article 18 GDPR, to obtain from the controller restriction of processing of personal data, if the accuracy of the personal data is contested by you, the processing is unlawful and you oppose the erasure of the personal data and we don't need the data anymore, but they are required for the establishment, exercise or defence of legal claims or if you have objected to processing pursuant Article 21 GDPR;
- pursuant Article 20 GDPR, to receive the personal data which has been provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller
- pursuant Article 7(3) GDPR, to withdraw your consent at any time. As a result, we are not allowed to continue the data processing based on this consent for the future and
- pursuant Article 77 GDPR, to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence or work or our company headquarters. The responsible data protection supervisory authority for us is the state commissioner for data protection and freedom of information Baden-Württemberg.
Would you like to make use of your rights, an e-mail to the above contact information or our data protection officer is sufficient.