Autobahn Tank & Rast GmbH and its affiliated companies (hereinafter collectively reffered to as “Tank & Rast” or „we“), takes the security and protection of your data very seriously. We operate our websites in accordance with applicable data protection law, in particular the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
By means of this Data Privacy Statement, we would like to inform you of the nature, scope, and purpose of the personal data we collect, use and process in connection with the use of our websites, the legal basis for the processing as well as of the rights to which you are entitled in this regard.
1. Applicability, Name and Address of the Controller
Operator and controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in member states of the European Union and other provisions related to data protection of the website www.sanifair.de:
Autobahn Tank & Rast Gruppe GmbH & Co. KG
Andreas-Hermes-Str. 7-9
53175 Bonn
Local Court of (Amtsgericht) Bonn, HRB 8655
Tel.: 0228 / 922-0
Fax.: 0228 / 922-4110
E-Mail: kundenkontakt(at)tank.rast.de
2. General Information on Data Processing
Generally, we only collect and use your personal data to the extent necessary to provide our services. Apart from that we only process that personal data which you actively provide to us, e.g. within the course of a registration, by participating in a survey, by filling in forms, by sending e-mails or other inquiries to us, by subscribing to newsletters or by ordering services.
We solely use the personal information provided by you for the performance of a contract or the processing of your inquiries (the legal basis for the processing in this case is Art. 6 para. 1 lit. b GDPR). For other purposes, such as e.g. consulting, advertising and market analysis, we only use your personal data after having obtained your prior consent (the legal basis for the processing in this case is Art. 6 para. 1 lit. a GDPR) or if we are entitled or obliged to do so pursuant to applicable law.
Tank & Rast transmits personal data to third parties only if and to the extent this is necessary for performing a contract or for billing purposes (the legal basis for the transmission in this case is Art. 6 para. 1 lit. b GDPR), if we have obtained your prior consent (the legal basis for the transmission in this case is Art. 6 para. 1 lit. a GDPR), or if we are legally obliged to do so by applicable law.
The collection and processing of registered users’ personal data
Some services provided by Tank & Rast are only available to registered users. To register, the following data is required:
- Email address
- Password
3. Collection and processing of personal data in case of customer complaints
In the event of shared feedback and/or potential customer complaints, Tank & Rast collects the name and any information required to make contact alongside the precise information regarding the feedback or complaint (nature, place, time). The provision of details relating to one communication method (email address, postal address or telephone number) is sufficient to make contact. Should you voluntarily provide additional communication methods for contacting you, these shall also be stored. Tank & Rast will only store these data for the processing of your feedback and/or your complaint and will only pass these on to the operator of the location affected. Such data are only used for the processing of the feedback and/or customer complaint and to improve the services provided by Tank & Rast, its associated companies and the location operators.
4. Collection and Processing of personal data when using the WebSite
When using the WebSite, we only collect the personal data that your browser transmits to our server. When you visit the WebSite, we collect the following information that is technically necessary for us to enable you to visit the WebSite and to ensure stability and security (the legal basis is Art. 6 para. 1 sent. 1 lit. f GDPR):
- IP address (temporary)
- Date and time of website use
- Internet address accessed (URL)
- Browser type
- If applicable, date, time and content of error messages
We evaluate this data for statistical purposes only. A person-related evaluation does not take place. Temporary storage of your IP address is necessary to enable delivery of the WebSite to your end device. For this, the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the WebSite. In addition, the data serves us to optimize the WebSite and to ensure the security of our information technology systems. These purposes also constitute our legitimate interests for the data processing pursuant to Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection for the provision of the WebSite, this is the case when the respective session has ended. If the data is stored in log files, it will be deleted by 7 days at the latest. Further storage is possible, however, in this case the IP addresses are deleted or alienated, so that an assignment of the calling client is no longer possible.
Google Maps
This website uses the Google Maps service. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to display interactive maps directly on the website, especially for location searches. When you visit the site for the first time, Google Maps is disabled. A direct connection to Google’s servers is only established when you activate Google Maps yourself. This prevents your data from being transmitted to Google on your first visit to the website without your consent. If you activate Google Maps by clicking on the map service function, your browser sends an HTTP request to the Google server. Your browser transmits data such as your IP address (including other connection data), the content of your search query and the coordinates (longitude and latitude) to the Google server in order to establish a connection to the server and display the requested results of the map service function. This data is usually transmitted to a Google server in the USA, where it is processed and stored. After the activation of Google Maps by the user, we have no influence on both the transmission of data to and processing of data by Google. By activating Google Maps, at least one cookie is placed on your end device, which stores data about your user behaviour. Google primarily uses this data to optimise its services and provide you with personalised advertising. By activating Google Maps, you consent to the aforementioned data transmission and processing by Google (legal basis is Art. 6, paragraph 1, point (a), of the GDPR in conjunction with Section 25, paragraph 1, of the TTDSG). If you do not agree with the transmission of data to Google, then do not activate Google Maps; this will mean that you will not be able to use the map function provided by Google Maps or the location search offered on the website. You can revoke your consent to the processing of data by Google Maps at any time via the cookie settings.
In order to define the embedding of Google Maps and the corresponding data protection responsibilities, we have entered into an agreement with Google on joint responsibility pursuant to Article 26 of the GDPR in the form of the Google Controller-Controller Data Protection Terms, which can be accessed and viewed at https://business.safety.google/controllerterms/. For example, this stipulates that data may only be transmitted to third countries (such as the USA) on the basis of and in accordance with the provisions of the GDPR. Standard contractual clauses (Module I – Controller to controller) issued by the European Commission on the basis of Article 46, paragraph 2, point (c), of the GDPR are used as the basis for data transfer to and processing in third countries (EU) 2021/914. The standard contractual clauses are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and processed there. You can find information such as the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
Please note that if you are logged in to Google, Google can directly associate the processed data with your Google user account. If you do not want Google to allocate such data, you should first log out of your Google account. Even if you are not logged in, Google can assign you an identification number (‘ID’) and recognise you as a user. Google may store this data in the form of user profiles and use them for the purposes of advertising, market research and/or needs-based design of the website, i.e. to be able to offer you products geared to your interests.
For more information on how user data is handled, please refer to Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.
5. Information; Newsletter
Tank & Rast will only use the email address provided to register with Tank & Rast to send information relating to Tank & Rast and its services if you have expressly consented to receive emails from Tank & Rast through clicking the corresponding box when registering.
In addition, we may also offer you to subscribe to free newsletter on our WebSite or via our services. In this case the data entered by you into the subscription form, which in any case is the e-mail address provided by you, will be transferred to us.
For the subscription to our newsletters we use the so-called double opt-in procedure. This means that immediately after the subscription to our newsletter you will receive a verification e-mail by means of which we will ask you to confirm your subscription. If case the confirmation is granted, we will store your e-mail address as well as any other data provided by you in addition, if any, until you unsubscribe from the newsletter. In order to prevent any misuse, we also save the IP address from which the link provided in the verification e-mail has been accessed as well the time of the access.
Legal basis for the processing of data after subscription to the newsletter is Art. 6 para. 1 lit. a GDPR. The collection of the e-mail address is necessary in order to send the newsletter to the subscribers.
You may revoke your consent to receiving the newsletter at any time with effect for the future and unsubscribe from the newsletter by clicking on the relevant link provided in each newsletter or by sending an e-mail to kundenkontakt(at)tank.rast.de.
6. Cookies
6.1. General: use of cookies
We use what are known as ‘cookies’ on our website. Cookies are small text files that are stored in the memory of your device by your browser. Cookies store certain information (e.g. your page settings), which is sent back to us by your browser if you visit the website again (depending on the storage duration of the cookie).
The cookies we use include both session cookies, which are deleted when you end your session and close your browser, and persistent cookies, which are stored beyond the duration of your session, until their storage period expires or they are deleted. The majority of the cookies used on this website are set by us (called ‘first-party cookies’). However, we also work together with third-party providers (e.g. for purposes of analysis and marketing) who also set cookies on our website (called ‘third-party cookies’). In the following overview (in section 6.2), you can see whether cookies were set by us or if a third party is listed as the provider.
Most of the cookies used on our website are technically necessary for the operation of our website or to provide the functions on our website (known as ‘necessary cookies’). Insofar as you can be identified from these cookies, the lawfulness of processing this data is supported by the necessity of processing to protect our legitimate interests (effective and secure provision of the functionalities and services on our website) (Art. 6, section 1 (f) GDPR).
If you have provided your consent via our cookie banner (or at a later point via the cookie settings in this privacy policy and cookie guidelines), we will also set additional cookies on our website for the purposes of storing your preferences (called ‘preference cookies’), statistical evaluation of the use of our website (known as ‘statistic cookies’) and/or the analysis of user behaviour in order to display personalised content (known as ‘marketing cookies’). These cookies are not strictly necessary for the provision of the services and functionalities offered on our website, but help us to provide you with a more pleasant and attractive user experience. In the following overview, you can see what specific types of cookies we use, what exactly the purposes of these cookies are and how long the cookies are stored.
Insofar as we process personal data of yours within the context of using preference, statistic or marketing cookies, we do so with your consent (Art. 6, section 1 (a) GDPR). You can decide which types of cookies to accept or reject. In addition, at any time you may partially or completely revoke your consent to the use of preference, statistic and/or marketing cookies and change your cookie preferences via the cookie settings in this privacy policy and cookie guidelines. Revoking your consent does not affect the lawfulness of the processing of your data consented to before said revocation.
You can find the categorisation of the cookies we use and the functional duration of our cookies in the following overview.