Data Privacy Statement for events of the CLAAS KGaA mbH

As at: 24.03.2023
 
In the following data protection information, the CLAAS KGaA mbH ("CLAAS") informs about the processing of your personal data in connection with the registration and processing of CLAAS KGaA mbH events. The latest version of this data protection information can be accessed at https://privacy.claas.com/dpi/kgaa/user/5000en. You can also receive these at any time free of charge by post from CLAAS. For this purpose, it is enough to send an informal message to the contact details as per Section A.I.

A. General Data Protection Information

I. Name and contact details of the person responsible

The controller is:

CLAAS KGaA mbH
Mühlenwinkel 1
33428 Harsewinkel
Germany
infoclaas@claas.com

 
Contact details of the Data Protection Officer
 
The Data Protection Officer shall be contacted as follows:
CLAAS KGaA mbH
Data Protection Officer
Mühlenwinkel 1
33428 Harsewinkel
Germany
group.dpo@claas.com

II. Storage period

We store your personal data only as long as the storage is necessary to achieve the purpose of its collection or processing. As far as this is necessary, we store your data for the duration of the business relationship. This includes, in particular, the preparation and execution of the contract.

In addition, we store your personal data insofar and as long as this is necessary for the fulfillment of contractual or legal obligations. In this way, we process your data for the fulfillment of commercial or tax-legal proof and retention obligations.

If the data is no longer necessary for the fulfillment of contractual or legal obligations, they will be deleted regularly, unless you have given us consent to the processing of your data and/or further processing is required on the basis of our legitimate interests, e.g. for customer recovery, for defense against legal claims in legal disputes. When processing data for defense against legal claims in litigation, the storage period is also governed by the statutory limitation periods (e.g. according to civil law and product liability law). In this case, the processing is restricted, i.e. restricted to the minimum required for this purpose and blocked for other purposes.

The above shall not apply if anything different is described in the special data protection information.
 

III. Categories of recipients

    1. Carefully selected service providers. Service providers we engage, who support us in the performance of the business relationship, are granted access to the data. These companies operate in the following categories: Hosting providers, data management, software as a service, e-mail services, IT services (e.g. maintenance and support, data migration), consulting, service providers in the first, second and third level support, call centre services, customer administration, lettershops, marketing, media technology, telecommunications, customer relations management and lead management, tracking service providers, web agencies, compliance, disposal services (e.g. document shredders), companies who perform analyses for us, financial service providers, shipping and logistics services, printing services, technology service providers (e.g. for hardware and accessory parts). If any additional categories of service providers are employed, please refer to the relevant Special Data Privacy Statement.
    2. Transfer to third parties. We shall also transfer your data to third parties if this is permitted by legal or contractual provisions and/or you have given your consent. On this condition, the data can be transferred to the following categories of recipients: Public bodies and institutions (such as the public prosecutor's office, police, tax authority, data protection supervisory authority) to process official requests, provided that this is in your interest or we are legally obligated to do so. The legal basis for this is Article 6(1f) or 6(1c) GDPR.
    3. Data transfer within the CLAAS Group. We shall transfer your data to other companies within the CLAAS Group or grant them access to your data. Insofar as this is required for administrative purposes, this shall be based on our legitimate interest in internal administrative purposes and group reporting. The legal basis for this is Article 6(1f) GDPR. If this is required to prepare for an agreement initiated by you or to fulfil contract-related obligations, or if you have given your consent, the legal basis is Article 6(1b) or 6(1a) GDPR. If we are legally entitled to do this, the legal basis arises from Article 6(1c) GDPR. We refer to the Special Data Privacy Statement for any data transfer to third parties beyond the scope described here.

IV. Transfer to third countries

Data is transferred to third countries (countries outside the EU or the European Economic Area – EEA) if, for example, this
  • is required to fulfil a contract to which you are a contractual party or if this is required to respond to your requests;
  • is required to safeguard our legitimate interests;
  • is stipulated by law or you have given your consent;
  • takes place as part of contract processing when involving service providers.
If there is no European Commission decision for the country in question as to a level of data protection that is appropriate for European data protection requirements, we shall enter into corresponding contracts to ensure that your rights and freedoms are suitably protected. An agreement of this kind ensures that a suitable level of data protection exists at the data recipient, especially with the agreement on the European Union's standard contractual clauses with the recipient. Otherwise, we can also perform a data transfer based on your express consent. You can withdraw your consent with future effect at any time, see Section A.VII. We will be happy to provide you with more detailed information free of charge on request. Please use the aforementioned contact details for this purpose.

Where we permit the recipient to process data without a suitable level of data protection based on your consent alone, please note the following risks: There may not be sufficient measures in place to protect your personal data appropriately; there is no data protection supervisory authority; the implementation of your data protection rights of the data subject is impeded or has been disregarded; there is no control over the further processing of data by and transmission of data to third parties.

Any further information required can be found in our Separate Data Privacy Statement.

V. Obligation to provide personal data

Unless otherwise stipulated in the special data protection information, you are not legally or contractually obliged to provide your data.

VI. Rights of Data Subjects

In accordance with Art. 15 GDPR, you have the right to access the data stored about you. In accordance with Art. 16 GDPR, you have a right to rectification if incorrect personal data about you has been processed. If the legal requirements are met, you can request deletion or restriction of processing and likewise, you can object to the processing of data (Art. 17, 18, and 21 GDPR). According to Art. 20 GDPR, you can assert the right to data portability for data that is processed automatically on the basis of your consent or a contract with you.
 

Information about Your Right to Object according to Art. 21 GDPR
 
1. You have the right to object at any time for reasons arising from your particular situation to the processing of your personal data, which is based on Art. 6 (1)(1)(f) GDPR (data processing based on a balancing of interests).

If you file an objection, CLAAS KGaA will no longer process your personal data unless CLAAS KGaA can demonstrate compelling legitimate reasons for such processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
 
2. CLAAS KGaA processes your personal data in order to conduct direct marketing actions. You have the right to object to the processing of your data for the purpose of such advertising at any time.

If you object to processing for direct marketing purposes, CLAAS KGaA will no longer process your personal data for these purposes.
The objection can be made without using any kind of form and should be addressed to:
privacy@claas.com
 

 

Right to Withdraw Your Consent according to Art. 7 (3) GDPR

If you have given your consent to having your personal data processed, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of any processing conducted based on your consent before it was withdrawn.

Withdrawal of consent does not require a form. It should preferably be directed at privacy@claas.com. If CLAAS KGaA provides additional options for asserting your wish to withdraw your consent, you will be informed of this in the Special Privacy Information document.

 

 

You can assert your rights toward CLAAS KGaA using the contact information listed under Section A.II, however, preferably via privacy@claas.com.

If you believe that a processing of data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice (Art. 77 GDPR).

Of course, you can also make your complaint to the CLAAS Data Protection Officer at any time (group.dpo@claas.com).

If you assert the rights of the data subject under data protection law, we will process your data in order to fulfill our legal obligations in accordance with Art. 6 (1)(1)(c) GDPR in conjunction with Art. 15-22 (12) (3-6) and Art. 7 (3) GDPR. This includes the processing of your data for the purpose of clearly identifying the individual concerned in the data processing, the request for additional information in order to confirm your identity. We forward the data of individuals concerned to the recipients of the data within the meaning of Art. 19 GDPR, insofar as requests for the correction of data, the deletion of data, or the restriction of processing (Art. 16, 17 (1, 18) GDPR) are concerned and insofar as this is necessary in order to effectively implement your rights (Art. 6 (1)(c, f) GDPR) and to notify you as the individual concerned (Art. 12 GDPR). We do this based on our legal obligation according to Art. 12 (6) GDPR.

B. Special Privacy Information: Invitation and provision of the contact form for registration

I. Invitation to the event

In order to invite you to our event, we process your personal identification data (e.g. name, first name), your contact data (e.g. e-mail address) and operating data (e.g. name of the company/company (company)) as well as any other personal data that are required for the specific event registration. The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest in the processing of your personal data also lies in the aforementioned purpose.

II. Provide the contact form for registration for the event

When you use the website for information purposes only, i.e. if you do not submit any information via the form, we only process the personal data that your browser transmits to our server. The data collection is technically necessary in order to be able to view the website. The legal basis is § 25 Abs. 2 Nr. 1 TTDSG in conjunction with Art. 6, par. 1, p. 1 lit. f GDPR. Storage in log files beyond your visit to the website is necessary to ensure the functionality of the website and the security of the information technology systems. The legal basis for data processing is Art. 6 (1) (f) GDPR. For the purposes stated, our legitimate interest in data processing is based on our legitimate interest.

The following categories of data are collected when visiting the website: usage and traffic data, Technical Documentation and protocol data, e.g.
  • Date and time of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • IP address
  • Host name of the accessing computer
  • Website from which the website was accessed
  • Website accessed from the website (content of the request)
  • Visited pages on the website
  • Message whether the call was successful
  • Amount of data transferred
  • Information about the browser type, language and version used
  • operating system
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. When the website is deployed, this is the case when the respective session is terminated. In the case of storing the data in log files, this is the case after 30 days at the latest. The data will not be stored together with other personal data of you.

III. Use of Service (e.g. cookies)

When using this website to register via the contact form for the event of CLAAS, we use Service from the "Technical Necessary" category, here a session cookie, which is deleted again after the end of the session. The cookie is used to uniquely assign information on our server to you as a user. We use it because it is technically necessary to provide the contact form. The legal basis for the use of technically required Service (i.e. the storage of information on your terminal and/or the access to information stored in your terminal) is § 25 para. 2 TTDSG in conjunction with Art. 6, par. 1, p. 1 lit. b, c, f GDPR. This information may be both personal and independent of a personal reference. If the storage or access is followed by a processing of personal data concerning you, we process this, insofar as this
  • is necessary to fulfill a contract to which you are a party (Art. 6 (1) (1) (b) GDPR) or
  • is required by law (Art. 6 para. 1 sentence 1 lit. c GDPR) or
  • is necessary to safeguard our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)
You can delete cookies using your browser settings.

IV. Storage period

Your personal data will be stored for as long as it is needed for the purposes mentioned above, but for a maximum period of 10 years. Your revocation has no influence on the lawfulness of the processing of your personal data until the time of the revocation.

C. Special Privacy Information: Processing your registration for the event via the contact form

I. Register using the contact form

If you would like to register for the event, it is necessary that you provide us with personal identification data concerning you (e.g. first and last name) as well as contact data (e.g. e-mail address) as well as any other personal data that are required for the specific event registration via the contact form. The data required to answer your registration via the contact form are marked as mandatory with an asterisk (*). In addition, you can voluntarily provide us with further data. CLAAS processes your personal data, which you provide to us via the contact form, for the purposes of registering and handling the event.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in the processing of your personal data also lies in the aforementioned purpose. If you give CLAAS data protection consent on the contact/registration/participation form, we process your data on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). If contact is made to initiate a contract, data processing is based on Art. 6 (1) (1) (b) GDPR.

We also process usage and traffic data (IP address, date and time of your request, log data as part of the double opt-in process). The legal basis for data processing is Art. 6 (1) (1) (f) GDPR based on our legitimate interest in ensuring the functionality of this website and the security of the information technology systems.

If you consent to the processing of your personal data, we process your relevant technical documentation data (e.g. time and time of recording) as well as technical documentation and protocol data (e.g. your declaration of consent) for the purpose of proving your declaration of consent. The legal basis for the processing of technical documentation and protocol data concerning you is Art. 6 para. 1 sentence 1 lit. f GDPR. The legal basis for the processing of technical documentation and protocol data concerning you (e.g. your declaration of consent) is Art. 6 (1) (1) (c) GDPR and Art. 6 (1) (1) (f) GDPR.

II. Storage period

Your personal data will be stored for as long as it is needed for the purposes mentioned above, but for a maximum period of 10 years.

If you withdraw your consent, your personal data will be deleted with effect for the future. Your revocation has no influence on the lawfulness of the processing of your personal data until the time of the revocation.

D. Special Privacy Information: Organizing the event via an event platform

If the event is held via an event platform, you will need access to our event platform for your participation. For registration, CLAAS will process your relevant electronic identification data (e.g. user name [your email address] and your password). Your e-mail address and your password are your access data. When you log in with your login data, CLAAS verifies that you are a registered user. For this purpose, CLAAS processes your electronic identification data as well as technical documentation and protocol data. After successful verification you have access to the protected area of the website. If you register as an authorized user, the data processing is based on Art. 6 (1) S. 1 lit. b GDPR. Insofar as unauthorized users log in, the data processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR based on our legitimate interest in securing our online offer, verifying users and denying access to third parties.

If you have forgotten your password, you can reset it using the "Forgot your password?" function. If you wish to have your password reset, we will process your electronic identification data as well as technical documentation and log data. If you as an authorized user use this function, Art. 6 para. 1 sentence 1 lit. b GDPR is the legal basis for data processing. Insofar as unauthorized users use the function, Art. 6 para. 1 sentence 1 lit. f GDPR is the legal basis based on our legitimate interest in securing our online offer, verifying users and denying access to third parties.

Your personal data will be stored for as long as it is needed for the purposes mentioned above, but for a maximum period of 10 years. Your revocation has no influence on the lawfulness of the processing of your personal data until the time of the revocation. Further information on data protection may be made available to you via the event platform.