Privacy Statement
("We")
Mercedes-Benz India
E-3,MIDC Chakan- Phase III
Chakan Industrial Area, Kuruli & Nighoje, Tal : Khed, Pune - 410501 India
Phone : +91-2135 673000
Email :cs.ind@cac.mercedes-benz.com
Daimler Financial Services India Pvt. Ltd.
E-3, MIDC Chakan, Phase III,
Chakan Industrial Area, Kuruli & Nighoje, Taluka: Khed,
410501 Pune, Maharashtra, India
Telephone Number：+91 02135673000
Privacy Centre:
Mercedes me Privacy Center
Mercedes-Benz AG
Mercedesstraße 120
70372 Stuttgart
Telefon: +49 711 17 - 0
E-Mail: dialog.mb@daimler.com
Local Compliance Officer:
Mr. Abhishek Singh
Mercedes-Benz India
E-3,MIDC Chakan- Phase III
Chakan Industrial Area, Kuruli & Nighoje,
Tal : Khed, Pune - 410501 India
1. Data Protection
We appreciate you visiting our website and your interest in the products we offer. Protecting your personal data is very important to us. In this Privacy Policy, we explain how we collect your personal information, what we do with it, for what purposes and on what legal foundation we do so, and what rights you have on that basis. Our privacy statement on the use of our websites and the Global Data and Information Policy do not apply to your activities on the websites of social networks or other providers that can be accessed using the links on our websites. Please refer to their respective policies on data privacy and protection of those providers.
2. Collecting and Processing Your Information
a. Whenever you visit our websites, we store certain information including but not limited to, about the browser and operating system you are using;
- the date and time of your visit; the status of the interaction (e.g. whether you were able to access the website or received an error message);
- the usage of features on the website;
- any search phrases you entered;
- how often do you visit individual websites;
- the names of the files you access;
- the amount of data transferred;
- the Web page from which you accessed our website; and the Web page you visited after visiting our website, whether by clicking links on our websites or entering a domain directly into the input field of the same tab (or window) of the browser in which you have our websites open.
- In addition, on the platform level we do not store the full IP address, however for Google and Adobe Analytics, below are the details:
o Adobe Analytics the Internet Service Provider is stored for 37 months.
o Google is anonymizing the IP by default https://support.google.com/analytics/answer/2763052?hl=en
o Google is not tracking the ISP anymore since last February https://www.seerinteractive.com/blog/deprecating-network-domain-service-provider/ - This is for security reasons; in particular, to prevent and detect attacks on our websites or attempts at fraud.
b. We will store and process your personal information only if you share that information with us. You can provide your consent through the Declaration of Consent (DoC) presented to you at various avenues e.g. visiting our website, visiting a dealership, at events etc. and/or for instance, by filling out a registration form, contact form, survey, contest entry or to execute a contract. In such cases as well, we will store and process only the data we are allowed to keep based on consent given by you or in accordance with applicable legal regulations (more information on this can be found in the section titled "Legal Foundation for Processing" clause 8).
c. You are neither legally nor contractually obligated to share your personal information. However, certain features of our websites may depend on the sharing of personal information. If you do not provide your personal information in such cases, you may not be able to use those features, or they may be available with limited functionality.
3. Purpose of Use
a. We use the personal information collected during your visit to any of our websites to make using them as convenient as possible for you and to protect our IT systems against attacks and other unlawful activities.
b. If you share any personal information with us – for example, by filling out a registration form, contact form, survey, contest entry or to execute a contract with you or to provide you any goods or services – we may use that information for the designated purposes as stated in the Declaration of Consent (DoC), for purposes of customer management and if required, for purposes of processing or billing or managing business transactions within the required scope in each instance (hereinafter collectively referred to as ‘Purpose’).
4. Transfer of Personal Information to Third Parties; Social Plugins
a. We may transfer the personal information shared with us on our website or otherwise with third parties including but not limited to the Authorised Dealers, Group Companies, our Service Providers, to fulfill the Purpose. They may further transfer your personal information to other third parties in pursuance of any contract to fulfill the Purpose.
b. Our websites may also contain third-party offers. If you click on any such offers, we will transfer the necessary data required to the appropriate provider (e.g. the fact that you found the offer in question on our website and, if applicable, additional information that you have already provided for this purpose on our websites).
C. On our websites, whenever there is a use of so-called "social plugins" from social networks like Facebook, Twitter and Google+, we incorporate them in the manner described below.
When you visit our websites, social media plugins are deactivated. That means no information, whatsoever, is transferred to the operators of those networks. If you wish to use one of the networks, click on the appropriate plugin in order to be connected directly to that network's server.
If you have a user account with that network and are logged in at the moment you activate the plugin, the network will be able to detect your visit to our websites and assign it to your user account. If you wish to prevent that, please log off from the network before activating the social plugin. A social network will not be able to detect that you have visited other Mercedes-Benz AG websites unless you have activated its social plugin on those sites as well.
When you activate a social plugin, the network transfers the content thus made available directly to your browser, which incorporates it into our websites. In that situation, data transfers initiated and controlled by the respective social network may also take place. Your connection to a social network, the data transfers that take place between the network and your system, and your interactions on that platform are governed exclusively by the respective network's data privacy and protection policy.
The social plugin will remain active until you deactivate it or delete your cookies.
Cookie Policy
Whenever you click on a link of third party or activate a social plugin, your personal information may be transferred to third parties in or outside India. Please keep these circumstances in mind before you click on a link or activate a social plugin, thereby causing your data to be transferred.
5. Analysis of User Data and Use of Analytics Tools
a. We want the content of our websites to match your preferences as closely as possible, thereby improving what we offer to you. To identify especially popular areas of our websites, we use the following analytics tools: Adobe Analytics and Google Analytics 360
b. When we employ these analytics tools, information may be transferred to servers located in the India, Singapore, European Union or the United States and processed there.
c. If you do not wish us to use the above named analytics tools to collect and analyze information about your visit to our websites, you may permanently object to the practice (opt out) at any time.
d. Below you will find information about the providers of the analytics tools and the respective opt-out procedures:
i. Google Analytics 360 from Google Inc. ("Google"): Google Analytics 360 is ISO 27001 certified.
Google classifies Google Analytics 360 data as confidential information, governed by Google’s privacy policies. Google audits compliance with its own privacy policies which may be read here: http://google.com/policies/privacy
You can also control your privacy settings through the link: https://policies.google.com/privacy#infochoices
ii. Adobe Analytics from Adobe Systems Inc. ("Adobe")
Adobe is certified under the EU-U.S. Privacy Shield Framework.
You can follow this link to opt out of analysis using Adobe Analytics & Adobe Target: http://www.adobe.com/mena_en/privacy/opt-out.html
6. Usage-based information (targeting and retargeting)
We use so-called targeting and retargeting technologies in order to tailor our online marketing (e.g. banner ads) more specifically to your needs and interests. This involves using cookies to store information about your interest in our products and services. When you visit either our websites (targeting) or other websites (retargeting) that work together with our retargeting partners, those cookies are read and used to provide you with information that is customized and most closely related to your interests. A so-called cookie-ID pseudonym is stored in the cookies. That means you cannot be easily identified through the process. During the retargeting process, we may also collect information about your interest in the products and services of our retargeting partners.
When these targeting and retargeting tools are used, some data may be transferred to servers located outside India and processed there. Please read the information concerning that in Section 5b of this Privacy Statement.
If you do not wish us (and our targeting/retargeting partners) to process information about your visit or to tailor banner advertisements to your interests, you may permanently object to the practice (opt out) at any time.
Below you will find information about the targeting and retargeting technologies we use and their providers as well as the respective opt-out procedures:
Salesforce Data Management Platform (DMP) of Salesforce.com EMEA Limited ([targeting/retargeting]), London, United Kingdom of Great Britain and Northern Ireland
When this technology is used, data is transferred to servers in the US. The parent company of Salesforce.com is based in the United States and certified under the EU-U.S. Privacy Shield Framework.
If you wish to file an objection, please click on the following link: https://www.salesforce.com/products/marketing-cloud/sfmc/salesforce-dmp-consumer-choice/
Adobe Target from Adobe Systems Software Ireland Limited, Dublin, Ireland
When this technology is used, data is transferred to servers in the US. The parent company of Adobe is based in the United States and certified under the EU-U.S. Privacy Shield Framework.
If you wish to file an objection, please click on the following link: http://www.adobe.com/mena_en/privacy/opt-out.html
As an alternative, you can manage the use of third-party cookies and activate or deactivate them using the options provided on the following website:
https://www.youronlinechoices.com/uk/
7. Security
We take technical and organizational security measures in order to protect your information managed by us from being tampered with, lost, destroyed or accessed by unauthorized individuals. We are continuously improving our security measures in line with technological advancements.
8. Legal Foundations for Processing
a. If you have given us your consent to process your personal information, then that is the legal foundation for processing your information.
b. If processing your personal information is required to fulfill any of our legal obligations (e.g. data retention), we will be authorized to do so.
c. Furthermore, we may process personal information for purposes of protecting our legitimate interests. Examples of such interests include maintaining the functionality of our IT systems, marketing our products and services and those of third parties (partially by means of tracking, targeting and retargeting, see Sections 5 and 6 of this Statement) and the legally required documentation of business contacts. As part of the consideration of interests required in each case, we take into account various aspects, in particular the type of personal information, the purpose of processing, the circumstances of processing and your interest in the confidentiality of your personal information. Please note, the purpose of processing your personal information is mentioned in the Declaration of Consent accepted by you at various instances.
8. Deleting Your Personal Information
- In addition, on platform level we do not store the full IP address, however for Google and Adobe Analytics, below are the details:
- Adobe Analytics the Internet Service Provider is stored for 37 months.
- Google is anonymizing the IP by default https://support.google.com/analytics/answer/2763052?hl=en
- Google is not tracking the ISP anymore since last February https://www.seerinteractive.com/blog/deprecating-network-domain-service-provider/
This is for security reasons; in particular, to prevent and detect attacks on our websites or attempts at fraud. Moreover, we delete your personal information within a reasonable time after the purpose for which it was collected and processed has been fulfilled. Storage beyond that time takes place only if required by laws that apply to us.
9. Revocation of Consent and Update of Personal Information
If you have consented to the storage and processing of your personal information; you may revoke your consent at any time, subject to applicable laws which may require us to store your information under certain circumstances e.g. for providing important regulatory, product updates about our products to you as a customer, and change or updates in your Personal Information by writing to cs.ind@cac.mercedes-benz.com or calling our Customer Connect Phone number: 0008000501888
10. Newsletter
You may unsubscribe from our emailers option available at any time by using the option to unsubscribe contained in the auto mailers.
11. Mercedes-Benz Group AG's Central Registration Service
With the Central Registration Service offered by Mercedes-Benz Group AG, you can sign up for every website and application belonging to the Mercedes-Benz Group AG and its brands that are connected to the service. The terms of use for the Central Registration Service contain special data protection provisions. Those terms of use can be found on the registration pages of affiliated websites and applications under "Terms and Conditions of Registration."
12. Cookies
You can find information about the cookies we use and their functions in our Cookie Policy.
Cookie Policy
Responsible person as defined by
the General Data Protection Regulation ("DSGVO")
Mercedes-Benz AG
Mercedesstrasse 120
70372 Stuttgart
Germany
Email: dialog.mb@daimler.com
Commercial Register of the District Court No.: 762873
Represented by the Board of Management:
Ola Källenius (Chairman),
Jörg Burzer, Renata Jungo Brüngger, Sajjad Khan, Sabine Kohleisen, Harald Wilhelm, Markus Schäfer, Britta Seeger
Data Protection Officer:
Mercedes-Benz Group AG
Group Data Protection Officer
HPC E600
70546 Stuttgart
Email: data.protection@daimler.com
4. Sending personal information to third parties; social plug-ins
A. Our websites may also involve third-party offers. If you click on such an offer, we send data to the necessary extent to the specific provider (e.g. the information that you found this offer on our website and, if applicable, additional information which you have already shared on our websites for this purpose).
B. If we use so-called "social plug-ins" of social networks such as Facebook and Twitter on our websites, we integrate them as follows:
When you visit our websites, the social plug-ins are deactivated, i.e. no data is transmitted to the operators of these networks. If you wish to use one of these networks, click on the relevant social plug-in in order to establish a direct connection with the server of the respective network.
If you have a user account with the corresponding network and you are logged in to this specific social network at the time you activate the social plug-in, this network can attribute your visit to our websites or to your user account. If you would like to prevent this, please log out from the network prior to activating the social plug-in. A social network is unable to attribute a visit to other Daimler websites before you have not also activated any available social plug-in there.
If you activate a social plug-in, the network directly transfers the consequently available data to your browser which integrates it into our websites. In this situation there may also be data transfers that are initiated and controlled by the corresponding social network. Your connection to a social network, the data transfers taking place between the network and your system and your interactions on this platform are solely subject to the data protection provisions of the particular network.
The social plug-in remains active until you deactivate it or delete your cookies.
!!!Cookie notices!!!
C. When you click on the link for an offer or activate a social plug-in, personal data may be transferred to providers outside the European Economic Area, which from the point of view of the European Union ("EU") do not guarantee "adequate levels of protection" that meet EU standards for the processing of personal data. Please bear this in mind before you click on a link or activate a social plug-in and thereby trigger a transfer of your data.
D. We also use qualified service providers (e.g. IT service providers, marketing agencies) to operate, optimise and secure our websites. We only pass on personal data to them insofar as this is necessary for the provision and use of the websites and their functionalities, for the pursuit of legitimate interests or insofar as you have consented to this (see below in the section "Legal basis for processing")
5. Evaluation of usage data;
Use of analysis tools and cookies
A. We want to tailor the content of our websites as precisely as possible to the interests of visitors to our websites and in this way improve our offering for everyone. To identify usage preferences and particularly popular areas of the websites, we use the Google Analytics analysis tool if you agree to this. Cookies are also used in this process; you can find more detailed information on cookies in our cookie notes.
!!!Cookie information!!!
6. Security
We use technical and organisational security measures to protect the data we have under our control against manipulation, loss, destruction and against access by unauthorised persons. We continuously improve our security measures in line with technological developments.
7. Legal basis for processing
A. If you have given your consent to us processing your personal data, this constitutes the legal basis for said processing (Article 6 Section 1 Paragraph a GDPR).
B The legal basis for processing personal data for the purposes of initiating or compliance with a contract with yourselves shall be Article 6 Section 1 Paragraph b GDPR.
C. If the processing of your personal data is required to meet our legal obligations (e.g. archiving data), we are authorised to do so as per Art. 6 Section 1 letter c DSGVO (GDPR, General Data Protection Regulation).
D. In addition, we process personal data for the purposes of safeguarding our rightful interests as well as the rightful interests of third parties as per Art. 6 Section 1 Paragraph f GDPR. Maintaining the functional capability of our IT systems, the (direct) marketing of our own and third-party products and services and the legally required documentation of business contacts are such legitimate interests. We take into account in particular the type of personal data, the purpose of the processing, the circumstances of the processing and your interest in the confidentiality of your personal data as part of the necessary balancing of interests in each case.
8. Deleting your personal data
We delete your IP address and the name of your Internet service provider, which we only store for security reasons, after seven days. Otherwise, we delete your personal data as soon as the reason for which we collected and processed the data ceases to exist. Beyond this time, storage will only take place insofar as this is required in accordance with the laws, regulations or other legal provisions to which we are subject in the EU or in accordance with legal provisions in third countries, if an appropriate level of data protection is provided there in each case. Where deleting is not possible in an individual case, the relevant personal data shall be marked with the aim of restricting its future processing.
9. Rights of affected parties
A. As a person affected by data processing you have the right to information (Article 15 GDPR), correction (Article 16 GDPR), deletion of data (Article 17 GDPR), restricting processing (Article 18 GDPR) and transferring data (Article 20 GDPR).
Online form data protection rights management
b. If you consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. The legality of the processing of your personal data until the withdrawal of consent remains unaffected by the withdrawal. Likewise, further processing of this data on another legal basis, such as for the fulfilment of legal obligations, remains unaffected (see "Legal bases of the processing").
C. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 Section 1 e) GDPR (data processing in the interest of the public) or Article 6 Section 1 f) DSGVO (data processing based on a balancing of interests). If you lodge an objection, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. Insofar as we process your personal data for the purposes of direct marketing for the protection of legitimate interests based on a balance of interests, you also have the right to object to this at any time without giving reasons.
d. We kindly ask you to send your claims or explanations to the following contact address if possible:
kundenrechte_mb@daimler.com
e. Should you believe that the processing of your personal data violates legal provisions, you have the right to file a complaint with a competent data protection authority (Art. 77 GDPR).
10. Newsletter
If you subscribe to one of the newsletters offered on our website, the data provided for the registration will only be used for the purpose of sending the newsletter, unless you agree to more extensive usage of the data. You can end the subscription at any time via the unsubscribe option in the newsletter.
11. Central Access Service of Mercedes-Benz Group AG
With the Mercedes-Benz Group AG central access service you can register with all the websites and applications of the Daimler Group and their brands that use this service. The terms of use applicable to the central access service contain specific data protection regulations. These terms of use can be found on the login pages of the connected websites and applications under "Terms of access".
12. Data transmission to receiver
outside the European Economic Area
A. When using service providers (see section "Use of service providers"), personal data may be transferred to and processed in recipients in countries outside the European Union ("EU"), Iceland, Liechtenstein and Norway (= European Economic Area), in particular USA, India.
b. The following countries are considered by the EU to have an adequate level of protection for the processing of personal data in line with EU standards (so-called adequacy decision): Andorra, Argentina, Canada (limited), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay. With recipients in other countries, we agree to use EU standard contractual clauses, binding corporate rules or other permissible mechanisms to provide an appropriate level of protection in accordance with legal requirements. We will be happy to provide you with information on this via the contact details listed in the section "Data subject rights".
13. Cookies
You can find information on the cookies used by us and their functions in our cookie notes.
!!! Cookie information !!!
6. Security
We use technical and organisational security measures to protect the data we have under our control against manipulation, loss, destruction and against access by unauthorised persons. We continuously improve our security measures in line with technological developments.
7. Legal basis for processing
A. If you have given your consent to us processing your personal data, this constitutes the legal basis for said processing (Article 6 Section 1 Paragraph a GDPR).
B The legal basis for processing personal data for the purposes of initiating or compliance with a contract with yourselves shall be Article 6 Section 1 Paragraph b GDPR.
C. If the processing of your personal data is required to meet our legal obligations (e.g. archiving data), we are authorised to do so as per Art. 6 Section 1 letter c DSGVO (GDPR, General Data Protection Regulation).
D. In addition, we process personal data for the purposes of safeguarding our rightful interests as well as the rightful interests of third parties as per Art. 6 Section 1 Paragraph f GDPR. Maintaining the functional capability of our IT systems, the (direct) marketing of our own and third-party products and services and the legally required documentation of business contacts are such legitimate interests. We take into account in particular the type of personal data, the purpose of the processing, the circumstances of the processing and your interest in the confidentiality of your personal data as part of the necessary balancing of interests in each case.
8. Deleting your personal data
We delete your IP address and the name of your Internet service provider, which we only store for security reasons, after seven days. Otherwise, we delete your personal data as soon as the reason for which we collected and processed the data ceases to exist. Beyond this time, storage will only take place insofar as this is required in accordance with the laws, regulations or other legal provisions to which we are subject in the EU or in accordance with legal provisions in third countries, if an appropriate level of data protection is provided there in each case. Where deleting is not possible in an individual case, the relevant personal data shall be marked with the aim of restricting its future processing.
9. Rights of affected parties
A. As a person affected by data processing you have the right to information (Article 15 GDPR), correction (Article 16 GDPR), deletion of data (Article 17 GDPR), restricting processing (Article 18 GDPR) and transferring data (Article 20 GDPR).
Online form data protection rights management
b. If you consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. The legality of the processing of your personal data until the withdrawal of consent remains unaffected by the withdrawal. Likewise, further processing of this data on another legal basis, such as for the fulfilment of legal obligations, remains unaffected (see "Legal bases of the processing").
C. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 Section 1 e) GDPR (data processing in the interest of the public) or Article 6 Section 1 f) DSGVO (data processing based on a balancing of interests). If you lodge an objection, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. Where we process your personal data for the purposes of direct marketing for the purposes of legitimate interests based on a balance of interests, you also have the right to object to this at any time without giving reasons.
d. We kindly ask you to send your claims or explanations to the following contact address if possible:
kundenrechte_mb@daimler.com
e. Should you believe that the processing of your personal data violates legal provisions, you have the right to file a complaint with a competent data protection authority (Art. 77 GDPR).
11. Central Access Service of Mercedes-Benz Group AG
With the Mercedes-Benz Group AG central access service you can register with all the websites and applications of the Daimler Group and their brands that use this service. The terms of use applicable to the central access service contain specific data protection regulations. These terms of use can be found on the login pages of the connected websites and applications under "Terms of access".
outside the European Economic Area
A. When using service providers (see section "Use of service providers"), personal data may be transferred to and processed in recipients in countries outside the European Union ("EU"), Iceland, Liechtenstein and Norway (= European Economic Area), in particular USA, India.
b. The following countries are considered by the EU to have an adequate level of protection for the processing of personal data in line with EU standards (so-called adequacy decision): Andorra, Argentina, Canada (limited), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay. With recipients in other countries, we agree to use EU standard contractual clauses, binding corporate rules or other permissible mechanisms to provide an appropriate level of protection in accordance with legal requirements. We will be happy to provide you with information on this via the contact details listed in the section "Data subject rights".
13. Cookies
You can find information on the cookies used by us and their functions in our cookie notes.
!!! Cookie information !!!
4. Sending personal information to third parties; social plug-ins
A. Our websites may also involve third-party offers. If you click on such an offer, we send data to the necessary extent to the specific provider (e.g. the information that you found this offer on our website and, if applicable, additional information which you have already shared on our websites for this purpose).
B. If we use so-called "social plug-ins" of social networks such as Facebook and Twitter on our websites, we integrate them as follows:
When you visit our websites, the social plug-ins are deactivated, i.e. no data is transmitted to the operators of these networks. If you wish to use one of these networks, click on the appropriate social plug-in, in order to establish a direct connection with the server of the respective network.
If you have a user account with the corresponding network and you are logged in to this specific social network at the time you activate the social plug-in, this network can attribute your visit to our websites or to your user account. If you would like to prevent this, please log out from the network prior to activating the social plug-in. A social network is unable to attribute a visit to other Daimler websites before you have not also activated any available social plug-in there.
If you activate a social plug-in, the network directly transfers the consequently available data to your browser which integrates it into our websites. In this situation there may also be data transfers that are initiated and controlled by the corresponding social network. Your connection to a social network, the data transfers taking place between the network and your system and your interactions on this platform are solely subject to the data protection provisions of the particular network.
The social plug-in remains active until you deactivate it or delete your cookies.
!!!Cookie notices!!!
C. When you click on the link for an offer or activate a social plug-in, personal data may be transferred to providers outside the European Economic Area, which from the point of view of the European Union ("EU") do not guarantee "adequate levels of protection" that meet EU standards for the processing of personal data. Please bear this in mind before you click on a link or activate a social plug-in and thereby trigger a transfer of your data.
D. We also use qualified service providers (e.g. IT service providers, marketing agencies) to operate, optimise and secure our websites. We only pass on personal data to them insofar as this is necessary for the provision and use of the websites and their functionalities, for the pursuit of legitimate interests or insofar as you have consented to this (see below in the section "Legal basis for processing")
