Data protection

Data protection


CG Car-Garantie Versicherungs-Aktiengesellschaft

DSGVO_en

Our data protection representative:
CG Car-Garantie Versicherungs-Aktiengesellschaft
Udo Strittmatter
Gündlinger Straße 12
D-79111 Freiburg i. Breisgau

Phone +49 (0)761 4548 0
Fax +49 (0)761 4548 685
Email: datenschutz@cargarantie.com

Notification
In accordance with Sect. 4g of Germany's data protection act (Bundesdatenschutzgesetz - BDSG), the data controller shall make the following data available to everyone in the appropriate manner:

1. Name of responsible office:
CG Car-Garantie Versicherungs-AG

2. Members of the Board:
Axel Berger (Chairman)
Wolfgang Bach
Dr. Marcus Söldner

3. Chairman of the Supervisory Board:
Dr. Mathias Bühring-Uhle

4. Appointed IT Manager:
Steffen Bayer

5. Address of the responsible office:
CG Car-Garantie Versicherungs-AG
Gündlinger Straße 12
D- 79111 Freiburg
Germany

6. Purpose of recording, processing or utilising data:
To conduct insurance transactions; to distribute, sell, manage and handle insurance policies in the field of warranty and repair cost insurance and all new business related to this, as well as the placement of products and services offered by associated partners. The saving and processing of personal data for the company's own purposes and for and on behalf of consolidated companies shall be performed on the basis of intra-group service agreements.

7. Description of groups of people concerned and data or data categories relating thereto:
Client data, employee data as well as data relating to suppliers and, where applicable, interested parties, provided that such data is required in order to meet the purposes stated under 6.

8. Recipients or categories of recipients entitled to receive data:
Public authorities where overriding statutory regulations apply; external contractors within the meaning of Sect. 11 BDSG as well as external offices and authorities and internal departments required to meet the purposes stated under 6.

9. Standard deadlines for deleting data:
Lawmakers have issued numerous obligations and deadlines relating to the preservation of records. Upon expiry of the deadlines, the corresponding data will be deleted automatically provided that it is no longer required for the purpose of fulfilling a contract. Should certain data not be affected by this, it will be deleted as soon as the aforementioned purposes cease to exist.

10. Envisaged data transmission to third countries:
Unless required for the purpose of meeting the aims outlined under 6., no data will be transmitted to the Swiss branch of CG Car-Garantie Versicherungs-AG. No data transmissions to other third countries are envisaged.

11. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States .

In case IP-anonymisation is activated on this website, your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transfered to a Google server in the USA and truncated there. The IP-anonymisation is active on this website.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage.

The IP-address, that your Browser conveys within the scope of Google Analytics, will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also opt-out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Addon for your current web browser.

As an alternative to the browser Addon or within browsers on mobile devices, you can click this link in order to opt-out from being tracked by Google Analytics within this website in the future (the opt-out applies only for the browser in which you set it and within this domain). An opt-out cookie will be stored on your device, which means that you'll have to click this link again, if you delete your cookies.

Data Protection Statement
With these statements, we give you information on the processing of your personal data by CG Car-Garantie Versicherungs-AG and your rights under data protection law.

Party responsible for data controlling
CG Car-Garantie Versicherungs-AG
Gündlinger Strasse 12
79111 Freiburg
Tel. +49 761 4548 0)
Fax +49 761 4548 248)
E-mail address: info@cargarantie.com

You can contact our data protection officer by post to “Data Protection Officer” at the address provided above, or by e-mail at: datenschutz@cargarantie.com

Purposes and legal foundations of data processing
We process your personal data in compliance with the EU General Data Protection Regulation (GDPR) as well as all additional relevant laws.
The vehicle warranty received from your dealer is insured with us. In order to conclude the insurance agreement and assess the risk that we are to take on, we need the information provided by you in the warranty agreement. If the insurance agreement comes into effect, we will process this data in order to implement the contractual relationship. We require information regarding claims, for example, in order to be able to check whether an insurance case has occurred and the level of the claim.
It is not possible to conclude and/or implement the warranty insurance agreement without processing your personal data.
In addition, we need your personal data in order to create insurance-specific statistics, e.g. for developing new tariffs or to fulfil supervisory requirements.
The legal foundation for this processing of personal data for pre-contractual and contractual purposes is Article 6 Para. 1 b), GDPR.
We also process your data in order to protect our justified interests or those of third parties (Article 6, Para. 1) GDPR). Specifically, this may be necessary:

  • to guarantee IT security and IT operation,
  • to advertise our own insurance products,
  • to prevent and clarify criminal offences; in particular, we use data analysis to identify information that may indicate insurance fraud.

In addition, we process your personal data to fulfil statutory duties such as supervisory requirements, business and fiscal legal duties to preserve records, and our advisory duty. In this case, the respective statutory regulations, in conjunction with Article 6 Para. 1 c) GDPR, serve as the legal foundation for processing.
If we wish to process your personal data for a purpose not specified above, we will inform you of this in advance within the framework of the statutory provisions.

Categories of recipients of personal data
Reinsurers:
We insure the risks that we take on through special insurance companies (reinsurers). In order to do this, it may be necessary to transfer your agreement data and, where applicable, claims data to a reinsurer so that the reinsurer is able to gain its own understanding of the risk or insurance case.

Vehicle manufacturers/importers:
In the event of warranty and/or insurance programs coordinated with vehicle manufacturers and/or vehicle importers, your agreement data and, where applicable, claims data are forwarded to vehicle manufacturers and/or vehicle importers for inclusion in statistics, for example.

External service providers:
In order to fulfil our contractual and statutory obligations, we procure some services from external service providers. The latest version of the list of contractors and service providers we use, and with which we have business relationships that are not solely temporary, can be viewed on our website at www.cargarantie.com/datenschutz

Additional recipients:
In addition, we may transfer your personal data to additional recipients such as authorities, in order to fulfil statutory disclosure obligations (e.g. financial authorities or law enforcement agencies).

Duration of data storage
We delete your personal data as soon as it is no longer required for the purposes specified above. In this process, it may be the case that personal data is stored for the period during which claims may be asserted against our company (statutory limitation period of three to thirty years). In addition, we store your personal data insofar as we are legally required to do so. Corresponding duties to the production of proof and retention are based, among other instruments, on the German Commercial Code, General Fiscal Law, and Money Laundering Act. In accordance with these, storage periods last up to ten years.

Rights of affected persons
You may demand disclosure of the data stored about your person by contacting the address provided above. In addition, under certain conditions you may demand the correction or deletion of your data. Furthermore, you may be due a right to restrict the processing of your data, as well as a right to the return – in a structured, established and machine-readable format – of the data provided by you.

Right of objection
You have the right to object to the processing of your personal data for the purposes of direct advertising.
To assert this, please contact info@cargarantie.com
If we process your data to protect justified interests, you may object to this processing if your particular situation gives rise to reasons that exclude data processing.

Right of complaint
You are able to contact the data protection officer specified above, or a supervisory authority for data protection, if you have a complaint.

Data transfer to a third country
If we transfer your personal data to service providers outside the European Economic Area (EEA), this transfer only occurs if the third country has been confirmed by the EU Commission to have an appropriate level of data protection.

Automated decisions on a case-by-case basis
Based on your information on the insurance case, the data saved regarding your agreement and where applicable information in this respect received from third parties, we will in some cases make a fully automated decision about our liability. The fully automated decisions are based on regulations defined in advance by the company, regarding the weighting of information.

Data Protection Statement
With these statements, we give you information on the processing of your personal data by CG Car-Garantie Versicherungs-AG and your rights under data protection law.

Party responsible for data processing
CG Car-Garantie Versicherungs-AG
Gündlinger Strasse 12
79111 Freiburg
Tel. +49 761 4548 0)
Fax +49 761 4548 248)
E-mail address: info@cargarantie.com

You can contact our data protection officer by post to “Data Protection Officer” at the address provided above, or by e-mail at: datenschutz@cargarantie.com

Purposes and legal foundations of data processing
We process your personal data in compliance with the EU General Data Protection Regulation (GDPR) as well as all additional relevant laws.
If you make an application for insurance protection, we need the information you have provided in this process in order to conclude the agreement and assess the risk that we are to take on. If the insurance agreement comes into effect, we will process this data in order to implement the contractual relationship, e.g. for issuing a policy or invoicing. We require information regarding claims, for example, in order to be able to check whether an insurance case has occurred and the level of the claim.
It is not possible to conclude and/or implement the insurance agreement without processing your personal data.
In addition, we need your personal data in order to create insurance-specific statistics, e.g. for developing new tariffs or to fulfil supervisory requirements.
The legal foundation for this processing of personal data for pre-contractual and contractual purposes is Article 6 Para. 1 b), GDPR.
We also process your data in order to protect our justified interests or those of third parties (Article 6, Para. 1) GDPR). Specifically, this may be necessary:

  • to guarantee IT security and IT operation,
  • to advertise our own insurance products,
  • to prevent and clarify criminal offences; in particular, we use data analysis to identify information that may indicate insurance fraud.

In addition, we process your personal data to fulfil statutory duties such as supervisory requirements, business and fiscal legal duties to preserve records, and our advisory duty. In this case, the respective statutory regulations, in conjunction with Article 6 Para. 1 c) GDPR, serve as the legal foundation for processing.
If we wish to process your personal data for a purpose not specified above, we will inform you of this in advance within the framework of the statutory provisions.

Categories of recipients of personal data
Reinsurers:
We insure the risks that we take on through special insurance companies (reinsurers). In order to do this, it may be necessary to transfer your agreement data and, where applicable, claims data to a reinsurer so that the reinsurer is able to gain its own understanding of the risk or insurance case.

Vehicle manufacturers/importers:
In the event of warranty and/or insurance programs coordinated with vehicle manufacturers and/or vehicle importers, your agreement data and, where applicable, claims data are forwarded to vehicle manufacturers and/or vehicle importers for inclusion in statistics, for example.

External service providers:
In order to fulfil our contractual and statutory obligations, we procure some services from external service providers.
The latest version of the list of contractors and service providers we use, and with which we have business relationships that are not solely temporary, can be viewed on our website at www.cargarantie.com/datenschutz

Additional recipients:
In addition, we may transfer your personal data to additional recipients such as authorities, in order to fulfil statutory disclosure obligations (e.g. financial authorities or law enforcement agencies).

Duration of data storage
We delete your personal data as soon as it is no longer required for the purposes specified above. In this process, it may be the case that personal data is stored for the period during which claims may be asserted against our company (statutory limitation period of three to thirty years). In addition, we store your personal data insofar as we are legally required to do so. Corresponding duties to the production of proof and retention are based, among other instruments, on the German Commercial Code, General Fiscal Law, and Money Laundering Act. In accordance with these, storage periods last up to ten years.

Rights of affected persons
You may demand disclosure of the data stored about your person by contacting the address provided above. In addition, under certain conditions you may demand the correction or deletion of your data. Furthermore, you may be due a right to restrict the processing of your data, as well as a right to the return – in a structured, established and machine-readable format – of the data provided by you.

Right of objection
You have the right to object to the processing of your personal data for the purposes of direct advertising.
To assert this, please contact info@cargarantie.com
If we process your data to protect justified interests, you may object to this processing if your particular situation gives rise to reasons that exclude data processing.

Right of complaint
You are able to contact the data protection officer specified above, or a supervisory authority for data protection, if you have a complaint.
Data transfer to a third country
If we transfer your personal data to service providers outside the European Economic Area (EEA), this transfer only occurs if the third country has been confirmed by the EU Commission to have an appropriate level of data protection.

Automated decisions on a case-by-case basis
Based on your information on the insurance case, the data saved regarding your agreement and where applicable information in this respect received from third parties, we will in some cases make a fully automated decision about our liability. The fully automated decisions are based on regulations defined in advance by the company, regarding the weighting of information.

The following list identifies the contractors, service providers and recipients or categories of contractors, service providers and recipients who process personal data for CG Car-Garantie Versicherungs-AG in accordance with existing agreements, including the tasks assigned.

This list serves to create transparency about the processing of your data and in particular about who processes your data for which purposes, as far as CG Car-Garantie Versicherungs-AG does not undertake the data processing itself. However, this does not mean that your data will be shared with all companies on this list.

  1. CarGarantie companies that process master data (e.g. last name, first name, CarGarantie number, etc.) in shared databases and data processing procedures:

    1. CAR-GARANTIE GMBH, Gündlinger Str. 12, 79111 Freiburg
    2. Garantie-Service-GMBH, Gündlinger Str. 8, 79111 Freiburg

  2. Contractors, service providers or recipients who carry out data processing as the main subject of the contract:
    Company                                  Subject and purpose of the commission

    1. CAR-GARANTIE GMBH     Sales
    2. Garantie-Service-GMBH    Sales
    3. Meisterdruck GmbH     Printing services
    4. Burger Druck GmbH     Printing services
    5. Dinner Druck GmbH     Printing services

  3. Contractors, service providers or recipients who do not make data processing the main subject of the contract and are grouped into categories, i.e. are not named individually. This also includes contractors, service providers or recipients who work with CarGarantie only once or not permanently:
    Category     Subject and purpose of the commission

    1. Financial / supervisory authorities    Reports, audits according to legal requirements
    2. Auditors                                         Auditing (annual accounts)
    3. Reinsurance                                   Reinsurance business (monitoring / revision)
    4. Bankruptcy Trustee                         Insolvency cases
    5. Lawyers                                         Litigation
    6. IT companies                                  Maintenance and support of hardware and software etc.
    7. Assessors                                       Technical assessment of damage cases
    8. Workshops                                     Repairs in connection with the settlement of claims
    9. Disposal service providers               Destruction of documents and other data carriers (hard disk, etc.)

Please note that our service list is updated regularly.