The controller as per the EU General Data Protection Regulation (GDPR) is:
Auto Sales (Mer) Ltd. ("We")
Mosta Road, Lija LJA 9011 Malta
Email: info@autosales.com.mt
Data Protection Officer:
Auto Sales (Mer) Ltd.
Mosta Road
Lija 9011
Malta
Email: dataprotectionofficer@autosales.com.mt
The person responsible within the meaning of the EU General Data Protection Regulation (GDPR) is:
Mercedes-Benz AG
Mercedesstraße 120
70372 Stuttgart
Germany
Email: >dialog.mb@daimler.com
Data Protection Officer:
Mercedes-Benz Group AG
Group Data Protection Officer
HPC E600
70546 Stuttgart, Germany
E-mail: >data.protection@daimler.com
1. Data protection
Thank you for visiting our website and for your interest in our offers. The protection of your personal data is a central concern to us. In these data protection notices, we explain how we collect your personal data, what we do with them, for what purposes and on what legal bases this takes place, and what rights and entitlements are associated with this for you. In addition, we refer to the Mercedes-Benz Data Protection Policy:
> Mercedes-Benz Privacy Policy
Our data protection notice for the use of our websites and the Mercedes-Benz Group AG Data Protection Policy do not apply to your activities on the websites of social networks or other providers that you can reach via the links on our websites. Please obtain information about the respective data protection regulations on the websites of said providers.
2. Collection and processing of your personal data
a. When you visit our websites, we store certain information about the browser and operating system you use, the date and time of your visit, the access status (e.g. whether you were able to access a web page or received an error message), the use of functions of the web page, the search terms you may have entered, the frequency with which you access individual websites, the names of accessed files, the transferred data volume, the web page from which you came to our websites, and the web page you jump to from our websites, be it by clicking on links on our websites or by entering a domain directly into the input field of the same tab (or the same window) of your browser in which you opened our websites. For security reasons, in particular to prevent and recognise attacks on our websites or fraud attempts, we also store your IP address and the name of your Internet service provider for a period of seven days. In addition, we process your IP address in anonymised form for personalised advertising, i.e. we derive your approximate location from the anonymised IP address, which we use for advertising purposes if you consent to this (see section 3c).
b. We only store other personal data if you provide us with this data, e.g. as part of a registration, a contact form, a chat, a survey, a competition or for the performance of a contract, and even in these cases only to the extent that we are permitted to do so on the basis of consent given by you or in accordance with the applicable legal provisions (see section 7).
c. You are under no legal or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites depend on your providing personal data. If you do not provide personal data in these cases, these functions may not be available or be available only in limited form.
3. Purposes of use
a. We use the personal data we collect during a visit to our websites to make them as convenient as possible for you to use as well as to protect our IT systems against attacks and other illegal activities.
b. Insofar as you provide us with further personal data, e.g. as part of a registration, a chat, a contact form, a survey, promotional contest or for the execution of a contract, we will use these data for the aforementioned purposes, for customer administration purposes and – as far as necessary – for the purposes of processing and invoicing any business transactions, in each case to the extent required for this purpose.
c. For other purposes (e.g. display of personalised content or advertising based on your usage behaviour), we and, if applicable, selected third parties will use your data, provided that you give your consent (= approval) to this within the framework of our Consent Management System. For more information and decision-making options, click here:
https://www.mercedes-benz.de/passengercars/content-pool/tool-pages/legal/cookies.html
Analytics, including profiling and scoring, may be used to display personalised content or advertising as part of consent(s) provided by you. The use of profiling and scoring enables us, for example, to provide you with individualised information and advice on specific vehicle models that is tailored to your interests. This is done, among other things, on the basis of the information you provide in connection with the use of our "EQ Registration" service.
d. In addition, we use personal data if we are legally obliged to do so (e.g. storage to comply with commercial or tax retention obligations, disclosure in accordance with official or court orders, e.g. to a law enforcement agency).
e. In addition, we process your personal data insofar as this is necessary to protect our legitimate interests. Based on your usage behaviour, we continuously adapt the functions and the offer of our websites to your needs and use your personal data for internal billing purposes.
4. Transfer of personal information to third parties; social plug-ins; use of service providers
a. Our websites may also involve third-party offers. If you click on such an offer, we send data to the necessary extent to the specific provider (e.g. the information that you found this offer on our website and, if applicable, additional information which you have already shared on our websites for this purpose).
b. If we use so-called "social plug-ins" of social networks such as Facebook and Twitter on our websites, we integrate them as follows:
When you visit our websites, the social plug-ins are deactivated, i.e. no data is transmitted to the operators of these networks.
If you would like to use one of the networks, click on the respective social plug-in to establish a direct connection with the server of the respective network. If you have a user account with the network and are logged in there at the time the social plug-in is activated, the network can assign your visit to our website to your user account. If you would like to prevent this, please log out from the network prior to activating the social plug-in. A social network is unable to assign a visit to other Mercedes-Benz websites until you have also activated any available social plug-in there.
If you activate a social plug-in, the network directly transfers the consequently available data to your browser which integrates it into our websites. In this situation there may also be data transfers that are initiated and controlled by the corresponding social network. Your connection to a social network, the data transfers taking place between the network and your system and your interactions on this platform are solely subject to the data protection provisions of the particular network.
The social plug-in remains active until you deactivate it or delete your cookies (see section 5.d).
c. When you click on the link for an offer or activate a social plug-in, personal data may be transferred to providers outside the European Economic Area, which from the point of view of the European Union ("EU") do not guarantee "adequate levels of protection" that meet EU standards for the processing of personal data. Please bear this in mind before you click on a link or activate a social plug-in and thereby trigger a transfer of your data.
d. We also use qualified service providers (e.g. IT service providers, marketing agencies) to operate, optimise and secure our websites. We only pass on personal information to them insofar as this is necessary for the provision and use of the websites and their functionalities, for the pursuit of legitimate interests, for the fulfilment of legal obligations or insofar as you have consented to this (see section 7). You can find more details about the recipients in our Consent Management System:
> https://www.mercedes-benz.de/passengercars/content-pool/tool-pages/legal/cookies.html
5. Cookies
a. Cookies may be used when you visit our websites. Technically, these are so-called HTML cookies and similar software tools such as web/DOM storage or local shared objects (so-called "flash cookies"), which we refer to collectively as cookies.
b. Cookies are small files that are stored on your desktop, notebook or mobile device when you visit a website. From this, it is possible to recognise, for example, whether there has already been a connection between the device and the websites, to take into account your preferred language or other settings, to offer you certain functionalities (e.g. online shop, vehicle configurator) or to recognise your interests on a usage basis. Cookies may also contain personal data.
c. Whether and which cookies are used when you visit our websites depends on which areas and functions of our websites you use and whether you consent to the use of cookies that are not technically necessary in our Consent Management System. For more information and decision-making options, click here:
> https://www.mercedes-benz.de/passengercars/content-pool/tool-pages/legal/cookies.html
d. The use of cookies also depends on the settings of the web browser you use (e.g. Microsoft Edge, Google Chrome, Apple Safari, Mozilla Firefox). Most web browsers are preset to automatically accept certain types of cookies; however, you can usually change this setting. You can delete any available cookies at any time. You can delete Web/DOM storage and Local Shared Objects separately. You can find out how this works in the browser or device you are using in the manufacturer's instructions.
e. The consent (= approval) to as well as rejection or deletion of cookies are linked to the device used and also to the respective web browser used. If you use several devices or web browsers, you can make the decisions or settings differently for each.
f. If you decide against the use of cookies or delete them, it is possible that not all functions of our websites or individual functions will only be available to you to a limited extent.
6. Security
We use technical and organisational security measures to protect the data we have under our control against manipulation, loss, destruction and against access by unauthorised persons. We continuously improve our security measures in line with technological developments.
7. Legal basis for processing
a. If you have given your consent to us processing your personal data, this constitutes the legal basis for said processing (Article 6 Section 1 Paragraph a GDPR).
b. The legal basis for processing personal data for the purposes of initiating or compliance with a contract with yourselves shall be Article 6 Section 1 Paragraph b GDPR.
c. If the processing of your personal data is required to meet our legal obligations (e.g. archiving data), we are authorised to do so as per Art. 6 Section 1 letter c DSGVO (GDPR, General Data Protection Regulation).
d. In addition, we process personal data for the purposes of safeguarding our rightful interests as well as the rightful interests of third parties as per Art. 6 Section 1 Paragraph f GDPR. Maintaining the functionality of our IT systems, the (direct) marketing of our own and third-party products and services (insofar as this does not take place with your consent) and the legally required documentation of business contacts are such legitimate interests. We take into account in particular the type of personal data, the purpose of the processing, the circumstances of the processing and your interest in the confidentiality of your personal data as part of the necessary balancing of interests in each case.
8. Deletion of your personal data
We delete your IP address and the name of your internet service provider, which we store for security reasons, after seven days. Otherwise, we delete your personal data as soon as the reason for which we collected and processed the data ceases to exist. Beyond this time, storage will only take place insofar as this is required in accordance with the laws, regulations or other legal provisions to which we are subject in the EU or in accordance with legal provisions in third countries, if an appropriate level of data protection is provided there in each case. Where deleting is not possible in an individual case, the relevant personal data shall be marked with the aim of restricting its future processing.
9. Data subject rights
a. As a person affected by data processing you have the right to information (Article 15 GDPR), correction (Article 16 GDPR), deletion of data (Article 17 GDPR), restricting processing (Article 18 GDPR) and transferring data (Article 20 GDPR).
Online form data protection rights management
b. If you consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. The legality of the processing of your personal data until the withdrawal of consent remains unaffected by the withdrawal. Likewise, further processing of this data on another legal basis, such as for the fulfilment of legal obligations, remains unaffected (see "Legal bases of the processing").
c. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 Section 1 e) GDPR (data processing in the interest of the public) or Article 6 Section 1 f) DSGVO (data processing based on a balancing of interests). If you lodge an objection, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If we process your personal data for the purpose of direct marketing to protect legitimate interests on the basis of balancing of interests, you also have the right to object to this at any time without giving reasons.
d. If possible, please send your claims or declarations to the following email address:
> kundenrechte_mb@daimler.com
e. Should you believe that the processing of your personal data violates legal provisions, you have the right to file a complaint with a competent data protection authority (Art. 77 GDPR).
10. Newsletter
If you subscribe to one of the newsletters offered on our website, the data provided for the registration will only be used for the purpose of sending the newsletter, unless you agree to more extensive usage of the data. You can end the subscription at any time via the unsubscribe option in the newsletter.
11. Central access service of Mercedes-Benz Group AG
With the central access service of Mercedes-Benz Group AG you can log in to all websites and applications of Mercedes-Benz Group AG and its brands connected to this service. The applicable Terms of Use contain special data protection provisions. You can call up these Terms of Use on the respective log-in pages of the connected websites and applications.
12. Data transfer to recipients outside the European Economic Area
a. When using service providers (see section 4. d.) and passing on data with your consent (= approval) to third parties (see section 3.c), personal data may be transferred to recipients in countries outside the European Union ("EU"), Iceland, Liechtenstein and Norway (= European Economic Area) and processed there, in particular USA, India.
b. The following countries are considered by the EU to have an adequate level of protection for the processing of personal data in line with EU standards (so-called adequacy decision): Andorra, Argentina, Canada (limited), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, United Kingdom (UK), United States of America (USA; limited), Uruguay. We agree with other recipients on the use of EU standard contractual clauses, binding corporate rules or other applicable instruments (if any) to create an "adequate level of protection" according to legal requirements. For more information, please use the contact details given in section 9.d. above.
13. Information regarding data protection for the Roadside Assistance product and Service24h
We ask you to click Privacy Notice to view the pdf .
Last update: August 2023
Controller as defined by the General Data Protection Regulation (GDPR):
Auto Sales (MER) Ltd. ("We")
Mosta Road, Lija, LJA 9011 Malta
E-mail: info@autosales.com.mt
Data Protection Officer:
Auto Sales (MER) Ltd.
Chief Officer for Corporate Data Protection
Mosta Road, Lija, LJA 9011 Malta
E-mail: dataprotectionofficer@autosales.com.mt
1. Data Protection
We appreciate you visiting our website and your interest in the products we offer. Protecting your personal data is very important to us. In this privacy statement, we explain how we collect your personal data, what we do with it, for what purposes and on what legal basis we do so, and what rights you have on that basis. We also refer you to the Mercedes-Benz Data Protection Policy: Mercedes-Benz Data Protection Policy.
This Privacy Statement applies exclusively to the process of online appointment scheduling. Our privacy
statement for the use of our websites and the Mercedes-Benz Data Protection Policy do not apply to your activities on the websites of social networks or other providers that can be accessed using the links on our websites. Please read the data protection provisions on the websites of those providers.
The privacy statement below applies in addition to the privacy statement on use of our website and app, which you have already consented to.
2. Collecting and Processing Your Personal Data
You have two options when scheduling an appointment online:
a. You can book an appointment as a guest on our website.
b. You can book an appointment with your Mercedes me account.
We will collect and process your personal data regardless of whether you schedule the appointment as a guest or using your Mercedes me account. If you book an appointment using your Mercedes me account,
you may see various input fields automatically prepopulated with your information.
If you book a service appointment using the online scheduling process, we will collect and process, in particular, the following personal information belonging to you:
· Customer's master data – in particular, the customer's name
· Contact data belonging to the customer – in particular, the customer's address, telephone number and e-mail address
· Vehicle data – particularly, the vehicle identification number (VIN), model, license plate number and kilometer reading
· Any other data you send us using the comment field
You are neither legally nor contractually required to provide us with the data specified above. However, you will not be able to schedule a service appointment unless you enter and transmit the data.
No automated decision-making or profiling will take place on the basis of the data transmitted.
3. Purpose of Use
a. When you book a service appointment online, your personal data will be used for the following
purposes:
· Once your reservation is completed, the data will be shared with select Mercedes-Benz partners so they can schedule and prepare your service appointment.
· The services and prices offered will be matched with your vehicle so they can be displayed on the scheduling page.
· You will be provided with an alternative vehicle selection based on your license plate number instead of the VIN.
· It will enable simplified login based on your VIN (when booking via your Mercedes me account) and the associated sending of a TAN as a security feature.
· It will enable simplified booking by prepopulating the scheduling page using an offer from the preferred Mercedes-Benz partner so that all you need to do is pick a service date.
b. Your data can also be processed for purposes of product development, product monitoring and safety, product defense and quality assurance as well as for risk and cost control.
Mercedes-Benz AG will also process the collected data for the purpose of analysis as part of the development and improvement of products (particularly vehicle parts, vehicle software and services such as Mercedes me connect) as well as of internal processes and systems for the purpose of risk and cost control and purposes of product monitoring and safety and quality assurance.
Furthermore, Mercedes-Benz AG will use your data to conduct typical after-sales and business analytics evaluations (e.g. to verify the cost effectiveness of the services and products offered by MB AG or to determine how many products of a certain type have been sold in a country or to validate its pricing models).
To enable Mercedes-Benz AG to perform the described analyses and evaluations, your data may be combined with other information on the vehicle being serviced, its model, series, features, parts and components already known to Mercedes-Benz AG as well as data collected by Mercedes-Benz AG for the same purpose (e.g. Mercedes me connect, production and delivery information, plus services provided by Mercedes-Benz AG).
The data transmitted may also be used by Mercedes-Benz AG in anonymized form for other purposes of processing – for example, statistics, business analyses and analyses of business and cost control, billing and product improvement in addition to improving our internal and sales processes. In this instance, it will no longer be possible to attribute the data to a specific individual.
Furthermore, Mercedes-Benz AG reserves the right to use the data to defend itself when facing claims asserted against Mercedes-Benz AG or one of our affiliated companies by you or third parties on the basis of a warranty, warranty rights or other (alleged) defect in our products or services (e.g. so that we can prove that a product was not defective, referred to as "product defense").
4. Disclosure of Personal Data to Third Parties, Use of Service Providers
a. We use processors to perform our services. The disclosure of your data to these organizations takes place under strict confidentiality obligations and under the criteria of the GDPR and the German Federal Act on Data Protection.
b. If you book a service appointment online, your personal data will also be shared with your chosen Mercedes-Benz partner for additional planning and preparation for your service appointment.
5. Security
We take technical and organizational security measures in order to protect your information managed by us from being tampered with, lost, destroyed or accessed by unauthorized individuals. We are continuously improving our security measures in line with technological advancements.
6. Legal Bases for Data Processing
a. We collect and process your personal data described in more detail in section 2 in order to initiate a contractual relationship and to fulfill our contractual obligations to you (Article 6, para. 1b, GDPR).
b. We also process personal data for the purpose of exercising our legitimate interests and the legitimate interests of third parties in accordance with Article 6, para. 1f, of the GDPR. Examples of such legitimate interests include maintaining the functionality of our IT systems as well as the (direct) marketing of our own and third-party products and services (if not carried out with your consent), and the legally required documentation of business contacts. As part of the consideration of interests required in each case, we take into account various aspects – in particular, the type of personal information, the purpose of processing, the circumstances of processing, and your interest in the confidentiality of your personal information.
7. Deleting Your Personal Data
We delete your personal information as soon as the purpose for which it was collected and processed has been fulfilled. Beyond this time period, data storage only takes place to the extent made necessary by the legislation, regulations or other legal provisions to which we are subject in the EU or by legal provisions in third-party countries if these have an appropriate level of data protection. Should it not be possible to delete the data in individual cases, the relevant personal data is flagged to restrict its further processing
8. Rights of the Data Subject
a. As a data subject affected by data processing, you have the right to information (Article 15 GDPR), correction (Article 16 GDPR), deletion (Article 17 GDPR), restricted processing (Article 18 GDPR), and data transferability (Article 20 GDPR).
b. If you have consented to the processing of your personal data by us, you have the right to revoke your consent at any time. Your revocation does not affect the legality of the processing of your personal data that took place before your consent was revoked. It also has no effect on the continued processing of the information on another legal basis, such as to fulfill legal obligations (see section titled "Legal Foundation of Processing").
c. Right to Object
For reasons relating to your particular situation, you have the right to file an objection at any time to the processing of personal data pertaining to you that is collected under Art. 6, para. 1e, of the GDPR (data processing in the public interest) or Art. 6, para. 1f, of the GDPR (data processing based on a consideration of interests). If you file an objection, we will continue to process your personal data only if we can document mandatory, legitimate reasons that outweigh your interests, rights and freedoms, or if processing is for the assertion, exercise or defense of legal claims. If we process your personal data for direct marketing based on legitimate interests, you also have the right to object at any time without giving reasons.
d. If possible, please direct your claims or declarations to the following contact address: dataprotectionofficer@autosales.com.mt or Tel: +356 21433601.
e. If you feel that the processing of your personal data is in breach of legal requirements, you have the right to file a complaint with the responsible supervisory authority (Art. 77 of the GDPR).
9. Data Transfer to Recipients outside of the European Economic Area[VT(4]
No data is transferred outside the European Economic Area.
