The controller and service provider is:
WIRTGEN GROUP („we“, „us“ or "Wirtgen Group")
Branch of John Deere GmbH & Co. KG
Reinhard-Wirtgen-Straße 2
53578 Windhagen, Germany
Telefon: +49 (0) 2645-131 0
Telefax: +49 (0) 2645-131 392
E-mail:
info@wirtgen-group.com
Website:
https://www.wirtgen-group.com
You can contact our data protection officer:
Data Protection Officer
c/o WIRTGEN GROUP Branch of John Deere GmbH & Co. KG
Reinhard-Wirtgen-Strasse 2
53578 Windhagen, Germany
E-mail:
datenschutz@wirtgen-group.com
The protection of your personal data is very important to us. We process your data primarily to provide a working and easy-to-use website. Your data will always be processed in accordance with the relevant legal regulations.
We furthermore process your data only if and insofar as this is permitted by statutory provisions. Additional information is available in the following statements.
Every time our website is accessed, our system automatically collects data and information from your computer system. We collect the following data:
This data is stored in the log files of our system. There is no storage of the aforementioned data together with other personal data.
We use this data to secure our IT systems. Furthermore temporary storage is used for error detection and error prevention. The data will not be used for marketing purposes in this context. The legal basis for the temporary storage of data and the logfiles is Art. 6 para. (1) lit. f) of the European General Data Protection Regulation (“GDPR”).
The data is stored until it is no longer necessary in relation to the purposes for which they were collected or otherwise processed. If data is required to deliver the website, the necessity ends when the session ends. Your data will be deleted automatically at the end of the session. If stored in our log files, the data will be erased after seven days at the latest. If the data is stored longer than this, your IP address will be deleted or alienated so it cannot be traced back to you or your internet connection.
The hosting of our website is carried out on our behalf by processors which are acting under our authority and in compliance with GDPR and do not forward your data to third parties without authorization.
For our website we use the font “Avenir” provided by the company Monotype GmbH, Horexstraße 30, 61352 Bad Homburg, Berlin branch: Bergmannstraße 102, 10961 Berlin, Germany. This ensures that the website looks the same for all visitors, regardless of which device and which browser is used.
For this purpose, your personal data will only be processed by us to deliver the website with all headlines to you and personal data will not be transmitted to a third party. Monotype GmbH tracks the number of views of the fonts on our website as well as our data for contractual purposes.
Our website uses "cookies". These are text files that are stored on your computer system. It contains a custom string that identifies your browser the next time you visit the site. When you visit our website, a cookie may be stored on your system.
The following sections to no. 1 ("Obligatory or necessary cookies”), to no. 2 (“Functional cookies"), and to no. 3 ("Targeted or marketing cookies") are meant to explain in detail what types of cookies we use and what data is processed.
Unless other erasure periods are listed in the following explanations, the following applies to the retention period regardless of the type and use of cookies:
You have unrestricted control over the use of cookies. They are stored on your computer and the data is transferred from your computer to our page. By default, most browsers are configured to accept cookies. However, changing the browser settings can disable or restrict the use of cookies. Already saved cookies can be deleted at any time. This can also be done automatically by setting your browser accordingly.
If cookies are generally disabled for our website, you may not able to use all features on our website.
The legal basis for the processing for all types of cookies is therefore Art. 6 para. 1 lit. a) GDPR.
1. Obligatory or necessary cookies
Obligatory or necessary cookies are cookies that are required for the functionality of the online services. They are, for example, used to enable the execution of the online services, to store previous actions (e.g. text entered if you go back to a page within one session), securely design the online services, and to manage the online services (e.g. prevention of fraud). Without these cookies, online services would not function properly, or the WIRTGEN GROUP would not be able to offer certain services.
Legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f) GDPR. The data collected using technically necessary cookies is not used to create user profiles.
If you object to the use of these cookies or if you configure your browser accordingly, our website will not recognize your browser and certain content may not be retrievable or data (e.g. from an input field) may be lost.
The obligatory cookies used by us are session cookies that are automatically deleted at the end of the session.
2. Functional Cookies
Functional cookies are cookies that are not necessary for the execution of online services but facilitate the use of online services by storing certain selected options or offering expanded functions. They are, for example, used to store websites headings or options, e.g. the selection of a language or other online settings (e.g. fonts). These cookies and other technologies may be used to provide requested functions, e.g. displaying a video.
Functional cookies also collect information on how online services are used, among other things the pages that are most frequently retrieved, the browser or operating systems that are used, or from which page the users arrive at the online services, whether a product or link is displayed or used, and which error messages have been generated. This information helps us improve the online services, capture the number of visitors, determine patterns of views, rectify problems within the online services, and improve the design for using the online services.
Some analysis and performance cookies are used in connection with services provided by third-party providers, among them:
Through the gained statistics we can improve our offer and design it more interesting for you as a user. Legal basis in addition to the consent granted by you within the scope of the cookie consent manager is therefore also our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR.
The placed cookie is valid for seven days. Non-anonymized log files on our servers are automatically deleted after 7 days.
3. Targeted or marketing cookies
These cookies collect information on your surfing behavior and your online behavior even across different browsers and devices used by you in order to display advertisement in the online services and other visited sites that could be of interest for you. Your surfing behavior in the online services and your activities on other websites can, for example, be used to derive information about you, which is then used to design advertisement that is more relevant to you (frequently referred to as “interest-based advertisement”). They are also used to limit the display frequency of advertisements and determine the efficiency of advertisement campaigns. They store the information that you have visited the online services (including visited pages and links clicked on) and possibly forward this information to other companies, e.g. advertisers and marketing networks. These cookies are usually placed by third parties. Data collected through functional cookies (e.g. analysis and performance cookies) can also in part be used for advertisement purposes.
4. Management of cookies
Click on the button below in order to access the cookie consent manager of the WIRTGEN GROUP. The cookie consent manager is a browser-cookie-based tool through which you can change the settings regarding certain functional, targeted, or advertisement cookies. The settings for obligatory cookies cannot be changed because they are necessary. The tool communicates the chosen setting to the third-party providers, which then initiate an opt-out. The effects of this setting are described in the cookie policy, privacy policy, and/or data forwarding declaration of the third-party provider.
An opt-out cookie is placed in your browser for the technical implementation of your objection. This cookie serves only to allocate your objection. Please note that for technical reasons, an opt-out cookie is effective only in the browser in which it was placed. If you delete the cookies or use another browser or another terminal device, you have to place the opt-out cookie again.
Change cookie settings: Cookies Preferences
We use Silverstripe to create forms. Your transmitted data is stored on our server for 7 days and is then deleted.
You can contact us through a form on our website or by email. If you enter data in the input fields provided for this purpose, then this data will be transmitted to us and processed by us.
We furthermore process the data that you voluntarily transmit to us.
If you contact us through the provided email address, then the personal data transmitted with your email will be processed (e.g. email address, name, first name, and other voluntary data).
Legal basis for processing the data transmitted is Art. 6 para. 1 lit. f) GDPR as we have a legitimate interest in being able to respond to your message. If contacting through a form or email is connected to the conclusion or performance of a contract, Art. 6 para. 1 lit. b) GDPR serves as an additional legal basis for processing your data. Insofar as processing of personal data is necessary for the fulfillment of a legal obligation incumbent upon us, the legal basis for this is Art. 6 para. 1 lit. c) GDPR.
We process personal data from the input masks or e-mails exclusively for the correspondence with you. We will not forward your personal data to a third party. However, if you have specific questions, your information including your personal data may be forwarded to other WIRTGEN GROUP companies, technical and legal experts, or translators.
You can object to the processing of your personal data by simply sending a message without any requirements as to form to the above-stated contact information.
In these cases, a processing of your message may however not be possible.
If data is required for the fulfillment of a contract or the performance of pre-contractual measures, early deletion may be possible only insofar as contractual or statutory obligations permit such. The respective applicable retention periods must be determined separately for the respective contracts and contractual parties.
When you send your message through the respective form, the following data is additionally stored:
Processing of this data during the sending process is to prevent misuse of the contact form and to ensure the security of our information technology systems. Therefore, Art. 6 para. 1 lit. f) GDPR serves as a legal basis. The personal data additionally collected during the sending process will be deleted after a period of seven days at the latest, unless statutory or contractual purposes permit a longer retention period.
For the operation and provision of this website, we have leased servers from Microsoft Azure. These servers meet various certifications, among them ISO 27001. The Microsoft Corporation (One Microsoft Way, Redmond, Washington 98052, USA) is the operator of these servers.
The servers are located in the European Union as well as United States of America. Insofar as personal data of EU citizens is transferred to computer centers outside of the European Union, these computer centers meet the same level of protection on the basis of standard contractual clauses.
Privacy policy: https://privacy.microsoft.com/en-gb/privacystatement
You can subscribe to our gratuitous newsletter. For this purpose, we process the following data:
Your data is processed with your consent, which you declare by checking a box during the registration process. Art. 6 para. 1 lit. a) GDPR serves as a legal basis. After subscribing, you will receive an email in which we request your confirmation of your subscription. This confirmation is necessary so that nobody can register with foreign email addresses.
Art. 6 para. 1 lit. b) GDPR and Art. 6 para. 1 lit. f) GDPR serve as a legal basis because the processing of data is also necessary to deliver the requested newsletter.
Data will not be forwarded to third parties within the scope of data processing for sending newsletters. The data is used exclusively for sending the newsletter. However, newsletters are send on our behalf by processors in terms of Art. 28 GDPR, which pursuant to Art. 4 No. 10 GDPR are not “third parties” in terms of GDPR.
You are authorized to cancel subscription of the newsletter at any time. Each newsletter contains a corresponding link to unsubscribe. With this we simultaneously enable you to revoke your consent to storage of your data. You can also revoke your consent at any time without requirements as to form to the above stated contact information.
We delete your data as soon as it is no longer necessary for achieving the purposes for which it was collected. Your email address will be stored as long as you subscribe to the newsletter.
Newsletter subscriptions will be recorded in order to verify that the subscription process meets legal requirements. This includes storage of the time of registration and confirmation as well as your IP address. This personal data collected within the scope of the subscription process is generally deleted 7 days after collection.
You can apply for jobs on our website. You can either use the online application tool or send us your up to date CV via e-mail. You can find our vacancies here:
https://www.wirtgen-group.com/career/
In this respect we use the software Umantis Talent Management as well as other services of Haufe-Lexware GmbH & Co. KG, a company of the Haufe Group, Munzinger Straße 9, 79111 Freiburg, which acts as a processor. The processor is bound by our instructions as well as by the GDPR and does not pass on your data to third parties without our instruction.
Haufe hosts the individual application forms. You therefore leave our website and are redirected there if you click on the link to the online application.
If you use the application form, the following personal data will be transmitted to us and processed by us (mandatory information is marked with a *):
We furthermore process the data that you voluntarily submit to us as a message or which is contained in the transmitted attachments.
Prior to sending the data, we ask for your consent for the processing of your data and we refer to this privacy statement. Your data is then processed with your consent. Therefore legal basis is Art. 6 para. 1 lit. a) GDPR.
You have the right to withdraw your consent at any time. You can address your withdrawal at any time, without requirements as regards form, to the above-stated contact information or the processor responsible for your job application. However, a processing of your application may then no longer be possible.
Furthermore, additional legal basis is § 26 BDSG (Federal Data Protection Act).
1. For what purposes is the Compliance Hotline operated?
Section 301 (4) of the Sarbanes-Oxley Act (SOX) requires the establishment of a whistle-blower system. The German Corporate Governance Code (Section 4.1.3) also recommends the establishment of whistleblower systems. Regardless of these statutory requirements, whistleblower systems are also generally considered a suitable component of effective compliance management systems (CMS), since they provide a protected space where employees and third parties can report compliance violations. The Compliance Hotline is such a whistleblower system.
2. On what legal basis do we process your data?
3. Who is involved in the processing of my data?
The following parties are involved in the processing of your data:
If necessary, data is disclosed to:
4. Is the data transferred to a third country?
The data is transferred to the parent company's Center for Global Business Conduct and the service provider, both of which are located in the United States. However, WIRTGEN GROUP has taken precautions to ensure the protection of your data.
5. Which data must and/or may be provided and what happens to it?
Information is provided at the whistleblower’s discretion, which is why it is not possible to determine the precise categories of personal data independently from the individual case.
You can subscribe to our RSS Feeds and receive relevant news on our business. Our posts and articles are being shown in your feed reader. Unlike newsletters this does not require processing of your personal data. If you like to learn more about processing of your data using RSS Feeds please contact the operator of your feed reader.
In order to provide you with virtual maps our website uses Google Maps by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We have integrated Google Maps in compliance with data protection laws. As a result, your data will not be transferred to Google unless you activate the map. By doing this you give your consent regarding the processing of your data according to Art. 6 para. 1 lit. a) GDPR.
By using Google Maps the service operator receives the following data:
This is done regardless of whether Google provides a user account through which you are logged in or do not have a user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish the association with your Google profile, you will need to log out beforehand. Google stores your data as user profiles and uses it for the purpose of marketing, market research, and/or appropriate design of its website.
Such analysis is performed in particular (even for users that are not logged in) to provide appropriate advertisement and to inform other users of the social network of your activities on our website. You may be entitled to a right to object to the creation of these user profiles and to exercise this right to must contact Google.
Further information regarding the scope and purpose of data collection and processing by the plug-in provider is available in the privacy statements of the provider. There you will also find additional information regarding your rights and settings options to protect your privacy: http://www.google.de/intl/de/policies/privacy .
We do not use social media plugins on our websites. The featured icons are hyperlinks to the mentioned social media platforms. By clicking these links you will be redirected to the WIRTGEN GROUP YouTube channel, our Twitter page, and our LinkedIn page. When clicking on these links, the respective page operator will process your personal data. If you are logged in to your respective account, the visit of our website may be associated to your profile.
Additional details are available on our respective privacy statements on the social media page and the information of the platform operator (YouTube: https://policies.google.com/privacy?hl=en ; Twitter: https://help.twitter.com/en/twitter-for-websites-ads-info-and-privacy )
We would like to inform you about your rights regarding the processing of your personal data.
1. Revocation of your consent (Art. 7 para. 3 GDPR)
You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, you will be informed thereof.
2. Right to access (Art. 15 GDPR, Sec. 34 BDSG)
Pursuant to Art. 15 GDPR you have the right to obtain from us confirmation as to whether we process your personal data, and, where that is the case, access to the personal data and the following information:
If personal data are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards ensuring compliance with the provisions of GDPR at these recipients.
3. Right to rectification (Art. 16 GDPR, Sec. 35 BDSG))
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
4. Right to erasure or “right to be forgotten” (Art. 17 GDPR, Sec. 35 BDSG)
You have the right to our erasure of your personal data without undue delay insofar as one of the following grounds applies:
Where we have made the personal data public and are obliged to erase the personal data, we, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers which are processing the respective personal data thereof.
5. Right to restriction of processing (Art. 18 GDPR)
According to Art. 18 GDPR, we may only process data to a limited extent where one of the following applies:
If processing is restricted we are allowed to only store this data. Further processing shall only be permitted with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
You are authorized to withdraw your consent granted in this regard at any time.
6. Notification obligation regarding rectification or erasure of personal data or restriction of processing (Art. 19 GDPR)
We are obliged to inform all recipients of your data of any correction or deletion or any restriction on processing thereof, unless this proves impossible or involves disproportionate effort.
We will inform you about those recipients if you request it.
7. Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where the processing is:
In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to third party, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
8. Automated individual decision-making, including profiling (Art. 22 GDPR)
On our website, your data is not subject to decisions based solely on automated processing (e.g. profiling).
9. Right to object (Art. 21 GDPR)
If we process your data on the basis of a legitimate interest (Art. 6 para. (1) lit. f) GDPR), you have the right to object, on grounds relating to your particular situation. This also applies to profiling based on those provisions. In this case, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or grounds for the establishment, exercise or defense of legal claims.
Where we process personal data for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your data shall no longer be processed for such purposes.
To object, simply address a message without requirements as regards form to the contact information listed on p. 1.
10. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy to which you may be entitled, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the data protection regulations.
Controller and Data Protection Officer
The controller is
WIRTGEN GROUP
Branch of John Deere GmbH & Co. KG
Reinhard-Wirtgen-Strasse 2
53578 Windhagen
Germany
Phone:
+49 (0) 26 45 - 131 - 0
Email:
info@wirtgen-group.com
Internet:
www.wirtgen-group.com
You can also contact the WIRTGEN GROUP data protection officer at any time. Preferably by email to: datenschutz@wirtgen-group.com
Information about data processing
Protecting your privacy is extremely important to us. Protecting your privacy is extremely important to us, so it goes without saying that we comply with all legal provisions governing data protection. In the following, we would like to briefly describe how we process your personal data:
Processing / purpose
WIRTGEN GROUP Portal:
1. Support and provision of business processes
2. Protection and criminal prosecution
Categories
User ID, first name, last name, email address, log data, IP address, essential cookies
Legal basis
Retention period:
Provision of the WIRTGEN GROUP Portal and the generation of log files
Each time you visit our website, our system automatically collects data and information about your computer system. We collect the following data:
(1) Information about the browser type and the version used
(2) Your operating system
(3) Your IP address
(4) User name
(5) Date and time of the visit
(6) Name of files accessed or URLs used
(7) HTTP Referer (name of the website from which your system accessed our website)
(8) HTTP status-code (e.g. ‘OK’ or ‘File not found’)
These data are saved in the log files generated by our system. The data listed above are not saved together with any other personal information.
We utilise these data for the protection of our IT systems. The data in this context are not utilised for marketing purposes. The legal basis for temporary storage of these data and log files is Article 6(1)(f) of the General Data Protection Regulation (hereinafter: ‘GDPR’).
The data will be stored for as long as required for the fulfilment of the purpose for which they were collected. Insofar as the data are necessary for the provision of the website, this necessity lapses as soon as the respective session is closed. Under certain circumstances, the remaining data, which in any case provide no inferences to your person, may be retained for a longer period of time.
Use of cookies
We use cookies on our website. Cookies are text files that are saved in or by your web browser on your computer system. When you visit our website, a cookie may be stored on your system. It contains a unique string that can be used to identify your browser the next time you visit the website.
Insofar as the following information does not specify any other retention periods, the following applies collectively with respect to the retention period, irrespective of the type and purpose of the cookies:
Insofar as the following notices do not specify any other retention periods, the following applies collectively with respect to the retention period, irrespective of the type and purpose of the cookies:
You have complete control over the use of cookies. These are stored on your computer and the data they contain is transmitted to our site. Most browsers are set to accept cookies by default, but by changing your browser settings, you can disable or restrict the transmission of cookies. Any cookies that have already been saved can be deleted at any time. This can also be performed automatically by appropriate configuration of your browser setting. Should you decide to deactivate all cookies for our website, you may no longer be able to fully use all of its features and functions.
Essential cookies
Essential cookies are cookies that are necessary for ensuring the correct function of the online services we provide. Essential cookies are, for example, used to enable the provision of online services, for saving and storing earlier activities (e.g. login times), making online services secure and for the management of the online services (e.g. the prevention of fraud). Without these cookies, the online services would not function correctly and it would not be possible to provide some of the services offered by the WIRTGEN GROUP.
The legal basis for the processing of personal data by the use of essential cookies is Article 6(1)(f) of the GDPR. The data collected by essential cookies are not utilised for the creation of user profiles.
Should you have configured your browser to disable such cookies, our website will not recognise your browser and it may well happen that certain content is not accessible or that data previously entered (e.g. in an input mask or form) will be lost.
In the case of the essential cookies we use, these are so-called ‘session cookies’, which are deleted automatically at the end of each session.
Recipients of your personal data/data transfer to third countries
Within the company, the recipients of your personal data are the specialist departments responsible for processing the data in question.
Parallel to this, we assign the processing of certain information to external service providers. We have entered into agreements with these service providers that assure that the privacy of your personal data is preserved at all times. Insofar as said service providers process your personal data in third countries, they are obligated to maintain appropriate privacy standards in accordance with Articles 45 and 46 of the GDPR, either due to the existence of an adequacy decision on the part of the EU Commission or other suitable guarantees (e.g. standard contractual clauses for the transfer of personal data).
Your personal data may also be transferred to further recipients outside the organisation when this is in the legitimate interest of the company for the fulfilment of legal or contractual obligations.
Your rights in relation to the processing of your personal data
We would like to inform you about your rights in relation to the processing of your personal data. Should you have any questions regarding your rights or wish to assert your rights vis-à-vis our company, please contact our data protection officer at datenschutz@wirtgen-group.com or at the above mailing address, adding ‘Data Protection Officer.’
Right to withdraw your consent (Article 7(3) of the GDPR)
If you have granted your express consent to the processing of your personal data, you may withdraw this consent at any time. Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal. You will be informed of this right of withdrawal before you grant your consent.
Right of access (Article 15 of the GDPR)
You have the right to obtain confirmation as to whether or not we are processing your personal data. If this is the case, you have the right to access this personal data. Where personal data is transferred to a third country or to an international organisation, you also have the right to be informed of appropriate safeguards installed to ensure that recipients fulfil the requirements of the GDPR.
Right to rectification (Article 16 of the GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure, i.e. ‘right to be forgotten’ (Article 17 of the GDPR)
You have the right to immediately obtain the erasure of your personal data without undue delay where one of the following grounds applies:
We will comply with your request to erase the data unless we are required or authorised by law to continue to store and process your data. In addition, we are authorised to retain your data if it is not possible for us to assert, exercise or defend against legal claims without your data.
Right to restriction of processing (Article 18 of the GDPR)
Pursuant to Article 18 of the GDPR, we may process data only to a restricted extent if:
Where processing has been restricted, we are only authorised to store these data. In this case, further processing is only permitted with your consent or for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of an EU member state. You can withdraw your consent in this regard at any time. We will inform you before the restriction of processing is lifted.
Notification obligation (Article 19 of the GDPR)
Please note that we are obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom your personal data has been disclosed. This does not apply if doing so proves impossible or involves disproportionate effort.
We will inform you about these recipients on request.
Right to data portability (Article 20 of the GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to instruct us to transfer this data to a third party in certain cases. This right may not, however, adversely affect the rights and freedoms of others, including our company. If this is the case, we are authorised to refuse to disclose or transfer your data.
Right to object (Article 21 of the GDPR)
If we process your data on the basis of a legitimate interest (Art. 6(1)(f) of the GDPR), you have the right to object to this on grounds relating to your particular situation. This also applies to profiling based on this provision. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms or the processing must serve the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)
You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of the data concerned violates the provisions of the GDPR. This does not affect any other administrative or judicial remedies to which you may be entitled.
For further information
Further information about the processing of personal data in accordance with our privacy policy within the context of our general business activities can be found here .
June 2023
Effective Date: January 1, 2020
In addition to your rights in the
Enterprise Privacy Statement
, California law provides for additional rights for California consumers. You have the right to request a description of the categories and specific pieces of Personal Information about you we have collected and the categories of Personal Information about you that we may disclose for a business purpose to third parties, along with a description of the categories of third parties that may receive that Personal Information. We do not sell your Personal Information.
You also have the right to request that we delete Personal Information about you that we have collected from you. Personal Information that is needed to complete a transaction, provide goods or services you requested, perform our contract(s) with you, or that was reasonably anticipated within the context of our ongoing business relationship with you, or that we can otherwise retain under applicable law, may not be deleted. The Personal Information we collect, use and share is further explained in our
Enterprise Privacy Statement
.
You may exercise these rights by calling us at 1-844-972-2272 (CCPA), through our request form
here
or by mailing your request to Privacy Manager, Center for Global Business Conduct, Deere & Company, One John Deere Place, Moline, Illinois 61265-8089. We will ask you to verify your identity to fulfill these requests.
If you wish to use an authorized agent to submit a request, we will need to verify the authorized agent by confirming that the original requestor has given written permission. We may deny a request from an agent that does not submit proof that they have been authorized by the consumer to act on their behalf.
Please be advised that any California consumer that exercises a right under the California Consumer Privacy Act will not be treated differently or discriminated against for exercising these rights.
This notice is not an agreement. This notice may be amended by us from time to time by updating this notice
Wirtgen Group ExpertAssist (PDF)
Ciber Equipamentos Rodoviarios Ltda. Privacy Notice Brazil (AGPD) (PDF)
Wirtgen Ankara - Privacy statement on protection and processing of customers' personal data (PDF)
Wirtgen Ankara - Privacy statement on protection and processing of suppliers' personal data (PDF)
Wirtgen Ankara - Related Person Application Form (PDF)
Wirtgen China: Supplement to Enterprise Privacy Statement (PDF)
The WIRTGEN GROUP Branch of John Deere GmbH & Co. KG (hereinafter also referred to as “we” or “WIRTGEN”) complies with the requirements of the European Union’s General Data Protection Regulation (hereinafter referred to as the “GDPR”) and other legal requirements governing the protection of personal data. In particular, we implement technical and organizational security measures in line with current security standards.
This privacy information is intended for training participants and other parties whose data we process in connection with our course offering. If you are booking training courses for other participants and individuals at your company, please be sure to provide them with the following privacy information. Collective bargaining agreements, provisions in employment contracts, legitimate interests, or declarations of consent can serve as an appropriate legal basis with respect to the data disclosed to the WIRTGEN GROUP (e.g. training participants’ contact information) and the data processed by the relevant WIRTGEN GROUP company as the controller. We may provide you with additional privacy information in other situations in which we contact you or process your data, and you should take note of this information as well.
The purpose of the following privacy information is to provide you with details about how WIRTGEN processes personal data within the scope of our course offer, as well as about your rights as a data subject:
Controller & Data Protection Officer
The controller is:
WIRTGEN GROUP
Branch of John Deere GmbH & Co. KG
Reinhard-Wirtgen-Straße 2
53578 Windhagen
Germany
Phone: +49 (0) 2645 131 – 0
Fax: +49 (0) 2645 131 – 392
Email:
info@wirtgen-group.com
Internet:
www.wirtgen-group.com
You can also contact the WIRTGEN GROUP data protection officer at any time. The best way is to send an email to datenschutz@wirtgen-group.com .
Protecting your privacy is extremely important to us, so it goes without saying that we comply with the applicable legal provisions governing data protection. In the following, we would like to briefly describe how we process your personal data:
QUICK REFERENCE
Processing/Purpose:
Wirtgen Group training courses
Categories: Name, email address, photo (optional), title, phone number, country, language, log data (IP address, timestamp, date)
Legal Basis:
Recipients: Affiliated WIRTGEN GROUP companies, IMC AG (Learning Suite), VITERO (web conferencing and live e-learning), Microsoft (collaboration software: Teams)
Duration of Storage: We store your data for a period of 5 years.
In this document, the term “personal data” refers to personal data as defined in Article 4(1) of the GDPR. This includes any information relating to a natural person and that can be used to directly or indirectly identify that person.
Within the scope of providing training, we generally process contact information such as the title, name, telephone number, photo (optional), IP address (web-based learning platform), and the email address of contacts and training participants, as well as data relating to content and skill levels that is generated in connection with participating in training (e.g., training results, reports, certificates), and other accompanying data (e.g., training date, hotel booking request).
In this context, you must provide the personal data that is required to conduct our training courses, including to fulfill the associated contractual obligations, as well as to comply with legal obligations. We will inform you of the data that this includes in a suitable manner in each individual case (e.g. by identifying optional fields in forms).
We usually obtain your personal data from you yourself or from your employer as our business partner, in particular from information provided during the training registration process.
Our training platform uses cookies. Cookies are text files that are saved in or by your web browser on your computer system. When you visit our website, a cookie may be stored on your system. It contains a unique string that can be used to identify your browser the next time you visit the website.
The length of time that a cookie remains on your device depends on the type of cookie. We use two types of cookies on our websites. Session cookies are temporary cookies that are saved only while you are using the website (or, more precisely, until you close your browser after using the website). Session cookies help our websites remember what you selected on the previous page without requiring you to re-enter the information. Persistent cookies remain on your device even after you have visited our website. Persistent cookies help us identify you as a unique visitor, but do not contain information that can be used to identify you to another person.
Insofar as the following information does not specify any other retention periods, the following applies collectively with respect to the retention period, irrespective of the type and purpose of the cookies:
You have full control over the use of cookies. These are stored on your computer and the data they contain is transmitted to our site. Most browsers are set to accept cookies by default, but by changing the browser settings, you can disable or restrict the transmission of cookies. Any cookies that have already been saved can be deleted at any time. This can also be performed automatically by configur-ing your browser accordingly.
Please note that if you deactivate cookies on our training platform, you may no longer be able to fully use all of the website’s features.
Detailed information on the respective cookies can be found here:
https://etraining.services.wirtgen-group.com/ilp/pages/cookiepolicy.jsf
As a company, we process personal data within the scope of providing training on the basis of one of the legal bases specified below:
a) Consent from the Data Subject (Article 6(1)(a), Article 7 of the GDPR)
Within the scope of providing training, WIRTGEN processes personal data on the basis of the informed consent of the data subject when it comes to certain activities. In the event that WIRTGEN processes personal data on the basis of your consent, the specific purposes of processing will be specified in the content of the respective declaration of consent.
b) For the Performance of a Contract (Article 6(1)(b) of the GDPR)
Personal data is processed for the performance of a contract with a natural person or in order to take steps prior to entering into a contract. The scope and details of such data processing are specified in the respective contract that we enter into directly with you in each individual case and, if applicable, in the associated terms and conditions.
c) Compliance with a Legal Obligation (Article 6(1)(c) of the GDPR)
WIRTGEN is subject to legal requirements that may result in an obligation to process personal data. On the basis of these requirements, WIRTGEN is, in particular, obligated to ensure that data is retained properly, especially in accordance with the German Fiscal Code (abbreviated AO in German) and the German Commercial Code (abbreviated HGB in German), and archives documents in corresponding IT systems and, if necessary, also in paper form.
d) For the Purposes of Our Legitimate Interests (Article 6(1)(f) of the GDPR)
The WIRTGEN GROUP processes personal data within the scope of general business operations and for the purpose of providing services to our customers on the basis of our legitimate interests, except where such interests are overridden by the interests or fundamental rights of the data subject. A specific interest of the WIRTGEN GROUP in this respect lies primarily in the performance of our contractual obligations vis-à-vis our customers. As a general rule, the WIRTGEN GROUP processes personal data provided by customers only to the extent that this is actually necessary for the provision of services.
In compliance with legal obligations, personal data may be disclosed to the following recipients:
When integrating service providers into WIRTGEN’s data processing processes, WIRTGEN’s stringent data protection standards are contractually imposed on the service providers. In the case of contractual processing relationships, both parties enter into data protection agreements in accordance with the legal requirements of Article 28 of the GDPR.
In certain cases, we may also transfer your data to third parties, i.e. partners with whom we collaborate outside of a contractual processing arrangement. Such partners provide their services (e.g. payment services such as PayPal) as controllers in their own right; the processing of your data by these partners is governed solely by their privacy policies.
We would like to inform you about your rights in relation to the processing of your personal data. If you have any questions about your rights or wish to assert your rights vis-à-vis our company, please contact our data protection officer at datenschutz@wirtgen-group.com or at the above mailing address, adding “Data Protection Officer.”
Right to Withdraw Your Consent (Article 7(3) of the GDPR)
If you have granted your express consent to the processing of your personal data, you may withdraw this consent at any time. Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal. You will be informed of this right of withdrawal before you grant your consent.
Right of Access (Article 15 of the GDPR)
You have the right to obtain confirmation as to whether or not we are processing your personal data. If this is the case, you have the right to access this personal data. Where personal data is transferred to a third country or to an international organization, you also have the right to be informed of the appropriate safeguards pursuant to the GDPR relating to the transfer.
Right to Rectification (Article 16 of the GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to Erasure, i.e. “Right to Be Forgotten” (Article 17 of the GDPR)
You have the right to obtain the erasure of your personal data without undue delay where one of the following grounds applies:
We will comply with your request to erase the data unless we are required or authorized by law to continue to store and process your data. In addition, we are authorized to retain your data if it is not possible for us to assert, exercise, or defend against legal claims without your data.
Right to Restriction of Processing (Article 18 of the GDPR)
Pursuant to Article 18 of the GDPR, you have the right to obtain from us the restriction of processing where one of the following applies:
Where processing has been restricted, we are only authorized to store this data. In this case, further processing is only allowed with your consent or for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of an EU member state. You can withdraw your consent in this regard at any time. We will inform you before the restriction of processing is lifted.
Notification Obligation (Article 19 of the GDPR)
Please note that we are obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom your personal data has been disclosed. This does not apply if doing so proves impossible or involves disproportionate effort.
We will inform you about these recipients if you request it.
Right to Data Portability (Article 20 of the GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to have us transfer this data to a third party in certain cases. This right cannot adversely affect the rights and freedoms of others, including our company, however. If this is the case, we are authorized to refuse to disclose or transfer your data.
Right to Object (Article 21 of the GDPR)
If we process your data on the basis of a legitimate interest (Art. 6(1)(f) of the GDPR), you have the right to object to this on grounds relating to your particular situation. This also applies to profiling based on this provision. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights, and freedoms or the processing must serve the establishment, exercise, or defense of legal claims.
Right to Lodge a Complaint with a Supervisory Authority (Article 77 of the GDPR)
You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data violates the provisions of the GDPR. This does not affect any other administrative or judicial remedies to which you may be entitled.
It may become necessary to amend the content of this privacy information from time to time. As such, we reserve the right to amend this information at any time. We will also publish the amended version of the privacy information here and you can further request it from us at any time (see the contact details of the data protection officer above).
Version 1.3 (2021)
As part of our activities at trade shows, the WIRTGEN GROUP produces photos and videos for visual documentation and communications. Since we cannot completely rule out the possibility that it may be possible to identify you directly or indirectly in such photos or videos, these photos and videos represent personal data within the terms of the European Union’s General Data Protection Regulation (GDPR).
As such, we would like to provide you with the following information about how your personal data is processed in connection with photos/videos shot at our trade show booth and about your rights as a data subject.
We may provide you with further privacy policies in other situations in which we contact you or process your data, and you should also take note of these.
WIRTGEN International GmbH (hereinafter referred to as “we” or the “WIRTGEN GROUP”)
Reinhard-Wirtgen-Strasse 2
53578 Windhagen
Germany
Phone: +49-26-45-131-0
Fax: +49-26-45-131-392
E-mail:
info@wirtgen-group.com
Website:
www.wirtgen-group.com
Legal Information:
www.wirtgen-group.com/de/service/impressum/
You can contact our privacy officer by e-mail at international.datenschutz@wirtgen-group.com or by postal mail by adding “The Privacy Officer” to our mailing address.
Taking photographs and recording videos of our trade show booth and activities for PR and advertising purposes may also involve the processing and publication of your personal data, in particular photos and videos of you.
We generally only take portraits or close-ups of you if you have given us or the photographer we have hired your consent to do so, which can also take the form of behaving in a manner that clearly expresses such consent (e.g. smiling into the camera). In this respect, the legal basis is normally your consent (Article 6(1)(a) of the GDPR), whereby in individual cases such photos can also be taken on the basis of our legitimate interests in documenting our events and carrying out associated public relations activities (Article 6(1)(f) of the GDPR). You can withdraw your consent at any time without specifying any reasons (the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, however) or object to the associated processing (see section 6 below).
In addition, we also take photos that provide an overview of our booth as well as group photos that do not include a portrait or close-up of any specific individual. Doing so is primarily based on our legitimate interest in documenting our events and carrying out associated public relations activities (Article 6(1)(f) of the GDPR). If you have any issues with us taking such overview or group photographs that include your likeness, you may object to our doing so (see section 6 below). We will then review on an individual basis whether your legitimate interests as a data subject outweigh our interests. We will normally accept your objection – unless the WIRTGEN GROUP has overriding business interests – and remove the photographs in question that contain your likeness and not use them in the future.
The production of photos/videos is also generally not prohibited due to the fact that your ethnic background, religion, or health (e.g. skin color, headwear, glasses) may be discernible. Under no circumstances, however, do we process the photos/videos in order to specifically obtain such information. In particular, we will not perform any automated scans to find such information.
The WIRTGEN GROUP would like to point out that photos/videos posted on the Internet and in social networks can be accessed worldwide and found using search engines. As such, the possibility exists that the photographs and videos may be distributed and used by third parties that the WIRTGEN GROUP has no control over.
We will only transfer your personal data to external third parties if this is necessary to protect our legitimate interests, if another legal basis exists, or if we have your consent to do so. External recipients may, in particular, include service providers (e.g. hosting providers or photo/video studios) or subsidiaries of the WIRTGEN GROUP or of Deere & Company, John Deere Place, Moline, Illinois, 61265, USA. We carefully select and regularly review all processors (e.g. photographers); they are only authorized to use the data for the specified purposes and in accordance with our instructions on the basis of a Data Processing Agreement pursuant to Article 28 of the GDPR.
If data is transferred to recipients whose registered office or location for data processing is not located in a member state of the European Union (EU) or in another nation party to the Agreement on the European Economic Area (EEA), we will ensure that, prior to the transfer, the recipient maintains an adequate level of privacy or you have granted your consent to the data transfer, except in exceptional cases permitted by law.
If photographs or videos are posted to the pages of the WIRTGEN GROUP and its affiliated companies on social networks, they may be transmitted to a country outside the EU/EEA, in particular to the United States. The social networks we use and their parent companies listed below are certified in accordance with the EU-U.S. Privacy Shield Agreement and are therefore obligated to comply with the provisions of the GDPR.
We do not have any control over the use of your data by these social networks, however. We can neither determine nor influence the extent to which, where, and for how long the data will be stored, to what extent any existing obligations to delete such data will be fulfilled, what analyses of the data will be conducted and links to the data will be created, and to whom the data will be transfered. Details about the providers of the social networks we use and about how they process data can be found in the following information:
In this context, please also note our supplementary privacy policies for our respective pages and fan sites on the aforementioned social networks.
We store your personal data for a period of 3 years.
We will delete your personal data prior to the end of this period if we are required to do so by law.
In the event of an objection, we will no longer process your personal data unless further processing is permitted or even mandatory according to the applicable legal provisions (e.g. within the framework of our obligations to retain data under commercial and tax law). We will normally accept your objection – unless the we have overriding business interests – and remove the photographs in question that contain your likeness and not use them in the future.
You have numerous rights as a data subject, including but not limited to the following:
Furthermore, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal (Article 7(3) of the GDPR).
Last but not least, you have the right to lodge a complaint with a supervisory authority (Article 77 of the GDPR).
To exercise any of the aforementioned rights, please contact us by e-mail at international.datenschutz@wirtgen-group.com or by postal mail at the address specified in section 1 above.
Updated: September 2022 (Subject to change without notice)
Please click here for WITOS contract terms & conditions
Social media profiles
I. Controller name and address
The controller within the meaning of the European Union’s General Data Protection Regulation is:
WIRTGEN GROUP (hereinafter referred to as: ‘we’ or ‘Wirtgen Group’)
Branch of John Deere GmbH & Co. KG
Reinhard-Wirtgen-Straße 2
53578 Windhagen, Germany
Phone: +49 (0) 2645-131 0
Fax: +49 (0) 2645-131 392
Email: info@wirtgen-group.com
Website: https://www.wirtgen-group.com
II. Contact details of the data protection officer
You can contact our data protection officer at:
Data Protection Officer
c/o WIRTGEN GROUP Branch of John Deere GmbH & Co. KG
Reinhard-Wirtgen-Strasse 2
53578 Windhagen, Germany
Email: datenschutz@wirtgen-group.com
III. Data processing by Wirtgen
We maintain online profiles on social networks and process user data in this context in order to communicate with users who are active on these platforms or to provide information about our company. If you have an account on one of the networks listed below, are logged in and choose to follow our page, you will be visible to us as a follower. As a result, we will process the personal data contained in your profile name and profile picture.
We process the same data when you like, comment on or share a post of ours, even if you do not follow our page.
Furthermore, we process the same data if you send us a message via the messaging feature. In this context, we additionally process the data that you voluntarily provide to us in your messages.
In addition, we receive anonymised statistical data about the users of these pages through features such as ‘Facebook Insights,’ a service provided by Facebook that you cannot opt out of. This data is collected with the help of cookies that Facebook saves on your system. These cookies each contain a unique user code that may also be linked to your profile on the platform. Such tools are also used by other social networks.
This data is processed on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR.
We do not perform any further analysis of your data beyond the aforementioned. We store your data as long as you follow our page. If you stop following our page, we will no longer process your data.
IV. Data processing by the operators of the social networks
We would like to expressly inform you that user data may be processed outside the territory of the European Union. This may result in privacy risks for users as data subjects that could, for example, make it more difficult to enforce the rights of data subjects.
Furthermore, user data on social networks is usually processed by the platform operators for market research and advertising purposes. For example, they may create usage profiles based on user behaviour and the resulting interests of the users. These usage profiles can, in turn, be used, for example, to serve adverts to users within and outside the networks that presumably correspond to the users’ interests. Cookies are usually saved on the users’ computers for these purposes, which are then used to store the user’s usage behaviour and interests. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
For a detailed explanation of the respective forms of processing and the options to opt out, please refer to the privacy statements and information provided by the operators of the respective networks.
In addition, in the case of requests for information and to exercise your rights as a data subject, we would like to point out that the most effective way to exercise these rights is to contact the providers directly. Only the providers have access to their users’ data and can take appropriate measures and provide information directly. If you still need help, feel free to contact us, however.
Services used and service providers:
website: https://www.linkedin.com ;
privacy policy: https://www.linkedin.com/legal/privacy-policy ;
opt out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
parent company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
privacy policy: https://twitter.com/en/privacy ;
(settings) https://twitter.com/personalization
parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
privacy policy: https://policies.google.com/privacy ;
opt out: https://adssettings.google.com/authenticated
website: https://www.facebook.com ;
privacy policy: https://www.facebook.com/privacy/explanation ;
opt out: https://www.facebook.com/settings/cookie
V. Your rights in connection with the data collected by Wirtgen
Below we would like to provide a summary of your rights under the General Data Protection Regulation.
1. Right to withdraw consent under applicable privacy law (Article 7(3) of the GDPR)
You have the right to withdraw consent granted under applicable privacy law at any time. Please note that withdrawing your consent does not affect the lawfulness of processing on the basis of your consent before its withdrawal. You will be informed of this right before you grant your consent.
2. Right of access (Article 15 of the GDPR)
Under Article 15 of the GDPR, you have the right to request confirmation from us as to whether we are processing personal data concerning you. Where this is the case, you have a right of access to this personal data and to the following information:
If personal data is transferred to a third country or to an international organisation, you also have the right to information about the appropriate safeguards in place to ensure that these recipients also comply with the provisions of the GDPR.
3. Right to rectification (Article 16 of the GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
4. Right to erasure, i.e., the ‘right to be forgotten’ (Article 17 of the GDPR)
You have the right to obtain the erasure of your personal data without undue delay where one of the following grounds applies:
If we have made your personal data public and are obligated to erase the data, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers that you have requested the erasure of such personal data.
5. Right to restriction of processing (Article 18 of the GDPR)
Pursuant to Article 18 of the GDPR, you have the right to obtain from us the restriction of processing where one of the following applies:
Where processing has been restricted, we are only authorised to store this data. Any further processing is then only permitted with your consent or for the establishment, exercise, or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
You can withdraw your consent granted in this context at any time.
We will inform you before the restriction of processing is lifted.
6. Notification obligation (Article 19 of the GDPR)
We are obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about these recipients if you request it.
7. Right to data portability (Article 20 of the GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to have us transfer this data to a third party, provided that:
In this context, you can instruct us to transfer your personal data directly to the third party, insofar as doing so is technically feasible and does not affect the rights and freedoms of others.
8. Automated individual decision-making, including profiling (Article 22 of the GDPR)
We do not process your personal data in any way that is based solely on automated processing, including profiling.
9. Right to object (Article 21 of the GDPR)
If we process your data on the basis of a legitimate interest (Art. 6(1)(f) of the GDPR), you have the right to object to this on grounds relating to your particular situation. This also applies to profiling based on this provision. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms or the processing must serve the establishment, exercise, or defence of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object, at any time, to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is conducted in conjunction with such direct marketing.
If you object to the processing of your personal data for direct marketing purposes, we will cease to process your personal data for this purpose.
You can object to such processing by simply sending a brief message to the contact details of the data protection officer listed above.
10. Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)
You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data violates the provisions of the GDPR. This does not affect any other administrative or judicial remedies to which you may be entitled.