DEKRA wants you to feel confident about how we process your personal data.
If you are a customer or an individual who works or has worked for a company that is a customer or business partner of ours, we may process personal data about you.
The controller of your personal data is DEKRA Automotive, company registration no. 556709–9170.
The personal data we process and the purposes of the processing vary depending on your relationship with us. Below you will find a description of the most common personal data we process and the purpose of the processing.
Purposes of the processing
We process your personal data when necessary to enable:
- Provision of our products and services (including providing access to information about inspection items, inspection times, etc.)
- An up-to-date register of customer representatives in our CRM system
- Use of our customer-related IT services and applications
- Advertising and marketing communications
- Customer surveys
- Management and follow-up of our contractual obligations.
We only process your personal data if the processing is permitted under applicable data protection legislation. This means, among other things, that we must have a so-called legal basis for the purposes of the processing, which for us mainly means one of the following bases:
- Performance of a contract
- Compliance with legal obligations and exercise of rights
- Legitimate interests (more information about the balancing of interests can be found in our full Privacy Policy for customers, business partners and their representatives)
- Consent.
Google Analytics 4
To the extent that you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there.
We use the technical enhancement “Google Signals”, which makes it possible to link an individual website visitor to different devices. However, this only happens if the visitor has logged in to a Google service when visiting the website and has also enabled the “personalised advertising” option in their Google account settings.
IP address anonymisation is enabled. Due to IP address anonymisation, your IP address will be shortened by Google within the member states of the European Union or in another state that is a party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Purpose and legal basis for the processing
On behalf of the owner of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.
Retention period
The data sent by us that is linked to cookies is automatically deleted after 14 months. Deletion of data whose retention period has been reached takes place automatically once a month.
Recipients
Recipients of the data are/can be:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Article 28 of the GDPR).
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Alphabet Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may gain access to the data stored by Google.
Transfer to third countries
Where data is processed outside the EU/EEA and there is no level of data protection equivalent to the European standard, we have entered into EU Standard Contractual Clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is headquartered in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not have the right to the same legal remedies against access by authorities.
Right to withdraw consent
You may withdraw your consent at any time with effect for the future by changing the settings for your Cookies. The lawfulness of the processing carried out on the basis of consent up to the withdrawal is not affected.
You can also prevent the storage of cookies by changing your browser settings. However, if you configure your browser to reject all cookies, this may result in limited functionality on this and other websites. In addition, you can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google and the processing of this data by Google by
a. not giving your consent to the setting of cookies, or
b. downloading and installing the browser add-on to disable Google Analytics here
For more information about the Google Analytics Terms of Service and Google’s privacy policy, please visit the following links:
Microsoft Clarity
Provided that you have given your consent, a tracking tag will be placed by Microsoft Clarity. The responsible party for users within the EU/EEA and Switzerland is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Scope and purpose of the processing
Microsoft Clarity uses cookies and similar technologies to analyse how you use our website. This includes collecting information about user behaviour and their devices, such as IP addresses (anonymised), screen sizes, device types, browser information, locations (country only), preferred languages and mouse events (movements, position, clicks). Text that you enter is not recorded by us. This data helps us create heatmaps and session recordings that show scrolling, cursor movements and clicks/taps, providing a visual representation of website usage patterns and helping us improve the website’s design and functionality.
The legal basis for this data processing is your consent in accordance with Article 6(1)(a) of the GDPR.
Retention period
Recording data is stored for 30 days. Any tagged or favourite recordings are stored for 13 months. Heatmap data is stored for 13 months.
Transfer to third countries
Microsoft Corporation, which operates Microsoft Clarity, is based in Washington, USA. Data transfer to the USA and access to stored data by US authorities cannot be ruled out. The European Commission’s adequacy decision of 10 July 2023 considers the USA to be a safe third country under data protection law. Data transfer to the USA is also based on the EU Commission’s Standard Contractual Clauses. More information is available here.
Withdrawal
You may withdraw your consent at any time with effect for the future by changing your DATA PROTECTION SETTINGS. The lawfulness of the processing based on consent before it was withdrawn is not affected. You can also prevent the storage of cookies by changing your browser settings. Blocking all cookies may limit the functionality of this and other websites.
For more information, please visit Microsoft Clarity’s Terms of Service and Microsoft’s privacy policy.
Who we share your personal data with
DEKRA is part of a global group with offices and operations in several countries. Your personal data may therefore be transferred and made available to other companies within our group. We may also disclose the data to authorities where required by law, regulation or an official decision, as well as to our trusted third-party suppliers.
When we disclose your data to a third party, we enter into data processing agreements where required and take other appropriate measures to ensure that your personal data is processed in a manner consistent with applicable legislation.
Our aim is always to process your personal data within the European Union (EU)/European Economic Area (EEA). If, despite this, we need to transfer your personal data outside the EU/EEA, we are obliged to ensure that the transfer takes place in accordance with applicable data protection legislation before the data is transferred, for example by ensuring that the country to which the data is transferred meets the requirements for an adequate level of protection under the European Commission’s decision, or by ensuring that the transfer is covered by appropriate safeguards, such as Standard Contractual Clauses adopted by the European Commission.
How long we retain your personal data
We store your personal data for as long as required to fulfil the purposes for which the data was collected. The period is determined, among other things, with regard to the personal data in question, contract periods and obligations, and legal reporting requirements.
Your rights
You have rights in relation to us and our processing of your personal data. This includes, among other things:
- The right to access our processing
- The right to rectification of incorrect information
- The right to erasure (if, for example, the data is not needed for the purposes for which it was collected, or if the processing is based solely on your consent and you withdraw your consent)
- The right to object to the processing of your personal data for direct marketing
- The right to withdraw consent given
- The right to restriction in certain situations
- The right to data portability.
To exercise your rights, please contact us, preferably by email. You will find contact details below.
If you believe that your data is being processed in a way that violates existing provisions, please also report this to us as soon as possible. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
This notice contains basic information about how we at DEKRA process your personal data.
Contact details
Address:
GDPR Officer
DEKRA Automotive AB
Hemvärnsgatan 11B
171 54 Solna, Sweden
Email:
gdpr.industrial.se@dekra.com