With the following statement, we fulfill our legal obligation to inform you and provide information about the storage of data, the type of data, its purpose, and our identity. We also notify you about the initial transmission and the type of data transmitted.
1. Subject of Data Protection
The subject of data protection is personal data. This refers to individual details about the personal or factual circumstances of a specific or identifiable natural person — such as name, postal address, email address, but also usage data such as the IP address of a computer.
2. Automatic Anonymous Data Collection, Processing and Use / Use of Cookies
Every time you visit our website, information is automatically transmitted to our web server by the internet browser installed on your device (computer, laptop, tablet, smartphone). This information is temporarily stored in a so-called log file. The following data is collected without any action on your part and stored until automatically deleted: browser type and version, operating system of your device, referrer URL (source of a link) or requesting domain, IP address (hostname of the computer used), device ID or individual device identifier and device type as well as the name of the access provider, time of the server request, name of the retrieved file and amount of data transferred as well as the date and time of the retrieval including a notification of successful retrieval, and your browser history data and standard web log information.
This data cannot be attributed to specific individuals. It is not merged with other data sources. We use this data to analyze and resolve any technical issues and/or misuse of our website. The legal basis for this is Art. 6(1)(f) GDPR (balancing of interests — based on our legitimate interest in operating this website as smoothly as possible, ensuring a seamless connection and convenient use of our website, and conducting system security and stability evaluations).
A cookie is a small text file placed on your hard drive by a website. Its primary purpose is to store information about your visit — for example, whether you have consented to the display of videos or online maps — so you do not have to configure these settings every time. The cookies on our website do not collect any personal data about you. You can disable the use of cookies at any time through your browser settings.
In most web browsers, the settings function in the menu bar allows you to configure your browser so that it no longer accepts new cookies or disables cookies already received. However, this may impair certain functions of the website. If you wish to reduce the use of cookies, ensure that every computer and browser you use has the desired level of protection. We only use essential (necessary) cookies for this application.
2.1 Cookie Types and Functions
Temporary cookies (also known as session cookies) are deleted when you close your browser. Permanent cookies remain stored even after you close your browser, allowing us to recognize when you visit our website again. First-party cookies are set by us directly. Necessary cookies are required for technical reasons, such as security, to enable browsing on our website. Customer login cookies are required to log in to the protected area of our website and use DAT online applications. Convenience cookies require your consent in order to use certain special services on our website without restriction, for example to watch embedded videos or view online maps.
2.2 Legal Basis for the Use of Cookies
When you visit our website for the first time, we ask for your consent to use cookies. You can decide individually which cookies you accept and whether to expand these settings later via the cookie banner that appears on your first visit. If you consent to the use of cookies, this consent serves as the legal basis under Art. 6(1)(a) GDPR. Additionally, our legitimate interest under Art. 6(1)(f) GDPR applies to the economic operation of our online offering and its continuous improvement. You may withdraw your consent at any time — for example, by adjusting your browser settings to disable cookies, or by opting out of statistical cookies via the relevant section of this privacy policy.
2.3 Services Used for Reach Measurement
Matomo
All information we collect about your usage behavior is stored exclusively on our own servers (“self‑hosting”) and is not shared with third parties. We use the collected data solely for tracking purposes. The server location is Germany. The cookies used to track your visits have a maximum storage duration of 13 months.
Typically, we record your visits to our website via cookies. If you do not consent to cookie-based tracking, we initially store your visit using a so‑called “digital fingerprint,” which is saved in an anonymized form. Your digital fingerprint consists of your anonymized and pseudonymized IP address combined with your browser settings. It is not possible for us to draw conclusions about your identity. In addition, your digital fingerprint changes every 24 hours. This means we are not able to analyze your browsing behavior on our website over multiple days. Likewise, we cannot create user profiles. Furthermore, your browsing behavior is not tracked across different websites of external providers.
2.4 Additional Embedded Services and Functions
Kameleoon
We use the services of Kameleoon to gain a better understanding of how you use our website. For this purpose, we display website content with slight variations (so‑called A/B testing) and analyze usage. Personalized versions of our website can also be shown to different user groups. Based on this user feedback and click‑tracking results, we can optimize our online presence, make our online forms even clearer, and make our website more engaging and interesting for you as a user. This constitutes our legitimate interest under Art. 6(1) sentence 1 lit. f GDPR.
Kameleoon does not store any personal data. IP addresses are not saved; instead, a randomly generated ID is used. This complete anonymization and pseudonymization ensures a higher level of data protection. Kameleoon is committed not to pass on or otherwise use the data collected on our website.
Information about the service provider and address:
12 rue de la Chaussée d'Antin - 75009 Paris
France.
Server location: Germany.
Information on GDPR compliance can be found here: https://www.kameleoon.com/de/compliance/dsgvo.
Legal Basis for Using Kameleoon under the GDPR
When you visit our website for the first time, our cookie banner asks whether you accept the cookies required for using Kameleoon. If you consent, this constitutes consent under Art. 6(1) sentence 1 lit. a GDPR. In addition, we rely on our legitimate interests under Art. 6(1) sentence 1 lit. f GDPR.
Your Right to Be Forgotten
Kameleoon enables the deletion of all personal data within 72 hours.
Withdrawal of Your Consent / Objection / Opt‑out
Would you like to be excluded from Kameleoon’s data collection? Please click the following link:
Deactivate Kameleoon services
[In the cookie box that opens, simply remove the checkmark.]
If you withdraw your consent, a cookie is automatically created that disables Kameleoon’s data collection and deactivates the solution. You will be excluded from future Kameleoon tests.
Please note: If you delete your browser cookies, you must click the link above again.
Good to Know
If you withdraw your consent, your personal data related to the use of Kameleoon will not be processed — not even on the basis of a potential balancing of interests between your consent under Art. 6(1) sentence 1 lit. a and our legitimate interest under Art. 6(1) sentence 1 lit. f GDPR.
3. Voluntary Personal Data Collection, Processing and Use
In general, the use of this website does not require the collection, use, or processing of personal data, and we do not do so. Data collection, processing, or use only occurs if you voluntarily provide your personal data, which may be necessary in the following cases.
3.1 Registration
Concluding a contract requires prior registration, for which personal data must be provided. The following personal data is requested during this process: name, first name, address, company name, email address, and telephone number. If you submit your data as part of a contact request, we assume that consent exists under Art. 6(1)(a) and Art. 7 GDPR. If we can determine from your contact request that you are seeking a business relationship, we assume a pre-contractual relationship under Art. 6(1)(b) GDPR.
3.2.1 Newsletter and Necessary Emails from DAT
If you wish to receive our newsletter, we require a functioning email address assigned to you as well as additional personal data that allows us to verify that you are the owner of the provided email address. The processing of your data is carried out on the basis of Article 6(1)(f) GDPR. You may withdraw your consent to the storage of your personal data, your email address, and its use for sending the newsletter at any time. You may also receive necessary emails from us regarding the progress of training courses, seminars, and events. Unlike newsletters, you cannot unsubscribe from these.
3.2.2 DAT Akademie Newsletter
The DAT Akademie Newsletter is sent primarily on a monthly basis and contains information about the DAT Akademie and its training offerings. The newsletter is free of charge and is intended for individuals aged 16 and over.
3.2.2.1 Newsletter Registration and Double Opt-In Procedure
When you sign up for the DAT Akademie Newsletter, we collect your personal email address (mandatory field) as well as your first name, last name, and salutation in the registration form. These are the so-called master data. This allows us to address you personally in the newsletter. You will of course also receive the newsletter if you leave these optional fields blank. We do not share this data with third parties. We are legally required to be able to demonstrate that you yourself signed up for our newsletter, meaning we must prove that valid consent was given. We verify this by sending you a confirmation email after you submit the registration form. If you are the legitimate email owner, you click on the confirmation link, thereby providing a second consent (double opt-in) to subscribe to the newsletter. This also prevents third parties from subscribing you to the newsletter. Your newsletter registration is stored with us as registration data: time of registration, IP address, email address, and click on the confirmation link. Lawful consent in accordance with the GDPR, Art. 6(1)(a), is thus ensured. The logging of registration data corresponds to our legitimate interest in ensuring proper operations and an efficient and secure newsletter delivery platform. To protect the registration form from bot spam, we use the service of Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany, via our delivery service provider Inxmail GmbH. Their privacy policy for end users can be viewed at https://friendlycaptcha.com/de/legal/privacy-end-users/. The use of this service is based on a legitimate interest; the legal basis is therefore Art. 6(1)(f) GDPR.
3.2.2.2 Newsletter Delivery Service Provider
We send the newsletter via the service provider Inxmail GmbH, Wentzingerstraße 17, 79106 Freiburg. Website: www.inxmail.de. Their privacy policy can be found at www.inxmail.de/datenschutz. DAT has concluded a data processing agreement with Inxmail GmbH in accordance with Art. 28 of the EU General Data Protection Regulation (GDPR).
3.2.2.3 Analysis of Usage Behavior
We use so-called newsletter tracking in our newsletter. Recipient reactions (opening a mailing, clicking on text and image links, downloading images with an email program) are recorded and stored anonymously for statistical purposes. It is not possible to draw conclusions about individual users from the stored data. If you as a user have previously given explicit consent, the aforementioned recipient reactions (usage data) are recorded and stored in a personally identifiable manner. Using this usage data, we can better tailor the newsletter content to your personal interests. You also have the option to withdraw consent to the collection and analysis of personal usage behavior separately from consent to receive the newsletter at any time via the revocation link contained in every newsletter. As the legal basis for our newsletter tracking, we rely on a legitimate interest under the GDPR, Art. 6(1)(f) — on the one hand, the interest in providing you with a useful, relevant, and reader-friendly newsletter, and on the other, the legitimate business interest in improving operational efficiency. Automated decision-making or profiling does not take place.
3.2.2.4 Data Retention / Deletion
As long as you subscribe to the newsletter, we store master data, registration data, and usage data. If you unsubscribe from the newsletter, we delete master data and usage data immediately. However, we may store your email address for up to three years based on our legitimate interest before deleting it, as we may need to prove a previously given consent and document it for the purpose of defending against potential claims.
3.2.2.5 Cancellation / Withdrawal
To unsubscribe from the newsletter or, independently of that, to cancel the collection and analysis of personally identifiable usage behavior, you will find a corresponding link at the end of each newsletter. You can carry out the cancellation yourself at any time via this unsubscribe link. In general, you can also direct a withdrawal of consent to the use of your data at any time to: zentrale@dat.de.
3.2.2.6 Your Fundamental Rights
Your fundamental rights naturally also apply in relation to the newsletter. You have the right to object at any time to the processing of your personal data. You may withdraw any consent you have given at any time. You may ask us at any time for information about which data we have stored about you and will receive a copy free of charge. If we have made an error in storing or processing your personal data, or if something has changed that you wish to correct immediately, or if you wish to add incomplete data, please contact us. Subject to the legal requirements, you may request that relevant data be deleted immediately, and you may also request a restriction on the processing of your personal data. You have the right to receive all personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to other parties. You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. To exercise any of these rights, please contact the person listed below or simply send an email to zentrale@dat.de.
3.3 Contract Processing
It may be necessary to pass on data required for contract processing to companies we use to provide the service or handle the contract, such as interface partners or other service providers. Data is not passed on to third parties beyond what is necessary for processing the business transaction.
3.4 Disclosure to Third Parties and to Government Institutions and Authorities
Disclosure to third parties in other cases only occurs if you have previously consented (Art. 6(1)(a) GDPR). You have the right to withdraw any consent given with effect for the future at any time. We only disclose data to authorized government institutions and authorities within the scope of legal obligations (Art. 6(1)(c) GDPR). Furthermore, we only pass on your data to third parties where this is necessary for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data (Art. 6(1)(f) GDPR). In these cases, the scope of the transmitted data is limited to the necessary minimum.
3.5 Advertising
We use your personal data for advertising purposes only if you have given your consent.
3.6 Data Transfer Abroad
We generally do not transfer collected data abroad.
3.7 Use of Telemedia
We collect and use personal data to the extent necessary to enable the use of telemedia (usage data). This usage data includes in particular characteristics for your identification, information about the beginning and end as well as the extent of the respective use, and information about the telemedia services you have used.
3.8 Use of Usage Data for Billing
We use usage data beyond the end of the usage process to the extent that the data is required for billing purposes (billing data). We combine usage data about the use of various telemedia services to the extent necessary and possible for billing. To fulfill existing statutory, constitutional, or contractual retention periods, we may block the data.
The deletion of the data collected for the performance of the contract takes place after the expiry of the statutory retention periods. In this specific case, this means deletion after the warranty period has expired and both parties have fulfilled all obligations, unless further storage is required due to statutory retention duties (in particular pursuant to Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB)).
3.9 Disclosure of Data to Third Parties
We transmit billing data to other service providers or third parties to the extent necessary to determine the fee and to bill you. If we have concluded a contract with a third party for the collection of fees, we may transmit billing data to that third party to the extent necessary for that purpose. Anonymized usage data may be transmitted for market research purposes of other service providers.
3.10 Advertising, Market Research, Demand-Oriented Design of Telemedia
We create usage profiles using pseudonyms for the purpose of demand-oriented design of telemedia. Usage profiles are not merged with data about the holder of the pseudonym.
4. Right to Information
You always have the option to request information about the data stored about you, including its origin, recipients or categories of recipients to whom data is passed on, and the purpose of storage. If you wish to receive free information about your personal data stored with us, please direct your request to datenschutz@dat.de.
5. Deletion and Blocking
We commit to deleting personal data processed for our own purposes as soon as knowledge of it is no longer necessary to fulfill the purpose of storage. Where deletion is precluded by statutory, constitutional, or contractual retention periods, by grounds for assuming that deletion would impair the legitimate interests of the person concerned, or where deletion is not possible or only possible with disproportionate effort due to the special nature of the storage, blocking will take the place of deletion. In addition, you may at any time have data collected by us blocked, corrected, or deleted. Deletion also takes place if you withdraw your consent to the collection, processing, and use of personal data. If the withdrawal occurs during an ongoing business transaction, deletion will take place immediately after its completion. Further statutory deletion or blocking obligations remain unaffected.
6. Technical and Organizational Measures
We commit to implementing the technical and organizational measures necessary to ensure compliance with data protection regulations, provided the effort is proportionate to the intended level of protection. In the case of communication by email, complete data security cannot be guaranteed by us, so we recommend using postal mail for confidential information.
7. Your Rights at a Glance
As a data subject, you have various rights under the GDPR, which we outline here once more. You have the right to object at any time to the processing of your personal data, including in the case of direct marketing — please direct your objection to datenschutz@dat.de or the data protection officer listed below. If you have given us consent to process your personal data, you may of course withdraw it at any time. If you wish to receive free information about your personal data stored with us, please direct your request to datenschutz@dat.de. If we have made an error in storing your personal data, if there is a change you wish to correct immediately, or if you wish to add incomplete data, please contact the person listed below or send an email to datenschutz@dat.de. Where the legal requirements are met, you may request that we delete the relevant data immediately, and you may also request a restriction on the processing of your personal data. You further have the right to receive the data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit or have it transmitted to other parties. You may lodge a complaint with the competent data protection supervisory authority.
8. Identity of the Responsible Party
The responsible party within the meaning of data protection laws is: Deutsche Automobil Treuhand GmbH, Hellmuth-Hirth-Str. 1, 73760 Ostfildern, Tel.: +49 711 4503-0, Email: zentrale@dat.de.
9. Data Protection Officer
We have appointed a data protection officer, who can be reached at the following contact details: Philipp Beck, Data Protection Officer for Deutsche Automobil Treuhand GmbH, Moltkestraße 3, 72622 Nürtingen, Telephone: +49 151 27120663, Email: datenschutz@dat.de.
10. Withdrawal
You have the option to withdraw your consent to the collection, processing, or use of your data at any time with effect for the future. Withdrawal should be directed to: Deutsche Automobil Treuhand GmbH, Hellmuth-Hirth-Str. 1, 73760 Ostfildern, Tel.: +49 711 4503-0, Email: zentrale@dat.de.