Data Protection

In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we inform you about the processing of your personal data within the framework of the use of the MAN Merchandising Webshop (www.man-shop.eu) and the NEOPLAN Merchandising Webshop (www.neoplan-shop.eu) and your data protection rights in this respect.

1. CONTACT INFORMATION OF THE CONTROLLER

STAR DISTRIBUTION GmbH, Frank Drechsler (Managing director), Otto-Lilienthal-Straße 5, 71034 Böblingen, Germany

Phone number: +49 7031 6288 3490
E-mail address: man-merchandising@star-cooperation.com

2. CONTACT INFORMATION OF THE DATA PROTECTION OFFICER

STAR COOPERATION GmbH, Data protection officer, Otto-Lilienthal-Straße 5, 71034 Böblingen, Germany
E-mail address: datenschutz@star-cooperation.com

3. DATA PROCESSING | REGISTRATION AS CUSTOMER

Description of the data processing	Personal data is only collected if you give us this information when you open a customer account.
Data categories	Contact data, address data
Purpose of the processing	Opening of a customer account
Legal basis of the processing	Art. 6 (1) b GDPR Initiation of contract, Art. 6 (1) c GDPR Legal obligation
Data Storage	The duration of data storage is based on the statutory retention requirements and is usually 10 years.
Recipients	STAR SYSTEMS GmbH and its subcontractors and sub-service providers, MAN Truck & Bus SE, external service providers or other contractors
Transfers to a third country	no

4. DATA PROCESSING | USE OF THE CONTACT FORMS

Description of the data processing	On our website we offer you the possibility to contact us by e-mail and/or via a contact form. When using this service, we only collect personal data to the extent provided by you. In this case, the information provided by the user will be stored for the purpose of processing his contact inquiry.
Data categories	Contact data, address data
Purpose of the processing	Processing of inquiries
Legal basis of the processing	Art. 6 (1) b GDPR Initiation of contract
Data Storage	The duration of data storage is based on the statutory retention requirements and is usually 10 years.
Recipients	STAR SYSTEMS GmbH and its subcontractors and sub-service providers, MAN Truck & Bus SE, external service providers or other contractors
Transfers to a third country	no

5. DATA PROCESSING | CREDIT ASSESSMENT AND COLLECTION

Description of the data processing	Basically, we offer you various payment options. If you choose an insecure payment method (e.g. purchase on account), we have a legitimate interest in protecting ourselves against possible payment defaults. For this purpose, we may obtain a credit report from a credit assessment company before granting this payment method. For this purpose, we transmit the personal data required for a credit assessment and use the information received on the statistical probability of a payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship. If invoices are not paid despite several reminders, we reserve the right to pass on the data required for collection to third-party companies for the purpose of recovering the debt.
Data categories	Contact data, address data, account data
Purpose of the processing	Protection against payment defaults, securing incoming payments
Legal basis of the processing	Art. 6 (1) f GDPR Legitimate interest
Data Storage	The duration of data storage is based on the statutory retention requirements and is usually 10 years.
Recipients	STAR COOPERATION GmbH and its subcontractors and sub-service providers, credit assessment company, third-party companies for the purpose of recovering the debt, MAN Truck & Bus SE, external service providers or other contractors
Transfers to a third country	no

6. DATA PROCESSING | ORDER HANDLING

Description of the data processing	Personal data is only collected if you provide us with this information when placing an order, contacting us or opening a customer account.
Data categories	Contact data, address data, account data
Purpose of the processing	Contract execution, order handling, shipping execution, invoicing, payment processing, processing of inquiries
Legal basis of the processing	Art. 6 (1) b GDPR Initiation and execution of contract, Art. 6 (1) c GDPR Legal obligation
Data Storage	The duration of data storage is based on the statutory retention requirements and is usually 10 years.
Recipients	STAR SYSTEMS GmbH and its subcontractors and sub-service providers, transport companies and its subcontractors, STAR COOPERATION GmbH and its subcontractors and sub-service providers, PayPal (Europe) S.à r.l. et Cie, S.C.A., MAN Truck & Bus SE, external service providers or other contractors
Transfers to a third country	Within the scope of contract implementation, contract processors outside the European Union can also be used.

7. DATA PROCESSING | NEWSLETTER REGISTRATION

Description of the data processing	Within registering for our newsletter, you provide us with your e-mail address and optionally other personal and socio-cultural data. The data you enter when register for our newsletter will be stored by us until you unsubscribe from our newsletter. You can unsubscribe at any time using the link provided in the newsletter or by sending us a message. By unsubscribing, you object to the use of your e-mail address.
Data categories	Contact data, socio-cultural data
Purpose of the processing	Newsletter dispatch
Legal basis of the processing	Art. 6 (1) a GDPR Agreement
Data Storage	The duration of data storage is based on the statutory retention requirements and is usually 10 years.
Recipients	STAR SYSTEMS GmbH and its subcontractors and sub-service providers, Mailchimp c/o the Rocket Science Group LLC, external service providers or other contractors
Transfers to a third country	Within the scope of contract implementation, contract processors outside the European Union can also be used.

8. USE OF „COOKIES“

We use the web analysis service PIWIK/MATOMO on our website. PIWIK/MATOMO uses cookies for this analysis. Cookies are small text files which are stored on your computer and enable an analysis of your usage of the website.

The information generated by the cookies, such as time, place and frequency of your visit to the website including your IP address is transmitted to and stored on our PIWIK/MATOMO instance. Your IP address will be immediately made anonymous during this process, so that you as a user remain anonymous to us. The information about your usage of this website generated by the cookie will not be passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that, if you do this, you may not be able to use the full functionality of our website.

Further information on cookies and their classification can be found under the following link:
https://www.man-shop.eu/en/cookies, https://www.neoplan-shop.eu/en/cookies

9. POSSIBILITIES OF CONTRADICTION

If the processing of your personal data takes place in order to uphold legitimate interests pursuant point € or (f) of Article 6(1) GDPR, you have the right pursuant Article 21 GDPR to object to the processing of your personal data if your special situation causes reasons that conflict with the processing. We will then terminate this processing, unless the processing serves overwhelming, compelling protectable interests on our part or the assertion, exercise or defense of legal claims.

10. RIGHTS OF THE DATA SUBJECT

You have the right:

pursuant Article 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been disclosed, the planned period of data storage, the existence of the right to request rectification or erasure of personal data or restriction of processing concerning the data subject, the existence of the right to lodge a complaint, the source of your data, if not collected from us, the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;

pursuant Article 16 GDPR, to obtain from the controller without undue delay the rectification of inaccurate personal data and to demand to have incomplete personal data completed, including by means of providing a supplementary statement;

pursuant Article 17 GDPR, to obtain the erasure of personal data concerning him or her as far as the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or for enforcement, exercise or defense of legal claims;

pursuant Article 18 GDPR, to obtain from the controller restriction of processing of personal data, if the accuracy of the personal data is contested by you, the processing is unlawful and you oppose the erasure of the personal data and we don’t need the data anymore, but they are required for the establishment, exercise or defence of legal claims or if you have objected to processing pursuant Article 21 GDPR;

pursuant Article 20 GDPR, to receive the personal data which has been provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller

pursuant Article 7(3) GDPR, to withdraw your consent at any time. As a result, we are not allowed to continue the data processing based on this consent for the future and

pursuant Article 77 GDPR, to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence or work or our company headquarters. The responsible data protection supervisory authority for us is the state commissioner for data protection and freedom of information Baden-Württemberg.

Would you like to make use of your rights, an e-mail to the above contact information or our data protection officer is sufficient.