Data Privacy Information

As at: 01.07.2021 

In the following Data Privacy Statement, CLAAS Stiftung ("CLAAS") provides information about how your personal data is processed on this website. 

A. General Data Privacy Statement

I. Controller's name and contact details 

The controller is:

CLAAS Stiftung
Mühlenwinkel 1
D-33428 Harsewinkel, Germany
Germany
stiftung@claas.com  

II. Storage period 

CLAAS stores your personal data only for as long as necessary in order to fulfil the purpose for which it is collected and processed. Where necessary, CLAAS shall store your data for the duration of the business relationship. This includes, but is not limited to, the initiation and execution of the contract.

Furthermore, CLAAS stores your personal data if and as long as this is required to fulfil contractual or legal obligations. We thus process your data to fulfil commercial or fiscal verification and retention obligations. The stipulated retention and documentation periods are six years in accordance with the commercial requirements under Section 257 of the German Commercial Code (HGB) and up to ten years under the fiscal requirements pursuant to Section 147 of the Fiscal Code of Germany (AO), provided the data is no longer required for tax purposes (e.g. because a company audit is ongoing). The periods start at the end of the calendar year in which the record was created.

If the data is no longer required to fulfil contractual or legal obligations, it will be regularly erased, unless you have given CLAAS consent to process your data and/or further processing is required based on CLAAS' legitimate interests, for example to win back customers and defend against legal claims in legal disputes. In the case of data processed to defend against legal claims in legal disputes, the storage period shall also be based on the legal limitation periods. In accordance with Sections 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), these are up to 30 years, with the regular limitation period lasting three years, starting at the end of the calendar year in which the claim arises. In this case, processing shall be limited, i.e. limited to the minimum scope required for the claim and blocked for other purposes.

The provision above does not apply insofar as the Separate Data Privacy Statement specifies otherwise.

III. Categories of recipients

• Carefully selected service providers. Service providers we engage, who support us in the performance of the business relationship, are granted access to the data. These companies operate in the following categories: Hosting providers, data management, software as a service, e-mail services, IT services (e.g. maintenance and support, data migration), consulting, service providers in the first, second and third level support, call centre services, customer administration, lettershops, marketing, media technology, telecommunications, customer relations management and lead management, tracking service providers, web agencies, compliance, disposal services (e.g. document shredders), companies who perform analyses for us, financial service providers, shipping and logistics services, printing services, technology service providers (e.g. for hardware and accessory parts). If any additional categories of service providers are employed, please refer to the relevant Separate Data Privacy Statement.
• Transfer to third parties. We shall also transfer your data to third parties if this is permitted by legal or contractual provisions and/or you have given your consent. On this condition, the data can be transferred to the following categories of recipients: Public bodies and institutions (such as the public prosecutor's office, police, tax authority, data protection supervisory authority) to process official requests, provided that this is in your interest or we are legally obligated to do so. The legal basis for this is Article 6(1f) or 6(1c) GDPR.
• Data transfer within the CLAAS Group. We shall transfer your data to other companies within the CLAAS Group or grant them access to your data. Insofar as this is required for administrative purposes, this shall be based on our legitimate interest in internal administrative purposes and group reporting. The legal basis for this is Article 6(1f) GDPR. If this is required to prepare for an agreement initiated by you or to fulfil contract-related obligations, or if you have given your consent, the legal basis is Article 6(1b) or 6(1a) GDPR. If we are legally entitled to do this, the legal basis arises from Article 6(1c) GDPR. We refer to the Separate Data Privacy Statement for any data transfer to third parties beyond the scope described here.
• Third parties with whom we have an ongoing business relationship. If this is required to prepare for an agreement or to fulfil contract-related obligations, or if you have given your consent, the legal basis is Article 6(1b) or 6(1a) GDPR. If we are legally required to do this, the legal basis arises from Article 6(1c) GDPR.

IV. Transfer to third countries

If we transfer your personal data ourselves or via service providers to countries based outside the European Union, we shall comply with the relevant particular requirements of Article 44 et seq. GDPR and our service providers shall also undertake to comply with these regulations. We shall therefore only transfer your data to countries based outside the European Union subject to the level of security guaranteed by the GDPR. This level of security is guaranteed in particular on the basis of an adequacy decision by the European Commission or with suitable guarantees in accordance with Article 46 GDPR.

Data is transferred to third countries (countries outside the EU or the European Economic Area – EEA) if, for example, this

• is required to fulfil a contract to which you are a contractual party or if this is required to respond to your requests;
• is required to safeguard our legitimate interests;
• is stipulated by law or you have given your consent;
• takes place as part of contract processing when involving service providers.

If there is no European Commission decision for the country in question as to a level of data protection that is appropriate for European data protection requirements, we shall enter into corresponding contracts to ensure that your rights and freedoms are suitably protected. An agreement of this kind ensures that a suitable level of data protection exists at the data recipient, especially with the agreement on the European Union's standard contractual clauses with the recipient. Otherwise, we can also perform a data transfer based on your express consent. You can withdraw your consent with future effect at any time, see Section A.VI. We will be happy to provide you with more detailed information free of charge on request. Please use the aforementioned contact details for this purpose.

Where we permit the recipient to process data without a suitable level of data protection based on your consent alone, please note the following risks: There may not be sufficient measures in place to protect your personal data appropriately; there is no data protection supervisory authority; the implementation of your data protection rights of the data subject is impeded or has been disregarded; there is no control over the further processing of data by and transmission of data to third parties.

Any further information required can be found in our Separate Data Privacy Statement.

V. Obligation to provide personal data

Unless specified otherwise in the Separate Data Privacy Statement, you are not legally or contractually required to provide your data.

VI. Rights of the data subject

In accordance with Article 15 GDPR, you have the right to obtain information about the data that we hold that relates to you. If incorrect personal data has been processed, you have the right to rectification of your data in accordance with Article 16 GDPR. If the legal requirements apply, you can request erasure or restriction of processing and submit an objection to data processing (Articles 17, 18 and 21 GDPR). In accordance with Article 20 GDPR, you can exercise the right to data portability for data that is automatically processed on the basis of your consent or under a contract.

Information regarding your right to object in accordance with Article 21 GDPR

1. Based on grounds resulting from your particular situation, you have the right to object at any time to the processing of your personal data on the basis of Article 6(1f) GDPR (data processing on the basis of a balancing of interests).

If you exercise your right to object, CLAAS will then cease processing your personal data unless CLAAS can provide compelling legitimate reasons for doing so which override your interests, rights and freedoms, or unless the processing is used to assert, exercise or defend legal claims.

2. CLAAS shall process your personal data for the purposes of direct marketing. You have the right to submit an objection vis-à-vis the processing of your personal data for the purpose of this type of marketing at any time.If you object to your data being processed for the purposes of direct marketing, CLAAS shall cease using your personal data for these purposes.Your objection can be submitted in any form and should be addressed to the following where possible:privacy@claas.com

Right to withdraw your consent in accordance with Article 7(3) GDPR

If you have given your consent for your personal data to be processed, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing of data on the basis of your consent before the time at which consent was withdrawn.

Consent can be withdrawn in any form. You can use the contact details provided in Section A.I. for this purpose. Should CLAAS provide any further options for exercising your right to withdraw consent (e.g. an unsubscribe link in any newsletter e-mail), you will be informed of these in the Separate Data Privacy Statement.You can exercise your rights vis-à-vis CLAAS using the contact details provided under Section A. I.If you believe that data is being processed in violation of data protection regulations, you have the right to lodge a complaint with a data protection supervisory authority of your choice. (Article 77 GDPR).

You can of course also submit a complaint to the CLAAS data protection officer at any time (privacy@claas.com).

If you wish to exercise your data protection rights of the data subject, we will process your data in order to fulfil our legal obligations in accordance with Article 6(1c) GDPR in conjunction with Articles 15–22, 12(3–6) GDPR and Article 7(3) GDPR. This includes the processing of your data for the purpose of unequivocal identification of the data subject of a data processing activity, and the request for additional information to confirm identity. We do this on the basis of our legal obligation laid out in Article 12(6) GDPR. This includes the transfer of data to the data recipients within the meaning of Article 19 GDPR, as far as requests for the rectification of data, erasure or restriction of processing (Articles 16, 17(1), 18 GDPR) are concerned, and any related communications to these recipients (Article 19 GDPR) or to you as the data subject (Article 12 GDPR).

B. Separate Data Privacy Statement regarding provision of our website for the general public

I. Provision of our website for the general public

If you only use the website for information purposes, i.e. if you do not register or communicate information to CLAAS in any other way (e.g. using our contact form), CLAAS shall only collect the personal data transmitted by your browser to our server. Data collection is a technical requirement in order for us to show you our website. The legal basis for this is Article 6(1b) GDPR. Your visit to the website is recorded in the log files; this is necessary to guarantee the functionality of the website and the security of the IT systems. The legal basis for this data processing is Article 6(1f) GDPR. You are able to object to the processing of data on the basis of a legitimate interest at any time with future effect, see Section A.V. For the aforementioned purposes, we also have a legitimate interest in data processing.

The following categories of data shall be collected when you visit the website: Usage and traffic data, technical documentation and logged data, e.g.

• date and time of access;time zone difference from Greenwich Mean Time (GMT);
• IP address;
• host name of the computer accessing the site;
• website used to call up website;
• websites called up via the website (content of the request);
• pages visited on the website;notification of whether access was successful;
• volume of data transferred;
• information about browser type, language and version used;
• operating system.

This data shall be erased as soon as it is no longer required to achieve the purpose of its collection. As regards provision of the website, this is the case once the respective session has ended. If the data is stored in log files, this is the case after a maximum of 30 days. The data is not stored together with any of your other personal data.   

II. Use of services (e.g. cookies, analytical and remarketing tools)

CLAAS uses services (e.g. cookies, analysis tools and remarketing tools) on this website. CLAAS uses these services to store information on your device (e.g. in your browser) and/or access information that is already stored on your device. This information may include personal data as well as data that is not related to a specific person. Where applicable, after storing or accessing the information, personal data may be processed further in accordance with your choice of category.

CLAAS uses the following services in the following categories:

If the use of the service (i.e. storing information on your device and/or accessing information stored on your device) is required for a technical reason, Art. 25 para. 2 of the German Telecommunications Telemedia Data Protection Act (TTDSG) in conjunction with Art. 6(1 b, c, f) GDPR forms the lawful basis. This information may include personal data as well as data that is not related to a specific person. If, after storing or accessing the information, personal data relating to you is processed, this processing is performed only if this is required

• for performance of a contract where you are a party to the contract (Article 6(1b) GDPR) or
• by law (Article 6(1c) GDPR)
• to safeguard our legitimate interests (Article 6(1f) GDPR).

You are able to object  to the processing of data on the basis of a legitimate interest at any time with future effect, see Section A.VI. You can choose to erase cookies via your browser settings.

The legal basis for the use of the services (i.e. storing information on your device and/or accessing information stored on your device) in the Statistical Analysis, Marketing, and Additional Functions categories is Section 25 para. 1 sentence 1 of the German Telecommunications Telemedia Data Protection Act (TTDSG) in conjunction with Art. 6(1a) GDPR, subject to your consent. This information may include personal data as well as data that is not related to a specific person. If, after storing or accessing the information, personal data relating to you is processed in accordance with your choice of category, this processing is performed on the basis of Art. 6(1a) GDPR, subject to your consent. Revoking your consent does not affect the legality of storing information on your device and/or accessing information on your end device or the further processing of personal data in accordance with your choice of category that has been performed with your consent. Your consent is voluntary.

You can revoke your consent or make changes to your data protection settings via "Changing data privacy settings".

Your consent is valid for six months. After this time, we shall ask you to reconfirm your consent. We shall also ask you to reconfirm your consent by displaying the cookie banner if new services are added to this website or if services change such that renewed consent is required in order to be able to continue to implement the services (e.g. changes of purpose).

Please note that your individual browser settings can potentially prevent your settings (e.g. your consent) from being saved long-term and we shall ask you to reconfirm your consent each time you visit our website.

C. Specific Data Privacy Information Processing of (General) Enquiries and Complaints and Relevant Communication (e.g. request for information)

You can contact CLAAS using the contact form or the contact details provided on this website. We process your personal data in order to handle your request, reply to you or follow up a complaint.

This is based on our legitimate interest pursuant to Art. 6(1) 1 f GDPR in handling the requests you make of us following up complaints, communicating with customers and interested parties, and addressing you correctly. You can object to data processing based on legitimate interests at any time with effect for the future, cf Part A.V. Where the data processing serves to initiate a contract, such processing is based on Art. 6(1) 1 b GDPR. We process your data supplied during your request for contact for the purpose of dealing with your request or your query in the best possible way:

• Personally identifying data (e.g. title, first name, surname)
• Contact details (e.g. email address, telephone number)
• Communication content data
• Usage and traffic data (IP address, date and time of your request)

Where you use the contact form provided on this website to make contact with CLAAS, the data that are required so that we may contact you are marked with an asterisk (*) as compulsory data.

We may also pass on your data to third parties, for example the CLAAS sales partner responsible for you or the CLAAS Group company you selected, if this is necessary to follow up and fulfil your request.

Your personal data are stored for the purpose of replying to your enquiry and then deleted, unless we are entitled or obliged by law, contract or your consent to store the data for a longer period of time. More details can be found under Part A.II.

D. Links to third-party websites

This website contains links to websites of third parties (e.g. companies belonging to the CLAAS Group). If you access the relevant link, the website of the third party will open in a new window. This data privacy statement does not extend to data processing on the website of the third party.