Datenschutz

General information

Thank you for visiting our website and for your interest in our company. We endeavor to offer you the best possible service; this also includes the continuous optimization of our website and, of course, the protection of your data.

Below we would like to inform you about the handling of your data by Art. 13 of the General Data Protection Regulation (‘GDPR’).

Controller

The organization named in the legal notice is responsible for the data collection and processing described below.

Data security

We take technical and organizational measures to protect your data from unauthorized access as comprehensively as possible. We use an encryption process on our website. Your data is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line of some browsers begins with https://.

Usage data

When you visit our websites, so-called usage data is temporarily analyzed on our web server for statistical purposes as a log in order to improve the quality of our websites. This data record consists of

- the name and address of the requested content
- the date and time of the request
- the amount of data transferred
- the access status (content transferred, content not found),
- the description of the web browser and operating system used,
- the referral link, which indicates from which page you came to our website,
- the IP address of the requesting computer.

We store the IP address transmitted by your web browser for a strictly earmarked period of 14 days in the interest of recognizing, limiting and eliminating attacks on our websites. After this period has expired, we delete or anonymize the IP address. The legal basis is Art. 6 para. 1 lit. f GDPR.

Data transfer to third parties

We transfer your data to service providers who support us in the operation of our websites and the associated processes as part of order processing in by art. 8 GDPR. Our service providers are strictly bound by our instructions and are contractually bound accordingly.

We may transfer personal data collected in the context of a contractual relationship regarding the application, execution and termination of the respective business relationship as well as data on non-contractual behavior or fraudulent behavior to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden. The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the General Data Protection Regulation (GDPR). Transfers on the basis of Article 6(1)(f) GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of Staack Pooltankstellen GmbH or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. The exchange of data with SCHUFA also serves to fulfill legal obligations to carry out creditworthiness checks on customers (§ 505a and 506 of the German Civil Code).

SCHUFA processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its contractual partners in the European Economic Area and Switzerland and, if applicable, other third countries (insofar as an adequacy decision of the European Commission exists for these) with information, among other things, to assess the creditworthiness of natural persons. Further information on SCHUFA's activities can be viewed online at https://www.schufa.de/datenschutz.

The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the General Data Protection Regulation (GDPR). Transfers on the basis of Article 6(1)(f) GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of Staack Pooltankstellen GmbH or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. The data exchange with Coface also serves to fulfill legal obligations to carry out creditworthiness checks of customers (§ 505a and 506 of the German Civil Code).

Coface processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its contractual partners in the European Economic Area with information for assessing the creditworthiness of natural persons, among other things. Further information on Coface's activities can be viewed online at https://www.coface.de/Home/Allgemeine-Informationen/Datenschutz.

We may transfer personal data collected in the context of a contractual relationship regarding the application, execution and termination of the respective business relationship as well as data on non-contractual behavior or fraudulent behavior to Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss. The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the General Data Protection Regulation (GDPR). Transfers on the basis of Article 6(1)(f) GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of Staack Pooltankstellen GmbH or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. The exchange of data with Creditreform also serves to fulfill legal obligations to carry out creditworthiness checks on customers (§ 505a and 506 of the German Civil Code).

Creditreform processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its contractual partners in the European Economic Area with information for assessing the creditworthiness of natural persons, among other things. Further information on Coface's activities can be found online at https://www.creditreform.de/datenschutz

Data transfer to third countries

If we transfer personal data to a third country outside the EU, we will always ensure an adequate level of data protection.

Your rights as a user

As a data subject, you have the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 para. 1 lit. f (data processing to safeguard legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

Contact details of our data protection officer:

Our company data protection officer will be happy to provide you with information or suggestions on the subject of data protection using the following contact details

Email: datenschutz@staack-pooltankstellen.de

Use of cookies

We occasionally use cookies on our websites in order to offer you an optimized and user-friendly visit. Cookies are small text files that are stored on your end device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies can contain data that makes it possible to recognize the device used. In some cases, however, cookies also contain information on certain settings that cannot be linked to specific individuals.

We use both session cookies and permanent cookies on our websites.

These cookies do not contain any personal data, nor do we combine them with other data to identify you personally. Furthermore, we do not use any analysis tools.

The processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. You can also delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that our websites may then not be displayed optimally and some functions may no longer be technically available.’

Contact form

You have the option of contacting us via web forms. To use our contact forms, we need your name and e-mail address. You can provide further information, but this is not mandatory. The legal basis for processing is Art. 6 para. 1 lit. b GDPR if you contact us as an end customer or Art. 6 para. 1 lit. f GDPR if you contact us on behalf of the company you work for. We use your data exclusively in the interest of processing your inquiry.

Please note that the data you provide will be collected and stored electronically. We will only use your data to process your inquiry. You can object to the further processing of your data at any time, e.g. by sending an e-mail to info@staack-pooltankstellen.de. Your data will then be deleted.

Applying for a tankpool24 card

You have the option of ordering a Tankpool24 card on our website. To do this, we need your company data, your personal data (first name, surname, telephone number, email address) and your fleet data. The legal basis for processing is Art. 6 para. 1 lit. f GDPR in order to process the user relationship or Art. 6 para. 1 lit. b GDPR if you and not your company are the contractual partner. We use your data exclusively to process the order and fulfill the contract. Your data will be deleted upon cancellation of the Tankpool24 card, provided there are no legal retention periods to the contrary.

Competitions

We use the information you provide in the context of competitions to determine and contact the winners (Art. 6 para. 1 lit. b GDPR).

The winners will be notified in writing. As part of your participation in the competition, you may agree that the data you provide may also be collected and stored electronically in order to provide you with personalized product recommendations.
and stored in order to provide you with individualized product recommendations. Your data will only be used for advertising purposes with your consent. The legal basis for this processing is then Art. 6 para. 1 lit. a GDPR. Your consent can be revoked at any time, e.g. by e-mail to info@staack-pooltankstellen.de. Otherwise, we will delete your data after the end of the prize transfer or if you object to the further use of your data, e.g. by e-mail to info@staack-pooltankstellen.de.

Online applications

We process your personal data in accordance with the applicable data protection regulations on the basis of § 26 BDSG. We process the data that you disclose to us as part of your online application solely for the purpose of selecting applicants. Data will not be processed for any other purpose. You yourself determine the scope of the data that you wish to transmit to us as part of your online application. Online applications are transmitted electronically to our HR department and processed there as quickly as possible. The transmission is encrypted.

As a rule, applications are forwarded to the heads of the relevant specialist departments in our company. Your data will not be passed on beyond this. Your details will be treated confidentially within our organization. If your application is unsuccessful, your documents will be deleted after 6 months. In the event that we may also consider your application for other or future job advertisements, please make a note to this effect on your application. We will then process your data on the basis of your consent by with Art. 6 para. 1 lit. a GDPR. In this case, your application will be deleted after two years.