Data protection notice

This website is owned and operated by AIWAYS Europe GmbH, having its registered seat at Moosacher Str. 82a, 80809 Munich (hereinafter referred to as "AIWAYS", "We" or "Us"). We attach great importance to the protection of your privacy. In this data protection notice, we would like to inform you about the processing of your personal data when you visit our website www.ai-ways.eu (hereinafter referred to as "website"). Personal data are all data that refer to an identified or identifiable natural person, such as names, addresses, telephone numbers and e‑mail addresses. We process personal data only in accordance with the statutory regulations, in particular the General Data Protection Regulation (GDPR).

1. Who is responsible for processing my personal data?

AIWAYS Europe GmbH, Moosacher Str. 82a, 80809 Munich is responsible for processing your personal data on our website. You may contact us under the contact address provided above or by email at contact@ai-ways.eu.

2. Which personal data are subject to processing?

The kinds of personal data we process depend on how you use our website. You can visit our website without having to provide any personal information. In this case we only process the personal data listed in the sections "Data of visitors" and "Are cookies and tracking mechanisms used?". In addition, you have the possibility of providing us with personal data by entering your data (for example at present, when you register for a test drive). The section "Data that you provide to us" explains the personal data we subject to additional processing in this event.

2.1 Data of visitors

In this section we inform you as to how we process your personal data when you visit our website. When you visit the website, the following data might be automatically collected and processed by us:

IP address (internet protocol address) of the end device accessing our website;
Internet address of the website referring to our website (referrer URL);
Information on the provider through which access to our website takes place;
Name of accessed files and information;
Date, time and duration of access;
Quantity of transferred data;
Operating system and information on the browser being used;
Status of the page view (e.g. "Query successful").
We save this data in log files.
Why and for how long are the data stored in log files?
The data are stored for the purpose of investigating disruptions and for security reasons (e.g. to investigate any attacks on our website) for the duration of 60 days in log files and are then deleted. Log files which need to be stored longer for evidence purposes will not be deleted until final clarification of the respective incident and may be passed on to the investigating authorities in individual cases.

What is the legal basis for the processing of data?

The legal basis for the processing of log data is our legitimate interest in remedying disruptions and the security of our website (Art. 6 (1) (f) GDPR).

2.2 Are cookies and tracking mechanisms used?

We use cookies and tracking mechanisms to enhance your browsing experience.

2.2.1 Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.  

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

2.2.2 Third party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website.

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

2.2.3 Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

2.3 Data that you provide to us

In this section we inform you of the extent to which we process the personal data that you provide to us. You can make personal data available to us, for example for one of the following services:

When you register for one of our newsletters;
When you reserve a vehicle via the website;
When you request a test drive of one of our vehicles;
If you contact us directly in other cases, especially if you send us an e-mail to the e-mail addresses listed on the website.
In the following, we explain the individual data processing operations.

2.3.1 Newsletter

With the following information, we notify you about the contents of our newsletter as well as the registration and sending procedure.

Which data are subject to processing when I register for a newsletter?

We offer various newsletters, for example, depending on which country you are in and in which language you would like to receive the newsletter. Therefore, in addition to the e-mail address, we also store the relevant country and the language you choose. In order to address you personally, we also ask for the correct salutation and your first name.
For an effective registration we need a valid e-mail address.

Why and for how long are the data stored when registering for a newsletter? What is the legal basis for the processing of data?
Your personal data will be processed to deliver a personalized newsletter. Your data will be deleted once you revoke your consent to receive further newsletters. The legal basis for the processing of personal data to deliver the newsletters is your consent (Art. 6 (1) (a) GDPR). The consent to the storage and processing of your personal data for the newsletter can be revoked at any time. For this purpose, each newsletter contains a respective link. In addition, you can notify us via the contact option indicated in section 1.

2.3.2 Pre-reservation of a vehicle via the website

Through our website you can pre-reserve a U5 vehicle from AIWAYS.

Which data are subject to processing when I make a pre-reservation?

In order to process the pre-reservation properly and to prepare a potential later vehicle purchase, we collect the following personal data:
Surname;
First given name;
Email

As part of the pre-reservation, you will be assigned an individual customer number and a pre-reservation number.

Why and for how long are the data stored for pre-reservation? What is the legal basis for the processing of data?
Your data will be used exclusively to process the pre-reservation and a potential purchase contract. The data will be stored during the execution of the pre- reservation and a potential purchase contract. Once you terminate the pre-reservation, your data will be deleted. The legal basis for the processing of personal data for the pre- reservation is our legitimate interest in data processing for the conclusion of a contract (Art. 6 (1) (b) and (f) GDPR).
If you have given your consent, we may also send you e-mails with relevant information about our products and/or service. The legal basis for the processing of personal data for this purpose is your consent (Art. 6 (1) (a) GDPR). The consent to the storage and processing of your personal data for this purpose can be revoked at any time (e.g. by notifying us via the contact option indicated in section 1). Your data will be deleted once you revoke your consent, unless the data is still needed for the processing of the pre-reservation.

2.3.3 E-mail contact

You can contact us via the e-mail address provided in section 1 at any time.

Which data are subject to processing when I send a request by e‑mail?

In this case, your e-mail address and the personal data transmitted with the e-mail will be stored.
Why and for how long are the data stored for e-mail contacts? What is the legal basis for the processing of data?
The data is used exclusively to answer your request and will be deleted once your request has been completed, unless the data is subject to a statutory retention period. The legal basis for the processing is our legitimate interest to reply to your requests (Art. 6 (1) (f) GDPR). If the e-mail contact aims to conclude a contract, then an additional legal basis for the processing is Art. 6 (1) (b) DSGVO.

2.3.4 Test drives

We may invite you to participate in a test drive of U5 as part of our test drive tours.

Which data are subject to processing when I register for a test drive?

We will collect the following data:

Your full name (first name, last name);
Your e-mail address.
Why and for how long are the data for test drives stored? What is the legal basis for the processing of data?
We need your full name for your identification when handing over the vehicle. We collect your contact details in order to reach you, for example in order to provide you with information on your test drive and if there are any short-term changes or cancellations in the course of the test drives. 
Your data will only be processed for the purposes stated and will be deleted at the latest upon termination of the U5 test drive tours. The legal basis for the collection and processing of your data is the performance of the test drive contract and our legitimate interest to facilitate the conclusion of such contracts (Art. 6 (1) (b) and (f) GDPR).
If you have given your consent, we might contact you after the test drive about your experience with our vehicle. The legal basis for the processing of personal data for this purpose is your consent (Art. 6 (1) (a) GDPR). The consent to the storage and processing of your personal data for this purpose can be revoked at any time (e.g. by notifying us via the contact option indicated in section 1). Your data will be deleted once you revoke your consent.

3. Will my personal data be passed on to others?

We only transfer your personal data to others if this is required for the performance of the contract (Art. 6 (1) (b) GDPR), if we have a legitimate interest in the transmission (Art. 6 (1) (f) GDPR) or if you have consented to the transmission (Art. 6 (1) (a) GDPR). In addition, we can transfer personal data to others if we are required to do so due to statutory regulations or enforceable orders given by authorities or courts.
We may involve external service providers with tasks such as data hosting and newsletter services. For the hosting of the website, we use proIO GmbH, a company incorporated under the laws of Germany and having its registered address at Kleyerstr. 79 – 89 / Tor 13, 60326 Frankfurt am Main, Germany (HRB 86239). For the supply of media data for the website, we use Amazon Web Services, Inc. a company incorporated under the laws of the United States and having its registered address at 410 Terry Avenue North, Seattle WA 98109, United States (registration number 4152954). We will choose those service providers carefully, especially regarding their handling of personal data on our behalf. All external service providers are obliged by contract to process your personal data in accordance with data protection laws.

4. MailChimp - Newsletter
We offer you the opportunity to register for our free newsletter via our website.

We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as "The Rocket Science Group".
Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
the Rocket Science Group guarantees that it will follow the EU's data protection regulations when processing data in the United States. In addition, the Rocket Science Group offers further information about its data protection practices at https://mailchimp.com/legal/privacy/

If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address and the date and time of your registration will be saved. During the registration process, your consent to receive this newsletter will be obtained together with a concrete description of the type of content it will offer and reference made to this privacy policy. The newsletter then sent out by The Rocket Science Group will also contain a tracking pixel called a web beacon. This pixel helps us evaluate whether and when you have read our newsletter and whether you have clicked any links contained therein. In addition to further technical data, such as data about your computer hardware and your IP address, the data processed will be stored so that we can optimize our newsletter and respond to the wishes of our readers. The data will therefore increase the quality and attractiveness of our newsletter.

The legal basis for sending the newsletter and the analysis is Art. 6 Para. 1 lit. a) GDPR.

You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter.

5. What are your rights when your personal data are processed?

You can contact us under the address provided in section 1 if you wish to assert your rights under GDPR. In doing so, please ensure it is possible to identify you clearly. You are entitled to the following rights in accordance with the respective applicable statutory requirements and restrictions:

Right to information and right of access
You have the right to request information about the processing of your personal data (Art. 15 GDPR).

Right to rectification and erasure
You have the right to request that we rectify false data and complete or erase your data (Art. 16, 17 GDPR).

Restriction of processing
You have the right to request that we restrict the processing of your data (Art. 18 GDPR).

Data portability
If the data processing is based on an agreement or consent, you have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format. Where technically feasible, you also have the right to request that your data be transferred to third parties (Art. 20 GDPR).

Objection to direct marketing
You can object to the processing of your personal data for advertising purposes at any time (Art. 21 (2) GDPR).

Objection to data processing due to "legitimate interests"
If your personal data are processed on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object to the processing of your personal data provided that there are grounds relating to your particular situation (Art. 21 (1) GDPR).

Withdrawal of consent
If you have given your consent to the processing of your data, you may withdraw this consent at any time with effect for the future. This does not affect the legitimacy of the processing of your data prior to the date of withdrawal.

Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection authority. In this context, you may for example approach the data protection authority competent for your place of residence or the data protection authority competent for us.

6. Instagram
To advertise our products and services as well as to communicate with interested parties or customers, we have a presence on the Instagram platform.

On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

The data protection officer of Instagram can be reached via this contact form: https://www.facebook.com/help/contact/540977946302970

We have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.

The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.
When accessing our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).

This data of the user is used for statistical information on the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Instagram based on your interests. If you are logged into Instagram at the time you access our site, Facebook Ireland Ltd. will also link this data to your user account.

If you contact us via Instagram, the personal data your provide at that time will be used to process the request. We will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.

Facebook Ireland Ltd. might also set cookies when processing your data.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Instagram may be fully usable.

Details on the processing activities, their suppression, and the deletion of the data processed by Instagram can be found in its privacy policy:
https://help.instagram.com/519522125107875

It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.

Facebook Inc. has submitted to the EU-US Privacy Shield, thereby complying with the data protection requirements of the EU when processing data in the USA. 
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

7. Matomo (formerly: PIWIK)

Our website uses Matomo (formerly: PIWIK). This is open-source software with which we can analyze the use of our site. Data such as your IP address, the pages you visit, the website from which you came (referrer URL), the duration of your visit, and the frequency of your visits is processed.

Matomo stores a cookie on your device via your browser in order to collect this data. This cookie is valid for one week.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis and optimization of our website.

We use Matomo with the "Automatically Anonymize Visitor IPs" function. This anonymization function truncates your IP address by two bytes so that it is impossible to assign it to you or to the internet connection you are using.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

In addition, you have the option of terminating the analysis of your usage behavior by opting out by confirming the link.

A cookie is stored on your device via your browser to prevent any further analysis. Please note, however, that you must click the above link again if you delete the cookies stored on your end device.

7. Miscellaneous

We do not use automated decision-making data processing within the meaning of Art. 22 GDPR.

8. Changes to this data protection notice

We reserve the right to change our data protection notice without prior notice at any time. Therefore, please take note of the latest version of our data protection notice. The status of this data protection notice is March 2019.

9. Contact

You can contact us under the contact details provided in section 1.

10. Opt Out