In this notice, we provide you with information on the collection and processing of your personal data if you have concluded a purchase contract for a new car with us or if you are our contact person for such a contract. If you are the contact person of our contracting party, but not our contracting party itself, we only process your contact data.
If the agreement is related to other services, the data protection notices of these other services also apply.
The controller for the processing of personal data as set forth below (unless another controller is expressly listed) is:
The contact person for your data protection questions is our data protection officer:
Mercedes-Benz Group AG
Chief Officer Corporate Data Protection
We process personal data ("data") in accordance with the principles of data avoidance and data economy and only to the extent required and permitted of us under the applicable legal provisions, or to the extent we are forced to in such processing.
Unless specified otherwise below, the terms "process" and "processing" include, but are not limited to, the collection, use, disclosure and transfer of personal data.
General data from the business relationship
We first collect, process and use the data that you provide us with as part of our business relationship. This includes the following data in particular:
As part of our business relationship with you, we furthermore collect and process certain additional data required for the fulfillment of our contractual obligations toward you. In particular, that data includes the following:
Data from other sources
Furthermore, we also process – provided this is necessary for the fulfillment of the contract concluded with you or precontractual measures – such personal data we may reliably receive from affiliated companies of Mercedes-Benz AG or other third parties (e.g. data from credit agencies).
We only process personal data from publicly accessible sources (e.g. authorities, Internet) if permitted by law – for instance, because it is necessary for the provision of our services.
Collection and processing to fulfill legal obligations
We collect and process your personal data described in greater detail in Section 3 as part of the initiation of a contractual relationship and in order to fulfill our contractual obligations to you. For example, we process your contact data when we contact you regarding the conclusion of a purchase agreement.
Processing based on legitimate interest
Furthermore, we process your personal data when necessary to protect the legitimate interests of Mercedes-Benz AG or a third party. This is especially the case in the following instances:
For accounting purposes: For the purpose of risk prevention and for the preparation of the balance sheet of Mercedes-Benz AG and the consolidated balance sheet of the Mercedes-Benz Group AG, to which Mercedes-Benz AG belongs, certain master data from your purchase agreement will be processed – in particular your name, your address, the contract term, the contract number and the chassis number. To prepare the aforementioned balance sheets, certain document data, including payment and booking information, will also be processed by Mercedes-Benz AG exclusively for these purposes.
Processing based on legal requirements
Your personal data is also collected and processed on the basis of legal requirements. For example, we are subject to the provisions of the German Money Laundering Act.
We do not share your data with third parties unless we are authorized or obliged to do so based on legal requirements and/or official or court orders.
Data sharing with processors on our behalf
We engage external data processors (e.g. IT service providers) in order to perform our services. The transfer of your data to these third parties is carried out in strict compliance with the criteria of the GDPR and the German Federal Act on Data Protection. The data processors commissioned by us, who may only process the data for us and not for their own purposes, are obligated to comply with the strict standards of Mercedes-Benz AG.
Data transfer to suppliers
We also transfer your data – especially your first name and last name, your address, the order number and customer account number, the vehicle identification number and the number of your contract – to suppliers that we have tasked with the manufacturing or delivery of equipment agreed with you and/or the delivery of your vehicle as part of the purchase agreement. Our suppliers mainly use your data for identifying and assigning the commissioned equipment to your vehicle and/or for the delivery of your vehicle.
Data transfer to workshops
If you decide to use one of our service products, we also transfer your data – especially your first name and last name, the data on your purchase agreement, the date of the initial registration of the vehicle you purchased, the vehicle identification number, vehicle type and brand and license plate number – to our licensed workshops, since they require this data in order to carry out your service orders.
Data transfer to body manufacturers
We transfer your data – especially your first name and last name, your address, the order number and the vehicle identification number – to body manufacturers in the event that your chassis is to receive any installations, removals or bodywork. The body manufacturers use your data in the context of your placement of an order for the identification and assignment of the ordered installations, removals or bodywork in order to finalize your vehicle as a whole.
We also transfer or grant access to data to service providers outside the European Economic Area (EEA) for maintenance and support for IT systems. Because countries outside the EEA usually do not have the same level of data privacy as the EU, we ensure by way of contract that the service providers take measures to protect the data under EEA standards. The Mercedes-Benz Group AG companies are also governed by the strict data privacy requirements of the Mercedes-Benz Group AG.
We process and store your personal data only as long as we need it to meet our contractual or legal obligations. If there is no longer a legitimate interest, we will erase the data. We usually delete your data ten years after the end of the contractual relationship at the latest. If a contract is not concluded, the data is deleted after twelve months.
You have extensive rights regarding the processing of your personal data. Making you aware of these rights is very important to us:
If you would like to assert any of your rights or receive more information about them, please send an e-mail to firstname.lastname@example.org or write to Mercedes-Benz Group AG, HPC E600, 70546 Stuttgart, Germany.
If you feel that we are violating the GDPR by processing personal data about you, you have the right to lodge a complaint with a supervisory authority, e.g. a data protection agency responsible for your place of residence, workplace or location where the alleged data protection violation occurred.