erWin privacy policy
With this privacy policy, we hereby inform you about the gathering, processing and use of your personal data when using this web platform (referred to hereinafter as "web platform").
Who is responsible for the processing of your data?
- Party responsible: Arvato SE ("ARVATO")
- Address: Reinhard-Mohn-Straße 22, 33333 Gütersloh (Germany)
- E-mail: contact.erwin.eu@arvato-support.com
(For all matters which do not relate to data protection, please use the appropriate channel on the contact page)
For what purposes do we process your data and what is the legal basis for this processing?
At ARVATO, we the processes personal data which is available to us and all other data which is gathered as a result of use of the website, for the following purposes:
- So that you can register and set up a user account with which you can find information on the vehicle and model in which you are interested (for example, repair instructions, circuit diagrams etc.).
In order to gain special information on a certain vehicle, you have to enter a vehicle identification number (i. e. VIN or chassis number). If you only wish to receive information on a model, you do not need to enter or send us a VIN.
We kindly remind you that you can call up your account in the "My erWin" area by clicking on the "Change registration" link.
The legal basis for this processing is Article 6 Section 1 (b) of the General Data Protection Regulation (GDPR).
- In order to process your enquiry and provide you with the desired information on maintenance and request of a vehicle. For this purpose, we may contact you in order to inform you about question in relation to the services provided via the erWin platform. For orders and invoicing on the website, we process the essential personal data, such as your name, address, telephone number, e-mail address, user name and password. When you make a purchase, ARVATO does not save your bank details, but instead they are transmitted directly to the system of your bank which itself acts as the party responsible for data processing. The legal basis for this processing is Article 6 Section 1 (b) of GDPR.
- In order to answer enquiries and for processing incidents which you communicate to us via the web platform. In this context, we are required by law in accordance with GDPR to process your data in order to assert the rights of the affected parties. The legal basis for this processing is Article 6 Section 1 (c) of GDPR. If your enquiries relate to your rights as an affected person, the legal basis for processing your contact details is Article 6 Section 1 (f) of the General Data Protection Regulation. There is legitimate interest on the part of the party responsible for processing for customer support and customer service, for the improvement of our services and in order to process your specific enquiry and the associated communication.
Which items of data do we process?
Within the scope of provision of the services provided by the web platform we process the personal data which you specify when registering, i.e. identification and contact details, such as your name, address, telephone number, e-mail address, country of residence etc.
Cookies: Cookies are small files with configuration information which are stored on your terminal. Cookies can be broken down into three categories. There are cookies which are required for the website to function (what are referred to as functional cookies), cookies which improve convenience when visiting a website, e.g. language settings (what are referred to as personalisation cookies) and cookies which are used to create an anonymous user profile (what are referred to as tracking cookies).
In this context, we point out that this website only uses strictly necessary cookies, i.e. functional cookies which allow the user to surf on the website and use its various options or services.
| Name of the cookie | Purpose | Storage period | Type of cookie |
|---|---|---|---|
| erWin user | A cookie with the user name is stored in the user’s browser. The prerequisite for this is that your browser allows the installation of cookies and saves them permanently. The server has no influence on this. If a cookie exists with the user name, it is entered in the "User name" field as a default value. The system checks whether the user’s browser already has a cookie in which the user name is stored. | 10 years | For authentication of the saved cookie |
| JSESSIONID | Cookie, which is generated by servelet containers, such as Tomcat or Jetty, and is used for session management in the J2EE web application for the HTTP protocol. | Session | For authentication of the saved cookie |
| eventMessageHiding | Cookie for displaying event messages on erWin. | 365 days | Cookie which is saved for personalisation of the user interface |
| X-Token | Cookie generated automatically by the server with random data for synchronisation of the session between the browser and the application, for prevention of a CSRF attack. | Session | For authentication of the saved cookie |
To whom is the data forwarded?
ARVATO will forward your data to third parties in compliance with the respective legal regulations. If a remuneration is paid for use of the platform, your personal data is forwarded to the payment systems used in order to collect it.
Moreover, the vehicle identification number may be processed by the car manufacturers and vehicle brands on the erWin platform if this is required for correct processing of your enquiries. This processing is based on the legitimate interest of the brand in order to be able to process your enquiries properly.
Moreover, we would like to inform you that ARVATO enters into contracts with third parties who act as data processors and require access to your data in order to provide services. Under no circumstances will they process your personal data for their own purposes.
For how long do we save your data?
ARVATO saves your personal data for as long as they are required in order to provide the services to which you have subscribed via this web platform, and, in case of cancellation of your subscription, for the period required in order to comply with the respective valid legal regulations. In this case, it is properly rendered inaccessible and deleted definitively once the period in which there may be liability, has elapsed.
If you do not use the services of erWin over a period of two years, i. e. if you are inactive for two years, your personal data will be deleted definitively. This applies even if you have already made use of our service. However, your personal data is not deleted after two years of inactivity if there is an active flat rate, a flat rate which has been paid for but not used and/or you have credit in your account.
Which rights do you have as owner of the data?
As the owner of personal data, you can assert the following rights in relation to ARVATO:
- Access: You can receive conformation that ARVATO processes your personal data and you can view your personal data in the files of our company.
- Rectification: You can change your personal data if it is incorrect, and complete it if it is incomplete.
- Deletion: You can request the deletion of your personal data, for instance, if the data is no longer required for the purposes for which it was gathered.
- Objection: You can request that your personal data no longer be processed. ARVATO will then stop processing the data, unless there are compelling legitimate reasons or it is required for the assertion of defence of claims.
- Restriction of processing: In the following cases, you can request the restriction of the processing of your data:
- If there is doubt as to the correct nature of your data;
- If processing is unlawful and you file opposition against the deletion of your data and request the restriction of their use;
- If ARVATO does not need to process your data but you require them in order to assert or defend claims;
- If you have entered an objection to the processing of your data in order to realise a task which is in public interest or to pursue a legitimate interest whilst checks are made as to whether the legitimate reasons for processing outweigh the interests
- Transferability: You can receive the personal data which you have made available to use and the data which results from your contractual relationship with ARVATO in electronic form, and transmit it to another body.
Contact with the Data Protection Officer
Our Data Protection Officer ("DPO") is available for you to contact with any matters of data protection.
He/she can be contacted at data-privacy@arvato-supply-chain.com.
September 2023