Data protection

1. General information

a) Introduction

The protection of your privacy rights during the processing of personal data is of the utmost concern to MAN. Data collected through the use of our website is handled in compliance with the law of the country in which the company responsible for data processing is located.

Furthermore, the companies in the MAN Group have undertaken to provide comprehensive and uniform protection of personal data through the implementation of a binding Group policy. Within the MAN Group, this ensures a level of protection around the globe, which is comparable to that in Germany and the European Union.

Moreover, our employees are obliged to keep confidential and to safeguard any personal data made available to them.

b) Responsible party and contact person

The responsible party for your data pursuant to data protection legislation is the company from the MAN Group, which operates the website that you are visiting.

Should you have any general questions, or questions related to data protection, please get in touch with the applicable contact person specified in the imprint. You can also contact Group Data Protection, which will forward your query to the people responsible.

2. Information about this website

With this data protection notice, we provide you with information as to how we handle personal data and which personal data we collect, process and use when you visit this website.

“Personal data” shall mean all information relating to an identified or identifiable natural person. A natural person is considered to be identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more particular characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

The purpose of this and other websites is to provide you with information about selected companies of the MAN Group.

The following information does not apply to companies that MAN does not own or control, and does not apply to people that MAN does not employ or instruct.

3. Collection of general information and anonymous usage data

When you visit our website, information of a general nature is automatically collected. This information contains the type of web browser used, the operating system used, the domain name of your internet service provider, our website that you are visiting, as well as technical information on your visit (https/http method, https/http version, https/http status code, length of the data transferred). This only concerns information, which does not permit conclusions about your person. This data is also generated during access to every other website on the internet. This is therefore not a specific function of this website.

Information of this type is only collected in an anonymised form and evaluated by us statistically. The better we understand your requirements, the faster you can find your desired information on our websites.

4. Collection and processing of personal data

a) Simple navigation on the website

When you visit our website, our web servers save your IP address used for access, as well as the date and time of the visit as standard.

b) Use of web applications

When using our web applications, (e.g. truck configurator), information may also be saved that is required to use this application effectively (language, session ID, configurator step, selected data within the configurator).

c) Registration using online forms

Other personal data is only collected when you provide it to us voluntarily, and as far as this is required for the respective purpose, for example, as part of a registration, a subscription, a questionnaire or a competition.

d) Use of cookies

A cookie is a small data set that is saved on your device. It contains data such as personal page settings and logon information. This data set is created by the web server that your web browser has established a connection to, and this data set is then sent to you. In general, we use cookies to analyse the interest in our websites as well as to improve the user friendliness of our websites. You can also access our websites without cookies as a matter of principle. If you would like to conveniently use our websites to their full extent, you should, however, accept the cookies which enable the use of certain functions, or which make use more convenient. MAN uses cookies to make its website more user-friendly, more effective and more secure. Our cookies contain no information related to specific persons.

If your browser settings are set to accept cookies, with the use of our websites you consent to the use of these cookies. Most browsers are set to accept all cookies by default. You have the option, however, of configuring your browser so that cookies are displayed before they are saved, or so that only certain cookies are accepted or rejected, or so that cookies are rejected in general.

We would like to point out that changes to settings only apply to the respective browser. If you use different browsers or change to a different device, the settings must be configured again. You can also delete the cookies from your storage medium at any tim: in Manage cookies. Please refer to your web browser’s help function for further information regarding cookie settings and how to change them, and also regarding the deletion of cookies.

The following is a list of the most common types of cookies and their purpose.

Persistent or protocol cookies
A persistent or protocol cookie stores a file on your computer for the duration defined by the file's expiration date. Due to these cookies, websites remember your information and settings for your next visit. This results in faster and more convenient access as you do not need to configure your language settings for our portal again, for example. Once the expiry date has elapsed, the cookie is automatically deleted when you visit the website that created it.

First-party cookies
These are set by the website itself (same domain as in the address bar of the browser) and can only be read by this website. These cookies are generally used to save information (e.g. your settings) which is then used when you next visit the website.

e) Google Analytics

Our website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics also uses cookies. This involves cookies from Google itself (Google Analytics cookies) and so-called third party provider cookies (double click cookies). The information on how you use our website (including your IP address) gathered by the cookies is transmitted to a Google Inc. server in the USA and saved there. Google will use this information for the purpose of evaluating your use of the website for us, compiling reports on website activity for us and for providing other services relating to website activity and internet usage, in particular functions for display advertising, such as remarketing, reports on impressions in the Google display network, the integration of double click campaign managers or Google Analytics reports for service in accordance with demographic characteristics and interests. Google may also transfer this information to third parties where required to do so by law, or where such third parties process this data on Google's behalf. Google will never associate your IP address with any other data held by Google.

By using this website, you consent to the processing of data collected about you by Google in the manner described and for the purposes set out above. We would like to point out that to improve data protection, our website uses Google Analytics with the extension "anonymizeIp()” so that IP addresses are only logged and processed further in abbreviated form to prevent them being directly linked to a particular individual during the analysis of the use of our website. You may refuse the use of Google Analytics cookies by selecting the extension of your browser. By doing so, you can exercise your right to reject data collection, processing and use by Google Analytics with future effect. You can install a deactivation add-on on your browser from Google Analytics for this purpose. This prevents Google Analytics from saving information about your website visits.

You can find further information as well as information on downloading and installing this deactivation add-on at https://tools.google.com/dlpage/gaoptout

Alternatively, and in addition for users with mobile devices, you can use the opt-out cookie. You can use this link and then a cookie will be set, meaning that your activity will no longer be logged by Google Analytics. Click here to opt out of logging by Google Analytics.

You can deactivate Google Analytics for display advertising and adapt the adverts in the Google display network by accessing the advert settings: https://www.google.de/settings/ads.

5. Limitation on use of personal data

Your personal data will only be used for the purpose for which you have provided this data to us.

6. Legal basis for processing

The legal basis for the use and saving of your personal data is your consent in accordance with Art. 7 EU General Data Protection Regulation (GDPR) as well as in accordance with Section 13, Para. 2 Telemediengesetz (TMG, German Telemedia Act). We process your basic data and usage data on the basis of and in accordance with the provisions of Sections 14 and 15 TMG, which represent a legal duty in the sense of Article 6, Para. 1(c) EU GDPR, which we, as operator of the website, are subject to.

7. Transfer of personal data

Due to the use of the presented functions, bodies which are located in third countries outside the European Economic Area (EEA) can also view your data. In these countries, the level of data protection may be insufficient as there is no decision regarding the adequacy of the data protection from the EU Commission and no other suitable guarantees for the protection of your personal data.

Your data is transferred into these third countries on the basis of your consent in accordance with Art. 7 EU GDPR and Section 13, Para. 2 TMG (German Telemedia Act) or on the basis of the exemption clauses of Art. 49, Para. 1 EU GDPR which apply through the activation of the applicable function.

Your data can also be seen by associated companies from the MAN and VW Group, as well as external service providers who provide and technically operate this website and the systems linked to it. Data protection contracts have been concluded with these companies in order to ensure a high level of data protection.

Data shall only be sent to government bodies and authorities in accordance with binding national legal regulations.

8. Data storage and deletion

Personal data linked to your visit to our website (see Points 1 and 2 ) is saved for two years, calculated from the point in time when our website was opened.

Other personal data is saved until you unregister or inform us that you would no longer like to make use of the respective function.

Beyond this, personal data is only saved if there are statutory or contractual retention obligations.

9. Your rights

You have the right to be informed about the data that relates to you, and the right to correct your data. Provided that there are no statutory regulations to the contrary, you also have the right to delete and block your data, as well as the right to object to the processing of your data. Furthermore, you have the right to data portability.

As we collect and process your personal data on the basis of your consent, you also have the right to revoke the consent you granted. The legality of the data processing carried out with your consent until you revoke it, remains unaffected by your withdrawal of consent.

If necessary, we need to verify your identity before we can process your requests.

If, in spite of our efforts to maintain accurate and up-to-date data, incorrect information has been saved, we will correct such information upon corresponding request.

In the event of complaints, there is the possibility to contact a data protection supervisory authority.

10. Security

MAN protects your data by means of technical and organisational security measures against accidental or premeditated manipulation, loss, destruction or access by unauthorised persons. Our security measures, such as data encryption, are regularly improved in accordance with technological development.

11. Links to the websites of other providers

Our website may contain links to the websites of other providers. MAN checked the directly linked websites at the time of link creation and convinced itself that they were free of legal violations. However, MAN has no influence of any kind on the content of linked websites and is not able to monitor these on an ongoing basis. Therefore MAN assumes no liability for the content of linked websites that have been modified after the link creation. This data protection agreement does not apply to the linked websites of other providers.

12. Reservation

In order to keep apace with the continuous development of the internet, MAN may adapt this declaration concerning data privacy protection at any time while adhering to the provisions of data privacy protection legislation.

1. General information

a) Introduction

The protection of your personal rights during the processing of personal data is of the utmost concern to companies in MAN Group (hereinafter referred to as "MAN"). We process personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and in accordance with the legal regulations of the country in which the controller of the data processing is located.

Furthermore, MAN companies have undertaken to provide comprehensive and uniform protection of personal data through the implementation of a binding Group policy. Within MAN, this ensures a level of protection worldwide, which is comparable to that in Germany and the European Union.

Moreover, our employees are obliged to maintain confidentiality with regard to the handling of personal data.

b) Controller, contact person and information

The controller as defined by data protection law is the MAN company that processes your data as part of an existing or incipient contractual relationship.

In the event of questions relating to data protection, please contact the data protection officer/data protection coordinator at the MAN company with which you have or are initiating a contractual relationship.

The data protection officers/data protection coordinators at MAN are listed here.

2. Collection and processing of personal data

a) Purpose limitation and legal basis

MAN processes your personal data in order to execute and manage an existing or incipient contractual relationship with you. In this context, your personal data is processed for various purposes as part of a range of processing activities.

b) Data sources

As a rule, your personal data is collected directly from you as part of an existing or incipient contract relationship.

c) Obligation to provide data

You must provide to the controller the personal data required to execute the contractual relationship. If you do not provide this data, MAN cannot fulfil the relevant legal obligations and enter the contractual relationship.

d) Intended purpose of processing activities

An overview of the intended purpose of our processing activities is provided below:

Market analysis and identification of new customers
For example market analysis, trade fair appearances, websites, customer events, prize games, and other promotional campaigns.

Marketing communication
For example sending magazines, newsletters and product brochures, and making apps available.

Preparing quotations
The product configurator, and the creation of product- and vehicle-specific service offerings, financing offerings, and rental offerings.

Order processing
Filling in order forms, payment processes, payment options, delivery conditions, and compliance with statutory obligations, such as invoicing, bookkeeping and auditing, internal cost accounting, controlling (e.g. reimbursements, chargebacks, and offsetting), reporting (e.g. for data quality, management and planning purposes), reporting and planning of sales KPIs, and performing the claims management/dining process.

Optimization of production processes and vehicle quality 
Recording vehicle data (e.g. plausibility checking and determining KPIs for the reduction of consumption and wear), recording service and maintenance data as well as error codes for error diagnosis and the prevention of errors, evaluating vehicle data regarding compliance with guarantee obligations, product liability (product recalls), analyzing vehicle data in order to improve quality in vehicle functions, and for product and service optimisation.

Product delivery
Vehicle handover

Recording and analyzing customer feedback (determining customer satisfaction)
Customer satisfaction surveys, and customer complaints management

After Sales marketing
Product and service training, and the making available of applications and EDP programs and apps

Planning and processing workshop orders
Facilitating repair services (agreeing appointments online).

Vehicle handback
Agreement for buyback, used vehicle market place.

Compliance with legal obligations
Compliance with retention obligations, ensuring that compliance requirements are met through checks (e.g. sanctions list checks and money laundering), operating an internal control system (ICS) and other monitoring systems for ensuring that business processes are in accordance with regulations.

The processed data can be classified into the following data categories:

• Professional contact and (work) organizational data
• IT usage data
• Private contact and identification data
• Data on personal/professional circumstances & characteristics
• Creditworthiness and bank data
• Contractual data
• Vehicle usage data with VIN/number plate – guarantee, warranty, product liability, safe vehicle operation
• Vehicle usage data with VIN/number plate – comfort settings, multimedia, navigation – data arising from vehicle use and which is linked with the VIN/number plate and concerns comfort settings, e.g. seat adjustment, preferred radio channel, air conditioning settings, navigation data, e-mail/SMS contact data, etc.
• Vehicle usage data with VIN/number plate – assistance systems, handling, etc. – data arising from vehicle use and which is linked with the VIN/number plate and concerns handling and/or the use of assistance systems and the associated concrete deployment data, etc.
• Position data
• Special category: image and video material

The aforementioned processing activities are justified by the following legal bases:

• Consent to one or more specified purposes (Art. 6(1)(a) GDPR)
• Fulfilment of the contract or contract initiation (Art. 6(1)(b) GDPR)
• Fulfilment of legal obligations (Art. 6(1)(c) GDPR)
• Balancing of interests (Art. 6(1)(f) GDPR)
  • The existence of a relevant and appropriate relationship between the controller and the data subject
  • Prevention of fraud
  • Direct advertising
  • Transfer of data within a corporate group for internal management purposes (including customer and employee data)

3. Transfer of personal data

In certain cases, your personal data may also be disclosed to other bodies:

If the disclosure of your personal data is necessary in order to execute or initiate the contractual relationship, such as in the event of financing for the object of the contract or in the event of shared order processing with project-specific partners (e.g. body manufacturers).

We will also disclose your personal data to service providers commissioned by us in the framework of order processing (e.g. organising trade fair events, running customer satisfaction surveys, sending e-mail newsletters, and hosting and operating CRM systems).

Your core data and contact details are disclosed in a centralised database for the purpose of ensuring a uniform and current data stock and for credit checking (other companies in Volkswagen Group are also able to access this database).

If you have consented, we may also disclose your core data and contact details as well as the offer and order data to affected contract workshops, dealers and free importers for the purpose of customer service, such as creating vehicle-specific service offerings or regional on-site support; we may also disclose such data and details to corresponding companies in Volkswagen Group in order to create rental or financing offerings.

If we are required to comply with country-specific legal requirements regarding the disclosure of your personal data, e.g. for transfer to financial authorities, courts, and auditors.

In order to ensure a high level of data privacy, data privacy contracts have been concluded with all companies in MAN and Volkswagen Group that receive data.

If we transfer personal data to affiliated companies or service providers outside the European Economic Area (EEA), the data transfer will only take place if the EU Commission has confirmed there is an adequate level of data privacy in the third country, or other adequate and sufficient data protection guarantees are in place (e.g. EU Standard Contractual Clauses or certification in accordance with the EU/US Privacy Shield).

4. Data storage and erasure

We erase your personal data as soon as it is no longer required for the purposes stated above.

Your personal data is stored for as long as we are required to do so by law, or for as long as statutory limitation periods apply. This regular arises due to legal obligations to provide proof and preserve records, governed by legislation including the Bürgerliches Gesetzbuch (BGB – German Civil Code), Handelsgesetzbuch (HGB – German Commercial Code), and the Abgabenordnung (AO – German Tax Code).

Beyond this, data is only saved if there are further statutory or contractual storage obligations to do so, such as in the context of product liability.

5. Your rights

You have the right to be informed about the data that relates to you, and the right to rectify your data. Provided that there are no statutory regulations to the contrary, you also have the right to erase your data and to object to the processing of your data, and the right to restrict the processing of your data. Furthermore, you have the right to data portability.

If we collect and process your personal data on the basis of your consent, you also have the right to revoke the consent you granted with effect for the future. The legality of the data processing carried out with your consent until you revoke it, remains unaffected by your withdrawal of consent.

If necessary, we need to verify your identity before we can process your requests.

If, in spite of our efforts to maintain accurate and up-to-date data, incorrect information has been saved, we will correct such information upon corresponding request.

In the event of complaints, there is the possibility to contact a data protection supervisory authority.

6. Automated decision-making

We do not perform automated individual decision-makings within the meaning of Art. 22 (1) & (4) of the GDPR.

7. Safety

MAN uses technical and organisational security measures to protect your data against accidental or premeditated manipulation, loss and destruction, and access by unauthorised persons.

Our security measures, such as data encryption, are regularly improved in accordance with technological development.

1. General information

a) Introduction

The protection of your personal rights during the processing of personal data is of the utmost concern to companies in MAN Group (hereinafter referred to as "MAN"). We process personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and in accordance with the legal regulations of the country in which the controller of the data processing is located.

Furthermore, MAN companies have undertaken to provide comprehensive and uniform protection of personal data through the implementation of a binding Group policy. Within MAN, this ensures a level of protection worldwide, which is comparable to that in Germany and the European Union.

Moreover, our employees are obliged to maintain confidentiality with regard to the handling of personal data.

b) Controller, contact person and information

The controller as defined by data protection law is the MAN company that processes your data as part of an existing or incipient contractual relationship.

In the event of questions relating to data protection, please contact the data protection officer/data protection coordinator at the MAN company with which you have or are initiating a contractual relationship.

The data protection officers/data protection coordinators at MAN are listed here.

2. Collection and processing of personal data

a) Purpose limitation and legal basis

MAN processes your personal data in order to execute and manage an existing or incipient contractual relationship with you. In this context, your personal data is processed for various purposes as part of a range of processing activities.

b) Data sources

As a rule, your personal data is collected directly from you as part of an existing or incipient contract relationship.

c) Obligation to provide data

You must provide to the controller the personal data required to execute the contractual relationship. If you do not provide this data, MAN cannot fulfil the relevant legal obligations and enter the contractual relationship.

d) Intended purpose of processing activities

An overview of the intended purpose of our processing activities is provided below:

Putting services and materials out to tenderl 
Sending requests, calling in outstanding quotes, commercial review and completeness checking on quotes, and performing negotiations.

Order processing (materials and services)
Writing, submitting, sending, and tracking orders in the system.

Supplier support
Communication regarding products or services, responding to inquiries and requests, and bottleneck and risk management.

Procurement controlling
Sales figures regarding suppliers and/or part numbers.

Compliance with legal obligations 
Compliance with retention obligations, ensuring that compliance requirements are met through checks (e.g. sanctions list checks and money laundering), operating an internal control system (ICS) and other monitoring systems for ensuring that business processes are in accordance with regulations.

The processed data can be classified into the following data categories:

• Professional contact and (work) organizational data
• IT usage data
• Data on personal/professional circumstances & characteristics
• Creditworthiness and bank data
• Contractual data

The aforementioned processing activities are justified by the following legal bases:

• Consent to one or more specified purposes (Art. 6(1)(a) of the GDPR)
• Fulfilment of the contract or contract initiation (Art. 6(1)(b) of the GDPR)
• Fulfilment of legal obligations (Art. 6(1)(c) of the GDPR)
• Balancing of interests (Art. 6(1)(f) of the GDPR)
  • The existence of a relevant and appropriate relationship between the controller and the data subject
  • Prevention of fraud
  • Direct advertising
  • Transfer of data within a corporate group for internal management purposes (including customer and employee data)

3. Transfer of personal data

In certain cases, your personal data may also be disclosed to other bodies:

If the disclosure of your personal data is necessary in order to execute or initiate the contractual relationship, such as in the event of financing for the object of the contract or in the event of shared order processing with project-specific partners (e.g. body manufacturers).

We will also disclose your personal data to service providers commissioned by us in the framework of order processing (e.g. the digitization of paper invoices, and provision of a supplier platform).

Your core data and contact details are disclosed in a centralised database for the purpose of ensuring a uniform and current data stock and for credit checking (other companies in Volkswagen Group are also able to access this database).

If you have consented, we may also disclose your core data and contact details as well as offer and order data to corresponding companies in Volkswagen Group for the purpose of supplier support, such as communication.

If we are required to comply with country-specific legal requirements regarding the disclosure of your personal data, e.g. for transfer to financial authorities, courts, and auditors.

In order to ensure a high level of data privacy, data privacy contracts have been concluded with all companies in MAN and Volkswagen Group that receive data.

If we transfer personal data to affiliated companies or service providers outside the European Economic Area (EEA), the data transfer will only take place if the EU Commission has confirmed there is an adequate level of data privacy in the third country, or other adequate and sufficient data protection guarantees are in place (e.g. EU Standard Contractual Clauses or certification in accordance with the EU/US Privacy Shield).

4. Data storage and erasure

We erase your personal data as soon as it is no longer required for the purposes stated above.

Your personal data is stored for as long as we are required to do so by law, or for as long as statutory limitation periods apply. This regular arises due to legal obligations to provide proof and preserve records, governed by legislation including the Bürgerliches Gesetzbuch (BGB – German Civil Code), Handelsgesetzbuch (HGB – German Commercial Code), and the Abgabenordnung (AO – German Tax Code).

Beyond this, data is only saved if there are further statutory or contractual storage obligations to do so, such as in the context of product liability.

5. Your rights

You have the right to be informed about the data that relates to you, and the right to rectify your data. Provided that there are no statutory regulations to the contrary, you also have the right to erase your data and to object to the processing of your data, and the right to restrict the processing of your data. Furthermore, you have the right to data portability.

If we collect and process your personal data on the basis of your consent, you also have the right to revoke the consent you granted with effect for the future. The legality of the data processing carried out with your consent until you revoke it, remains unaffected by your withdrawal of consent.

If necessary, we need to verify your identity before we can process your requests.

If, in spite of our efforts to maintain accurate and up-to-date data, incorrect information has been saved, we will correct such information upon corresponding request.

In the event of complaints, there is the possibility to contact a data protection supervisory authority.

6. Automated decision-making

We do not perform automated individual decision-makings within the meaning of Art. 22 (1) & (4) of the GDPR.

7. Safety

MAN uses technical and organizational security measures to protect your data against accidental or premeditated manipulation, loss and destruction, and access by unauthorised persons.

Our security measures, such as data encryption, are regularly improved in accordance with technological development.