Legal
Privacy policy
Protecting your personal data when it is collected, processed and used during your visit to our website is important to us. Below we inform you about which data we process, for what purpose and what rights you have.
This is a courtesy translation. The German version is legally binding.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Mainhattan-Wheels GmbH
Lise-Meitner-Straße 5
63128 Dietzenbach
Germany
Phone: +49 (0) 6074 21 50 70
E-mail: info@mainhattan-wheels.de
Represented by the managing director Dipl.-Kfm. Thomas Beez. The information on alloy wheels on this website is provided by Mainhattan-Wheels Leichtmetallräder GmbH, Lise-Meitner-Straße 5, 63128 Dietzenbach; Mainhattan-Wheels GmbH is responsible for data processing on this website.
2. General information on data processing
We process personal data only to the extent necessary to provide a functioning website and our content and services, or when you voluntarily provide us with data, for example as part of an enquiry, an order or a job application. The legal bases are Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (contract and pre-contractual measures), Art. 6 (1) (c) GDPR (legal obligation) and Art. 6 (1) (f) GDPR (legitimate interest).
Your personal data is passed on or otherwise transferred to third parties only where this is necessary for the performance of the contract, in particular the transfer of order and delivery data to freight forwarders, parcel services and suppliers, where this is necessary for billing purposes, or where you have given your prior consent.
Stored personal data is deleted when you withdraw your consent to storage, when knowledge of it is no longer required to fulfil the purpose for which it was stored, or when its storage is inadmissible for other legal reasons. Statutory retention periods, in particular under commercial and tax law, remain unaffected.
3. Hosting
This website is hosted by an external service provider. The personal data collected on this website is processed on the host's servers. The host is used for the purpose of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). A data processing agreement in accordance with Art. 28 GDPR is in place with the host.
4. Server log files
Every access to our website and every retrieval of a file stored on the website is logged. The following is logged: name of the retrieved file, date and time of retrieval, volume of data transferred, notification of successful retrieval, web browser and operating system used, requesting domain (referrer) and the IP address of the requesting computer. Storage serves internal system-related and statistical purposes as well as the security and stability of the website (Art. 6 (1) (f) GDPR). This data is not merged with other data sources. The log files are automatically deleted after a short time.
5. Contact form, request form with photo upload and e-mail
If you contact us via the contact form, the request form for wheel refurbishment or by e-mail, we process the data you provide (name, e-mail address, phone number, subject, message and, for the request form, the uploaded photos of your wheels and details of quantity and size) to handle your enquiry, to prepare a quote and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where the enquiry is aimed at a contract, and otherwise Art. 6 (1) (f) GDPR. The data you send is processed solely for the purpose of handling your enquiry and deleted once processing is complete, unless statutory retention obligations prevent this. To protect against spam, the forms use a technical check that does not transmit any data to third parties.
For a wheel refurbishment order we document the processing parameters with reference to the marking of the wheel (traceability) and make the order status available to you online via your order or customer number.
Security notice: complete data security cannot be guaranteed when communicating by e-mail. For confidential information we recommend sending it by post.
6. Job applications
Application data submitted via our online application form or by e-mail (position, type of employment, name, date of birth, address, phone, e-mail, education, earliest start date, uploaded documents) is processed exclusively for the purpose of carrying out the application procedure (Art. 6 (1) (b) GDPR in conjunction with § 26 BDSG, German Federal Data Protection Act). If you are hired, the data is transferred to the personnel file. If no employment results, we delete the application documents no later than six months after the procedure has been completed, unless you have consented to longer storage for future positions.
7. YouTube videos (only on click)
On some pages we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are embedded in enhanced privacy mode via the domain youtube-nocookie.com and are only loaded when you click the preview image. Until then, no data is transferred to YouTube. By clicking, you consent to the transfer of data to YouTube (Art. 6 (1) (a) GDPR); YouTube may then process your IP address and use cookies or comparable technologies. Transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. Further information: policies.google.com/privacy.
8. Google Maps (only on click)
For the directions map we use Google Maps from Google Ireland Limited. The map is only loaded when you click the button to load the map. Only then are your IP address and, where applicable, location data transferred to Google (Art. 6 (1) (a) GDPR). Alternatively, you can open the map via a link in a new window. Further information: policies.google.com/privacy.
9. Online shop
Our online shop (shop.mainhattan-wheels.de or shop.deluxe-wheels.de) is a separate application. When you click a shop link, you leave this website. The privacy policy published there applies to data processing in the shop, in particular for customer accounts, orders, payment processing and shipping.
10. Social media links
We link to our profiles on Facebook (facebook.com/Mainhattan.Wheels) and Instagram (instagram.com/mainhattanwheels). These are simple links, not embedded plug-ins. No data is transferred to the platforms when you visit this website. Only when you follow a link do the privacy policies of Meta Platforms Ireland Limited apply.
11. Cookies and audience measurement
This website uses only technically necessary cookies or storage mechanisms, for example to remember your consent to loading videos or maps (§ 25 (2) TDDDG, German Telecommunications Digital Services Data Protection Act). Tools for audience measurement or marketing are used only if you have consented via a consent banner (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw consent at any time with effect for the future.
12. Your rights
You have the following rights against us with regard to the personal data concerning you:
- right of access (Art. 15 GDPR),
- right to rectification (Art. 16 GDPR),
- right to erasure (Art. 17 GDPR),
- right to restriction of processing (Art. 18 GDPR),
- right to data portability (Art. 20 GDPR),
- right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR),
- right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).
To exercise your rights, a message to info@mainhattan-wheels.de or to the postal address given above is sufficient.
13. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany.
14. Data security
We endeavour to store your personal data in such a way that it is not accessible to third parties, using all technical and organisational means available. This website uses SSL/TLS encryption; form data is transmitted in encrypted form. Our security measures are continuously improved in line with technological developments.
15. External links
Despite careful checking of their content, we cannot accept any liability for external links to third-party content. The respective operator is responsible for data processing on linked websites.
16. Changes to this privacy policy
We update this privacy policy when the legal situation or our processing activities change. The version published on this page at the time applies.