The controller as defined by the General Data Protection Regulation (GDPR) is:
Data Protection Officer:
Chief Officer for Corporate Data Protection
1. Data Protection
We appreciate your visiting our website and interest in the products we offer. Protecting your personal data is very important to us. In this privacy statement, we explain how we collect your personal information, what we do with it, for what purposes and on what legal foundation we do so, and what rights you have on that basis. We also refer you to Daimler’s Data Protection Policy:
Daimler Data Protection Policy
Our privacy statement for the use of our websites and the Mercedes-Benz AG Data Protection Policy do not apply to your activities on the websites of social networks or other providers that can be accessed using the links on our websites. Please read the data protection provisions on the websites of those providers.
2. Collecting and Processing Your Personal Data
Whenever you visit our websites, we store certain information about the browser and operating system you are using; the date and time of your visit; the status of the interaction (e.g. whether you were able to access the website or received an error message); the usage of features on the website; any search phrases you entered; how often you visit individual websites; the names of the files you access; the amount of data transferred; the Web page from which you accessed our website; and the Web page you visited after visiting our website, whether by clicking links on our websites or entering a domain directly into the input field of the same tab (or window) of the browser in which you have our websites open. In addition, we store your IP address and the name of your Internet service provider for seven days. This is for security reasons – in particular, to prevent and detect attacks on our websites or attempts at fraud.
We will store other personal data only if you share that information – for instance, by filling out a registration form, contact form, survey, contest entry, or to execute a contract. In such cases, we will store only the data we are allowed to keep based on consent given by you or in accordance with applicable legal regulations (more information on this can be found in the section titled "Legal Foundation for Processing").
You are neither legally nor contractually obligated to share your personal information. However, certain features of our websites may depend on the sharing of personal information. If you do not provide your personal information in such cases, you may not be able to use those features or they may only be available with limited functionality.
3. Purposes of Use
We use the personal data collected during your visit to any of our websites to make using them as convenient as possible for you and to protect our IT systems against attacks and other unlawful activities.
If you share additional information with us – for example, by filling out a registration form, contact form, survey, contest entry or to execute a contract with you – we will use that information for the designated purposes, purposes of customer management and – if required – for purposes of processing and billing and business transactions within the required scope in each instance.
4. Transfer of Personal Information to Third Parties; Social Plugins
Our websites may also contain third-party offers. If you click on any such offers, we will transfer the amount of data required to the appropriate provider (e.g. the fact that you found the offer in question on our website and, if applicable, additional information that you have already provided for this purpose on our websites).
On our websites, whenever we use so-called "social plugins" from social networks like Facebook, Twitter and Google+, we incorporate them in the manner described below.
When you visit our websites, social media plugins are deactivated. That means no information whatsoever is transferred to the operators of those networks. If you wish to use one of the networks, click on the appropriate plugin in order to be connected directly to that network's server.
If you have a user account with that network and are logged in at the moment you activate the plugin, the network will be able to detect your visit to our websites and assign it to your user account. If you wish to prevent that, please log off from the network before activating the social plugin. A social network will not be able to detect that you have visited other Daimler websites unless you have activated its social plugin on those sites as well.
When you activate a social plugin, the network transfers the content thus made available directly to your browser, which incorporates it into our websites. In that situation, data transfers initiated and controlled by the respective social network may also take place. Your connection to a social network, the data transfers that take place between the network and your system, and your interactions on that platform are governed exclusively by the respective network's data protection provisions.
The social plugin will remain active until you deactivate it or delete your cookies.
Whenever you click on the link to an offer or activate a social plugin, your personal information may be transferred to providers in countries outside the European Economic Area that, from the standpoint of the European Union ("EU"), do not guarantee an "appropriate level of protection" meeting EU standards for processing personal information. Please keep these circumstances in mind before you click on a link or activate a social plugin, thereby causing your data to be transferred.
We want the content of our websites to match your preferences as closely as possible, thereby improving what we offer you. To identify especially popular areas of our websites, we use the following analysis tools: Google Analytics.
When we employ these analytics tools, information may be transferred to servers located in the US and processed there. Please note the following: From the standpoint of the European Union, the United States does not provide an “appropriate level of protection” meeting EU standards for the processing of personal information. Individual companies, however, can ensure an equivalent level of protection through certification under the EU-U.S. Privacy Shield Framework.
If you do not wish us to use the abovenamed analytics tools to collect and analyze information about your visit to our website, you may permanently object to the practice (opt out) at any time.
We will comply with your rejection by placing an opt-out cookie in your browser. This cookie will only indicate that you have opted out. Please note that for technical reasons, an opt-out cookie affects only the browser in which it has been installed. If you delete the cookie or use a different browser or device, you will need to opt out again.
Below you will find information about the providers of the analytics tools and the respective opt-out procedures:
Google Inc. (“Google”):
Google is certified under the EU-U.S. Privacy Shield Framework.
You can prevent your information from being transferred as well as collected and processed by Google. Google provides information about this at the following link:
We take technical and organizational security measures in order to protect your information managed by us from being tampered with, lost, destroyed, or accessed by unauthorized individuals. We are continuously improving our security measures in line with technological advancements.
7. Legal Foundations for Processing
If you have provided us with a consent form for the processing of your personal data, this consent serves as the legal basis for the processing (Article 6(1)(a) GDPR).
The legal basis for processing personal data for the purpose of initiating or concluding a contract with you is Article 6 (1)(b) GDPR.
In so far as we require your personal data to fulfill our legal obligations (e.g. data storage) we are permitted to do this in accordance with Article 6 (1)(c) GDPR.
Furthermore, we process personal data in order to assert our legitimate interests as well as those of a third party in accordance with Article 6 (1)(f) GDPR. Examples of such legitimate interests include maintaining the functionality of our IT systems as well as the (direct) marketing of our products and services and those of third parties and the legally required documentation of business contacts. As part of the consideration of interests required in each case, we take into account various aspects – in particular, the type of personal information, the purpose of processing, the circumstances of processing, and your interest in the confidentiality of your personal information.
8. Deleting Your Personal Information
Your IP address and the name of your Internet service provider, which we store for security reasons only, will be deleted after seven days. Moreover, we delete your personal information as soon as the purpose for which it was collected and processed has been fulfilled. Beyond this time period, data is only stored to the extent made necessary by the legislation, regulations or other legal provisions to which we are subject in the EU or by legal provisions in third-party countries if these have an appropriate level of data protection. Should it not be possible to delete data in individual cases, the relevant personal data are flagged to restrict their further processing.
9. Data Subjects’ Rights
As a person affected by data processing, you have the right to information (Article 15 GDPR), Correction (Article 16 GDPR), Deletion (Article 17 GDPR), Restricted Processing (Article 18 GDPR), and Data Transferability (Article 20 GDPR).
If you have consented to the processing of your personal information by us, you have the right to revoke your consent at any time. Your revocation does not affect the legality of the processing of your personal information that took place before your consent was revoked. It also has no effect on the continued processing of the information on another legal basis, such as to fulfill legal obligations (see section titled "Legal Foundation of Processing").
Right to Object
For reasons relating to your particular situation, you have the right to file an objection at any time to the processing of personal data pertaining to you that is collected under Art. 6, para. 1e, of the GDPR (data processing in the public interest) or Art. 6, para. 1f, of the GDPR (data processing based on a consideration of interests). If you file an objection, we will continue to process your personal data only if we can document mandatory, legitimate reasons that outweigh your interests, rights and freedoms, or if processing is for the assertion, exercise or defense of legal claims.
If possible, please direct your claims or declarations to the following contact address: firstname.lastname@example.org.
If you are of the opinion that the processing of your personal data is in breach of the law, you have the right to lodge a complaint with a responsible data protection authority (Article 77 GDPR).
If you subscribe to a newsletter offered on our website, the information provided during registration for the newsletter will be used solely for the purpose of mailing the newsletter unless you consent to its use for additional purposes. You can cancel the subscription at any time by using the unsubscribe option provided in the newsletter.
11. Central Daimler AG access service
Last revised: November 2019