1. Privacy Policy

We are pleased about your visit on our website www.manthey-racing.de (subsequently called "Manthey-Racing").

Manthey-Racing attaches great importance to the protection of personal data to safeguard your personal rights. Data protection is an essential quality feature for us in the design and implementation of our business processes. With this privacy policy we would like to inform you about our data protection principles when processing and using personal data.

Personal data is all information about your identity, for example your name, your e-mail address, your postal address. However, communication data such as telephone and fax numbers and even the IP address of the device you used to access this website are also considered personal data.

Every time you use the Internet, you leave traces in the form of personal data, whereby two ways of transmitting this data can be distinguished. On the one hand, due to the technology used when using the Internet, personal data is automatically transmitted as protocol data, such as the IP address. However, an unambiguous personal reference can only be established for these data with a disproportionate amount of effort. The other way of data transfer is the voluntary provision of personal data by you as the user. For example, if you request information from us via the Internet, we need at least your valid e-mail address to respond. If you want us to send you something by post, you would have to give us your name and postal address. We delete the data arising in this connection after storage is no longer necessary or restrict processing if there are legal storage obligations

1.1 Scope of application

This website contains links to the websites of providers that are not connected to Manthey-Racing or created by Manthey-Racing. This privacy policy does not apply to these pages. The content or privacy principles of linked, external sites are the sole responsibility of their operators

2. Collection, processing, use and disclosure of personal data

Within the scope of the services offered via the website, we collect personal data. In the survey, the input fields that we require to provide a service are usually marked as required information. If you provide us with additional data, this is done voluntarily. This applies in particular to data which you provide us with when you apply for a job online, take part in a survey or a competition.

All personal data provided will be stored, processed and used in accordance with the laws on data protection and data security applicable in the Federal Republic of Germany and other legal requirements and regulations.

The data processing centre responsible in accordance with Art. 4 Para. 7 DS-GVO for this Internet presence is Manthey-Racing GmbH, Rudolf-Diesel-Straße 11-13, 53520 Meuspath, represented by:

Managing Directors Nicolas Raeder and Martin Raeder          
Phone: +49 (0) 2691 / 9338-0     
Fax: +49 (0) 2691 / 9337-50   
e-mail: info[at]manthey-racing.de

Questions on data protection and contact persons

FFor questions regarding the processing of your personal data, requests for information, suggestions and complaints, please contact the data protection officer of Manthey-Racing. You can reach our data protection officer by e-mail or by writing to our postal address with the additional information "data protection officer":

Data protection officer:

Manthey-Racing GmbH
Data protection officer
Rudolf-Diesel-Straße 11-13
53520 Meuspath
Phone: +49 (0) 2691 / 9338-0  
E-Mail: datenschutz[at]manthey-racing.de

If confidentiality is desired, please contact our data protection officer by mail with the notation "Personal / Confidential".

Further contact address:

Of course, you can also contact the following address for any questions regarding the processing of your personal data, requests for information, suggestions, to exercise your rights and for complaints: Manthey-Racing GmbH, Rudolf-Diesel-Straße 11-13, 53520 Meuspath, e-mail: info[at]manthey-racing.de.

In addition to the purely informative use of our website, we offer various services which you can use if you are interested. To do so, you will generally have to provide additional personal data which we use to provide the respective service and to which the data processing principles listed here apply. In order to answer your enquiries, process your order or provide you with access to special information or offers, it may be necessary to transfer data within the Group. All data transfers between the individual Group companies are carried out in compliance with the relevant legal provisions.

To carry out some business processes, Manthey-Racing also uses external service providers within the scope of order data processing, for example forwarding agencies, IT service providers for the hosting of our websites, call centres for the handling of complaints within the scope of contract processing or for the destruction of files and paper. When selecting and commissioning external service providers, Manthey-Racing strictly ensures that the data protection regulations are fulfilled and that the requirements, instructions and guidelines of Manthey-Racing, to which the service providers are bound, are strictly observed. Furthermore, we may pass on your personal data to third parties if we offer campaigns, competitions, contract conclusions or similar services together with partners. You will receive more detailed information when you provide your personal data.

All employees working in a company belonging to Manthey-Racing are obliged to maintain data secrecy and confidentiality. Your personal data will not be passed on to third parties outside of Manthey-Racing GmbH. Of course, we will not pass on, sell or otherwise market your personal data, even in extracts.

In the event of a credit risk we will transfer your data (name, address, e-mail address, details of the company and, if applicable, contract and receivables data) to cooperating credit agencies (Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss, Germany) for the purpose of debt collection processing. The legal basis for this transfer is Article 6 I b of the Basic Data Protection Regulation (DS-GVO) and Article 6 I f of the DS-GVO. Transmissions on the basis of Art 6 I f DS-GVO may only take place to the extent that this is necessary to protect the legitimate interests of our company and does not outweigh the interests or fundamental rights and freedoms of the persons concerned, which require the protection of personal data.

For the purpose of deciding on the foundation, implementation or termination of the contractual relationship, we also collect or use automatically generated probability values, in the calculation of which address data, among other things, can be included.

2.1 Use of personal data for marketing purposes

With your consent, we will also use your personal data (e.g. surname, first name, address, telephone number, e-mail address) for marketing or market and opinion research purposes.

If you have given such consent to process your data, you can revoke it at any time. Such revocation does not affect the legitimacy of the processing of your personal data carried out on the basis of your consent until revocation.

2.2 Automatically collected, non-personal or only indirectly personal data

It is technically impossible to prevent the temporary storage of the IP address or the domain name or the name of the Internet service provider of the computers accessing our Internet pages. When using the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Web page from which the access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer
• Name of the website you last visited
• Names of the websites you have visited on the Manthey-Racing website (www.manthey-racing.de)
• Name of the file that was accessed
• transmitted data volume
• Access status (file transferred, file not found etc.)
• Date and time of all calls, transactions

This information is not evaluated on a personal basis, but in an anonymised manner.. Through these statistical evaluations Manthey-Racing receives information about the use and acceptance of your internet presence. They are used to improve the attractiveness, content and functionality of the websites.

3. Cookies and similar technologies

We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specifically used terminal device. The cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier. However, this does not mean that we obtain direct knowledge of their identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies which are stored on your end device for a certain fixed period of time in order to optimize user-friendliness. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings you have made, so that you do not have to enter them again.

On the other hand, we use cookies to record the use of our website statistically and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to recognize automatically when you visit our site again that you have already been with us.

Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to always display a message before a new cookie is created. However, the complete deactivation of cookies can lead to the fact that you cannot use all functions of our website. Under the following links you can find out how to deactivate cookies in the most important browsers:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies  

3.1 Use of Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transferred to a Google server in the USA and shortened there. If data is transferred to the USA, this is done on the basis of standard EU contractual clauses.

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

For more information on terms of use and data protection, please visit www.google.com/analytics/terms/de.html and policies.google.com.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month. The legal basis for these processing operations is in each case your consent, Art. 6 para. 1 lit. a DSGVO.

Revocation of consent:

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.

3.2 Social Media Plugins

This website also contains programs ("plug-ins") of the social networks Facebook, Twitter, Pinterest and Instagram. You can recognize the provider of the plug-in by the mark on the box above its initial letter or logo. We offer you the option to communicate directly with the provider of the plug-in via the button. When you call up a page of our website and the individual plug-ins are activated, a connection is established between your browser and the servers of the respective provider, and a cookie is placed on your end device by the respective provider. A data transmission may also take place if you yourself do not have an account with the respective operator of the social network or have an account there but are not logged in there at the moment of visiting our website. In addition, data is transmitted to the provider as a result of further interactions with the respective social plugin (e.g. clicking the "Like me" button on Facebook, re-tweet button on Twitter). If you are logged in to the respective provider, the provider may link the collected data to your respective user account.

The plug-in providers store the data collected about you as usage profiles and use them for the purposes of advertising, market research and/or demand-oriented design of their website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website.

This personal data is processed for the purpose of measuring reach, monitoring the success of campaigns, remarketing, and interest- and behavior-based marketing Such data processing only takes place on the basis of your consent. In addition, we use the so-called two-click solution. This means by visiting our website, initially no personal data is passed on to the providers of the plug-ins. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding web page of our online offer.

We hereby point out that, depending on the location of the service provider named below, the data named in more detail below may be transferred to and processed on servers outside the European Union. In this case, there is a risk that the level of data protection required by the General Data Protection Regulation will not be complied with and that the enforcement of your rights will not be possible or will be difficult. Insofar as a transfer of data takes place in such a third country, this is done on the basis of concluded EU standard contractual clauses.

3.3 Use of the Facebook plug-in

We use the Facebook plug-in of Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland of the parent company Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (hereinafter: "Facebook") on our site.

Each time you visit a subpage of our website on which a Facebook plug-in has been integrated, a connection is established between your browser and the Facebook servers, and Facebook sets a cookie on your terminal device.

A complete overview of Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE abgerufen werden.

As part of this technical process, Facebook receives information about which specific subpage of our website is visited by the data subject.

If the visitor to our website is logged in to Facebook at the time of his visit, Facebook recognizes which subpages of our website are visited. This information is collected by Facebook and assigned to the respective Facebook user account of the visitor. If the user does not wish such information to be transmitted to Facebook, this can be prevented by the user logging out of his Facebook user account before activating the plug-in.

In this context, usage data (e.g. access times, web pages clicked on) and communication data (e.g. information about the device used, IP address) are processed.

This personal data is processed for the purpose of measuring reach, monitoring the success of campaigns, remarketing, and interest- and behavior-based marketing.

The legal basis for this processing is in each case your consent, Art. 6 para. 1 lit. a DSGVO.

Further information about the purpose and scope of the collection, processing and use of personal data by Facebook can be found a https://de-de.facebook.com/about/privacy/. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Revocation of consent:

3.4 Use of the Twitter plug-in

We use the Twitter plug-in of Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland, of the parent company Twitter Inc.: 539 Bryant St. Suite 402, San Francisco, CA 94107, USA (hereinafter: "Twitter").

Each time you call up a subpage of our website on which a Twitter plug-in has been integrated, a connection is established between your browser and the servers of Twitter, and a cookie is placed on your terminal device by Twitter.

Further information on the Twitter plug-in is available at https://about.twitter.com/de/resources/buttons abrufbar.

As part of this technical process, Twitter receives information about which specific subpage of our website is visited by the data subject.

If the visitor to our website is logged in to Twitter at the time of his visit, Twitter recognizes which subpages of our website are visited. This information is collected by Twitter and assigned to the respective Twitter user account of the visitor. If the user does not wish such information to be transmitted to Twitter, this can be prevented by the user logging out of his Twitter user account before activating the plug-in.

In this context, usage data (e.g. access times, web pages clicked on) and communication data (e.g. information about the device used, IP address) are processed.

This personal data is processed for the purpose of measuring reach, monitoring the success of campaigns, remarketing, and interest- and behavior-based marketing. The legal basis for this processing is in each case your consent, Art. 6 para. 1 lit. a DSGVO

Further information on the purpose and scope of the collection, processing and use of personal data by Twitter can be found at https://twitter.com/privacy?lang=de. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Revocation of consent:

3.5 Use of the Pinterest plug-in

We use the Pinterest plug-in of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, of the parent company of Pinterest, Inc, 808 Brannan St, San Francisco, CA 94103, USA (hereinafter: Pinterest).

Each time you call up one of the sub-pages of our website on which a Pinterest plug-in has been integrated, a connection is established between your browser and the servers of Pinterest, and a cookie is placed on your end device by Pinterest.

More information on Pinterest is available at https://pinterest.com/.

As part of this technical process, Pinterest receives information about which specific subpage of our website is visited.

If the visitor to our website is logged into Pinterest at the same time as his visit, Pinterest recognizes which subpages of our website are visited. This information is collected by Pinterest and assigned to the respective Pinterest user account of the visitor. If the user does not want this information to be transmitted to Pinterest, this can be prevented by logging out of the user's Pinterest user account before activating the plug-in.

In this context, usage data (e.g. access times, web pages clicked on) and communication data (e.g. information about the device used, IP address) are processed.

This personal data is processed for the purpose of measuring reach, monitoring the success of campaigns, remarketing, and interest- and behavior-based marketing. The legal basis for this processing is in each case your consent, Art. 6 para. 1 lit. a DSGVO.

For more information about the purpose and scope of the collection, processing and use of personal data by Pinterest, please visit https://about.pinterest.com/privacy-policy. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Revocation of consent:

3.6 Use of the Instagram plug-in

We use the Instagram plug-in of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland of the parent company Instagram Inc, 1601 Willow Road, Menlo Park CA 94025, USA.

Each time you visit a subpage of our website on which an Instagram plug-in has been integrated, a connection is established between your browser and the servers of Instagram, and a cookie is placed on your end device by Instagram.

As part of this technical process, Instagram receives information about which specific subpage of our website is visited.

If the visitor to our website is logged into Instagram at the same time as his visit, Instagram recognizes which subpages of our website are visited.

This information is collected by Instagram and assigned to the respective Instagram user account of the visitor. If the user does not want this information to be transmitted to Instagram, this can be prevented by logging out of the user's Instagram account before activating the plug-in.

In this context, usage data (e.g. access times, web pages clicked on) and communication data (e.g. information about the device used, IP address) are processed.

This personal data is processed for the purpose of measuring reach, monitoring the success of campaigns, remarketing, and interest- and behavior-based marketing. The legal basis for this processing is in each case your consent, Art. 6 para. 1 lit. a DSGVO.

Further information about the purpose and scope of the collection, processing and use of personal data by Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Revocation of consent:

3.7 Use of Google Maps

If you have given your consent, we use the map service Google Maps of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google") on our website. Google collects and processes the IP address of the visitor. If you visit a website on which Google Maps is integrated, your IP address and your location data (the latter usually not without your consent) will be transmitted to Google, regardless of whether Google Maps is actually used or you are logged into your Google account. Your IP address is assigned to your Google account if you are logged in when visiting our website. For more information on the processing of data by Google, please refer to Google's privacy policy at https://policies.google.com/privacy.

The legal basis for this processing is in each case your consent, Art. 6 para. 1 lit. a DSGVO.

Revocation of consent:

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. In particular, you will no longer be able to access the interactive Google Maps embedded in our website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link https://tools.google.com/dlpage/gaoptout?hl=de.

3.8 YouTube video integration

For the integration of videos on our website we use YouTube of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA of the parent company Google Inc, 1600 Amphitheatere Parkway, Mountain View, Ca. 94043, USA.

Each time you visit a subpage of our website on which Youtube videos have been integrated, a connection is established between your browser and the servers of Youtube, and a cookie is placed on your terminal device by Youtube.

As part of this technical process, YouTube and Google receive information about which specific subpage of our website is visited.

Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google receive information about which specific subpage of our website is visited.

This information transfer takes place regardless of whether the videos displayed are actually viewed or clicked on or you are logged into your YouTube or Google account.

If the visitor to our website is logged into Youtube at the same time as his visit, Youtube recognizes which subpages of our website are visited. This information is collected by Youtube and assigned to the respective Youtube user account of the visitor. If the user does not wish this information to be transmitted to Youtube, this can be prevented by the user logging out of his Youtube user account before activating the plug-in.

In this context, usage data (e.g. access times, web pages clicked on) and communication data (e.g. information about the device used, IP address) are processed. The legal basis for this processing is in each case your consent, Art. 6 para. 1 lit. a DSGVO.

Further information on the purpose and scope of the collection, processing and use of personal data by Youtube can be found at https://www.google.de/intl/de/policies/privacy/. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Revocation of consent:

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we point out that in this case you may not be able to use all features of this website. In particular, you will no longer be able to access the videos embedded in our website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Youtube and the processing of this data by Youtube or Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

3.9 Vimeo video integration

For the integration of videos on our website we use Vimeo of Vimeo LLC, 555 West 18th Street, New York 10011, USA.

Each time you visit a subpage of our website on which Vimeo videos have been integrated, a connection is established between your browser and the servers of Vimeo, and a cookie is placed on your terminal device by Vimeo.

As part of this technical process, Vimeo receives information about which specific subpage of our website is visited.

Further information about Vimeo can be found at https://vimeo.com/de/. As part of this technical procedure, Vimeo receives information about which specific subpage of our website is visited.

This information transfer takes place regardless of whether the videos displayed are actually viewed or clicked on, or whether you are logged into your Vimeo account.

If the visitor to our website is logged in to Vimeo at the time of his visit, Vimeo recognizes which subpages of our website are visited. This information is collected by Vimeo and assigned to the respective Vimeo user account of the visitor. If the user does not wish such information to be transmitted to Vimeo, this can be prevented by the user logging out of his Vimeo user account before activating the plug-in.

In this context, usage data (e.g. access times, web pages clicked on) and communication data (e.g. information about the device used, IP address) are processed. The legal basis for this processing is in each case your consent, Art. 6 para. 1 lit. a DSGVO.

For more information about the purpose and scope of the collection, processing and use of personal data by Vimeo, please visit vimeo.com/privacy. There you will also receive further information about your rights in this regard and setting options for protecting your privacy

Revocation of consent:

3.10 Storage duration and deletion

The data processed by us will be deleted in accordance with Art. 17 and 18 DSGVO or restricted in its processing as soon as it is no longer required for its intended purpose or you have exercised your right of revocation or objection and the deletion does not conflict with any statutory retention obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. In this case, the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

We are subject to statutory retention and documentation periods from the German Commercial Code (HGB) and the German Fiscal Code (AO). The documentation and retention periods stipulated therein are 6 years for business correspondence such as commercial letters and 10 years for tax-relevant documents such as invoices, accounting vouchers and commercial books.

4. Active contents

Active content is defined as the execution of non-visible functions in an Internet page. These are mostly programs or scripts that are hidden in the website. These are executed as soon as the relevant Internet page is called up or the content is displayed. The best known are: Java Applets, ActiveX Controls, JavaScript or VBScript. With the development of active content, the usability and functional range of internet pages has been considerably extended. They make it possible to play videos on a website, add music to pages, enable animated graphics, fade in current news texts in a running line on the page and much more. In contrast to cookies, active contents represent a high security risk. Since some of them install themselves on your terminal device, viruses, dialers and Trojans can also be installed. In contrast to cookies, active content involves the risk of a third party gaining unrestricted access to your terminal device and thus to your data.

As with cookies, almost all Internet browsers are set by default to automatically accept active contents so that they can be executed or are executed. Because of the immense threat posed by this active content, you should at least change your browser settings for active content so that you are generally informed at the prompt as soon as a website contains active content and wants to install or launch it. There are no binding security guidelines for the developers of such content. If you do not want to generally prevent active content, but want to determine its approval yourself by means of the control prompt, then the so-called certified, secure, signed or otherwise trustworthily marked content must not be excluded. The catch when deactivating or rejecting active content is that you will lose a great deal of comfort when surfing the Internet pages, your browser will no longer be able to display some content at all or will suppress it in some areas, functions will not be executed and, of course, you will often be asked for input.

4.1 Active contents in internet pages of Manthey-Racing

Unfortunately, the extensive functionality of this website is also based on active content. Even though we can guarantee that we use active content exclusively for reasons of functionality and at no time intend to harm you or even access your data, we have not yet found a solution to be able to completely dispense with this content when programming our pages without compromising the functionality of individual pages. Therefore, if you have deactivated active content in your browser settings, some of our websites may not be displayed correctly, functions and content may be missing or inaccessible.

5. Use of our webshop

If you would like to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information required for the processing of contracts is marked separately, further information is voluntary. We process the data provided by you to process your order. For this purpose we can pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO. When you create a customer account, your data will be stored revocably for you as a service for further purchases at a later date. The legal basis for this is Art. 6 para. 1 lit. b DS-GVO. You can always delete all other data, including your user account, in the customer area. Your data will only be stored as long as you have an account in our webshop. Due to commercial and tax law requirements, however, we are obliged to store your address, payment and order data for a period of ten years. After deletion of your account, your data will therefore only be used to comply with legal obligations. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information. The legal basis is Art. 6 para. 1 sentence 1 lit. f) DS-GVO. Our justified interest in collecting data results from the fact that we need the data for the purpose of optimising our offers.

To prevent unauthorised access to your personal data by third parties, in particular financial data, the ordering process is encrypted using TLS technology.

6. Payment details

Payment data is collected during the ordering process. For orders on our website you have the possibility to choose between different payment methods. For each payment method, Manthey-Racing stores personal data (name, first name, street, house number, postcode, city, country and IBAN). The legal basis for the data processing is Art. 6 para. 1 b) DS-GVO, as the processing of the data is necessary for the execution of the contract. In addition, the following applies to the payment methods "credit card" and "PayPal":

(a) Credit card:
If you pay by credit card,

Adyen NV, German Branch
Friedrichstraße 63
10117 Berlin

collects the following data:

• Name of the credit card holder
• Credit card number
• Credit card validity period
• Security code

The legal basis for the data processing is Art. 6 para. 1 b) DSGVO, as the processing of the data is necessary for payment by credit card and thus for the execution of the contract. Manthey-Racing does not collect and store the payment data for credit card payments itself, but these data are collected directly by the mentioned service providers. The service providers only have knowledge of the order number and the invoice amount, without being able to assign this information to other information (such as your address or e-mail address). Manthey-Racing adheres to the highest security and data protection standards when working with this service provider. The service provider is therefore certified according to Level 1 of the PCI standard (DSS 3.2 - for further information please refer to: www.adyen.com/de_DE/plattform/zertifizierungen)

 (b) PayPal

If a payment is made via the online payment service PayPal, please note the following: PayPal allows online payments to be made to third parties. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie S.C.A., 22-24 Boulevard Royal, 2449 Luxem-bourg. If you choose PayPal as your payment method, your data required for the payment process will be automatically transmitted to PayPal. The following data are regularly involved:

• Name
• Address
• Company
• e-mail address
• Phone and mobile number
• IP-Adresse

The data transmitted to PayPal may be transmitted by PayPal to credit agencies. The purpose of this transmission is to check identity and creditworthiness. PayPal may also pass on your data to third parties if this is necessary for the fulfilment of contractual obligations or if the data is to be processed on behalf of an order. The privacy policy of PayPal can be found at www.paypal.com/de/webapps/mpp/ua/privacy-full/.

The legal basis for the data processing is Art. 6 para. 1 b) DSGVO, as the processing of the data is necessary for the payment with PayPal and therefore for the execution of the contract.

1. (c) Credit chec:

In the event of a credit risk we will transfer your data (name, address, e-mail address, details of the company and, if applicable, contract and receivables data) to cooperating credit agencies (Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss, Germany) for the purpose of debt collection processing. The legal basis for this transfer is Article 6 I b of the Basic Data Protection Regulation (DS-GVO) and Article 6 I f of the DS-GVO. Transmissions on the basis of Art 6 I f DS-GVO may only take place to the extent that this is necessary to protect the legitimate interests of our company and does not outweigh the interests or fundamental rights and freedoms of the persons concerned, which require the protection of personal data.

7. Data that we process when you order our news

When registering for a user account and on our website, you can also order the sending of news about our products and services (hereinafter referred to as "newsletter"). The sending of the newsletter requires that you have a valid e-mail address and that you have registered to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address you entered for the first time for sending the newsletter using the double opt-in procedure. This confirmation e-mail is used to check whether you, as the owner of the e-mail address, authorise receipt of the newsletter. The registration only becomes effective after you have clicked on the link in the confirmation email. Both when you subscribe to our newsletter and when you click on the confirmation link and register as a registered user, your respective Internet Protocol address (IP address) is saved together with the current date and time. This data is stored to ensure the provision of our services and to prevent their misuse. If necessary, this data makes it possible to clarify criminal offences committed and to enforce the private rights of third parties. In this respect, the storage of this data is necessary for our protection, is therefore in our legitimate interest and is based on Art. 6 Paragraph 1 Sentence 1 Letter f) DS-GVO.

Subject to your consent, we process your data as follows:

The personal data collected in the course of registering to receive the newsletter is used to send the newsletter. Furthermore, you can be informed by e-mail if this is necessary for the operation of the newsletter service or for registration (e.g. changes to the range of news or changes to technical conditions). You can cancel the sending of the newsletter at any time. There is a link at the end of every newsletter e-mail. You can also unsubscribe from the newsletter directly on our website at anytime. By registering for our newsletter service, you agree to receive the newsletter and to the processing of this data in accordance with the above. In this respect, the data processing is based on Art. 6 Paragraph 1 Letter a) DS-GVO.

When you order our newsletter, your internet protocol address (IP address), the date and time of registration are saved. This data is stored to ensure the provision of our services and to prevent their misuse. If necessary, this data makes it possible to clarify criminal offences committed and to enforce the private rights of third parties. In this respect, the storage of this data is necessary for our protection, is therefore in our legitimate interest and is based on Art. 6 Para. 1 Sentence 1 Letter f) DS-GVO. The data collected in the course of ordering the newsletter will be stored until you unsubscribe from the newsletter. Storage beyond this is possible in the cases mentioned in section 4.

8. What are your rights?

You have the following rights regarding the use of your data. You can assert these rights against us as the person responsible. You are welcome to contact our data protection officer directly.

8.1 Right to information

You have the right to receive free information from us at any time about the personal data stored about you and to receive a copy of this information. You also have the right to receive information about the following:

• • the processing purposes
  • the categories of personal data processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organisations
  • if possible, the planned duration for which personal data will be stored or, if this is not possible, the criteria for determining this duration
  • the existence of a right of rectification or deletion of personal data concerning you or of a right of opposition to or limitation of the processing by the controller
  • the existence of a right of appeal to a supervisory authority
  • if the personal data are not collected from the data subject: all available information on the origin of the data
  • the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the DPA and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing on the data subject

You also have a right of information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to be informed about the appropriate guarantees in connection with the transmission.

If you would like to make use of this right of information, you can contact our data protection officer or another of our employees at any time.

Your right to information is essentially based on Art. 15 DS-GVO.

8.2 Right to have incorrect data corrected and incomplete data added

You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If you wish to exercise this right of correction, you can contact our data protection officer or another of our employees at any time. Your right to correct incorrect and complete incomplete data is based on Art. 16 DS-GVO.

Ihr Recht auf Berichtigung falscher und Ergänzung unvollständiger Daten beruht auf Art. 16 DS-GVO.

8.3 Right to data deletion (right to be forgotten)

You have the right to ask us to delete the personal data concerning you immediately if one of the following reasons applies and if the processing is not necessary: 

• • The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
  • You withdraw your consent on which the processing was based in accordance with Article 6 paragraph 1 letter a DS-GVO or Article 9 paragraph 2 letter a DS-GVO and there is no other legal basis for the processing.
  • You object to the processing in accordance with Art. 21 (1) DS-GVO and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) DS-GVO.
  • Personal data were processed illegitimately.
  • We are obliged to delete your personal data in order to fulfil a legal obligation under Union law or the law of the Member States.
  • The personal data were collected in relation to information society services that were offered in accordance with Article 8 paragraph 1 of the DS-GVO.

If one of the above reasons applies and you wish to have personal data stored by us deleted, you can contact our data protection officer or another of our employees at any time. Our data protection officer or our employee will ensure that the request for deletion is complied with immediately.

Your right to data deletion is based on Art. 17 DS-GVO.

8.4 Right to restrict processing

You have the right to demand that we restrict processing if one of the following conditions is fulfilled: 

• The accuracy of the personal data is disputed by you for a period of time that allows us to verify the accuracy of the personal data.
• The processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data.
• We no longer need the personal data for the purposes of processing, but you do need the data to assert, exercise or defend legal claims.
• You have appealed against the processing in accordance with Art. 21 para. 1 DS-GVO and it is not yet clear whether the legitimate reasons of our company outweigh your rights.

If one of the above-mentioned conditions is fulfilled and you wish to request the restriction of personal data stored with us, you can contact our data protection officer or another of our employees at any time. Our data protection officer or another employee will ensure that the processing is restricted.

Your right to restrict processing is based on Art. 18 DS-GVO.

8.5  Right to data transmission

You have the right to receive the personal data concerning you and provided to us by you in a structured, common and computer readable format. This includes the right to transfer this data to another responsible party without hindrance from us, provided that (i) the processing is based on the consent pursuant to Art. 6 paragraph 1 letter a) DS-GVO or Art. 9 paragraph 2 letter a DS-GVO or on a contract pursuant to Art. 6 paragraph 1 letter b) DS-GVO and (ii) the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task in the public interest or in the exercise of official authority delegated to us. Furthermore, when exercising your right to data transferability, you have the right to request that personal data is to be transferred directly from one person responsible to another, insofar as this is technically possible and provided that this does not affect the rights and freedoms of other persons (Art. 20 para. 1 DS-GVO).

Your right to data transfer in this respect is based on Art. 20 DS-GVO.

8.6 Right of appeal

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6(1)(e) or (f) of the DPA. This also applies to profiling based on these provisions.

We no longer process personal data in the event of an objection, unless we can prove compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to our processing for direct marketing purposes, we will no longer process your personal data for these purposes.

In addition, you have the right to object, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out by us for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1 of the DS-GVO, unless such processing is necessary for the performance of a task carried out in the public interest. To exercise your right of objection, you can contact our data protection officer or any other of our employees directly. You are also free to exercise your right of objection in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, by means of automated procedures involving technical specifications.

Your right of objection is based on Article 21 of the DS-GVO.

8.7 Automated decisions in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way, except where such decision is necessary for the conclusion or performance of a contract between you and us or is authorised by Union or national law to which we are subject and such law contains appropriate measures to safeguard your rights, freedoms and legitimate interests or with your explicit consent.

If the decision is necessary for the conclusion or performance of a contract between you and us or is made with your express consent, we will take reasonable measures to protect your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the part of our company, to present our point of view and to challenge the decision.

If you wish to assert rights with regard to automated decisions, you can contact our data protection officer or another of our employees at any time.

These rights are based on Art. 22 DS-GVO.

8.8 Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data in whole or in part at any time.

Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

If you wish to exercise your right to revoke your consent, you can contact our data protection officer or another of our employees at any time. You will find the contact details above this data protection notice, directly before the summary.

Your right to revoke a granted consent under data protection law is based on Art. 7 para. 3 DS-GVO.

8.9 Right of complaint to the Authority

You have the right to submit a complaint to the supervisory authority. This right is based on Art. 56 (2) DS-GVO.

9. Data security

Manthey-Racing takes technical and organisational measures to protect your personal data against accidental or intentional manipulation, falsification, loss, destruction or access by unauthorised persons. These measures are continuously adapted, improved or extended according to the technological development. Access to your personal data is restricted to the employees required to fulfil the purpose.

10. Changes to this privacy policy

The use of collected data is always subject to the privacy policy which is current at the time the data is collected.

We reserve the right to amend the privacy policy in order to adapt it to a changed factual and legal situation. In this case we will publish the new and then current version of this privacy policy on our website. When the occasion arises, we will point out any changes to this privacy policy in a suitable place. This applies in particular if we intend to use data already collected in deviation from the original purpose.

If the use of your personal data is based on your consent, we will always use your data only to the extent to which you have consented, irrespective of any changes to this privacy policy in the meantime.

Version:                           2.0 replaces Version 1.0

Modification date:           21.05.2021