Privacy Statement
Controller/Data Fiduciary:
Mercedes-Benz India ("Mercedes-Benz India"/"We")E-3 MIDC, Chakan, Phase III, Chakan Industrial Area,
Kuruli & Nighoje, Taluka: Khed,
Pune 410501 (India) Phone no: 0008000501888
email: cs.ind@cac.mercedes-benz.com
Data Protection Officer:
Mercedes-Benz AGChief Officer for Corporate Data Protection
HPC E600
Mercedesstraße 120
D-70372 Stuttgart
Germany
E-Mail: data.protection@mercedes-benz.com
Areas:
- Data protection information for the Mercedes-Benz Store website
- Data protection information for the purchase of chargeable Mercedes-Benz Digital Extras
- Data protection information for the purchase of chargeable Mercedes-Benz Digital Extras in the MBUX multimedia system
Data protection information for the Mercedes-Benz Store website
1. Data protection
Thank you for visiting our websites and your interest in our products and services. We attach great importance to the protection of your personal data. In this data protection information we explain how we collect your personal data, what we do with these data, for what purposes and on what legal basis this takes place, and what rights and entitlements this entails for you. We additionally refer to the Mercedes-Benz Data Protection Policy:
Mercedes-Benz Data Protection Policy (pdf)
Our data protection information for the use of our websites and the Data Protection Policy of Mercedes-Benz AG do not apply to your activities on the websites of social networks or other providers which you may access via links on our websites. Please obtain information about the respective data protection regulations on the websites of said providers.
2. Collection and processing of your personal data
- When you visit our websites we save specific information about the browser and operating system you use, the date and time of your visit, the access status (e.g. whether you were able to open a website or received an error message), the use of website functions, any search terms you may have entered, the frequency with which you open individual websites, the names of files you retrieve, the transferred data quantity, the website from which you accessed our websites and the website you visit after having visited our website either by clicking links on our websites or by directly entering a domain in the input field of the same tab (or the same window) of the browser you used to open our websites. For security reasons, in particular to prevent and detect attacks on our websites or fraudulent behaviour, we also save your IP address and the name of your internet service provider till the purpose for which the data is required exists and thereafter delete the same. In addition to this we use Google Analytics for analytical purposes and its details are as follows:
- Google is anonymizing the IP by default https://support.google.com/analytics/answer/2763052?hl=en
- Google is not tracking the ISP anymore since January 1st, 2021.
- We shall only store other personal data if you provide us with such data in connection with a registration process, a contact form, a chat, a survey, a competition or execution of a contract, for example and only to the extent to which we are permitted by consent which you have granted or by applicable legal basis for processing.
- You are under no legal or contractual obligation to submit your personal data. Certain functions of our websites may be dependent on you providing personal data, however. If you fail to provide personal data in such cases, functions may be restricted or unavailable.
3. Purposes of use
- We use the personal data which is collected when you visit our websites in order to make the use of the websites as user-friendly as possible for you and to protect our IT systems from attacks and other illegal activities.
- Where you provide us with personal data, e.g. in connection with a registration process, a chat, a contact form, a survey, a competition or execution of a contract or for provision of goods or services, we use these data for the stated purposes, for customer management purposes and - where necessary - for the purposes of handling any business transactions and settling the appurtenant accounts, to the necessary extent in each instance (hereinafter collectively referred to as ‘Purpose’).
- Furthermore, we use and store personal data, if we are legally obliged to do so (e.g. saving the data to meet storage/retention obligations under commercial or tax law, release of information to comply with administrative or court order, e.g. to a law enforcement agency).
4. Transfer of personal data to third parties; social plug-ins; use of service providers
- We may transfer the personal information shared with us on our website or otherwise with third parties including but not limited to our Franchise Partners and/or Authorised Dealers, Group Companies, our Service Providers, to fulfill the Purpose. They may further transfer your personal information to other third parties in pursuance of any contract and/ or to fulfill the Purpose.
- Our websites may also include third-party offers. When you click on such an offer, we transfer the required scope of data to the offering party (e.g. the information that you found this offer on our website and any other information which you have already provided on our websites for this purpose).
- Where we use so-called "social plug-ins" of social networks such as Facebook, Twitter, Instagram, LinkedIn and Youtube on our websites, we integrate these as follows:
- When you visit our websites the social plug-ins are deactivated, i.e. no data is transferred to the operators of these networks. If you wish to use one of the networks, you can click on the relevant social plug-in to establish a direct connection to the server of the network concerned.
- If you have a user account with the corresponding network and you are logged in to this specific social network at the time you activate the social plug-in, this network can attribute your visit to our websites or to your user account. If you would like to prevent this, please log out from the network prior to activating the social plug-in. A social network will not be able to detect that you have visited other Mercedes-Benz websites unless you have activated its social plugin on those sites as well.
- If you activate a social plug-in, the network directly transfers the consequently available data to your browser, which integrates it into our websites. In this situation there may also be data transfers that are initiated and controlled by the corresponding social network. Your connection with a social network, the data transfer which takes place between the network and your system, and your interactions on this platform are subject solely to the data protection provisions of the network concerned.
The social plug-in remains active until you deactivate it or delete your cookies (see Section 5. d.).
- Whenever you click on a link of third party or activate a social plugin, your personal information may be transferred to third parties in or outside India. Please keep these circumstances in mind before you click on a link or activate a social plugin, thereby causing your data to be transferred.
- For the operation, optimization and security of our websites we also use qualified service providers (e.g. IT service providers, marketing agencies). We only pass on personal data to these service providers if so required for the provision and use of the websites and their functionalities, for the pursuit of the Purpose, to meet legal obligations or insofar as you have consented to this (see Section 7)
5. Cookies
- Cookies may be used when you are visiting our websites. Technically, these are so-called HTML cookies and similar software tools such as Web/DOM Storage or Local Shared Objects (so-called "Flash cookies"), which we collectively refer to as cookies.
- Cookies are small files that are stored on your desktop, notebook or mobile device while you visit a website. Cookies make it possible, for example, to determine whether there has already been a connection between the device and the websites; take into account your preferred language or other settings, offer you certain functions (e.g. online shop, vehicle configurator) or recognize your usage-based interests. Cookies may also contain personal data.
- Whether and which cookies are used when you visit our websites depends on which areas and functions of our websites you use and whether you agree to the use of cookies that are not technically required. You will find further information and decision-making options here:
Consent Management - The use of cookies also depends on the settings of the web browser you are using (e.g., Microsoft Edge, Google Chrome, Apple Safari, Mozilla Firefox). Most web browsers are preset to automatically accept certain types of cookies; however, you can usually change this setting. You can delete stored cookies at any time. Web/DOM storage and local shared objects can be deleted separately. You can find out how this works in the browser or device you are using in the manual of the learner.
- The consent to, and rejection or deletion of, cookies are tied to the device and also to the respective web browser you use. If you use multiple devices or web browsers, you can make decisions or settings differently.
- If you decide against the use of cookies or delete them, you may not have access to all functions of our websites or individual functions may be limited.
6. Security
We apply technical and organisational security measures to protect your data which we have under our control against manipulation, loss, destruction and access by unauthorised persons. Our security measures are subject to ongoing improvement in line with technological developments.
7. Legal basis for processing
- If you have given your consent to us for processing your personal data, it constitutes the legal basis for the said processing.
- Where the processing of your personal data is necessary in order to meet our legal obligations (e.g. regarding the retention of data), we are duly autorized to do so.
- We also process personal data for the purposes of our legitimate interests and the legitimate interests of third parties. Examples of such interests include maintaining the operability of our IT systems, (direct) marketing our own and third-party products and services (if this is not with your consent), and the legally required documentation of business contacts represent such legitimate interests. In weighing the interests in each instance, we accord due consideration in particular to the type of personal data, the purpose of processing, the circumstances relating to processing and your interest in the confidentiality of your personal data.
8. Deletion of your personal data
We shall delete your personal data as soon as the reason for which we collected and processed the data no longer applies. Notwithstanding the deletion of personal data pursuant to the cessation of reason for which it was collected and processed as mentioned hereinbefore, the personal data which has been provided by you on any other platform or for provision of any other goods or services, shall be processed, stored, retained or deleted in accordance with the privacy notices or terms and conditions applicable to such platform or provision of such goods and services. Storage continues beyond this period only where required by the laws, ordinances or other statutory provisions which we are subject to or in accordance with statutory provisions in other countries. Where deletion is not possible in an individual case, the relevant personal data will be marked with the aim of restricting its future processing.
9. Data subject rights
- As a person affected by data processing, you have the right to review the informationprovided by you and also request for changes/updates in the information provided by you to keep it up to date.
- If you have consented to us processing your personal data, you have the right to revoke or withdraw your consent at any time. Such revocation shall not affect the legality of processing your personal data up to the time of revocation. The further processing of these data on another legal basis, for example in order to meet legal obligations (cf. section "Legal basis of processing") shall also remain unaffected. The revocation of your consent is subject to applicable laws which may require us to store or process your information under certain circumstances e.g. for providing important regulatory, product updates about our products to you as a customer, and/or change or updates in your Personal Information. You may revoke/withdraw your consent by writing to us at cs.ind@cac.mercedes-benz.com or calling our Customer Connect Phone number: 0008000501888. Please note that revocation or withdrawal of consent may hinder the provision of goods or services and the Purpose for which it was collected.
- If you are of the opinion that the processing of your personal data infringes statutory provisions, you may file a complaint with our Grievance Redressal officer
10. Newsletter
If you subscribe to a newsletter which is offered on our website, the data you provide when registering for the newsletter will be used solely for the purpose of sending out the newsletter, unless you consent to any use beyond this. You can end the subscription at any time via the unsubscribe option in the newsletter.
11. Central Mercedes-Benz AG access service
The central Mercedes-Benz AG access service enables you to create a single user account to log in to all websites and applications of the Mercedes-Benz and its brands that are offered through this service. The applicable Terms of Use contain special data protection provisions. You can call up these Terms of Use on the respective log-in pages of the connected websites and applications.
12. Transfer of data to recipients outside India
Please be aware that when using service providers (see Section 4. d.) and forwarding data to third parties (see Section 3. c.) with your consent (= agreement), personal data may be transferred to recipients in other countries and processed there, in particular in the USA and Europe.
Last revised: June 2022
Data protection information for the purchase of chargeable Mercedes-Benz Digital Extras
Information on Processing of Personal Data
- Mercedes-Benz India will process the Customer's data as the controller/data fiduciary for the purpose of and to the extent required to fulfil the purchase contract. In this context Mercedes-Benz India passes on customer data to Mercedes-Benz AG to the extent necessary in order to fulfil the purchase contract.
- Furthermore, Mercedes-Benz India may process the Customer's personal data which it receives in connection with the provision of the purchasing contract for the protection of Mercedes-Benz India legitimate interests (assertion, exercise or defence of legal claims), for the protection of the data and/or information processing systems required for performance of the contract or for the fulfilment of the legal obligations, and may provide such data to third parties (in particular government authorities) to the extent required for investigating any violations against the General Terms and Conditions, misuse of services or attempts to gain unauthorised access to information processing systems or to data of other customers.
- The Customer’s data will be stored for the duration of the contractual relationship and will subsequently be retained in conformity with any legal requirements. The data will then be deleted, unless further storage is required for the protection of Mercedes-Benz India legitimate interests (in particular for the assertion, exercise and defence of legal claims).
- Mercedes-Benz India has appointed technical service providers and payment service providers to handle and manage payment transactions. These companies are located in the European Union and India and have access only to such personal data as are required to perform their tasks. Mercedes-Benz India has concluded contracts with these service providers, which contain provisions on the handling and protection of personal data.
If you wish to make an electronic payment in order to purchase products or services on this website, it will be necessary to transfer the corresponding payment transaction data (e.g. bank account number or credit card number, name of card holder, card's period of validity, amount and time of payment) to these service providers, in order to enable conclusion of the purchase transaction. By accepting the above mentioned information regarding payment transactions, you are aware and acknowledge that your payment transaction details as mentioned above may be transferred to and/ or processed by such service providers as may be required for processing the payment and succesfully concluding the purchase contract. - To keep your payment data (e.g. credit card details) available for future payments made via the websites linked to the Mercedes-Benz account, they will be stored and processed at your request by Mercedes pay GmbH (MPay) and the service provicer PayU Payments Private Limited (PayU).
This service can be deactivated or stored data can be managed at any time under "My data" on Mercedes-Benz India Mercedes-Benz account.
Further information on data processing by Mercedes pay GmbH and PayU Payments Private Limited can be found at their respective websites. - To the extent that Mercedes-Benz India processes the Customer's personal data, the Customer is entitled:
- to request information on the personal data processed by Mercedes-Benz India,
- to demand the adjustment of incorrect data and - in consideration of the purpose of the processing - completion of incomplete data;
- to demand the deletion of data for legitimate reasons;
- to demand limited processing of data if the legal prerequisites for this are met,
- to receive the data provided by the Customer in a readable form if the legal prerequisites for this are met
- Furthermore, the Customer may object to the processing of personal data which is carried out for the protection of Mercedes-Benz India legitimate interests, for reasons related to the personal situation of the Customer in accordance with the legal regulations as applicable by withdrawing /revoking their consent.
- The Customer can contact Mercedes-Benz India using the contact details presented below. Furthermore, the Customer may file a complaint with Grievance Redressal officer.
Last revised: June 2022
Data protection information for the purchase and use of chargeable Mercedes-Benz Digital Extras in the MBUX multimedia system
This data protection information applies when you purchase chargeable Mercedes-Benz Digital Extras in the MBUX multimedia system.
Information on Processing of Personal Data
This data protection information from Mercedes-Benz India provides information on how personal data is processed when you visit the "Store in the Vehicle", the legal basis on which this is done, and what rights and claims are associated with it. This data protection information applies exclusively to this "Store in the Vehicle".
- Controller/Data Fiduciary
Mercedes-Benz India ("Mercedes-Benz India"/"We")
E-3 MIDC, Chakan, Phase III, Chakan Industrial Area,
Kuruli & Nighoje, Taluka: Khed,
Pune 410501 (India)
Phone no: 0008000501888email:Data protection Officer:
Chief Officer Corporate Data Protection, Mercedes-Benz AG, HPC E600, Mercedesstraße 120, D-70372 Stuttgart, Germany, email address: data.protection@mercedes-benz.com. - Collection and processing of personal data when you visit the Store
When you visit the "Store in the Vehicle", personal data such as your Mercedes me ID and your vehicle's VIN will be processed and stored for the purpose of presenting the available product range.
To enable presentation of the product range and to facilitate the ordering process, within the Mercedes-Benz Digital Extras environment Mercedes-Benz AG forwards customer data to Mercedes-Benz India.
Your personal data will be deleted as soon as the purpose for which Mercedes-Benz India has collected and processed the data no longer applies.Beyond this period of time, data is only stored if this is necessary to comply with the laws, directives or other regulations which we are subject to.
- Collection and processing of personal data in connection with an order
Mercedes-Benz India processes the Customer's data for the purpose of and to the extent necessary for the order process and fulfilment of the purchase contract. For this purpose, Customer data will be passed on to Mercedes-Benz AG for the contractual performance.
Furthermore, Mercedes-Benz India may process the Customer's personal data which it receives in connection with performance of the contract for the protection of Mercedes-Benz India’s legitimate interests (assertion, exercise or defence of legal claims), for the protection of the data and/or information processing systems required for performance of the contract or for the fulfilment of the legal obligations, and may provide such data to third parties (in particular government authorities) to the extent required for investigating any violations against the General Terms and Conditions, misuse of Services or attempts to gain unauthorised access to information processing systems or to data of other customers.
The Customer’s data will be stored for the duration of the contractual relationship and will subsequently be retained in conformity with any applicable legal requirements. The data will then be deleted, unless further storage is required for the protection of Mercedes-Benz India legitimate interests (in particular for the assertion, exercise and defence of legal claims).
- Security
Mercedes-Benz India uses technical and organisational security measures in order to protect the data which is provided by you and managed by us from manipulation, loss, destruction and access by unauthorised parties. The security measures are subject to ongoing improvement by Mercedes-Benz India in line with technological developments.
- Data subject rights
To the extent that Mercedes-Benz India processes the Customer's personal data, in accordance with the statutory provisions the data subject is entitled:
- to request information on the personal data processed by Mercedes-Benz India,
- to demand the adjustment of incorrect data and - in consideration of the purpose of the processing - completion of incomplete data;
- to demand the deletion of data for legitimate reasons;
- to demand limited processing of data if the legal prerequisites for this are met,to receive the data provided by the data subject in a readable form if the legal prerequisites for this are met
- Revocation of Consent
Furthermore, the data subject may object to the processing of personal data which is carried out for the protection of Mercedes-Benz India legitimate interests, for reasons related to the personal situation of the Customer in accordance with the legal regulations as applicable by withdrawing /revoking their consent.
If you have consented to us processing your personal data, you have the right to revoke or withdraw your consent at any time. Such revocation shall not affect the legality of processing your personal data up to the time of revocation. The further processing of these data on another legal basis, for example in order to meet legal obligations (cf. section "Legal basis of processing") shall also remain unaffected. The revocation of your consent is subject to applicable laws which may require us to store your information under certain circumstances e.g. for providing important regulatory, product updates about our products to you as a customer, and/or change or updates in your Personal Information. You may revoke/withdraw your consent by writing to us at cs.ind@cac.mercedes-benz.com or calling our Customer Connect Phone number: 0008000501888. Please note that revocation or withdrawal of consent may hinder the provision of goods or services and the Purpose for which it was collected. Furthermore, the Customer may file a complaint with Grievance Redressal officer.
Last revised: June 2022