ENES
ENES

Indicaciones sobre Protección de datos

Controller within the meaning of the General Data Protection Regulation (GDPR):

Mercedes Benz México S. de R.L. de C.V., ("Mercedes-Benz México, We")
Avenida Santa Fe 428, Torre 3, Piso 4
C.P. 05348 Mexico City
Mexico
Phone no: (52) 55 4155 2985
Email: MB_Privacidad_México@mercedes-benz.com

Data Protection Officer:

Mercedes-Benz Group AG
Chief Officer for Corporate Data Protection
HPC E600
Mercedesstraße 120
D-70372 Stuttgart
Germany
Email: data.protection@mercedes-benz.com

Areas:

 

 

Data protection information for the Mercedes-Benz Store website

Go to top of page

 

1. Data protection

Thank you for visiting our websites and your interest in our products and services. We attach great importance to the protection of your personal data. In this data protection information we explain how we collect your personal data, what we do with these data, for what purposes and on what legal basis this takes place, and what rights and entitlements this entails for you. We additionally refer to the Mercedes-Benz Data Protection Policy:

Mercedes-Benz Data Protection Policy (pdf)

Our data protection information for the use of our websites and the Data Protection Policy of Mercedes-Benz Group AG do not apply to your activities on the websites of social networks or other providers which you may access via links on our websites. Please obtain information about the respective data protection regulations on the websites of said providers.

 

2. Collection and processing of your personal data

  1. When you visit our websites we save specific information about the browser and operating system you use, the date and time of your visit, the access status (e.g. whether you were able to open a website or received an error message), the use of website functions, any search terms you may have entered, the frequency with which you open individual websites, the names of files you retrieve, the transferred data quantity, the website from which you accessed our websites and the website you visit after having visited our website either by clicking links on our websites or by directly entering a domain in the input field of the same tab (or the same window) of the browser you used to open our websites. For security reasons, in particular to prevent and detect attacks on our websites or fraudulent behaviour, we also save your IP address and the name of your internet service provider for a period of seven days.
  2. We shall only store other personal data if you provide us with such data in connection with a registration process, a contact form, a chat, a survey, a competition or execution of a contract, for example, and then only to the extent to which we are permitted by consent which you have granted or by applicable legal provisions (see Section 7).
  3. You are under no legal or contractual obligation to submit your personal data. Certain functions of our websites may be dependent on you providing personal data, however. If you fail to provide personal data in such cases, functions may be restricted or unavailable.

 

3. Purposes of use

  1. We use the personal data which are collected when you visit our websites in order to make the use of the websites as user-friendly as possible for you and to protect our IT systems from attacks and other illegal activities.
  2. Where you provide us with additional personal data, e.g. in connection with a registration process, a chat, a contact form, a survey, a competition or execution of a contract, we use these data for the stated purposes, for customer management purposes and - where necessary - for the purposes of handling any business transactions and settling the appurtenant accounts, to the necessary extent in each instance.
  3. For other purposes (e.g. display of personalised conent or advertising based on your user behaviour), we and possibly selected third parties use your data, providing you give your consent (= agreement) to this within our Content Management System. More information and decision options are available here:
    Consent Management
  4. Furthermore, we use personal data, providing we are legally obliged to do so (e.g. saving of data to meet storage/retention obligations under commercial or tax law, release of information to comply with administrative or court order, e.g. to a law enforcement agency).

 

4. Transfer of personal data to third parties; social plug-ins; use of service providers

  1. Our websites may also include third-party offers. When you click on such an offer, we transfer the required scope of data to the offering party (e.g. the information that you found this offer on our website and any other information which you have already provided on our websites for this purpose).
  2. Where we use so-called "social plug-ins" of social networks such as Facebook and Twitter on our websites, we integrate these as follows:
    When you visit our websites the social plug-ins are deactivated, i.e. no data is transferred to the operators of these networks. If you wish to use one of the networks, you can click on the relevant social plug-in to establish a direct connection to the server of the network concerned.
    If you have a user account with the corresponding network and you are logged in to this specific social network at the time you activate the social plug-in, this network can attribute your visit to our websites or to your user account. If you would like to prevent this, please log out from the network prior to activating the social plug-in. A social network is unable to attribute a visit to other Mercedes-Benz websites before you have not also activated any available social plug-in there.
    If you activate a social plug-in, the network directly transfers the consequently available data to your browser, which integrates it into our websites. In this situation there may also be data transfers that are initiated and controlled by the corresponding social network. Your connection with a social network, the data transfer which takes place between the network and your system, and your interactions on this platform are subject solely to the data protection provisions of the network concerned.
    The social plug-in remains active until you deactivate it or delete your cookies (see Section 5. d.).
  3. When you click on a link to an offer or activate a social plug-in, it is possible that personal data may reach providers in countries outside of the European Economic Area which in the view of the European Union ("EU") do not guarantee an "adequate level of protection" corresponding to EU standards. Please consider this before clicking on a link or activating a social plug-in and thereby initiating a transfer of your data.
  4. For the operation, optimization and security of our websites we also use qualified service providers (e.g. IT service providers, marketing agencies). We only pass on personal data to these service providers if so required for the provision and use of the websites and their functionalities, for the pursuit of legitimate interests, to meet legal obligations or insofar as you have consented to this (see Section 7). Further details about the recipients are available in our Consent Management System:
    Consent Management

 

5. Cookies

  1. Cookies may be used when you are visiting our websites. Technically, these are so-called HTML cookies and similar software tools such as Web/DOM Storage or Local Shared Objects (so-called "Flash cookies"), which we collectively refer to as cookies.
  2. Cookies are small files that are stored on your desktop, notebook or mobile device while you visit a website. Cookies make it possible, for example, to determine whether there has already been a connection between the device and the websites; take into account your preferred language or other settings, offer you certain certain functions (e.g. online shop, vehicle configurator) or recognize your usage-based interests. Cookies may also contain personal data.
  3. Whether and which cookies are used when you visit our websites depends on which areas and functions of our websites you use and whether you agree to the use of cookies that are not technically required in our Consent Management System. You will find further information and decision-making options here:
    Consent Management
  4. The use of cookies also depends on the settings of the web browser you are using (e.g., Microsoft Edge, Google Chrome, Apple Safari, Mozilla Firefox). Most web browsers are preset to automatically accept certain types of cookies; however, you can usually change this setting. You can delete stored cookies at any time. Web/DOM storage and local shared objects can be deleted separately. You can find out how this works in the browser or device you are using in the manual of the learner.
  5. The consent to, and rejection or deletion of, cookies are tied to the device and also to the respective web browser you use. If you use multiple devices or web browsers, you can make decisions or settings differently.
  6. If you decide against the use of cookies or delete them, you may not have access to all functions of our websites or individual functions may be limited.

 

6. Security

We apply technical and organisational security measures to protect your data which we have under our control against manipulation, loss, destruction and access by unauthorised persons. Our security measures are subject to ongoing improvement in line with technological developments.

 

7. Legal basis for processing

  1. If you have given your consent to us processing your personal data, this constitutes the legal basis for said processing (Article 6 (1), letter a, GDPR).
  2. The legal basis for processing personal data for the purposes of initiating or compliance with a contract with you shall be Article 6 (1), letter b, GDPR.
  3. Where the processing of your personal data is necessary in order to meet our legal obligations (e.g. regarding the retention of data), we are duly authorised in accordance with Article 6 (1), letter c, GDPR.
  4. We also process personal data for the purposes of our legitimate interests and the legitimate interests of third parties in accordance with Article. 6 (1), letter f, GDPR. Maintaining the operability of our IT systems, (direct) marketing our own and third-party products and services (if this is not with your consent), and the legally required documentation of business contacts represent such legitimate interests. In weighing the interests in each instance, we accord due consideration in particular to the type of personal data, the purpose of processing, the circumstances relating to processing and your interest in the confidentiality of your personal data.

 

8. Deletion of your personal data

We shall delete your IP address and the name of your internet service provider after storing it on security grounds for seven days. We shall otherwise delete your personal data as soon as the reason for which we collected and processed the data no longer applies. Storage continues beyond this period only where required by the laws, ordinances or other statutory provisions to which we are subject in the EU or in accordance with statutory provisions in third countries, provided that an adequate level of protection is available in the third countries concerned. Where deletion is not possible in an individual case, the relevant personal data will be marked with the aim of restricting its future processing.

 

9. Data subject rights

  1. As a person affected by data processing, you have the right to information (Article 15 GDPR), correction (Article 16 GDPR), deletion of data (Article 17 GDPR), restricting processing (Article 18 GDPR) and transferring data (Article 20 GDPR).
  2. If you have consented to our processing your personal data, you have the right to revoke your consent at any time. Such revocation shall not affect the legality of processing your personal data up to the time of revocation. The further processing of these data on another legal basis, for example in order to meet legal obligations (cf. section "Legal basis of processing") shall also remain unaffected.
  3. Right to object
    You have the right to object to the processing of personal data concerning you at any time as a result of an extraordinary situation on the basis of Article 6 (1) e) GDPR (data processing in the interest of the public) or Article 6 (1) f) GDPR (data processing based on a weighing of interests). If you object, we shall only continue to process your personal data where we can provide mandatory, justifiable reasons that overrule your interests, rights and liberties or if the processing serves to assert, exercise or defend legal rights. Insofar as we process your personal data in order to carry out direct advertising to safeguard legitimate interests on the basis of a weighing of interests, you also have the right to object thereto at any time without stating any reasons.
  4. If possible, please send your claims or declarations to the following contact address: MB_Privacidad_México@mercedes-benz.com.
  5. If you are of the opinion that the processing of your personal data infringes statutory provisions, you have the right to file a complaint with a responsible data protection supervisory authority (Article 77 GDPR).

 

10. Newsletter

If you subscribe to a newsletter which is offered on our website, the data you provide when registering for the newsletter will be used solely for the purpose of sending out the newsletter, unless you consent to any use beyond this. You can end the subscription at any time via the unsubscribe option in the newsletter.

 

11. Central Mercedes-Benz Group AG access service

The central Mercedes-Benz Group AG access service enables you to create a single user account to log in to all websites and applications of the Mercedes-Benz Group and its brands that are offered through this service. The applicable Terms of Use contain special data protection provisions. You can call up these Terms of Use on the respective log-in pages of the connected websites and applications.

 

12. Transfer of data to recipients outside the European Economic Area

  1. When using service providers (see Section 4. d.) and forwarding data to third parties (see Section 3. c.) with your consent (= agreement), personal data may be transferred to recipients in countries outside the European Union (“EU“), Iceland, Liechtenstein and Norway (= European Economic Area) and processed there, in particular in the USA and India.
  2. In the following countries, from the EU's point of view, there is an adequate level of personal data protection (so-called "adequacy"), in compliance with EU standards: Andorra, Ar-gentina, Canada (limited), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uru-guay. We agree with recipients in other countries on the use of EU standard contractual clauses, binding corporate rules or other applicable instruments (if any) to create an "ade-quate level of protection" according to legal requirements. For more information, please use the contact details given in section 9.d. above.

 

Last revised: July 2024

 

 

Data protection information for the purchase of chargeable Mercedes-Benz Digital Extras

Go to top of page

 

Information on Processing of Personal Data

  1. Mercedes-Benz México will process the Customer's data as the controller for the purpose of and to the extent required to fulfil the purchase contract. In this context Mercedes-Benz México passes on customer data to Mercedes-Benz Group AG to the extent necessary in order to fulfil the purchase contract.
  2. Furthermore, Mercedes-Benz México may process the Customer's personal data which it receives in connection with the provision of the purchasing contract for the protection of Mercedes-Benz México legitimate interests (assertion, exercise or defence of legal claims), for the protection of the data and/or information processing systems required for performance of the contract or for the fulfilment of the legal obligations, and may provide such data to third parties (in particular government authorities) to the extent required for investigating any violations against the General Terms and Conditions, misuse of services or attempts to gain unauthorised access to information processing systems or to data of other customers.
  3. The Customer’s data will be stored for the duration of the contractual relationship and will subsequently be retained in conformity with the legal commercial and legal tax record-keeping requirements. The data will then be deleted, unless further storage is required for the protection of Mercedes-Benz México legitimate interests (in particular for the assertion, exercise and defence of legal claims).
  4. Mercedes-Benz México has appointed technical service providers and payment service providers to handle and manage payment transactions. These companies are located in the European Union and have access only to such personal data as are required to perform their tasks. Mercedes-Benz México has concluded contracts with these service providers, which contain provisions on the handling and protection of personal data.
    If you wish to make an electronic payment in order to purchase products or services on this website, it will be necessary to transfer the corresponding payment transaction data (e.g. bank account number or credit card number, name of card holder, card's period of validity, amount and time of payment) to these service providers, in order to enable conclusion of the purchase transaction (legal basis pursuant to the European General Data Protection Regulation (GDPR): Art. 6 (1), letter b).
  5. To keep your payment data (e.g. credit card details) available for future payments made via the websites linked to the Mercedes-Benz account, they will be stored and processed at your request by Mercedes pay GmbH.
    This service can be deactivated or stored data can be managed at any time under "My data" on Mercedes-Benz México MB account.
    Further information on data processing by Mercedes pay GmbH can be found at the following link:
    Data privacy statement of Mercedes pay GmbH
  6. To the extent that Mercedes-Benz México processes the Customer's personal data, the Customer is entitled:
    • to request information on the personal data processed by Mercedes-Benz México (right to information),
    • to demand the adjustment of incorrect data and - in consideration of the purpose of the processing - completion of incomplete data (right to rectification);
    • to demand the deletion of data for legitimate reasons (right of erasure);
    • to demand limited processing of data if the legal prerequisites for this are met (right to restrict processing),
    • to receive the data provided by the Customer in a structured, valid and machine-readable form if the legal prerequisites for this are met as well as to transmit these data to another responsible party or, to the extent technically feasible, to have them transmitted by Mercedes-Benz México (right to data portability).
  7. Furthermore, the Customer has the right to object to the processing of personal data which is carried out for the protection of Mercedes-Benz México legitimate interests, for reasons related to the personal situation of the Customer in accordance with the legal regulations (right to object).
  8. To exercise these rights, the Customer can contact Mercedes-Benz México using the contact details presented below. Furthermore, the Customer has the right to file a complaint with a data protection supervisory authority.

 

Last revised: July 2024

 

 

Data protection information for the purchase and use of chargeable Mercedes-Benz Digital Extras in the MBUX multimedia system

This data protection information applies when you purchase chargeable Mercedes-Benz Digital Extras in the MBUX multimedia system.

Go to top of page

 

Information on Processing of Personal Data

This data protection information from Mercedes-Benz México provides information on how personal data is processed when you visit the "Store in the Vehicle", the legal basis on which this is done, and what rights and claims are associated with it. This data protection information applies exclusively to this "Store in the Vehicle".

  1. Controller
    Controller within the meaning of the GDPR:
    Mercedes-Benz Mexico, Avenida Santa Fe 428, Torre 3, Mexico City, Mexico, email MB_Privacidad_México@mercedes-benz.com
    Data protection Officer of Mercedes-Benz Mexico: Carlos Otero
    Chief Officer Corporate Data Protection, Mercedes-Benz AG, HPC E600, Mercedesstraße 120, D-70372 Stuttgart, Germany, email address: data.protection@mercedes-benz.com
  2. Collection and processing of personal data when you visit the Store
    When you visit the "Store in the Vehicle", personal data such as your Mercedes me ID and your vehicle's VIN will be processed and stored for the purpose of presenting the available product range. The legal basis for this is provided in Article . 6 (1), letter b, GDPR.
    To enable presentation of the product range and to facilitate the ordering process, within the Mercedes-Benz Digital Extras environment Mercedes-Benz Group AG forwards customer data to Mercedes-Benz México. The legal basis for this is provided in Article 6 (1), letter b, GDPR.
    Your personal data will be deleted as soon as the purpose for which Mercedes-Benz México has collected and processed the data no longer applies.Beyond this period of time, data are only stored if this is necessary to comply with the laws, directives or other regulations of the European Union or a Member State of the European Union to which we are subject.
  3. Collection and processing of personal data in connection with an order
    Mercedes-Benz México processes the Customer's data for the purpose of and to the extent necessary for the order process and fulfilment of the purchase contract. For this purpose, Customer data will be passed on to Mercedes-Benz Group AG for the contractual performance. The legal basis for this is provided in Article . 6 1 letter b GDPR.
    Furthermore, Mercedes-Benz México may process the Customer's personal data which it receives in connection with performance of the contract for the protection of Mercedes-Benz México legitimate interests (assertion, exercise or defence of legal claims), for the protection of the data and/or information processing systems required for performance of the contract or for the fulfilment of the legal obligations, and may provide such data to third parties (in particular government authorities) to the extent required for investigating any violations against the General Terms and Conditions, misuse of Services or attempts to gain unauthorised access to information processing systems or to data of other customers. The legal basis for this is provided in Article . 6 1 letter c and/or letter f GDPR.
    The Customer’s data will be stored for the duration of the contractual relationship and will subsequently be retained in conformity with the legal commercial and legal tax record-keeping requirements. The data will then be deleted, unless further storage is required for the protection of Mercedes-Benz México legitimate interests (in particular for the assertion, exercise and defence of legal claims).
  4. Security
    Mercedes-Benz México uses technical and organisational security measures in order to protect the data which is provided by you and managed by us from manipulation, loss, destruction and access by unauthorised parties. The security measures are subject to ongoing improvement by Mercedes-Benz México in line with technological developments.
  5. Data subject rights
    To the extent that Mercedes-Benz México processes the Customer's personal data, in accordance with the statutory provisions the data subject has the following rights:
    • to request information on the personal data processed by Mercedes-Benz México (right to information),
    • to demand the adjustment of incorrect data and - in consideration of the purpose of the processing - completion of incomplete data (right to rectification);
    • to demand the deletion of data for legitimate reasons (right of erasure);
    • to demand limited processing of data if the legal prerequisites for this are met (right to restrict processing),
    • to receive the data provided by the data subject in a structured, valid and machine-readable form if the legal prerequisites for this are met as well as to transmit this data to another responsible party or, to the extent technically feasible, to have it transmitted by Mercedes-Benz México (right to data portability).
  6. Right to object
    Furthermore, the data subject has the right to object to the processing of personal data which is carried out for the protection of Mercedes-Benz México legitimate interests, for reasons related to the personal situation of the Customer in accordance with the legal regulations (right to object).If your personal data are processed in order to carry out direct advertising, you also have the right to declare your objection to this processing at any time without providing separate reasons.
    To exercise these rights, the Customer can contact Mercedes-Benz México using the contact details presented below. Furthermore, the Customer has the right to file a complaint with a data protection supervisory authority.

 

Last revised: July 2024