Datenschutzerklärung

In accordance with Art. 7 GDPR and Information pursuant to Art. 12, 13 and 14 GDPR
Status: 20 May 2025

1. General Information

Controller
Schneider Gruppe GmbH
Hilbersdorfer Str. 1
09131 Chemnitz
Phone: +49 371 45000-0
Email: datenschutzbeauftragter@schneidergruppe.de
Managing Directors: Marko Schneider, Stefan Clauß, Sven O. Arnegger

BOR Schneider Gruppe GmbH
Hilbersdorfer Str. 1
09131 Chemnitz
Phone: +49 371 45000-0
Email: datenschutzbeauftragter@schneidergruppe.de
Managing Directors: Marko Schneider, Stefan Clauß, Sven O. Arnegger

Data Protection Officer
Schneider Gruppe GmbH
Hilbersdorfer Str. 1
09131 Chemnitz
Email: datenschutzbeauftragter@schneidergruppe.de

2. Types of Data Processed

• Personal data (name, address, phone number, date of birth, email)
• Contract data (product, vehicle, financing, and other contract details)
• Usage data (website visits, access times, interests)
• Communication data (IP address, browser data, device information)
• Content data (e.g. text entries in forms)
• Customer service and display data (e.g. display of names and orders during appointments at the dealership)
• Video surveillance data (for protection of property and enforcement of house rules)
• Data from third-party applications (Google Analytics, Google Maps, AutoUncle)

3. Categories of Data Subjects

• Prospective customers and customers
• Visitors to our online services
• Users of trade-in tools, web forms, or online services

4. Purposes of Data Processing

• Fulfillment of (pre-)contractual obligations and customer support
• Execution of service and sales appointments (including in-store display)
• Communication with customers (e.g. consultation, callbacks, support)
• Claims management (e.g. dunning procedures, debt collection)
• Direct marketing with consent (e.g. newsletters)
• Improvement of online presence (e.g. web tracking via Google Analytics)
• Protection of persons, property, and data through video surveillance
• Use of third-party applications (e.g. Google Maps, AutoUncle)

5. Legal Bases

• Consent: Art. 6(1)(a) GDPR in conjunction with Art. 7 GDPR
• Contract performance: Art. 6(1)(b) GDPR
• Legal obligation: Art. 6(1)(c) GDPR
• Legitimate interests: Art. 6(1)(f) GDPR
• Video surveillance: to safeguard property rights and enforce house rules
• Joint controllership with AutoUncle: Art. 26 GDPR

6. Recipients and Third-Country Transfers

Data may be transferred to:

• Vehicle manufacturers, insurance companies, banks, cooperation partners (e.g. inspection organizations), service providers (e.g. AutoUncle), authorities (e.g. police, tax authorities)
• Processors under contracts pursuant to Art. 28 GDPR
• Recipients in third countries only if the requirements of Art. 44 et seq. GDPR are met

7. Security Measures

In accordance with Art. 32 GDPR, we implement technical and organizational measures:

• Access controls (physical and digital)
• Encryption, access restrictions, logging
• Data protection by design and by default (Art. 25 GDPR)
• Procedures for exercising data subject rights, data deletion, and emergency management

8. Specific Information on Online Services

Cookies
Our website uses cookies for session control and personalization of settings. You can disable cookies at any time in your browser; however, this may result in functional limitations.

Google Analytics
Used to analyze website usage. Your IP address is anonymized. Opt-out information:
http://tools.google.com/dlpage/gaoptout?hl=de

Google Maps
Map service for displaying locations. IP addresses may be transferred to the USA. Google privacy policy:
https://www.google.de/intl/de/policies/privacy/

AutoUncle (Trade-in Calculator)
Joint data processing pursuant to Art. 26 GDPR for vehicle valuation and sales initiation.
Consent is required to use the tool.

9. Rights of Data Subjects

• Access (Art. 15 GDPR)
• Rectification/completion (Art. 16 GDPR)
• Erasure/restriction (Art. 17, 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent (Art. 7 GDPR)
• Objection to processing (Art. 21 GDPR – particularly for direct marketing)

10. Retention and Deletion

• Data will be deleted once it is no longer necessary for the processing purpose
• If statutory retention obligations apply, processing will be restricted
• Video surveillance data is deleted after a maximum of 14 days
• Web contact inquiries are deleted after a maximum of 2 years
• Consents remain valid until withdrawn
• Deviating manufacturer retention periods can be provided upon request

11. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority:
Saxon Data Protection Commissioner
Devrientstraße 1
01067 Dresden