Privacy Policy

Details: Category: Our Policies; Also available:; Hits: 3474

Article Word Count: 5872

Our Privacy Policy concerning our website

Kumpan Canada is the operator of the website at www.kumpan.ca (also "website" or "online shop") is responsible for in the sense of the applicable data protection law, in particular the General Data Protection Regulation ("GDPR") the personal data of the user ("you") of this website. In the following, we will provide you with clear information as part of our information obligations (Art. 13 ff. GDPR) about which data is processed when you visit our website and on what legal basis this happens. You will also receive information on how we protect your data from a technical and organizational point of view and what rights you have against us and against the responsible supervisory authority.

Information on the controller

Name and contact details:
Kumpan Canada
12 rue Principale South, Sutton, Qc., J0E 2K0
Phone: +1 (579) 436-8777
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Data protection officer

We have appointed a company data protection officer:

Kumpan Canada

12 rue Principale South, Sutton, Qc., J0E 2K0
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: +1 (579) 436-8777

Processing of your personal data

3.1. Use of our website for information purposes

If you access our website just to visit it, so-called log files are processed by being automatically recorded by our system . The following log files are processed automatically:

IP address of the requesting computer
Type of internet browser used
Language of the internet browser used
Version of the internet browser used
Operating system and its version
Operating system interface
Pages accessed
Date and time of visit
Time zone difference to Greenwich Mean Time (GMT)
Access status / http status code
Amount of data transferred
Success or failure of the loading process
Referrer

The log files contain your IP address and possibly other personal data. Therefore, an assignment to you is basically possible. However, we only store your data temporarily and, in particular, not together with other personal data.
The processing of the above data is necessary for the provision of our website. We also save the data for the security of our information technology systems. Our legitimate interest is based on these purposes, the data on the legal basis Art. 6 (1) lit.f GDPR to process. The log files, which also contain your IP address, are deleted or anonymized immediately after they are no longer required to achieve the aforementioned purposes, but no later than after three months.

Use of offers

4.1. Customer account / registration

You have the option of creating a customer account with your personal data on our website. If you opt for a customer account, you must provide us with the following information:

Salutation
First and last name
Address
E-mail address
Private customer status
Telephone number
All other information is voluntary. We save the following voluntary information together with your e-mail address if you provide it to us:
Additional address

You can log in to the dealer area with your user ID and password.
When you submit your application / registration , we save your IP address and the date and time of your registration together with the data you provide. By submitting the registration, you consent to the processing of your data by us.

Your data are used for the purpose of managing your customer account and providing the associated functions, such as processing your customer data and displaying your orders. The legal basis for storing your customer account data is Art. 6 (1) lit. a GDPR.

We save your data that you have made available to us as part of your voluntary registration / registration, as long as you do not delete your customer account with us. If you make changes to your information, the old information will be deleted and only the updated data will be saved. In addition, we only save your data in order to meet our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR). In this case, we will block your data to the extent that it is only processed for the necessary purposes. In addition to this data, we save the time (date and time) at which your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art 6 (1) lit.f GDPR), to ensure the security of our systems and to prevent misuse. These additional data will be deleted as soon as they are no longer required, at the latest when the contract with you has been completed.

You can delete or change your voluntary customer account with us at any time. You will find the functions for changing your details or canceling your account in your profile.

4.2. Orders

If you place an order on our website, we need the following data to fulfill the contract with you:

Title, first name, last name and (billing and delivery) address to send you your order and the invoice
E-mail address to send you the order confirmation and to provide you with the contract documents immediately after the order.
Your phone number to process payment for your order
Customer group (private or dealer, for price calculation)

In order to send you your order, we pass on your address data to our shipping or logistics service provider for the purpose of delivery.
The legal basis for processing the data is Art. 6 (1) lit. b GDPR. The data will be stored for as long as is necessary to process the contract. Beyond that, we only save your data in order to meet our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit c GDPR). In this case, we will block your data to the extent that it is only processed for the necessary purposes.
In addition to this data, we save the time (date and time) when your data was transmitted to us. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit f GDPR) in order to guarantee the security of our systems and to counteract misuse.
These additional data will be deleted as soon as they are no longer required, at the latest when the contract with you has been completed.

4.3. Payment methods

If you select a payment provider on our payment page, this provider will also receive your personal data, such as your name, address and bank account details. In addition, our house bank receives your bank details when an electronic payment is received.

Direct debit / prepayment: If you pay by direct debit on our website, our house bank will receive your bank details for payment processing.

4.4. Contact form / feedback

You can contact us electronically using our contact form , e.g. to give us feedback or to ask us questions. If you use this option, send us the following data:

E-mail address (to contact you)
First and last names (in order to address you and for the purposes of preventing abuse)

In addition to the data that you voluntarily provide to us, we save the time (date and time) at which your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) to ensure the security of our systems and to counteract misuse. These data, which we also collect when you contact us, will be deleted as soon as they are no longer required, at the latest when the request for contacting you has been fully clarified.

By submitting the contact form, you consent to the processing of your data by us. The legal basis for processing your data for the purpose of processing your contact is Art. 6 (1) lit. a GDPR. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the request for contacting you has been fully clarified.

If your contact is aimed at concluding a contract with us, the additional legal basis for the processing of your personal data is Art. 6 (1) lit. b GDPR. These data are stored for as long as they are necessary to carry out the contract. Beyond that, we only save your data in order to comply with contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR).

4.5. "Request test drive" form

You can contact us electronically using our “Request test drive” form to request a test drive with your desired model. If you use this option, send us the following data:

E-mail address
First and last names (in order to address you and for the purposes of preventing abuse)
Postcode
Desired model
Telephone number (for any queries)

In order to arrange a test drive with our products for you, your data can be forwarded to our specialist dealers in order to simplify the scheduling of a test drive between you and our specialist dealer.

4.6. "Reserve now" form

You can contact us electronically using our “Reserve now” form to reserve a Kumpan 54i. If you use this option, send us the following data:

E-mail address
First and last names (for purposes of abuse prevention)

In addition to the data that you voluntarily provide to us, we save the time (date and time) at which your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) in order to guarantee the security of our systems and to counteract misuse. These data, which we also collect when you contact us, will be deleted as soon as they are no longer required, at the latest when the request for contacting you has been fully clarified.

4.7. Contact by email, phone or fax

You can contact us by email, telephone or fax . Your personal data transmitted in this way will be stored by us. The data will not be passed on to third parties. The data will only be processed in order to process your contact. The legal basis for processing your personal data is Art. 6 (1) lit.f GDPR. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the request for contacting you has been fully clarified.

In addition to the data that you voluntarily provide to us, we receive the time (date and time) when your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) in order to guarantee the security of our systems and to counteract misuse. These data, which we also collect when you contact us, will be deleted as soon as they are no longer required, at the latest when the request for contacting you has been fully clarified.

You can inform us at any time (see section 1 above) that we should delete the data communicated in the course of the conversation. In this case, all personal data of the conversation will be deleted, as far as permissible, and the conversation cannot be continued.

4.8. Newsletter

We offer you on our website that you register for our newsletter free of charge. In addition to your declaration of consent, we need your email address for this. Further information, e.g. giving your name, is voluntary and serves to address you personally. The legal basis for sending the newsletter as well as additional voluntary information is Art. 6 (1) lit. b GDPR. By submitting the newsletter registration, you consent to the processing of your data by us.

We will only send you the newsletter if you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link provided. We want to ensure that only you can register for the newsletter yourself. Your confirmation in this regard must be made promptly after receipt of the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.

In addition, as part of your newsletter registration, we save the time (date and time) at which your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest in accordance with Art. 6 (1) lit. f GDPR in order to guarantee the security of our systems and to counteract misuse.

Your data will only be processed in connection with sending newsletters. The purpose of processing your email address is to be able to send you the newsletter. Further data during the registration process is used either to address you personally or to ensure the security of our services and to prevent misuse of the email address used.

Your data will only be stored for as long as is necessary to achieve the purpose. Your email address will therefore be saved for the period of your active newsletter subscription if you have given your consent. The data that we also automatically collect during your registration (IP address, date and time) will be deleted at the latest when you end your newsletter subscription.

Opportunity to object / unsubscribe from the newsletter
You can unsubscribe or terminate our newsletter at any time . You can find the link for this at the end of each newsletter. In doing so, you revoke your consent or object to further use of your data for the purpose of sending the newsletter.

Cookies

Please note the following: You can ensure that no cookies are stored on your computer at all, or that the storage of only certain cookies is permitted. You can select this in your internet browser settings. You can also view and delete the stored cookies there.

If you block all cookies, not all functions of our website may be available to you.

We use cookies on our website. Cookies are text files that are sent from our web server to your browser when you visit our website and are stored by your browser on your computer for later retrieval. A cookie can therefore be used to identify your internet browser when you visit the website again. There are session cookies, which are those that are deleted when the browser is closed, and there are persistent cookies that are stored on the hard drive until their preset expiry date is reached or until they are actively removed by you.

5.1. Own cookies

We use our own cookies to ensure the functionality of our website . Some elements of our website require that your internet browser be recognized after changing pages. In the overview you can see the purposes for which your data is collected and for what period of time it is stored:

For the processing of personal data in cookies, which we set on our website to ensure the functionality of our website and our offer, the legal basis is Art. 6 (1) lit.f GDPR.

Opposition and removal
options As stated in the introduction of this section, you can enable or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved by your internet browser can be deleted there at any time. If cookies are restricted or deactivated for our website, it is possible that not all functions can be used.

5.2. Third-party cookies (third-party cookies / third-party cookies)

We use cookies from so-called "third-party providers" on our website. This means that when you visit our website, data is transferred from your web browser to the third party web server and stored there. In the respective declarations of our third-party cookies, you will see the option of clicking an “opt-out” button. The “opt-out” works in such a way that the third party provider saves an “opt-out” cookie that prevents tracking.

Google Analytics

The analysis service Google Analytics from Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA (hereinafter: " Google Analytics ") is implemented on our website .
Google Analytics uses cookies that store the following information:

Type of internet browser used
Internet browser version
The operating system you are using
Referrer (previously visited website)
Your abbreviated IP address
Time of the server request

We use the function of Google Analytics to anonymize your IP address before saving or processing. Your IP address is usually shortened within the European Union / EEA and only then transmitted to the Google server in the USA. Your information is processed pseudonymously and we will not combine it with other personal data from you.

We use the data collected in this way for statistical purposes in order to optimize our website and offers. The legal basis for this is Article 6 (1) lit. f GDPR. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link ( http: // tools.google.com/dlpage/gaoptout?hl=de ) download and install the available browser plug-in.

You can either prevent the storage of Google cookies directly in your browser settings or prevent the processing of your data by clicking on the following link and "opting out": https://developers.google.com/analytics / devguides / collection / gajs /? hl = de # disable . An “opt-out cookie” will be set, which prevents your user data from being recorded on this website.

You can find Google's data protection declaration under the following link: https://policies.google.com/privacy?hl=de .

Facebook pixel

On our website we use the Facebook Pixel analysis tool from Facebook Inc., Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbor, D2 Dublin, Ireland ("Facebook"). Facebook Custom Audiences works with a JavaScript code snippet that is executed when someone opens a page. We use it to analyze the effectiveness of our advertising. We cannot identify individual users or specifically address them with advertising via our Facebook business profile, but only user groups.

We use Facebook Pixel in such a way that the sending of pixel actions to Facebook is interrupted until the cookie consent has been given. With Facebook Pixel, we want to ensure that those visitors to our website are shown advertising on Facebook who meet certain characteristics (interest in certain products, gender, certain age, live in a certain city, etc.) Facebook calls the groupings of users based on certain characteristics "Custom Audiences". The advertising should be shown on Facebook to potential customers and not to those who are unlikely to be interested in our product.

Our custom audience consists of the “Custom Audience through websites” function, ie the Facebook pixel matches visitors to our website with people on Facebook. The following data is sent to Facebook:

Context data: This includes the redirect URL, browser information and the person's Facebook user ID (hashed).

In addition, the pixel helps to statistically understand the effectiveness of advertisements, which Facebook calls "conversion". The Facebook pixel tells us whether people from the target group have visited our website, searched for a specific product on our website, viewed a specific product or product category, whether a purchase has been initiated, whether a purchase has been made. The Facebook pixel tells us whether people have been directed to our page by a paid search engine result and whether people are interested in special offers. We can only see from the statistics that this happened - we cannot identify individual people.

We noticed that our product gets a lot more attention when we use Facebook Pixel. It is therefore in our legitimate interest to integrate Facebook pixels on our website (legal basis Art. 6 lit. f GDPR).

In your Facebook profile you can choose whether you would like to receive personalized advertising. You can object to the collection by Facebook pixels and the use of your data for Facebook Ads (as part of a custom audience). If your browser does not accept third-party cookies, the Facebook pixel will not be set.

By clicking this link, you can set an opt-out cookie and switch off Facebook Pixel. The Facebook data policy can be found here: https://www.facebook.com/policy.php. Further information from Facebook Pixel can be found here: https://www.facebook.com/business/help/651294705016616.

Social media

6.1. Icon links to social networks

We use small icons on our website that each refer to our website on third-party platforms (LinkedIn, Facebook, Instagram, YouTube). They are hyperlinks , so no data from you is automatically transferred, but only when you click on the icons and a new tab opens in your browser with the third-party website.

6.2. Facebook fan page

We operate a fan page on the social media platform Facebook (Facebook Inc., Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbor, D2 Dublin, Ireland (hereinafter: " Facebook ")), which we have on our company page link the Facebook icon. As long as you do not click on the link, Facebook will not receive any data from you. If you click on the link, for example to view our corporate website on Facebook or to "like" our page, Facebook receives data from you (which data Facebook receives also depends on whether you are logged into Facebook when you click on the page or not ).

While Facebook is responsible for using this data to create profiles, among other things, we can only see aggregated data on our company website, i.e. statistics that are no longer personal. These are called "Page Insights". You can find more information about Page Insights under the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Due to the requirements of the GDPR, we have concluded an agreement with Facebook provided by Facebook, in which the joint responsibility for our fan page is regulated. You can find this agreement in German at the following link: https://www.facebook.com/legal/terms/page_conmtroller_addendum.

This means that Facebook is primarily responsible for the aggregated insight data. In addition, Facebook will fulfill all obligations under the GDPR with regard to the processing of Insights data (including Art. 12, 13 GDPR, Art. 15-22 GDPR and Art. 32-34 GDPR). If you send us an inquiry regarding our Facebook fan page, we will inform Facebook about it as soon as possible. According to our agreement, Facebook will answer the request.

Our legitimate interest in processing personal data lies in the use and linking of different communication channels. The processing takes place on the legal basis of Art. 6 Para. 1 lit. f GDPR. You can find Facebook's data policy under the following link: https://www.facebook.com/policy.php.

Your rights

If we process your data, you are "data subject" within the meaning of the GDPR. You have the following rights: right to information , right to correction , right to restriction of processing, right to deletion , right to information and right to data portability . In addition, you have a right of objection and a right of withdrawal and the right to complain to the supervisory authority .
You will find details on the individual rights below:

7.1. right of providing information

You have the right to request confirmation from us as to whether your personal data is being processed. If we process your personal data, you have the right to receive information about the following information:

the processing purposes
the categories of personal data that are processed;
the recipients or categories of recipients to whom your personal data has been or will be disclosed, in particular to recipients in third countries or international organizations;
if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration;
the existence of a right to correct or delete your personal data or to restrict processing by us or a right to object to this processing;
the existence of a right of appeal to a supervisory authority;
if the personal data was not collected directly from you, all available information about the origin of the data;
the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you.

If we transfer your data to an international organization or to a third country, you also have the right to request information as to whether suitable guarantees exist in connection with the transfer in accordance with Art. 46 GDPR.

7.2. Right to rectification

You have the right to correct and / or complete the data that we have stored about you if this data is incorrect or incomplete. We will correct or complete the information immediately.

7.3. Right to restrict processing

Under certain conditions you have the right to demand that we restrict the processing of your personal data. To do this, at least one of the following requirements must be met:

You dispute the accuracy of the personal data for a period of time that enables us to verify the accuracy of the personal data,
The processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
We no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
You have filed an objection to the processing in accordance with Art. 21 (1) GDPR, as long as it has not yet been established whether our legitimate reasons outweigh your interests.

7.4. Right of cancellation

You have the right to demand that we delete your personal data immediately if we are obliged to do so. This is the case if one of the following requirements is met:

Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing was based in accordance with Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR, and there is no other legal basis for the processing.
You object to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
Your personal data was processed unlawfully.
The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject.
Your personal data was collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

If we have made your personal data public and we are obliged to delete it in accordance with the aforementioned requirements, we will take appropriate measures, including technical measures, taking into account the technologies available to us and implementation costs, to inform other data controllers who process the personal data, to inform you that you have asked us to delete all links to this personal data or copies or replications of this personal data.
However, your right to deletion does not exist if processing is necessary for the following reasons (exceptions):

To exercise the right to freedom of expression and information;
to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which we are subject, or to perform a task that is in the public interest or in the exercise of official authority that has been assigned to us
for reasons of public interest in the area of public health in accordance with Article 9 (2) lit. h and i and Article 9 (3) DGVO;
for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the right mentioned in (1) is likely to make the realization of the objectives of this processing impossible or seriously impaired, or
for the establishment, exercise or defense of legal claims.

7.5. Right to information

If you have exercised your right to rectification, erasure or restriction against us, we are obliged to notify all recipients to whom we have disclosed your personal data of the correction, deletion or restriction of the processing of your data, unless this proves is impossible or involves a disproportionate effort.

7.6. Right to data portability

Under the following condition, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format and the right to have this data transmitted to another person responsible:

The processing is based on a consent according to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR or on a contract according to Art. 6 (1) lit. b and
the processing takes place with the help of automated procedures.

You have the right to have us transfer your personal data directly to another person responsible, provided this is technically feasible and the freedoms and rights of other people are not impaired.
This right to data portability does not apply if the processing is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority that has been assigned to us.

7.7. Right to object

You have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. e or lit. f GDPR for reasons that arise from your particular situation. This also applies to profiling mentioned in these provisions. After an objection, we will no longer process your personal data, unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is for assertion , Exercise or defense of legal claims.

If we process your personal data in order to operate direct mail , you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with direct mail.

If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.

In connection with the use of information society services - regardless of Directive 2002/58 / EC (Data Protection Directive for Electronic Communication) - you have the option of exercising your objection by means of automated procedures in which technical specifications are used.

7.8. Right of withdrawal

According to Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. Revoking your consent does not retroactively invalidate the legality of the processing.

7.9. Right of appeal to a supervisory authority

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you can assert your right of appeal in the Member State of your place of residence, your place of work or the place of the alleged violation if you are of the opinion that the processing of your personal data violates the GDPR.
You can find an overview of the respective state data protection officers of the states and their contact details under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html