DATA PROTECTION NOTICE

CONTINENTAL Automotive Technologies GmbH processes your data within the scope of using Continental MOVEit dataexchange system in accordance with the applicable statutory provisions.

1. General Information

Personal data that you enter will be processed by CONTINENTAL Automotive Technologies for the purpose(s) stated below. Insofar it is necessary for the fulfilment of the purpose, the data may also be transferred to third parties affiliated with CONTINENTAL Automotive Technologies within the meaning of §§ 15 ff. (German) Stock Corporation Act and in accordance with the Binding Corporate Rules of Continental.

2. Processing of Data

Your data will be processed exclusively on the basis of the following data protection regulations (legal basis):

Data Processing (Purpose)	Legal Basis	Duration of Storage
Registration / Contact / Interaction with Continental	Art. 6 para. 1 lit. f) EU GDPR -processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party	Your contact data (name, email address, company name) will be deleted 5 years after final processing of your request, provided that there are no legal storage obligations to the contrary. We assume final processing if it can be deduced from the circumstances that the matter in question has been conclusively clarified.
Transferred files	Art. 6 para. 1 lit. f) EU GDPR -processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party	Access via the Business Partner Access (BPA) process is default 1 year maximum. This can be extended by the Business Partner Controller. A review takes place every year. (After that, the data will be deleted.) For temporary data exchange, it is specified that the data will be deleted after 30 days or a maximum of 5 downloads. Project Folders: Transferred files get stored as long as the project exists.

Service Provider

All data is only processed and stored internally by Continental (no Cloud service Provider involved).

Data will be stored in encrypted form in German datacenter of Continental.

Application support is provided by the processor treeConsult GmbH.

Cookies

When you visit our website, information can be stored on your computer in the form of a so-called cookie (small text files). Only technically necessary cookies are used to ensure the operation of the website.

3. Rights of the data subject(s)

We draw your attention to the fact that, as a data subject, you have the following rights in connection with the processing of your personal data in accordance to the EU - General Data Protection Regulation (EU GDPR):

§ Right to revoke your consent at any time acc. Art. 7 para. 3 EU GDPR

§ Right to be informed acc. Art. 13 and Art. 14 EU GDPR

§ Right of access by the data subject acc. Art. 15 EU GDPR

§ Right to rectification acc. Art. 16 EU GDPR

§ Right to erasure acc. Art. 17 EU – GDPR

§ Right to restriction of processing acc. Art. 18 EU GDPR

§ Right to data portability acc. Art. 20 EU GDPR

§ Right to object at any time acc. Art. 21 EU - GDPR

§ Right to lodge a complaint with a supervisory authority acc. Art. 77 EU GDPR

In case of compelling reasons for processing that outweigh your interests, rights and freedoms, or serve the assertion, exercise or defense of legal claims, the processing of personal data necessary for this purpose can take place despite your objection or request for deletion.

If you have any questions in this regard, feel free to contact us: dataprotection@conti.de

Please send your revocation or requests regarding the exercise of the above listed rights in writing or by email to:

Continental Automotive Technologies GmbH

93055 Regensburg

Siemensstraße 12

Germany

E-mail: 07WWFM.DataExchange@continental-corporation.com

4. Protection of stored Data

Our company use technical and organizational security measures to protect the personal data you provide to us from manipulation, loss, destruction or access by unauthorized persons. The security measures are continuously improved and adapted according to the state of the art. Unencrypted data can possibly be viewed by third parties. For this reason, we would like to point out that no secure transmission can be guaranteed with regard to data transmission via the Internet (e.g. when communicating by unencrypted e-mail). Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL). You can determine the SSL status of the connection by looking at the address line of your browser ("https").