Privacy Policy

We provide you with this Privacy Policy to inform you about which data we collect when you visit the website and use the service at www.sonomotors.com and how we at Sono Motors handle your personal information.

Privacy policy according to § 5 and § 13 of the German Telemedia Act (TMG) Information according to Articles 13, 14, 21 and 49 of the General Data Protection Regulation (GDPR)

We hereby inform you about the processing of your personal data by us in the context of your use of our websites and the claims and rights to which you are entitled under the data protection regulations.

Info sheet for applicants

Info sheet for business partners

Info sheet for investors

Info sheet for customers

Info sheet for employees

Info sheet for online meetings

Info sheet for social media

I. Entity responsible for data processing

Service Provider:

SONO MOTORS GmbH
Waldmeisterstr. 93
80935 Munich, Germany

Represented by: Jan Schiermeister, Denis Azhar
Register Court: Amtsgericht München
Register number: HRB 224131
VAT: DE305560734

Contact:

E-mail:
Phone: +49 (0)89 - 45205818

Data Protection Officer:

SONO MOTORS GmbH

Data Protection Officer
Waldmeisterstr. 93 
80935 München

E-Mail:

II. Sources and data for the processing of personal data

We process personal data that we receive from you in the course of your internet or social media use or that you have transmitted to us via one of our contact forms. 

Data is stored in server log files, which are collected and automatically stored by the provider and mostly transmitted to us by your browser. These are:

  • Information about the browser type and version used
  • The operating system of the user
  • The user's Internet service provider
  • Referrer URL
  • Name of the requested file
  • The amount of data transferred
  • The IP address of the user
  • Date and time of access
  • Websites from which the user's system accesses our website
  • Websites that are accessed by the user's system via our website

Furthermore, we may process other data comparable to the above categories. 

We collect the listed data to ensure a smooth dial-up of the website and to enable a comfortable use of our website by the users. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or the log files is our legitimate interest according to Art. 6 para. 1 lit. f) GDPR.

Currently, we also offer the following social media channels:

In the context of social media use, we may retrieve statistical data concerning website usage from the respective social media company. This may include information on page views and activities; views of individual articles, videos, services (e.g. route planner), etc.; comments, shared content, responses, usage rates: Men and women, origin related to country and city, language. The legal basis for the retrieval of data during social media use is Art. 6 para. 1 lit. f) GDPR.

III. Purpose of the processing and legal basis

We process personal data in accordance with the provisions of the European Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG)

1. Within the framework of the weighing of interests in the event of conflicting interests (Art. 6 para. 1 lit. f) GDPR and Art. 49 para. 1 p. 2 GDPR)

The legal basis for the temporary storage of the data is our legitimate interest (Art. 6 para. 1 lit. f) GDPR). We collect the data listed above to ensure a smooth dial-up of the website and to enable a comfortable use of our website by the users. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. In addition, we store your data for reasons of technical security, in particular to defend against attempted attacks on our web server. 
Examples in this context:

  • Testing and optimization of procedures for needs analysis and direct customer approach;
  • Advertising or market and opinion research, e.g. by using cookies, insofar as you have not objected to the use of your data;
  • Assertion of legal claims and defense in legal disputes;
  • Ensuring IT security and IT operations;
  • Measures for business management and further development of services and other offers.
  • Sporadic evaluation of data for research purposes in anonymized form

In particular, so-called usage profiles are created by the social media companies by means of your usage behavior and used for the placement of advertisements. Cookies are usually stored on your computer for this purpose.

2. Within the framework of the weighing of interests in the case of similar interests (Art. 49 para. 1 lit. c) GDPR)

If the balance of interests shows that both the responsible and the data subject have an interest in the transfer of data to a third country, the data transfer is based on Art. 49 para. 1 lit. c) GDPR.

3. Within the scope of your consent (Art. 6 para. 1 para. 1 lit. a) GDPR and Art. 49 para. 1 lit. a) GDPR)

Insofar as you have given us consent to process personal data for certain purposes (e.g. transfer of data to third parties, evaluation of data for marketing purposes), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. 

Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

If you have given consent to the social media companies to process certain data, the processing is carried out on the legal basis of Art. 6 para. 1 lit. a) GDPR.

4. Due to legal requirements, Art. 6 para. 1 lit. c) GDPR or in the public interest, Art. 6 para. 1 lit. e) GDPR.

In addition, we are subject to various legal obligations, i.e. legal requirements (e.g. commercial law, tax laws, etc.). Insofar as data is processed in this regard, this is done exclusively on the basis of these regulations. 

In particular, the Infection Protection Act or similar national and international regulations to which we are bound due to the current Covid 19 pandemic may be considered as such legal basis.

IV. Passing on of data

Within the company, those departments receive your data that need it to fulfill our contractual and legal obligations. Processors used by us (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories of IT services, telecommunications, consulting and advisory services, and sales and marketing.

With regard to the transfer of data to recipients outside the company, it should be noted that we will only transfer your data if this is permitted or required by law, you have consented or we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:

  • Public agencies and institutions (e.g. public prosecutor's office, police, supervisory authorities) in the event of a legal or official obligation.

Other data recipients may be those bodies for which you have given us your consent to transfer data.

V. Duration of storage

To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfill the respective purposes.

VI. Data transfer to third countries

Data is only transferred to third countries (countries outside the European Economic Area - EEA) if this is necessary for the execution of our social media offers, is required by law or you have given us your consent. We will inform you separately about details, if required by law.

When visiting our social media offers, we point out that data of you as a user may be processed outside the EU.

VII. Contact form and contact by E-Mail

If you send us inquiries via contact form or e-mail, your data from the inquiry form or your e-mail, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The indication of your name as well as your e-mail address is required. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para.1 lit. f) GDPR, Art. 49 para. 2 p. 1 GDPR and Art. 49 para. 1 lit. a) GDPR and, if applicable, Art. 6 para.1 lit. b) GDPR, if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal obligations to retain data. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f) GDPR.

VIII. Use of cookies

Our website uses cookies, which are stored by the browser on your device and contain certain settings for the use of the website (e.g. for the current session). Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after closing the browser. Other cookies remain stored on your terminal device until you delete them or the storage period expires. These cookies allow us to recognize your browser on your next visit.

The cookies are used to simplify website processes by storing settings (e.g. providing already selected options). If personal data is also processed by individual cookies implemented by us, the processing is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR and in order to ensure the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited. 

You can declare a general objection to cookies used for online marketing purposes via the US site http://www.aboutads.info/choices/ or via the EU site http://www.youronlinechoices.com/

You can also deactivate the storage of cookies in your browser settings. Please note that you may then not be able to use all the functions of this online offer.

IX. Google Services

On our website, we use several services of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") We have concluded an order processing agreement with Google in accordance with Art. 28 GDPR. If data is transferred to a third country, this is based on the existence of the standard contractual clauses in force since September 2021.

You can find more information on this at https://business.safety.google/gdpr/#international-transfers

1. Google Analytics

On our homepage we use the web analytics service Google Analytics of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, to evaluate the use of our website, to compile reports on website activity and to provide other services related to website and internet use. The legal basis is the consent given by you pursuant to Art. 6 para. 1 lit. a) GDPR.

For this service, a cookie is set on your computer and the usage data stored in the process is forwarded to Google and transferred to a server, which is usually located in the USA, and stored there. 

Google uses this information to evaluate the use of our online offer and, in particular, to create user statistics with pseudonymized usage profiles. Google Analytics is only used with IP anonymization activated, which means that the IP address of users is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. A transmission of the full IP address to a Google server in the USA can nevertheless not be excluded. Users can prevent storage of cookies by refusing to give their consent or by adjusting their browser software accordingly. Furthermore, you can prevent the transmission of the data stored by the cookie to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

For more information, please see Google's privacy policy: https://policies.google.com/technologies/ads.

2. Google Marketing Services

We use the marketing and remarketing services (in short "Google Marketing Services") of Google Ireland Limited (Gordon House, Barrow Street, Dublin, Ireland, ("Google")) on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f) GDPR).

The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to present users only ads that potentially match their interests. For this purpose, cookies may be set by various domains, including google.com or doubleclick.net. This file records which websites the user has visited, which content he is interested in and which offers he has clicked on, as well as technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer. The IP address of the user is also recorded, whereby we inform that for Google Analytics the IP address is shortened within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transmitted in full to a Google server in the USA and shortened there.

User data is processed pseudonymously as part of Google's marketing services. This means that Google does not store and process the name or email address of the user, for example, but processes the relevant data on a cookie basis within pseudonymous user profiles. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. 

We may integrate third-party advertisements based on the Google marketing service Google Ads or "DoubleClick". The tool uses cookies that allow Google and its partner websites to serve ads based on users' visits to this website or other websites on the Internet.

Furthermore, we may use the "Google Tag Manager" to integrate and manage Google analyze and marketing services on our website.

In addition, we use Google Adwords Conversions to draw attention to our offers with the help of advertising media on external websites. 

For more information about Google's use of data for marketing purposes, please visit the overview page: https://policies.google.com/technologies/ads 

You can find Google's privacy policy at https://policies.google.com/privacy 

If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated

3. Google Forms

We use the Google Forms service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to conduct surveys or online forms. Google Forms makes it possible to design and evaluate surveys and online forms. In addition to the personal data that you enter in the respective forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected. Your personal data is processed by Google on our behalf in accordance with Art. 28 GDPR. The legal basis for the processing of the data by Google is your consent in accordance with Art. 6 para. 1 lit. a) GDPR or Art. 49 para. 1 lit. a) GDPR.

Processing regularly takes place within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. However, data transfers to the USA cannot be excluded.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy?hl=de&gl=de

4. YouTube

We use the provider YouTube for the integration of videos within the scope of a legitimate interest according to Art. 6 para. 1 lit. f) GDPR, namely the appealing design of our websites, and integrate the media of YouTube for the display of videos (plugin). YouTube is a service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you call up the website of our Internet presence provided with such a plugin, a connection is established to the YouTube servers and the plugin is displayed. This transmits to the YouTube server that you have visited our website. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. When using the plugin, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment if you log out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. before using our website and delete the corresponding cookies of the companies.

Further information on data processing and notes on data protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/.

5. Google ReCaptcha

We use the service reCAPTCHA of Google Inc. on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The purpose is to distinguish whether the input is made by a human or by an automated and machine processing. Your input is transmitted to Google and used by Google. The IP address and, if applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, if necessary, also in the USA. 

The processing is based on Art. 6 para. 1 lit. f) GDPR representing the legitimate interest to protect our website from automated spying, misuse and SPAM.

You can find more information about Google reCAPTCHA and the associated data protection statement at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

X. Facebook pixel

Furthermore, the website uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the Facebook social network or other websites that also use this method. In this way, we pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you. Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding web page of our website or clicked on one of our adds. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features. Deactivating the "Facebook Custom Audiences" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_

The legal basis for the processing of your data is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. For more information on data processing by Facebook, please visit https://www.facebook.com/about/privacy.

XI. Facebook fan page

The operation of a Facebook fan page constitutes processing under joint responsibility pursuant to Art. 26 GDPR. For this purpose, an agreement has been concluded with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). This agreement can be accessed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

According to this agreement, we ourselves cannot make any decisions or do not have any influence over the processing of data by Facebook. 

The responsibility for the processing of the so-called "Insights data" as well as the fulfillment of the corresponding obligations from the GDPR is assumed by Facebook.

XII. Instagram

Within our online offer, functions and contents of the service Instagram are integrated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. When you access a page that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information is also published on your Instagram account and displayed there to your contacts.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

For more information, please see the privacy policy (https://help.instagram.com/155833707900388) of Instagram.

We only use the data provided to us by Instagram that is necessary for the purposes stated here. The processing serves to protect our legitimate interests pursuant to Art. 6 para.1 p.1 lit. f) GDPR.

You can find more information in the privacy policy of Instagram: http://instagram.com/about/legal/privacy/.

XIII. Raffle

On our website https://sonomotors.com/en/ we offer you the opportunity to participate in competitions organized by us. The legal basis for the processing of data in the context of the competition is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. 

The storage serves the purpose of notifying you by e-mail in the event of a win. Furthermore, we store your IP address and the time of your registration each time you register and confirm, in order to prevent misuse of your personal data and to be able to provide proof of correct sending.

XIV. Vimeo

We use plugins of the video portal Vimeo of Vimeo, LLC (555 West 18th Street, New York, New York 10011, USA) on our website. If you call up a website with Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is then stored there. Through interactions with the Vimeo plugins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there.

If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your member account, you must log out of Vimeo before visiting the website.

The privacy policy with more detailed information on the collection and use of your data by Vimeo can be found at https://vimeo.com/privacy.

Vimeo calls up the Google Analytics tracker via an iFrame in which the video is called up. This is Vimeo's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. Users can also prevent the collection of data generated by Google Analytics and related to their use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

XV. Typeform

We use Typeform from TYPEFORM SL, C/Bac de Roda, 163, 08018 Barcelona Spain for our contact form. This allows us to provide you with an easy way to contact us.

For this purpose, we share the following personal data with Typeform:

  • Email address
  • First name
  • Last name
  • Telephone number

The data will be stored exclusively for the purpose of transmitting requests and answering them. The mandatory data is used to assign and answer your request.

Typeform is the recipient of your personal data and acts as an order processor for us. 

The legal basis for this processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. 

Without your consent and the transmission of your personal data, we cannot provide you with a contact form. 

In addition, Typeform collects the following personal data using cookies: Information about your terminal device (IP address, device information, operating system, browser settings). Furthermore, usage data is collected such as date and time when you used the contact form. Typeform needs this data to ensure the presentation of the contact form and its functionality. This corresponds to our legitimate interest (according to Art. 6 para. 1 lit. f) GDPR). You can find further information at: https://help.typeform.com/hc/en-us/articles/360029581691-What-happens-to-my-data

You can find further information on objection and removal options vis-à-vis Typeform at: https://admin.typeform.com/to/dwk6gt

XVI. Mailchimp

We use Mailchimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA (Mailchimp) to send our newsletter. This allows us to contact subscribers directly. In addition, we analyze your usage behavior in order to optimize our offer.

For this purpose, we pass on the following personal data to Mailchimp:

  • Email address
  • First name
  • Last name
  • Your phone number

Our e-mails contain a link that allows you to update your personal data.

Mailchimp is the recipient of your personal data and acts as a processor for us as far as sending our newsletter is concerned. The processing of the data provided under this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, we cannot send out a newsletter to you.

In addition, Mailchimp collects the following personal data using cookies and other tracking methods: Information about your terminal device (IP address, device information, operating system, browser ID, information about the application you use to read your emails and other information about hardware and internet connection. In addition, usage data is collected such as date and time, when you opened the email / campaign and browser activity (e.g. which emails / web pages were opened). Mailchimp needs this data to ensure the security and reliability of the systems, compliance with the terms of use and the prevention of abuse. This corresponds to the legitimate interest of Mailchimp (according to Art. 6 para. 1 lit. f) GDPR) and serves for the execution of the contract (according to Art. 6 para. 1 lit. b) GDPR). Furthermore, Mailchimp evaluates performance data, such as the delivery statistics of emails and other communication data. This information is used to create usage and performance statistics of the services.

Mailchimp additionally collects information about you from other sources. In an unspecified period and scope, personal data is collected via social media and other third-party data providers. We have no control over this process.

You can find more information on objection and removal options vis-à-vis Mailchimp at: https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts.

The legal basis for these processing operations is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent to the processing of your personal data at any time. 

Mailchimp has implemented compliance measures for international data transfers. These apply to all global activities that process personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://mailchimp.com/legal/data-processing-addendum/

XVII. SurveyMonkey

Occasionally, we use the services of SurveyMonkey (SurveyMonkey Europe UC, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland) to conduct surveys. SurveyMonkey is a web service for the creation and evaluation of online surveys. Participation is on a voluntary basis and respondents thereby declare their consent to the processing of their personal data in accordance with Art. 6 para. 1 lit. a) of the GDPR.

We conduct surveys without collecting personal data such as names and addresses, so that participants remain anonymous. If we do need this data for some surveys, we will inform you separately and only collect this data with your consent. However, SurveyMonkey collects transaction data such as the IP address and cookies to ensure the function of the survey tool. We have no control over this. You can find details about the data collected by Survey Monkey in their privacy policy (https://de.surveymonkey.com/mp/legal/privacy-policy/?ut_source=footer#pp-section-3).

We use SurveyMonkey's option of enabling "Anonymous Responses" to ensure that respondents' responses are collected anonymously.

SurveyMonkey Europe UC is a subsidiary of SurveyMonkey Inc. based in the USA. It is not excluded that your data collected by SurveyMonkey will also be transferred to the USA. Contract processing has been agreed with SurveyMonkey. If data is transferred to a third country, this is based on the existence of the standard contractual clauses in force since September 2021.

This and further data protection information from SurveyMonkey can be found at https://www.surveymonkey.de/mp/policy/privacy-policy/.

XVIII. Acuity Scheduling

We use the Acuity Scheduling service for simplified appointment scheduling. This service is provided by Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014 USA.

When you book an appointment, we collect the personal data that you provide for this purpose. The legal basis is therefore your consent in accordance with Art. 6 para.1 lit. a) GDPR. These are regularly:

  • Name
  • Phone number
  • e-mail address

This data is transmitted to Acuity Scheduling and regularly transferred to servers in the USA and processed there. The purpose of this processing is, among other things, the provision of the services, communication with you, surveys, market and opinion research, advertising, analysis and improvement of the service. The legal basis for this processing is either your explicit consent by providing your data or the legitimate interest to improve the service according to Art. 6 para. 1 lit. f) GDPR.

We have agreed on a contract for order processing with Squarespace. Insofar as data is transferred to a third country, this transfer is based on the existence of the standard contractual clauses in force since September 2021.

For more information about data processing by Squarespace, please visit https://de.squarespace.com/datenschutz.

XIX. Consent Manager

We use the Consent Management Tool of the company Consent Management Provider (consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg). When you visit our websites, a connection is established to the servers of Consent Management Provider in order to query whether, which and for what purpose personal data may be collected and processed. 

For this purpose, we collect the IP address, browser used, language and website accessed from each visitor.

Subsequently, a cookie is stored in your browser in order to be able to assign the consent given or its revocation to you. The data collected in this way is stored until you request us to delete it, delete the Consent Manager Provider cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected. Consent Manager Provider is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c) GDPR.

We have concluded an order processing contract with Consent Manager Provider in accordance with Art. 28 GDPR.

XX. Mapbox

We use Mapbox on some subpages to display interactive maps. Mapbox is a map service provided by Mapbox Inc. (Mapbox). By using the tool, information about the use of this website, including your IP address, may be transmitted to Mapbox in the USA.

When you access a page on which we use the tool, your browser establishes a direct connection with Mapbox's servers. The map content is transmitted by Mapbox directly to your browser, which then integrates it into the website. Therefore, we have no influence on the extent of the data collected by Mapbox in this way.

If you do not want Mapbox to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.

For more information about the purpose and scope of data collection and the further processing and use of data by Mapbox, your rights in this regard and settings options for protecting your privacy, please refer to Mapbox's privacy policy at https://www.mapbox.com/privacy/. There it is stated, amongst others, that the IP address of the visitor, the address of the visited page, date and time and the pages accessed are stored. According to Mapbox, this information is used exclusively to improve the service provided for diagnostic and analysis purposes. Mapbox does not disclose personal data to third parties.

You also have the option to prevent cookies from Mapbox by disabling third-party cookies in your browser settings.

XXI. Duration of the storage of personal data

To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfill the respective purposes.

XXII. Your rights

In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

  • Right of access:
    The right, pursuant to Article 15 of the GDPR, to request information about your personal data processed by us. 
  • Right to rectification:
    The right, pursuant to Art. 16 GDPR, to request without undue delay the rectification of inaccurate or incomplete personal data we hold about you.
  • Right to erasure:
    The right, pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
  • Right to restriction of processing:
    The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR.
  • Right to data portability pursuant to Art. 20 GDPR:
    You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible
  • Right of complaint:
    You have the right to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office or, if applicable, that of your usual place of residence or workplace for this purpose.
  • Right of withdrawal:
    Right to revoke consent given in accordance with Art. 7 para. 3 GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

We would like to point out that the easiest way for you to assert your data subject rights in connection with your social media use is against the social media company.

For Facebook, you can find more information at: https://www.facebook.com/legal/terms/information_about_page_insights_data
On Instagram, you can find more information at: https://help.instagram.com/155833707900388.

XXIII. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 para. lit. e) GDPR (data processing in the public interest) and Article 6 para. 1 lit. f), 49 para. 1 lit. c), para. 2 of the General Data Protection Regulation (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR. 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. 

In individual cases, we process your personal data to conduct direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling, insofar as it is related to such direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made form-free and should preferably be addressed to:

SONO MOTORS GmbH
Waldmeisterstr. 93
80935 Munich, Germany

E-mail:
Phone: +49 (0)89 - 45205818

We would like to point out that the easiest way to assert your data subject rights in connection with your social media use is against the social media company.

For Facebook, you can find more information at: https://www.facebook.com/legal/terms/information_about_page_insights_data
On Instagram, you can find more information at: https://help.instagram.com/155833707900388.

XXIV. Obligation to provide data

In the context of Internet or social media use, you only have to provide the personal data that is required for use or that we are legally obligated to collect. Without this provided data, a meaningful use may be limited or impossible.

XXV. External links

Insofar as links are provided to other websites, we have neither influence nor control over the linked content and the data protection provisions there. We recommend that you check the data protection declarations of linked websites when you access them in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

XXVI. Automated decision-making in individual cases

Fully automated decision-making pursuant to Art. 22 GDPR does not take place. If we use these procedures in individual cases, we will inform you about this separately, provided this is required by law.

XXVII. Data use for profiling (scoring)

We do not process your data with the aim of evaluating certain personal aspects (profiling). In the context of data collection by tracking services, your data will be used to evaluate your usage behavior and possibly to create movement profiles.

XXVIII. Other

At this point, we would like to inform you about other options for protecting your rights, setting options and protecting your privacy with social media companies.
Information from Facebook: https://www.facebook.com/about/privacy/
As well as in the "Information on Page Insights Data": https://www.facebook.com/legal/terms/information_about_page_insights_data
Opt-out: https://www.facebook.com/settings?tab=ads respectively http://www.youronlinechoices.com