DATA PRIVACY

Displaying content requested by the user on the platforms:

Data is temporarily processed by our web server for this purpose.

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Providing the content on our platforms requested by the user is in our legitimate interest.

Enabling the choice of cookie consents for the TÜV SÜD store and TÜV SÜD portal, and the registration of cookie consents: 

If you visit our platforms again, we will check whether you have already given consent and if so, we will activate cookies and any web tracking and analytics tools to which you have consented.

For this purpose, strictly necessary cookies are temporarily processed by our web server. You can find out more information about the content and purposes of the cookies here.

HTTP data

Opt-in data

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Managing the cookie consents that the user has given us for our platforms is in our legitimate interest.

Guaranteeing the security of the IT infrastructure on the platforms, in particular for the detection, elimination and secure documentation of incidents (e.g. DDoS attacks)

Data is temporarily stored and evaluated by our web server for this purpose.

HTTP data

Opt-in data

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Guaranteeing the security of the IT infrastructure on the platforms, in particular for the detection, elimination and secure documentation of incidents (e.g. DDoS attacks), is in our legitimate interest.

Protocol data that accrues for technical reasons when using contact forms on the platforms, via the Hypertext Transfer Protocol (Secure) (HTTP(S)):

This includes the IP address, the type and version of the internet browser, the user's operating system, the page being accessed, the previous page (referrer URL), and the date and time of the visit.

Provision of data is neither legally nor contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If the data is not provided, we cannot provide the contact forms.

Data is stored in server log files in a form that enables identification of the data subject for a maximum of 7 days, unless there is a security-related incident (e.g. a DDoS attack). 

If there is a security-related incident, server log files are stored until the incident has been eliminated and resolved in full.

Data you enter when using the contact forms on our platforms:

This includes the information you submit via the contact forms on our platforms to get in touch with us/other (TÜV SÜD) companies. Contact forms may vary, but typical data types are your name, company, address, telephone number, email address and the content of your request.

Provision of data is neither legally nor contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If the data is not provided, we cannot process your query.

The data will be stored until your query is resolved.

We store this data as evidence for the assertion, exercise or defence of future legal claims for a transitional period of 3 years from the end of the year in which you shared the data with us, or until the end of the dispute in the case of a legal dispute.

We may store data for longer periods where statutory retention periods apply, in particular commercial or tax law. Depending on the type of documents, statutory retention periods of 6 or 10 years may apply (§ 147 German Fiscal Code, § 257 German Commercial Code.

Provision of contact forms on our platforms:

Data is temporarily processed by our web server for this purpose.

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Providing the contact forms that the user accesses is in our legitimate interest.

Ensuring the security of the IT infrastructure that supports the forms, in particular for the detection, elimination and secure documentation of incidents (e.g. DDoS attacks)

Data is temporarily stored and evaluated by our web server for this purpose.

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Safeguarding the security of the IT infrastructure that supports the forms, in particular for the detection, elimination and secure documentation of incidents (e.g. DDoS attacks), is in our legitimate interest.

Processing your request by automatically sending your request to your chosen (TÜV SÜD) company:

It will be clear from the contact form you are using whether you are contacting us or a different (TÜV SÜD) company.

Insofar as your query relates to a contract to which you are one of the parties, or where pre-contractual steps need to be taken in order to conclude it: 

Article 6 Paragraph 1 Letter b of the GDPR (Performance of a contract to which the data subject is party, or where steps need to be taken at the request of the data subject prior to entering the contract).

Otherwise: 

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test): 

In this instance, it is in our legitimate interest to process your request.

Where contact requests are passed on to other (TÜV SÜD) companies:

The respective other (TÜV SÜD) company. (It will be clear to you from the contact form which (TÜV SÜD) company you are contacting.)

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

The assertion, exercising and defence of legal claims is in our legitimate interest.

To retain data in order to comply with legal retention periods (in particular, those arising from commercial and tax law)

Depending on the type of documents, statutory retention periods in commercial and tax law can last for 6 or 10 years (§ 147 German Fiscal Code), § 257 German Commercial Code (HGB)).

Other (TÜV SÜD) companies

(It will be clear from the contact form which respective (TÜV SÜD) company you are contacting.)

Provision of registration option 

Article 6 Paragraph 1 Letter b of the General Data Protection Regulations (Fulfilment of a contract the party to which is the person concerned or for carrying out pre-contractual measures)

Provision of Log-in option 

HTTP data

Log-in data

Log data

Technical data

Transaction e-mail data

Article 6 Paragraph 1 Letter b of the General Data Protection Regulations (Fulfilment of a contract the party to which is the person concerned or for carrying out pre-contractual measures)

Provision of the option to manage one’s own user profile (customer account data) in particular, to delete the profile or to amend data.

This also includes the implicit amendment of status by entering data voluntarily

Article 6 Paragraph 1 Letter f of the General Data Protection Regulations (Protection of justified interests).

We hjave a justified interest in being able to use data which is current and correct, with the aim of offering you the greatest possible benefit.

Provision of the oprtion to set a new password if the current one has been forgotten.

Article 6 Paragraph 1 Letter f of the General Data Protection Regulations (Protection of justified interests).

We have a justified interest in enabling the user to continue, as far as possible, to have uninterrupted access to the platforms. 

Provision of the option to change an existing password.

HTTP data

Log-in data

Log data

Technical data

Article 6 Paragraph 1 Letter f of the General Data Protection Regulations (Protection of justified interests).

We have a justified interest in maximising the system and data security. The option for being able to change a password if necessary is an important part of this security. 

Hosting-Provider A

Article 6 Paragraph 1 Letter f of the General Data Protection Regulations (Protection of justified interests).

We have a justified interest in enabling you as part of “delegated administration”, to be able to manage the users belonging to your firm yourself. As a result of this the data will be kept up-to-date and this ensures that only justified people will be able to access the Firm’s data in the stores and portals.

Safekeeping of legally admissible evidence as may be required to assert, exercise or defend legal rights  

Ensuring security of the IT infrastructure used to provide the digital service TÜV SÜD platforms, in particular to detect, eliminate  and record bugs (e.g. DDoS  attacks) to a legally admissible standard:

To do so, HTTP data will be temporarily saved and assessed in log files on our webserver.

(Besides this, to do so, data from essential cookies will be temporarily processed on our webserver. Detailed information about the contents and intended use of cookies used can be found in the “Cookies” section). 

Article 6 Paragraph 1 Letter f of the General Data Protection Regulations (Protection of justified interests after balancing interests).

We have a justified interest in guaranteeing security for the IT infrastructure used to provide the form, in particular in detecting, eliminating and keeping a record of bugs (e.g. DDoS attacks) to a legally admissible standard.

Support Provider B

Protocol data that accrues whilst using the TÜV SÜD store for technical reasons – (Hypertext Transfer Protocol (Secure) (HTTP(S)):

This includes the IP address, the type and version of the Internet browser, the user's operating system, the page being accessed, the previous page (referrer URL), date and time of the visit.

Provision of data is neither legally or contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If the data is not provided, we cannot display the requested content on the TÜV SÜD store.

Data is stored in server log files in a form that enables identification of the data subject for a maximum of 7 days, unless there is a security-related incident (e.g. a DDoS attack). 

If there is a security-related incident, server log files are stored until the incident has been eliminated and resolved in full.

Data relating to products/offers that you have placed in the shopping basket in the online store, and data assigned to your end device whilst using the shopping basket function:

This includes data such as details of participants for training courses; VIN number for the Specification Sheet service.

(We install strictly necessary cookies to enable the shopping basket function. You can find out more information about the installed cookies in the section entitled "Cookies".)

Provision of data is required to conclude a purchase contract. The data subject has no obligation to provide the data.

If the data is not provided, you will not be able to use the shopping basket function and will not therefore be able to buy any items from the TÜV SÜD store.

Data that you submit during the ordering process and which is passed on to the relevant provider to process your order:

This includes

You can submit, check and edit these details during the ordering process.

Users of the TÜV SÜD store

If you are logged into your customer account whilst using the TÜV SÜD store, these details will be autofilled from your customer account if you have saved them. You can edit them during the ordering process.

Provision of data is required to conclude a contract. The data subject has no obligation to provide the data.

If the data is not provided, you will not be able to buy any items from the TÜV SÜD store.

Data that you submit after you have made an order and which is passed on to the relevant provider to process your order:

This includes requests to cancel the order.

Provision of data is neither legally or contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If the data is not provided, then we cannot pass the information on to the relevant provider.

Data about your order status which we receive from the relevant provider and pass on to you:

This includes details about the status of payment and delivery, and any cancellation requests.

Data relating to the status of your order:

This includes details about the purchased items (product description, product number, quantity, price, currency), order number, total cost, date and time of your order, status updates about your order and information about updates to the terms and conditions that you have accepted, e.g. the provider's general terms and conditions.

Data from transactional emails relating to the processing or cancellation of your order (such as order confirmation emails):

This includes the contents and time of transactional emails.

We store this data as evidence for the assertion, exercise or defence of future legal claims for a transitional period of 3 years from the end of the year in which the relevant transaction was wholly concluded, or until the end of the dispute in the case of a legal dispute.

We may store data for longer periods where statutory retention periods apply, in particular commercial or tax law (§ 147 German Fiscal Code, § 257 German Commercial Code.

Data that enables the product filter and search functions in the TÜV SÜD store and data that is assigned to your end device whilst using the product filter functions:

This includes all search enquiries you submit in the TÜV SÜD store and any product filter options you choose.

Provision of data is neither legally or contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If the data is not provided, we cannot enable the product filter and search functions in the TÜV SÜD store.

Enabling webshop functionality in the TÜV SÜD store:

HTTP data is temporarily processed by our web server for this purpose.

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Enabling the functionality selected by the user in the TÜV SÜD store is in our legitimate interest.

To make a customer account available to registered customers of the TÜV SÜD store and enable functionality within the customer account in the TÜV SÜD store:

This includes saving customer information for subsequent orders (such as billing address, delivery address, cost centre, customers' order numbers). If the customer is logged in during the ordering process, information is autofilled from the saved customer account data in order to make the ordering process in the TÜV SÜD store as easy as possible for the customer. Details can be edited at any time during the ordering process.

In addition, there is also a detailed overview in the TÜV SÜD store detailing all the orders made with different (TÜV SÜD) companies. This contains details relating to the order, delivery status and information about the products/services ordered. 

(For this purpose, certain strictly necessary cookies are temporarily processed by our web server. You can find out more information about the content and purposes of the cookies in the section entitled "Cookies".)

HTTP data

Customer account data

Technical data

Local profile

Order handling data

For users who are our direct contractual partners (platform licensing agreement), in particular private customers:

Article 6 Paragraph 1 Letter b of the GDPR (Performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering the contract)

For users who are agents for our contractual partners, in particular employees of legal bodies:

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Fulfilment of obligations to our contractual partner arising out of the platform licensing agreement is in our legitimate interest.

To enable our shopping basket function:

Data relating to the contents of your shopping basket is temporarily processed by our web server.

For this purpose, certain strictly necessary cookies are temporarily processed by our web server. You can find out more information about the content and purposes of the cookies in the section entitled "Cookies".

Where the placement of items in the shopping basket relates to a contract concluded with you:

Article 6 Paragraph 1 Letter b of the GDPR (Performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering the contract)

Otherwise: 

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Enabling the functionality selected by the user in the TÜV SÜD store is in our legitimate interest.

Provision of the product filter and search functions:

To this end data you enter in our product filter and search funtions will be temporarily processed on our webserver.  

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Enabling the functionality selected by the user in the TÜV SÜD store is in our legitimate interest.

To accept orders and to transfer information between users and other (TÜV SÜD) companies acting as purchasers and vendors. In particular, the passing on of users' orders to the relevant provider/vendor:

We receive your order in the TÜV SÜD store and pass the order details on to the relevant provider. The provider is the (TÜV SÜD)  company that is the designated supplier of products/services during the ordering process.

The relevant provider may contact you with information about the status of your order via the TÜV SÜD store. We will display messages concerning orders in your customer account.

During ordering, you will be forwarded from the TÜV SÜD store to the payment provider. The payment provider acts as a data processor for the chosen supplier. We are not privy to the information that you submit to the payment provider. However, we will receive a notification from the relevant provider (i.e. the (TÜV SÜD) company acting as the supplier) about your payment so that we can complete the ordering process.

We will inform you via email about the delivery of an order and any other order notifications.

If you are logged into your customer account when you make an order, the data and default settings in your customer account will be autofilled. You can edit these details during the ordering process.

The suppliers process the ordering data to carry out contracts concluded in the TÜV SÜD store, and, if applicable, to carry out credit checks for purchases on account, to administer purchase price claims and to comply with statutory retention periods. You can find out more information about the processing of personal data by these (TÜV SÜD) companies in the privacy policy – which there are links to throughout the ordering process in the TÜV SÜD store.

(For this purpose, certain strictly necessary cookies are temporarily processed by our web server. You can find out more information about the content and purposes of the cookies in the section entitled "Cookies".)

HTTP data

Customer account data

Technical data

Local profile

Shopping basket data

Order handling data

Transactional e-mail data

For users who are our direct contractual partners (platform licensing agreement), in particular private customers:

Article 6 Paragraph 1 Letter b of the GDPR (Performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering the contract)

For users who are agents for our contractual partners, in particular employees of legal bodies:

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Fulfilment of obligations to our contractual partner arising out of the platform licensing agreement is in our legitimate interest.

Hosting provider B

Support provider D

E-mail service provider A

For order processing data:

(TÜV SÜD) companies as suppliers

(It will be indicated to you during the ordering process which (TÜV SÜD) company is your supplier. (TÜV SÜD)  companies pass certain order processing data on to third parties – e.g. the payment service provider or delivery companies. You can find out more information about the processing of personal data by these (TÜV SÜD) companies in the privacy policy. There are links informing you about this throughout the ordering process in the TÜV SÜD store.)

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

The assertion, exercising and defence of legal claims is in our legitimate interest.

To retain data in order to comply with legal retention periods (in particular, those arising from commercial and tax law)

Depending on the file type, statutory retention periods in commercial and tax law can last for 6 or 10 years (§ 147 German Fiscal Code), § 257 German Commercial Code (HGB).

To guarantee the security of the IT infrastructure of the TÜV SÜD store – especially for the detection, elimination and secure logging of incidents (e.g. DDoS attacks)

HTTP data is temporarily stored and evaluated by our web server for this purpose.

(For this purpose, certain strictly necessary cookies are temporarily processed by our web server. You can find out more information about the content and purposes of the cookies in the section entitled "Cookies".) 

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Guaranteeing the security of the IT infrastructure which enables us to provide forms to users, in particular for the detection, elimination and secure documentation of incidents (e.g. DDoS attacks), is in our legitimate interest.

TÜV SÜD Companies

(It will be indicated to you during the ordering process which (TÜV SÜD) company is your supplier. These (TÜV SÜD) companies pass certain order processing data on to third parties – e.g. our payment provider (as a data processor) or t

o delivery companies (as a controller). You can find out more information about the processing of personal data by these (TÜV SÜD) companies in the privacy policy. There are links informing you about this throughout the ordering process in the TÜV SÜD store.)

Protocol data that accrues whilst using the TÜV SÜD portal for technical reasons – (Hypertext Transfer Protocol (Secure) (HTTP(S)):

This includes the IP address, the type and version of the Internet browser, the user's operating system, the page being accessed, the previous page (referrer URL), date and time of the visit.

Provision of data is neither legally or contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If the data is not provided, we cannot display the requested content on the TÜV SÜD portal.

Data is stored in server log files in a form that enables identification of the data subject for a maximum of 7 days, unless there is a security-related incident (e.g. a DDoS attack). 

If there is a security-related incident, server log files are stored until the incident has been eliminated and resolved in full.

Information about your current activities.

Will be generated and saved automatically.

The data will be updated in line with the progress of processes and, as a rule, deleted following completion. Data will only be retained in the following cases:

It is relevant for subsequent processes.

There is a legal obligation to retain the data.

We store the right of access data until the provider of the linked portal informs us that your access has expired or that your platform licence agreement has ended.

We store this data as evidence for the assertion, exercise or defence of future legal claims, followed by a transitional period of 3 years from the end of the year in which your access authorization (e.g. after your platform licence agreement has ended) has expired, or until the end of the dispute in the case of a legal dispute.

Enabling portal functionality in the TÜV SÜD portal:

HTTP data is temporarily processed by our web server for this purpose.

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Enabling the functionality selected by the user in the TÜV SÜD portal is in our legitimate interest.

To make a customer account available to registered customers of the TÜV SÜD portal and enable functionality within the customer account in the TÜV SÜD portal:

This includes allows data entered by the customer in the customer account (such as addresses, contact details, settings) to be stored. It also enables an overview of all the information in the linked portals of other (TÜV SÜD) companies to be shown in the TÜV SÜD portal. 

For users who are our direct contractual partners (platform licensing agreement), in particular private customers:

Article 6 Paragraph 1 Letter b of the GDPR (Performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering the contract)

For users who are agents for our contractual partners, in particular employees of legal bodies:

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

Fulfilment of obligations to our contractual partner arising out of the platform licensing agreement is in our legitimate interest.

Registration data

Additional customer account data

Shopping basket data

Order processing data

Transactional email data

The data is for the most part assigned to the user carrying out the order.

However, the data may also contain information relating to third parties depending on what the user is doing. For example, the user might nominate you as the invoice recipient or name you as a participant in one of the training courses that he/she has booked.

To enable the functionality of customer accounts in the TÜV SÜD store:

For more information, refer to Section "Third-party data".

You are affected as a third party in this case if one of our users names you as the invoice recipient (if they specify a different billing address) or as the contact person for any accounting queries.

Our users are informed during the ordering process – and as part of the terms of usage for our platform – of their obligation to inform you that your third-party data will be processed, and direct you to this privacy policy. 

Registration data

Additional customer account data

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

It is in our legitimate interest to fulfil the contract between us and the user on the terms of usage of our platform.

To accept orders and to transfer information between users and other (TÜV SÜD) companies acting as purchasers and vendors. In particular, the passing on of users' orders to the relevant provider/vendor:

For more information, refer to Section "Third-party data".

You are affected as a third party if one of our users mentions you in relation to the billing address, specifies you as the invoice recipient or contact person for accounting enquiries, or names you as participant whilst they are booking a course.

Our users are informed during the ordering process and as part of the terms of usage for our platform that they are obliged to inform you that your data will be processed as a third party and direct you to this privacy policy. 

Registration data

Additional customer account data

Shopping basket data

Order processing data

Transactional email data

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

It is in our legitimate interest to fulfil the contract between us and the user on the terms of usage of our platform.

Hosting provider

Email provider

For order processing data:

(TÜV SÜD) companies as suppliers

(It will be indicated to our users during the ordering process which (TÜV SÜD) company is your supplier. (TÜV SÜD) companies pass certain order processing data on to third parties – e.g. the payment service provider or delivery companies. You can find out more information about the processing of personal data by these (TÜV SÜD) companies in the privacy policy. There are links informing you about this throughout the ordering process in the TÜV SÜD store.)

To retain data as evidence in order to establish, exercise or defend legal claims

For more, refer to Section "Third-party data".

You are affected as a third party in this case if one of our users provides your personal data in their customer account or to make an order (see above).

Order processing data

Transactional email data

Article 6 Paragraph 1 Letter f of the GDPR (Protection of a legitimate interest using a balancing test):

The assertion, exercising and defence of legal claims is in our legitimate interest.

To retain data in order to comply with legal retention periods (in particular, those arising from commercial and tax law) 

For more, refer to section "Third-party data".

You are affected as a third party in this case if one of our users submits your personal data in their customer account or to make an order (see above).

Order processing data

Transactional email data

Article 6 Paragraph 1 Letter c of the GDPR (Compliance with a legal obligation)

(TÜV SÜD) companies as suppliers

(It will be indicated to our users during the ordering process which (TÜV SÜD) company is your supplier. These (TÜV SÜD) companies pass certain order processing data on to third parties – e.g. the payment service provider (as a data processor) or to delivery companies (as a controller). You can find out more information about the processing of personal data by these (TÜV SÜD) companies in the privacy policy. There are links informing you about this throughout the ordering process in the TÜV SÜD store.)

Protocol data that accrues for technical reasons (Hypertext Transfer Protocol (Secure) (HTTP(S)) whilst the web analytics service Google Analytics is being used:

This includes the IP address, the type and version of the Internet browser, the user's operating system, the page being accessed, the previous page (referrer URL), date and time of the visit.

Provision of data is neither legally nor contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If you do not allow us to use the data, we are unable to carry out web analytics using Google Analytics.

Data that is assigned to your device by the web analytics tool Google Analytics:

This includes a unique ID that is used to (re-)identify returning users.

(We install cookies for the web analytics tool Google Analytics. You can find out more information about the installed cookies in the section entitled "Cookies".)

Provision of data is neither legally or contractually required, nor is it needed to conclude a contract. The data subject has no obligation to provide the data.

If you do not provide the data, we are unable to carry out web analytics using Google Analytics.

We only process this data temporarily for the duration of the website visit.

(The cookies for the web analytics tool Google Analytics are installed on the user's end device. You can find out more information about the validity period of the installed cookies in the section entitled "Cookies".)

Data that is generated by the web analytics tool Google Analytics and stored in pseudonymized user profiles:

This includes information about how the website is used, in particular page visits, frequency of visit and duration of visit on the various web pages. This data is matched with the unique user ID of each user which is assigned to users' end devices by Google Analytics.

Website optimization and better attainment of website objectives (e.g. increasing page views)

For this purpose, user behaviour on our website is recorded and analyzed in a pseudonymized form. Website users are pseudonymized so that they may be recognized whilst on the website. The browsing information is used to create pseudoymized user profiles. The pseudonymized user profiles are not combined with data that identifies the person to whom the pseudonym has been given.

The aim is to analyse where users are coming from, what parts of the website they visit, and how frequently they visit sub-pages and sub-categories, and the duration of their visit.

We use Google Analytics, Google's web analytics tool, for this purpose. 

(For this purpose, cookies are also temporarily processed by our web server. You can find out more information about the content and purposes of the cookies in the section entitled "Cookies".)

Google Analytics HTTP data

Google Analytics end device data

Google Analytics profile data