A. Responsible person
Welcome to the ONE.Konzern Business Plattform (ONE.KBP) of Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, email@example.com, listed in the commercial register of the District Court of Braunschweig under HRB 100484 ("Volkswagen AG"). The following provides information on how we process your data. A list of the Group companies using it can be downloaded at the bottom of this page.
B. How your personal data is processed while using the ONE.KBP
Initially, we automatically obtain the following log data when you visit Volkswagen AG’s ONE.KBP:
- An anonymous cookie ID, which does not allow your IP address to be identified,
- The operating system and web browser you are using, and your selected screen resolution,
- The date and time of your visit
- The webpages you visit on our websited
- The website from which you visited us
We process this data in order to ensure the ONE.KBP operates as required.
C. Processing of your personal data when using the ONE.KBP
C. Processing of your personal data when using the ONE.KBP:
- to establish contact to initiate or carry out a business relationship between a Volkswagen Group company and your company, or you yourself
- to execute procurement processes between Volkswagen AG and its Group companies as well as its business associates (contractor or partner firm)
- to verify changes in information in applications
- to clearly identify the user for the secure use of applications
For this purpose the following personal data about you is required:
We process the name of the company you are representing; your surname, first name, title, your business email address, your business telephone number and your business fax number.
If you request authorisation/activation to use group internal IT systems, date and place of birth will also be collected. This serves the purposes of identification and contact as part of using ONE.KBP.
Your nationality is recorded only in the case where particular national legislation may require this.
The legal basis for processing your personal data is – in as far as you act in your own name – Section 6 Para. 1 sentence 1 b) of the GDPR (data processing necessary for initiating and executing contracts). If you represent a company/third-party, the legal basis for processing your personal data is Section 6 Para. 1 f) of the GDPR (data processing based on predominant, legitimate interest) This interest consists in organising the Group procurement process in a viable way, in that there are contacts available at each business associate, and in offering the necessary guarantee of security and integrity of the processes when using the Volkswagen systems.
Data transfer to non-EU countries
In using the ONE.KBP, you are also transmitting your personal data to companies of the Volkswagen Group outside the European Union and the European Economic Area.
Volkswagen Group companies from non-EU countries only participate in ONE.KBP if a sufficient level of data protection level is assured by the non-EU country in accordance with the European Commission’s adequacy resolution, or suitable guarantees (e.g. data protection contracts using the European Commission’s standard data protection clauses) can be provided to appropriately protect your personal data. A list of the Group companies using it can be downloaded at the bottom of this page.
Concept for data deletion
Your personal data are deleted as soon as the information they contain is no longer required to fulfil the purpose of collection. If deletion is contrary to legal duties for retention, we will limit processing.
D. Your rights
You may assert the rights listed below against Volkswagen AG free of charge at any time:
You have the right to receive information from us about how we process your personal data.
Right of rectification
You have the right to demand that we rectify personal data concerning you that is incorrect or incomplete.
Right to deletion
You have the right to demand that your data be deleted if the prerequisites named in Section 17 of the GDPR are satisfied. For example, it provides the option to demand the deletion of your data if they are no longer required for the purposes for which they were collected. You can also demand they be deleted if we process your data on the basis of your permission and you revoke this permission.
Right to limit processing
You have the right to demand processing of your data be limited, if the prerequisites of Section 18 of the GDPR are satisfied. This is, for example, the case if you dispute the correctness of your data. You can then demand processing to be limited while the correctness of the data is being reviewed.
Right to object
In as far as the processing concerns a predominant interest of Volkswagen AG or a third-party (Section 6 Para. 1 f of the GDPR), you have the right to object to the processing of your data. You may also object to the processing in those cases where the processing is either of public interest or is carried out in the exercise of official authority (Section 6 Para. 1 e of the GDPR). If you object, we ask you to give us your reasons for objecting to us processing your data.
Right to data transferability
in as far as the data processing is based on a permission or serves contractual fulfilment and this is done using automated processing, you have the right to receive your data in a structured, conventional and machine-readable format and to transfer this data to another data processor.
Right to revocation
In as far as the data processing is based on a permission, you have the right to revoke the data processing using a permission with future effect at any time and at no charge at firstname.lastname@example.org or by using the contact information given in the site notice.
Right to complain
You also have the right to complain to a supervisory authority (e.g. to the Data Protection Officer for Lower Saxony) about how we process your data.
E. Your contact: Information about your personal data
You can request information about your personal data at any time by using the following web form. In the download portal, you can easily view online documents relating to your person (e.g. a copy of your personal data).
Department of data subject rights for Supplier and Contractor´s Employees
Monday to Friday between 8 AM and 4 PM (CET)
Phone: +49 5361 - 9 - 46290
F. Your contact: Data protection officer
You may contact our data protection officer as contact for all data protection related matters and for exercising your rights. Please direct your enquires to:
Data Protection Officer, Volkswagen AG
Berliner Ring 2
38440 Wolfsburg, Germany
Version dated: May 2018