Privacy policy.

Updated on 1 March 2021

WunderCar Mobility Solutions GmbH and its affiliated companies ("Wunder", "we", "us") is committed to the protection of your ("you" or "your") personal data. This Privacy Policy is designed to inform you of our practices concerning the collection, use and disclosure of information that you may provide to us via our website and other associated partner websites, as required by Art. 13 of the General Data Protection Regulation (GDPR). By using our website or any service that we offer, you agree to the collection, use, and disclosure of that information about you in accordance with, and are agreeing to be bound by, this Privacy Policy.

1. Controller

The Controller for the data processing operations described below is the office named in the imprint.

2. How we collect your data

We use different methods to collect data from and about you, including through:

• Direct interactions. You may give us your identity, email and contact details by filling out our online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you apply for our products or services, subscribe to our service or publications, request marketing to be sent to you, or give us feedback or contact us.
• Automated technologies or interactions. As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies.
• Third parties or publicly available sources. We will receive technical data about you from analytics providers such as Google, advertising networks such as Google and LinkedIn, and search information providers, some based outside the EU.

We keep your personal data only as long as necessary for fulfilment of the purposes described or as required by law.

3. Usage data

When you visit our website, our web server temporarily stores usage data for statistical purposes as a protocol in order to improve the quality of our website. This data consists of: the name and address of the requested content, the date and time of the query, the transferred data volume, the access status, the description of the used web browser and operating system, the referral link, and the IP address of the requesting computer, shortened so a personal reference can no longer be established. The mentioned log data will only be evaluated anonymously.

4. Anonymous visitor measurement

On our web pages we make an anonymous visitor measurement. For this purpose, the protocol data of the web server as well as the abbreviated IP address are evaluated. Any conclusions about you are not possible.

5. Storage of IP address for security purposes

We store the complete IP address transmitted by your web browser for a period of 90 days in the interest of detecting, limiting and eliminating attacks on our web pages. After this period we delete or anonymize the IP address. The legal basis is Art. 6 (1)(1f) GDPR.

6. Data security

We take technical and organizational measures to protect your data as effectively as possible from unwanted access. We use an encryption procedure on our web pages: your data is transferred from your computer to our server and vice versa via the internet using TLS encryption, indicated by the lock symbol in your browser and an address beginning with https://.

7. Cookies

Statistics cookies and marketing cookies are used on the basis of Art. 6 (1)(a) GDPR (your consent). You can set your cookie preference at any time via this preference manager.

8. Third party tracking technologies for advertising purposes

We use cross-device tracking technologies so that, based on your visit to our websites, you can see advertisements tailored to your interests on other websites, and we can measure how effective our advertising has been. This processing is based on your consent under Art. 6 (1)(1a) GDPR, given via our website banner, and can be revoked at any time.

How does tracking work?

Third-party providers may retrieve identification characteristics of your browser or device (e.g. a browser fingerprint), evaluate your IP address, save or extract identification characteristics on your device (e.g. cookies), or access unique tracking pixels, to identify your device across websites. We may commission third parties to place advertisements based on the pages you've visited on our site.

What does cross-device tracking mean?

If you log on to a third-party provider with your user data, the identification characteristics of your different browsers and devices can be linked with each other, allowing the third party to target advertising campaigns across your devices.

Which third-party providers do we use?

Where data is processed outside the EU/EEA, authorities may access it for security and monitoring purposes without notice or right of appeal. Where we use providers in third countries and you give consent, transfer is based on Art. 49 (1a) GDPR.

9. Google Analytics

We use the web analysis tool Google Analytics to design our websites according to your needs. Google Analytics creates usage profiles based on pseudonyms via permanent cookies, allowing us to recognize returning visitors. Google Ireland Limited and Google LLC (USA) support us as processors under Art. 28 GDPR; processing may occur outside the EU/EEA, and no adequate level of data protection can be assumed for processing in the USA. Processing is based on your consent under Art. 6 (1a) GDPR given via our banner; transfer to a third country is based on Art. 49 (1a) GDPR. You can withdraw consent at any time via this link.

10. Visitor measurement

These tools create usage profiles based on pseudonyms via permanent cookies, and may call up recognition features for your browser or device (e.g. a browser fingerprint or unabridged IP address) to recognize returning visitors. We may also enrich pseudonymous data with third-party demographic data (age, gender, place of residence) and record mouse-pointer movements. Processing is based on your consent under Art. 6 (1a) GDPR.

11. Social plugins

We only integrate social plugins in a deactivated form; no data is transmitted to social media services until you actively click to activate a plugin. Once activated, the social media service receives your IP address and information about your visit, and — if you're logged in — can assign this to your social profile. Integration is based on your consent under Art. 6 (1)(1a) GDPR.

12. Embedded videos

We embed videos not hosted on our own servers. Accessing pages with embedded videos downloads content from the third-party provider, who is informed of your visit and receives technically required usage data. We activate the provider's extended data-protection mode where offered, so no cookies are set. Embedding is based on Art. 6 (1)(1f) GDPR.

13. Newsletter registration and delivery

You may register to receive our newsletter, which requires your email address. We only send the newsletter with your express consent under Art. 6 (1)(a) GDPR, confirmed via double opt-in. You may withdraw consent at any time, including via the unsubscribe link in every newsletter. As part of registration we also store data needed to prove your registration, such as your IP address at the time and a copy of the confirmation email. If you consent to newsletter tracking, we use tracking pixels to measure aggregated open and click metrics — never individual results.

14. Direct marketing

Where we receive your email address in connection with the sale of a product or service, we use it for direct marketing of our own similar goods or services, unless you object. You can object to this use at any time, free of charge beyond transmission costs, for example via the cancellation link in every email. The legal basis is our legitimate interest under Art. 6 (1)(f) GDPR.

15. Contact form

To use our contact form we need the data marked as mandatory, processed under Art. 6 (1)(1f) GDPR to respond to your request. Any additional information you provide is voluntary and processed on the basis of your consent under Art. 6 (1)(1a) GDPR. We delete your data once it's no longer required and there are no legal retention obligations. If you contact us via the "Wunder Marketplace" program contact form, your consent is based on Art. 6.1(a) GDPR, and our sales representatives may share your contact data with the relevant partner, some based outside the EEA. You can object to or revoke consent for this processing at any time via the contact details under "Asserting your rights."

16. Your rights as a data subject

The GDPR grants you the following rights:

• Right of access (Art. 15 GDPR) — confirmation of whether your data is processed, and access to it.
• Right to rectification (Art. 16 GDPR) — correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR) — deletion of your data where a listed condition applies.
• Right to restriction of processing (Art. 18 GDPR) — e.g. during our examination of an objection.
• Right to data portability (Art. 20 GDPR) — receiving your data in a structured, machine-readable format.
• Right to withdraw consent (Art. 7 GDPR) — effective for the future only.
• Right to object (Art. 21 GDPR) — to processing based on our legitimate interest or public interest grounds.
• Right to lodge a complaint (Art. 77 GDPR) — with a supervisory authority in your place of residence, work, or the place of the alleged infringement.

17. Asserting your rights

Please contact us to assert your rights — full details in our imprint.

WunderCar Mobility Solutions GmbH
Email: privacy@wundermobility.com
Postal address: Hongkongstrasse 2-4, 20457 Hamburg, Germany

18. Other privacy policies

Job applicant privacy policy

19. Contact details of our DPO

Our external data protection officer is available to provide further information on data protection.

FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Tel.: +49 (0) 421 69 66 32 80
Email: office@first-privacy.com

When contacting our data protection officer by email, please specify the name of the company stated in our imprint.