Controller within the meaning of the General Data Protection Regulation (“GDPR”) is:

EvoBus GmbH
HPC R512
Mercedesstraße 127/6
70327 Stuttgart

Data Protection Officer:

Daimler AG
Chief Officer Corporate Data Protection
HPC E600
70546 Stuttgart

1. Data protection

We look forward to your visit to our websites and your interest in our offerings. The protection of your personal data is a central concern to us. In these data protection notices, we explain how we collect your personal data, what we do with them, for what purposes and on what legal bases this takes place, and what rights and entitlements are associated with this for you. We also wish to refer you to the Daimler Data Protection Directive:

Daimler Data Protection Directiv

Data Privacy Notice for Customers.

Our data protection notices for the use of our websites and the data protection directive of Daimler AG and the data protection notices for customers of EvoBus GmbH do not apply to your activities on the websites of social networks or other providers you can reach via the links on our websites. Please learn about their data protection provisions on the websites of these providers.

2. Collection and processing of your personal data

a. When you visit our websites, we store certain information about the browser and operating system you use, the date and time of your visit, the access status (e.g. whether you were able to access a web page or received an error message), the use of functions of the web page, the search terms you potentially entered, the frequency with which you access individual websites, the names of accessed files, the transferred data volume, the web page from which you came to our websites, and the web page you jump to from our websites, be it by clicking on links on our websites or by entering a domain directly into the input field of the same tab (or the same window) of your browser in which you opened our websites. For security reasons, especially to prevent and recognise attacks on our websites or fraud attempts, we also store your IP address and the name of your Internet service provider for a period of seven days.

b. We only store other personal data if you share them with us as part of a registration, a contact form, a survey, a contest or for the execution of a contract, and even in those cases only insofar as we are authorised to do based on your given consent or in line with the applicable legal provisions (for more information, please see the section "Legal bases of the processing" below).

c. There is no legal or contractual obligation for you to provide your personal data. However, it is possible that certain functions of our websites depend on the provision of personal data. If you do not provide personal data in these cases, functions may not be available at all, or available only in limited form.

3. Purposes of use

a. We use the personal data we collect during a visit to our websites to make them as convenient as possible for you to use as well as to protect our IT systems against attacks and other illegal activities.

b. If you share other personal data with us, e.g. as part of a registration, a contact form, a survey, a contest or for the execution of a contract, we use this data for the stated purposes, for purposes of customer administration and – if required – for purposes of handling and billing potential business transactions, always to the extent necessary for that purpose.

4. Transfer of personal data to third parties; social plug-ins

a. Our websites may also contain offers from third parties. When you click on such an offer, we transmit data to the necessary extent to the particular provider (e.g. the information that you found this offer on our websites and, where applicable, additional information which you have already shared on our websites for this purpose).

b. When we use so-called 'social plug-ins' from social networks such as Facebook, Twitter and Google+ on our websites, we integrate them as follows:

When you visit our websites, the social plug-ins are deactivated, i.e. there is no transmission of any data to the operators of these networks. If you want to use one of these networks, click on the respective social plug-in to establish a direct link to the server of the particular network.

If you have a user account at this network and are currently logged in there when you activate the social plug-in, the network is able to associate your visit to our websites with your user account. If you would like to prevent that, please log out from the network prior to the activation of the social plug-in. A social network is unable to associate the visit to other Daimler websites until you have activated an existing social plug-in there as well.

When you activate a social plug-in, the network transfers the contents available as a result directly to your browser, which now integrates them into our websites. There may also be data transfers in this situation initiated and controlled by the particular social network. Your connection to a social network, the data transfers taking place between the network and your system and your interactions on this platform are solely subject to the data protection provisions of the particular network.

The social plug-in remains active until you deactivate it or delete your cookies.

Cookie notices

c. When you click on the link for an offer or activate a social plug-in, it is possible that personal data will be sent to providers outside the European Economic Area, which from the point of view of the European Union ("EU") do not guarantee an "appropriate protection level" for processing your personal data that meet the EU standards. Please keep this in mind before you click on a link or activate a social plug-in and thereby trigger a transfer of your data.

5. Encryption

During the website visit, we use the common SSL method (Secure Socket Layer), always in conjunction with the highest encryption level your browser supports. As a general rule, this corresponds to 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether individual pages of our website are transmitted in encrypted form by the display of the closed key or lock symbol at the top of your browser's address bar.

Moreover, we use suitable technical and organisational security measures to protect your data against random or targeted manipulation, partial or complete loss, destruction or unintended access by third parties. Our security measures are continuously improved in line with the latest technological developments.

6. Evaluation of usage data

We use Piwik to identify visitor preferences and particularly popular areas of our internet offering. This enables us to provide content that is more accurately suited to your needs, and in so doing improve our service.

If you do not want Daimler to collect and analyse information about your visit, you can object to it at any time with effect for the future (opt out). For the technical implementation of your objection, an opt-out cookie is set in your browser. This cookie only serves to associate your objection. Please note that for technical reasons an opt-out cookie can only be used for the browser from which it was set. If you delete the cookies or use a different browser or a different device, you must opt out again.

Click here to set the opt-out cookie.

7. Safety

We employ technical and organisational security measures to protect the data supplied by you and maintained by us against manipulation, loss, destruction and against access by unauthorised persons. We continuously improve our security measures to reflect the latest technological developments.

8. Legal bases of the processing

a. If you have consented to the processing of your personal data, this content represents the legal basis for the processing (Art. 6 Section. 1(a) GDPR).

b. For processing of personal data for the purposes of initiating or fulfilling a contract with you, the legal basis is provided by Art. 6 Section. 1 letter b DSGVO (GDPR, General Data Protection Regulation) is the legal basis.

c. If the processing of your personal data is required to meet our legal obligations (e.g. on data retention), we are authorised to do so as per Art. 6 Section. 1 letter c DSGVO (GDPR, General Data Protection Regulation).

d. In addition, we process personal data for the purposes of safeguarding our rightful interests as well as the rightful interests of third parties pursuant to Art. 6 Section. 1(f) GDPR. Such rightful interests are maintaining the functioning of our IT systems, but also marketing our own and third-party products and services as well as the legally prudent documentation of business contacts.

9. Deletion of your personal data

d. In addition, we process personal data for the purposes of safeguard-ing our legitimate interests and the legitimate interests of third parties pursuant to Art. 6 para. 1 letter f GDPR. Maintaining the functionality of our IT systems, (direct-) marketing our own and third-party products and services as well as documenting business contacts as required by law are such legitimate interests. As part of the consideration of interests required in each case, we take into account various aspects, in particular the type of personal information, the purpose of processing, the circumstances of processing and your interest in the confidentiality of your personal information.

10. Rights of data subjects

a. As the data subject of the data processing, you have the right of information (Art. 15 GDPR), correction (Art. 16 GDPR), data deletion (Art. 17 GDPR), limitation of the processing (Art. 18 GDPR) as well as data portability (Art. 20 GDPR).

b. If you consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. The legality of the processing of your personal data until a withdrawal remains unaffected by the withdrawal. Further processing of this data due a different legal basis, for example to fulfil legal obligations (See "Legal bases of the processing"), also remains unaffected.

c. R I G H T   O F   O B J E C T I O N

You have the right for reasons arising from your special situation to object to the processing of your personal data due to Art. 6 Section 1(e) GDPR (data processing in the public interest) or Art. 6 Section 1(f) GDPR (data processing based on a weighing of interests) at any time. If you object, we will only continue processing your personal data insofar as we are able to prove compelling justified reasons that outweigh your interests, rights and liberties, or if the processing serves the assertion, exercising or defence of legal claims.

d. We kindly ask you to send your claims or declarations to the address below if possible:

e. Should you believe that the processing of your personal data violates legal provisions, you have the right to file a complaint with a competent data protection authority (Art. 77 GDPR).

11. Cookies

For information about the cookies we use and their functions, please see our cookie notices.

Cookie notices


Status as at: May 2018