In order to provide you with a convenient online experience, our website uses cookies. By using our website, you agree that we may use the cookies described in detail in our Data Privacy Settings . You may manually adjust your cookie preference at any time under settings .
Data protection declaration | Legal notices
Setting

Privacy

Privacy statement

It is important to us that you are fully informed about the personal data that we collect when you use our online offers and services, and are familiar with how we use them.
Wherever DEKRA processes personal data, such processing is carried out for the purposes defined in this data privacy statement.

Processing of personal data

Responsible Authority
DEKRA SE
Handwerkstr. 15
70565 Stuttgart
DEKRA Investment Co.,Ltd
250 Jiangchangsan Road, Jing’an District, Shanghai

Visiting our website

We record and save your computer's IP address in order to send the contents of our website visited by you to your computer (e.g. texts, pictures, and files provided for downloading, etc.). We also process these data to identify and pursue any misuse. In this context, our legitimate interest in data processing is to ensure the due functioning of our website and the business transacted via the Website.
Legal basis:
Art. 6 (1) lit. b,f GDPR.
Art. 13 (2), (7) Personal Information Protection Law of PRC(PIPL).

Other purposes

We also process personal data that you provide voluntarily. The data processed by us in this context include the data of customers, employees, and suppliers to the extent necessary for the purposes specified within the scope of this data privacy statement. Where you have given your consent to the processing of personal data), you can withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent up to the time of withdrawal of consent.
Legal basis:
Art. 6 (1) lit. a GDPR.
Art. 13 (1) Personal Information Protection Law of PRC(PIPL).

Transfer to third parties

Within the DEKRA Group, the entities who require your data to fulfill our contractual and statutory obligations will receive it. Within the DEKRA Group, this includes both a computing center operated by the central headquarters of DEKRA SE (Stuttgart), as well as numerous locally and regionally operated computing centers in which the respective controllers of DEKRA group companies process your data.
Our service providers and agents can also receive data for this purpose, if they comply in particular with confidentiality and data protection law requirements. These are companies in the categories of IT services, telecommunication, consulting, and sales and marketing.
With respect to transmitting data to recipients outside of the DEKRA Group, we only disclose information about our customers if statutory regulations require us to do so, if the customer has consented to this, or if this is necessary to initiate, carry out, or end a contractual relationship with them, or if the DEKRA group has a legitimate interest in doing so. Under these requirements, the recipients of personal data could include, for instance:
  • public entities and institutions (such as tax authorities, criminal prosecutors), if there is a statutory or official obligation (such as statutory disclosure obligations),
  • other companies within the DEKRA group for risk controlling due to a statutory or official obligation,
  • service providers whose services we make use of under a contract processing relationship.
Further data recipients could include the entities for whom you have granted us your consent to process your data, or to whom we are entitled to transmit the personal data based on a balancing of interests.

Google Analytics

To the extent that you have given your consent, this website uses Google Analytics, a web analysis service provided by Google LLC.
Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and saved there.
We use the technical enhancement "Google Signals", which allows cross-device tracking. This enables an assignment of an individual website visitor to different end devices. However, this only happens if the visitor has logged into a Google service when visiting the website and at the same time has activated the "personalized advertising" option in their Google account settings.
IP address anonymization is enabled. Due to IP anonymization, your IP address will be truncated by Google within the Member States of the European Union or another state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Purpose and legal basis of the processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
The legal basis for the use of Google Analytics is your declaration of consent according to point (a) of Art. 6 (1) of the GDPR.
Storage period
The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached, takes place automatically once a month.
Recipients
Recipients of the data are/could be
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR).
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.

Intended data transfer to third countries

With the consent of the data subject or under statutory regulations to fight money laundering, the financing of terrorism, and other criminal activities, as well as in the framework of a balancing of interests, in individual cases personal data (such as legitimation details) is transmitted in compliance with the level of data protection in the European Union and PRC.

Cookies

In order to make our Internet presence more user-friendly and ensure that it meets your needs as well as possible, we use cookies in some areas. A cookie is a small file that is saved locally on your computer as soon as you visit a website. Cookies also allow us to analyze the use of our website. Decide by yourself which cookies you allow or refuse. You can change your decision at any time.
For more information see our data privacy settings.

Deletion of data

We only process your data in event that it is necessary for the fulfilment of contractual and legal obligations or we can demonstrate a legitimate interest in processing the data. Only when you have given your consent, we have the right to process your data. At the same time, you have the right to withdraw your consent at any time.
Preservation of evidence within the statute of limitations. Pursuant to Article 19 of PIPL, unless otherwise stipulated by law or administrative regulations, information shall be kept for the shortest period of time necessary to fulfill the purpose of the processing.

Rights concerning the processing of personal data

You have the following rights as a data subject, if you fulfill the requirements for these rights:
Right of access by the data subject to the data we process in accordance with Art. 15 GDPR and Art. 44 PIPL,
Right to rectification of incorrect data in accordance with Art. 16 GDPR and Art. 46 PIPL,
Right to erasure of the data we have stored in accordance with Art. 17 GDPR and Art. 47 PIPL,
Right to restriction processing of the data we have stored in accordance with Art. 18 GDPR and Art. 48 PIPL,
Right to data portability in accordance with Art. 20 GDPR and Art. 45 PIPL,
Right to object in accordance with Art. 21 GDPR and Art. 44 PIPL,
If you have granted us your consent for data processing, you can revoke this consent at any time with future effect according to Art. 7 para. 3 GDPR and Art. 15 PIPL,
Right to lodge a complaint with a supervising authority in accordance with Art. 77 GDPR and Art. 65 PIPL, if you believe that the processing of your personal data violates the regulations of the GDPR.

Amendment of this data privacy statement

This Data Privacy Notice was last updated in March of 2024.
We reserve the right to amend this Data Privacy Notice in the future in accordance with applicable data protection laws, and to adjust it to the changing realities of data protection if necessary. We will inform you separately of significant changes to the content.

Data Protection Officer

Please address any questions regarding the processing of your personal data, requests for information, applications, or complaints directly to our data protection officer, who will be happy to be of service.
If you have any questions or suggestions in accordance to data protection at DEKRA, please contact our data protection officer at datenschutzauskunft@dekra.com, dataprotection.esa@dekra.com.
Click to view the data protection information of DEKRA's CRM system