Privacy Notice
1. Controller
The controller responsible for data processing on this webshop is Verband der Automobilindustrie e.V. (VDA), Qualitäts Management Center (VDA QMC). Contact details are available on request via the webshop's contact page.
2. Data Protection Officer
You can reach our Data Protection Officer for any questions regarding data protection via the contact details published on VDA's website.
3. Which sources and data do we use?
We process personal data that we receive directly from you (e.g. when placing an order, registering for a seminar, or contacting us) as well as data legitimately obtained from third parties, limited to what is necessary for the purposes described below.
4. Purposes and legal bases for processing your data
4.1 Committee work
Where you participate in VDA QMC committee or project group activities, we process your data to organize and administer that work.
4.2 Training courses and examinations
For seminar and examination participants, we process registration and booking data (4.2.1), data required to organize, conduct, and evaluate training courses and examinations across formats (4.2.2), and, where a course is delivered by a licensed partner, data shared with that licensee for training delivery and examiner approval (4.2.3).
4.3 Public relations and communications
We use your contact information to send you industry communications and updates, where you have subscribed or otherwise consented to receive them.
4.4 VDA and IATF certifications
For auditors and certified organizations, we process data necessary for certification issuance and ongoing compliance monitoring.
4.5 Business activities
We process supplier and business-partner data as necessary to maintain our business relationships.
5. Internet presence
5.1 Server log files
Our servers automatically log access data (such as IP address, date and time of access, and requested page) for system security and statistical purposes.
5.2 Cookies
We use cookies to operate and improve this website. You can manage cookie preferences through your browser settings.
5.3 Session cookies
Temporary session cookies store information for the duration of your visit, such as your shopping cart contents and login state.
5.4 Other cookies
Persistent cookies may be used to keep you logged in to your account between visits.
5.5 Plug-in tools
Where integration tools are used to exchange data between otherwise incompatible systems, only the data necessary for that exchange is processed.
5.6 Analytics without cookies
We may use privacy-friendly analytics that do not rely on cookies, using anonymized or pseudonymized techniques to understand aggregate website usage.
5.7 Embedded maps
Where a map is embedded to show an office location, your IP address may be transmitted to the map provider when the map is loaded.
6. Who has access to your data?
Access is limited to VDA/VDA QMC personnel who need it to perform their duties, and to external service providers acting as processors under data protection agreements, including banking and payment service providers (such as our payment processor) for handling transactions.
7. Duration of storage and deletion
We delete your personal data once it is no longer necessary for the purposes described here, except where longer retention is required by law — for example, ten years for contract and accounting records, and up to three years for the defense of legal claims.
8. Recipients of personal data
Internally, access is limited to departments with a legitimate business need. Externally, recipients may include processors engaged to support our operations (such as IT, logistics, and payment providers) and public authorities where legally required.
9. Transfers to third countries
Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses.
10. Your rights as a data subject
Subject to applicable law, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing of your personal data, as well as the right to lodge a complaint with a supervisory authority.
This page is a starting template adapted from VDA QMC's published privacy notice and is intended to be reviewed and finalized by VDA QMC before publication.