MAN SimplePay data protection declaration
General
The protection of your personality rights during the processing of personal data is of the utmost concern to MAN Truck & Bus companies. We process personal data in accordance with the legal provisions of the country in which the entity responsible for data processing is based (e.g. GDPR within the EU).
Furthermore, the companies in the MAN Truck & Bus Group have undertaken to provide comprehensive and uniform protection of personal data through the implementation of a binding Group policy. This ensures a level of protection worldwide within MAN that is comparable to that in the European Union.
Controller
The controller as defined by data protection law is:
MAN Truck & Bus SE
Dachauer Strasse 667
80995 Munich, Germany
(hereinafter referred to as “MAN” or “we”)
Legal basis
In addition to the fulfilment of the contract (Art. 6 I b) GDPR), the processing of data by MAN is also based on the legitimate interest of being able to provide the service (Art. 6 I f GDPR).
It may also be necessary for us to process data in order to fulfil a legal obligation to which we are subject (Art. 6 I c) GDPR).
Purposes of processing & categories of data processed & recipients
Purposes | Data categories | Categories of data recipients |
Onboarding Configuration of vehicles, i.e. storage of card issuer | Payment data. Example:
| Card issuer |
Display of transaction datafrom the card issuer | Transaction data. Example:
| - |
Administration of MAN SimplePay services |
| - |
Provision of MAN SimplePay services:
Repair & Maintenance | Payment data. Example:
Position date of the service provider. Example:
Company information. Example:
Vehicle usage data with VIN/number plate. Example:
| Card issuer, |
Provision of MAN SimplePay services: Parking & washing | Payment data. Example:
Identification data. Example:
Transaction data. Example:
Vehicle usage data with VIN/number plate. Example:
| Parking lot/truck laundry service |
Provision of MAN SimplePay services: Refuelling | Transaction data. Example:
| - |
Provision of a dashboard for detailed cost/transaction tracking | Vehicle usage data with VIN/number plate. Example:
Payment data. Example:
Fuel data. Example:
| - |
*Detailed information on the respective scope of services can be found in the service specification.
Data source - Data subject
As a rule, your personal data is collected directly from you.
Data origin - Other sources
If necessary, your personal data may also be collected from other places:
MAN receives personal data from operators of partner applications and payment service providers. For example, in connection with the event of a transaction, data is transmitted by the operator of the partner application to MAN SimplePay for the purpose of providing a dashboard for detailed cost tracking.
Obligation to provide data
We require your data for the performance of the contractual relationship and for the fulfilment of legal obligations. Without your data, we will not be able to establish a business relationship with you.
Data storage and deletion
We erase your personal data as soon as it is no longer required for the purposes stated above.
In particular, your personal data will be stored for as long as
- there is a business/contractual relationship,
- we are legally obliged to do so (record-keeping obligations),
- it is necessary for the assertion, exercise or defence of legal claims,
- this is appropriate in the context of the use of information/communication systems (e.g. websites).
No automated decision-making
No automated decision-making takes place.
Automated case-by-case decision making - including profiling - is the process of making decisions based on algorithms or machine learning that have a legal or significant impact on an individual without human review or intervention.
Your rights
You have the right to be informed about your personal data and the right to correct it. Unless otherwise required by law, you also have the right to have your data deleted, to object to the processing of your data, and to restrict the processing of your data. Furthermore, you have the right to data portability.
If we collect and process your personal data on the basis of your consent, you also have the right to withdraw your consent you granted with immediate effect without additional costs. The legality of the data processing carried out with your consent until you withdraw it remains unaffected by your withdrawal of consent.
If necessary, we need to verify your identity before we can process your requests.
If, in spite of our efforts to maintain accurate and up-to-date data, incorrect information has been saved, we will correct such information when requested to do so.
In the event of complaints, users may also contact a data protection supervisory authority.
Security
MAN uses technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
Our security measures are regularly improved in accordance with technological development.
Contact
In the event of questions relating to data protection, please contact the data protection officer/data protection coordinator at the MAN company responsible for you.