Privacy Policy

We are pleased about your interest in the Schaeffler Group (Schaeffler AG and affiliated companies, hereinafter referred to as “we”) and our products. We understand the importance of personal data (or "personal information") to you and will do our best to protect your personal data. If personal data is processed, we observe the applicable data protection laws.  

Before using our website or our product or service, please read this policy with care, especially the clauses marked in bold/bold underline, and confirm that you fully understand and agree with this policy. If you have any questions, comments or suggestions about this policy, you can contact us through the various contact methods provided in this policy.

I.     General rules about data processing

1.     Legal basis for data processing

Processing of your personal data is based on the EU General Data Protection Regulation (“GDPR”) and the Cybersecurity Law of the People’s Republic of China (“CSL”) and other Chinese laws, rules and regulatory documents regarding data protection (“CLDP”).
If you have given your consent to the processing of personal data for specific purposes, the legal basis for processing of personal data is Art. 6 (1)(a) GDPR and CSL (including but not limited to Art. 41&42). You can withdraw your consent at any time. Please remember that the withdrawal is only effective for the future, and processing based on consent before its withdrawal is not affected.
Processing of personal data in the context of the performance of a contract to which you are a party or in order to take steps prior to entering a contract at your request is based on Art. 6 (1)(b)GDPR. The purposes of data processing are governed by the respective contract documents and the subject matter of the contract.
If processing of personal data is necessary to comply with a legal obligation to which we are subject, Art. 6 (1)(c)GDPR serves as a legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by Schaeffler or by a third party (e.g. to establish or defend legal claims; to ensure IT security; to prevent crimes; to conduct business and to further develop services and products) and if your interests, fundamental rights and freedoms as data subject do not override the aforementioned interest, Art. 6 (1)(f)GDPR serves as the legal basis for processing.

2.     Collection and usage of personal data

In principle, we only collect and use your personal data necessary to realize the basic functions of our business. If you refuse to provide the corresponding data, you will not be able to use our website or our products or services.
 

	Necessary personal data	Basic functions
1.	Mobile number	It is used for user registration and fulfilment of real-name authentication requirements for registered users.
2.	Account and password	It is used to identify online shopping users and protect account information.
3.	Name, address, mobile number	It is used to identify consignees, deliver goods and contact consignees when receiving goods online.
4.	Order price, order product, order time, order merchant, order number, order status	It is used to deal with order transactions on the Internet and solve user disputes
5.	Payment account or transaction number, payment status	It is used to realize payment function for the order of online shopping.

In addition, in order to provide you with additional features of our business, you can choose to authorize us to collect and use your personal data. If you refuse to provide it, you will not be able to use the related additional functions or achieve the functional effects we intend to achieve, but it will not affect the basic functions of your normal use of our products and / or services (for additional functions and the personal data requiring your separate consent, please refer to Chapter III for details).

In accordance with relevant laws, regulations and regulatory requirements, we may collect, use, share, transfer and publicly disclose your personal data without your consent in the following cases:
(1)    Directly related to national security and national defense security;
(2)    Directly related to public safety, public health, and major public interests;
(3)    Directly related to criminal investigation, prosecution, trial and execution of judgments;
(4)    For protecting important legal rights, such as life and property, of you or other individuals, while it is difficult to obtain your consent;
(5)    Publicly disclosed on your own;
(6)    Personal information collected from legally and publicly disclosed information, such as legitimate news reports, government-disclosed information, etc.;
(7)    Necessary for the conduct of legitimate news reports;
(8)    Information necessary for the conduct of statistical or academic research by academic research institutions for public interest, where the personal information contained is de-identified when the results of academic research or descriptions are provided for external parties.
(9)    Other circumstances stipulated by laws and regulations.

Please be aware that, in accordance with applicable laws, if we take technical measures and other necessary measures to process personal data, and leave data receivers unable to re-identify a specific individual and unable to recover the information, we do not need to notify you or obtain your consent before sharing, transferring or publicly disclosing such processed data after such processing.

3.     Storing and erasing of personal data

Your personal data generated during the process of registering or browsing our website, or receiving our products or services will be stored on a server (located in Germany) at our German headquarters. 

We only retain your personal data for as long as it is necessary to achieve the purposes stated in the policy, unless a retention requirement is mandated by law. For example, the E-commerce Law of the People’s Republic of China requires that goods and services information and transaction information be kept for at least three years from the date of completion of the transaction. In addition, such storage may take place in order to comply with a legal obligation by Union or Member State law, regulation or other provision to which we as controller are subject. 

If the data is no longer necessary (e.g. you cancel your account) or if a retention period prescribed by the aforementioned laws has expired, your data will be erased on a regular basis. 

4.    Internal and external sharing 

We will not share your personal data with any other company, organization or individual unless we have acquired your express consent except in the following cases:
(1)    We may share your personal data with our affiliates for business purposes or other work-related purposes;
(2)    We may share your personal data with third-party service providers or authorized partners for business purposes or other work-related purposes, and these trustees have agreed to comply with GDPR and CLDP;
(3)    We may share your personal data as prescribed by laws and regulations, out of dispute resolution needs, or upon lawful requests from administrative organs or judiciary.

We will share your personal data in accordance with the principles of lawfulness, proper justification, and necessity pursuant to laws. The recipient of the information can only access the data necessary for performing his or her duties and is not allowed to use this data for any other purpose. Those entities gain access to your data who require it as a part of “least privilege” (assignment of user rights to the lowest possible extent) and the “need-to-know” principle (knowledge of data only if necessary). 

Under these conditions, recipients of personal data may be: competent internal specialist departments and external service providers, if necessary.

5.    Cross-border transfer

A transfer of data to countries outside the EU/EEA (so-called third countries) will only take place as it is necessary or required by law, you have given your consent or as part of data processing by a processor. If service providers in third countries are deployed, in addition to written instructions, they are required to comply with data protection standards in Europe by agreeing on the EU standard contractual clauses.

For the purpose of business operation, your personal data generated during registering or browsing our website, or receiving our products or services in China will be transferred and stored on our server in Germany (located in Germany).

6.    Security measures

We will use technical and organizational security measures ("preventive measures") to protect your personal data, to prevent the network from interference, damage or unauthorized access, and to prevent your personal data from being leaked or stolen or tampered. These preventive measures are constantly being developed in accordance with the respective new technical possibilities.

Our websites may contain links to the websites of other providers. Our Privacy Policy does not apply to these websites.

7.    “Profiling” and automated decision-making

Schaeffler basically does not use “profiling”. If we use it in individual cases, we will inform you about this separately, if it is required by law and – if necessary - obtain your prior consent. We do not use fully automated decision-making pursuant to Art. 22 GDPR.

8.    Data sources 

We use data that we receive from you with your consent.

II.     Data processing for the provision of the website and the creation of log files 

By default, when you visit our website, our web servers obtain and collect the name of your Internet service provider, your IP address, the website from which you are visiting us, the websites you visit on our website, and the date and duration of the visit. This data is stored in the log files of our systems. However, the use of the IP address is limited to the technically necessary extent and is abbreviated and therefore used only anonymously, so that it is not possible to assign the IP address to a user. Anonymized data does not belong to personal data, and the data is not merged with personal data.
 
The legal basis for the temporary storage of data is Art. 6 (1)(f)GDPR. 

The temporary storage of the abbreviated IP address by our systems is technically necessary to display the website to your terminal device. Storage in log files is done to ensure the functionality of the website. Data is not being analysed for marketing purposes in this context. For these purposes, we have legitimate interest in processing of data according to Art. 6 (1)(f)GDPR.

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Therefore, if you as a user object to such processing, you will not be able to use our website or our products or services.

III.     Data processing in respect of services offered on the website

On our website various additional services are offered, for the use of which we request personal data from you. In this context, it is always optional for you to provide us with personal data.  If you refuse to provide it, you will not be able to use the related additional functions or achieve the functional effects we intend to achieve, but it will not affect the basic functions of your normal use of our products and / or services

1.    Ordering publications

You can order publications offered on this website. To order, you must fill your title, first name, last name, company, street name, zip code, city, federal state, e-mail address, and telephone number into corresponding input mask. We will store this personal data and also transfer it to PVS Fulfilment-Service GmbH, Heinz-Nixdorf-Straße 2, 74172 Neckarsulm (“PVS”) to store it there as well. At the time of sending your order, the date and time of your entry will also be saved. Your consent to this data processing will be obtained during your order.   

PVS prints and sends the ordered publications directly to you by post. We and PVS use your personal data solely to handle your orders. 

The legal basis for processing of personal data is Art. 6 (1)(a)GDPR. 

We will erase your personal data and the additional data collected during the ordering process after six months. The erasure at PVS takes place after the ordering and shipping process has been completed and statutory retention periods have expired.

You have the right to withdraw your consent to the processing of personal data at any time by sending an e-mail to dataprivacy@schaeffler.com. In this case, all personal data stored as part of the contact will be deleted with effect for the future, and processing based on consent before its withdrawal is not affected. Depending on the time of your withdrawal, we may not be able to provide you with the ordered publications. 

During the ordering process cookies are placed on your terminal device for storing your shopping cart. Further information on the cookies used can be found in our Cookie Policy.

2.    Use of our contact and request forms

The website has contact and request forms that can be used to contact us electronically. 

To use the contact forms, you must fill mandatory information in the respective input mask marked by an asterisk (e.g. your e-mail address). All other information is optional for you. This personal data will be sent to a department of our company that is responsible for processing and stored in our systems. At the time of sending your message, the date and time of the entry will be saved. We will obtain your consent for processing of the data during the inquiry process.  

The data filled in the input mask will be used exclusively to process your inquiry.

The legal basis for the processing of your personal data is Art. 6 (1)(a)GDPR. 

The data will be erased as soon as the communication process is completed.

You have the right withdraw your consent to the processing of personal data at any time to by sending an e-mail to dataprivacy@schaeffler.com. In this case, all personal data stored as part of the contact will be deleted with effect for the future, and processing based on consent before its withdrawal is not affected. Depending on the time of your withdrawal, we may not be able to answer your request.   

3.    Use of the Schaeffler info service offers 

On the website we offer the possibility to register for Schaeffler info service offers free of charge.

When you register for Schaeffler info service offers and give your corresponding consent, you will receive advertising and information (e.g. newsletter, invitations to trade fairs and events, information about products, services, offers and promotions  including opinion polls and company news) of the Schaeffler Group, for example, by e-mail, telephone, SMS and/or instant messenger services, such as WhatsApp, to the contacts provided by you when registering for the info service offers via an input mask. In order to use the info services, you need to provide your e-mail address and other information marked as mandatory in the input mask, such as: name, company and telephone number. This data is being collected to send you the advertising and information. For this purpose, we may also engage third parties (service providers) with whom we have a data processing agreement, and transfer your data to any of these third parties. After submitting the registration form, you will receive from us a confirmation e-mail to the e-mail address you provided. The registration will only take effect if you confirm it by clicking on the link in the e-mail.

The legal basis for the processing of your personal data after registration is Art. 6 (1)(a)GDPR. 

The data will be erased as soon as it is no longer necessary for the purposes of its collection. Therefore, the data will be stored as long as the registration for the info service is active. You have the right to withdraw your consent to the processing of the personal data at any time by sending an e-mail to unsubscribe@schaeffler.com or by clicking the “unsubscribe” link in received messages, with effect for the future and processing based on consent before its withdrawal is not affected, thereby deregistering from the info service. In this case, all personal data stored for communication will be erased. The withdrawal of consent does not affect the lawfulness of processing based on this consent before its withdrawal.   

4.    Creation of a user profile for individualised advertising and information

We want to provide you with as individual offers as possible. We would like to use the information about your user behaviour that you provide and generate automatically when you visit our website in order to create advertising tailored to you and your interests. For this purposes, we request your separate consent to the creation of a personalised user profile.

In the user profile, we store the personal data you have provided us while registering for the “Schaeffler Info Service” together with data about your movement on this website and/or in the information and advertising communication we have sent to you. Movement data is information about your user behaviour, e.g. which columns, articles and content you access on this website or in our newsletter, and at which time, including receipt and read confirmations of e-mails and newsletters. 

We analyse this usage profile exclusively to send you individually customised information and advertising, provided that we have obtained your separate consent to the use of data for information and advertising purposes due to your registration for the “Schaeffler Info-Service”. For this purpose, we may also engage third parties (service providers) with whom we have a data processing agreement, and transfer your data to any of such third parties.

The legal basis for processing of your personal data after registration is Art. 6(1)(a)GDPR. 

The data will be erased as soon as it is no longer necessary in relation to the purposes of its collection. Therefore, data is being stored as long as your consent to data tracking is active. You have the right to withdraw your consent to the processing of personal data at any time by sending an e-mail to unsubscribe@schaeffler.com or by clicking the “unsubscribe” link in received messages, with effect for the future and processing based on consent before its withdrawal is not affected, thereby deregistering from data tracking. In this case, all personal data stored for communication will be deleted. Withdrawing the consent does not affect the lawfulness of the processing based on this consent before its withdrawal. 

5.    Creation of a user profile for individualised advertising and information

We want to provide you with as individual offers as possible. We would like to use the information about your user behaviour that you provide and generate automatically when you visit our website in order to create advertising tailored to you and your interests. For this purpose, we request your separate consent to the creation of a personalized user profile.

In the user profile, we store the personal data you have provided us while registering for the “Schaeffler Info Service” together with data about your movement on this website and/or in the information and advertising communication we have sent to you. Movement data is information about your user behaviour, e.g. which columns, articles and content you access on this website or in our newsletter, and at which time, including receipt and read confirmations of e-mails and newsletters. 

We analyze this usage profile exclusively to send you individually customized information and advertising, provided that we have obtained your separate consent to the use of data for information and advertising purposes due to your registration for the “Schaeffler Info-Service”. For this purpose, we may also engage third parties (service providers) with whom we have a data processing agreement, and transfer your data to any of such third parties.

The legal basis for processing of your personal data after registration is Art. 6(1)(a) GDPR. 

The data will be erased as soon as it is no longer necessary in relation to the purposes of its collection. Therefore, data is being stored as long as your consent to data tracking is active. You have the right to withdraw your consent to the processing of personal data at any time by sending an e-mail to unsubscribe@schaeffler.com or by clicking the “unsubscribe” link in received messages, with effect for the future, thereby deregistering from data tracking. In this case, all personal data stored for communication will be deleted. Withdrawing the consent does not affect the lawfulness of the processing based on this consent before its withdrawal. 

6.     Performance Dashboard

We use on our Website a "Performance Dashboard". The visitor behavior on the website, i.e. page views and frequency of use of pages and functions, such as website search stating the time of the visit session, the local website visits and the Schaeffler Customer ID is tracked and stored by us. But it is not possible to deduce your identity as a user. 
Through the analysis of your visit, your usage behavior and your ordering behaviour on our website, we continuously optimize the contents and offers of our website as well as the offered products in order to provide you the best possible user experience. We receive the anonymous data from you from Google Analytics (more information on this can be found in the Cookie Directive).

IV.     Use of cookies

We use cookies to enable you to make the best possible use of the website. Cookies are text files that are stored in the Internet browser or saved by the Internet browser on the terminal device of the user. If a user visits our website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that allows clear identification of the browser when the website is accessed again.

In the following, we provide you with general information about the use of cookies on our website and the associated processing of personal data. For further information on specifically used cookies, please refer to the Schaeffler Cookie Policy (LINK) published on this website.

We use cookies to make our website more user-friendly. Some elements of our website require the requesting browser to be identified even after a page break.

In addition, we use cookies on our website to allow the analysis of the user’s surfing behaviour. 

When visiting our website the user is informed about the use of cookies and referred to this privacy policy. 

The purpose of using technically necessary cookies is to simplify the use of our website for the users. Some features of our website cannot be offered without the use of cookies. It is necessary that the browser is recognised even after a page break. The user data collected through the technically necessary cookies will not be used to create user profiles. Further information can be found in the Schaeffler Cookie Policy.
Analysis cookies are used to improve the quality of our website and its content. Analysis cookies show us how the website is used, so that we can constantly optimise our offer. Further information can be found in the Schaeffler Cookie Policy.

The legal basis for the processing of personal data using cookies is Art. 6(1)(f)GDPR.

Cookies are stored on the terminal device of the user and transferred from it to our website. Therefore, as user, you have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your Internet browser. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all features on the website.

V.     Your rights as data subject

If your personal data is being processed, you are the data subject pursuant to the GDPR and the CLDP, and you have the following rights:

1.     Right of access (Art. 15 GDPR)

Upon request you can obtain from us confirmation from us as to whether or not your personal data is being processed by us. If this is the case, you can request us to give you access to the information provided for by law (see Art. 15 (1)GDPR). We will also notify you of appropriate safeguards pursuant to Art. 46 GDPR in the context of data transfer, in case your personal data is being transferred to a third country or to an international organisation.

2.    Right to rectification (Art. 16 GDPR)

You have a right to rectification and/or completion if the processed personal data is inaccurate or incomplete. We have to rectify the data without due delay.

3.    Right to restriction of processing (Art. 18 GDPR)

Provided that the legal requirements are met (see Art. 18 (1)GDPR), you have the right to restrict processing of your personal data. For consequences of the restrictions please refer to Art. 18(2) and (3) GDPR . 

4.    Right to erasure (Art. 17 GDPR)

You have the right to demand from us erasure of your personal data without undue delay, and we are obliged to immediately erase this data if any of the reasons pursuant to Art. 17 (1)GDPR applies. The right to erasure does not apply in cases of Art. 17 (3)GDPR. 

You can apply to cancel your account in the following ways:
1. Log in to the https://ecommerce.schaeffler.cn website and submit an account cancellation request through Customer Service Contact.
2. Send an email to ecom-cn@schaeffler.com and request to cancel your account. We will cancel your account after verifying your identity.
After you actively cancel your account, we will stop providing you with products or services, delete your personal information or make it anonymous as required by applicable laws.

After you actively cancel your account, we will stop providing you with products or services, delete your personal information or make it anonymous as required by applicable laws.

5.    Right to notification 

If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged to notify each recipient to whom the personal data have been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. We have to inform you about those recipients upon your request. 

6.    Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. For details please refer to Art. 20 GDPR.

7.    Right to object (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data that is based on Art. 6 (1)(e) or (f)GDPR on grounds relating to your particular situation. Further details can be found in Art. 21 GDPR.

In addition, you have a right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR in conjunction with relevant stipulations under CLDP.

VI.    Contacts

Name and contact details of the controller
Schaeffler Trading (Shanghai) Co., Ltd.
1 Antuo Road, Jiading District, Shanghai, China
Telephone: +86 21 3957 6666    
Fax: +86 21 3959 3203
Email: Dataprivacy@schaeffler.com

Contact details of the data protection officer
Schaeffler AG
Data protection officer 
Industriestraße 1-3
91074 Herzogenaurach
Deutschland
Telephone: +49 9132 82-1476
Fax: +49 9132 82-5901
Email: Dataprivacy@schaeffler.com

If you have any questions, comments or suggestions about this policy, you can contact us by phone, email or fax to the above data controller or data protection officer, and we will deal with it in a timely manner. Under normal circumstances, we will reply within 15 days.

VII.    Update of the privacy policy

Status: Version 2.0, 2020/01/01

This policy will take effect on Jan. 01, 2020 Due to business needs or legal and regulatory requirements, we may revise this policy in due course. In the event of a change in this policy, we will post an updated version on the website, and will notify you by reasonable manners such as pop-up, text links and frequently asked questions (FAQs) before the updated version becomes effective, so that you can remain up-to-date with this policy.

If substantial changes have been made to the privacy policy (e.g. changes of business functions, expanded scope of data to be collected, changes of purpose of usage, etc), you shall read the revised policy with care and give your consent again. The new version of this policy will replace the old version as the new version comes into effect, and we will collect and process your personal information according to the new version.

We will also archive the old version of this policy on the website for your review.