Data Protection Notice Sales & Service of engines, parts and systems

The data controller as defined in the GDPR is Zeppelin Power Systems GmbH, Ruhrstr. 158, 22761 Hamburg, Germany. If you have any questions regarding data protection, please contact the Group Data Protection Officer:

Zeppelin GmbH
 Konzerndatenschutzbeauftragter


Graf-Zeppelin-Platz 1
85748 Garching bei München


Phone: +49 89 32 000-0


Fax: +49 89 32 000-482


E-Mail: dataprivacy@zeppelin.com

The relevant supervisory authority is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Data Protection Authority of Hamburg for the Private Sector), Ludwig-Erhard-Str. 22, 7th floor, 20459 Hamburg, Germany. You can use the following email address for email communication with the supervisory authority: mailbox@datenschutz.hamburg.de

All data subjects are entitled to the following rights to:

• access (Article 15 GDPR);
• rectification of inaccurate data (Article 16 GDPR);
• erasure or “the right to be forgotten” (Article 17 GDPR);
• restrict processing of personal data (Article 18 GDPR);
• data portability (Article 20 GDPR).

You may withdraw your consent to having your personal data processed for marketing purposes, including customer data analysis or transfer to third parties for marketing purposes, at any time without having to give justification. The data subject also has a general right to object (Article 21(1) GDPR). In this case, you must justify your objection to the processing of your data.

If the legal basis for processing the data is consent, then this can be revoked at any time and the revocation shall be effective for future processing.

To exercise any of these data subject rights, please send an e-mail to dataprivacy@zeppelin.com or the below-mentioned address. To exercise your right of objection regarding the processing of your personal data for the purpose of e-mail or telephone advertising, please contact zps.hamburg@zeppelin.com.

For the purpose of establishing a business contact, ZPS collects and processes the personal data that we have received from you in the context of a business contact or which you provide to us, for example, through information in the context of a request, a delivery or service or another business contact. Business contact means data collection during activities, fairs, on the occasion of presentations by ZPS or other activities/events or networking meetings. We also collect generally available data, such as information resulting from a company's presence on the Internet or from other generally accessible directories (catalogues, lists of associations, etc.).

In addition to your contact details, the data collection also includes the other data you provide to us in this context (generally, in addition to the information on the business card, also other requests/enquiries or, for example, other information about the company you work for). We also collect the data that is available to us on the website of the company you work for. We process this data in order to support you and the company you work for in the course of business development in line with the objectives of ZPS. This data is partly processed with the involvement of service providers.

If you do not reside in Germany, ZPS sends the aforementioned data to the subsidiary or sales partner of ZPS responsible for supporting trade fair customers in the respective region. In addition to this, we would like to support you in your business development Page 2 of 5 through our subsidiaries/sales partners and to establish a long-term business relationship with you.

We store the personal data of other business contacts for as long as the particular individual is of business importance to us in their role. This is checked internally every 5 years. Subsequently, data is archived if this is necessary to fulfil a statutory retention obligation, otherwise the data is deleted.

Legal basis for the processing of personal data of:

• business contacts is Article 6(1)(a) GDPR if a consent is given
• customers, suppliers and other service providers with regard to initiating transactions is Article 6(1)(f) GDPR (legitimate interest)
• other business contacts, including transfer to subsidiaries/sales partners is Article 6(1)(f) GDPR (legitimate interest)

Our legitimate interests are the establishment and expansion (acquisition and maintenance of contacts) of business relationships. This is not possible without personal data of the business contacts, unless they fall within the definition of a legal person, or of contact persons at the business contacts.

Performance of service

The following data protection provision contains information about the processing of personal data by ZPS that we receive in connection with the performance of services, especially, if you have concluded a service contract. The respective manufacturer of the engines, spare parts or other plants provides us with special service systems and applications in which besides technical information other personal data might be collected and processed. These include, among other things, systems with technical information whose queries involve processing your serial number, Vehicle Identification Number (VIN) or Fahrzeugidentifikationsnummer (FIN) or further identification numbers of the spare parts or other plants (e.g., for the electronic parts catalogue, repair manuals, digital workshop order management applications). Personal data is also processed through diagnostic solutions for engines, spare parts or other plants troubleshooting as well as other after-sales applications, which are explained in more detail below. In order to carry out maintenance/services, we collect the necessary data on the engines history as well as other usage data of the engines, spare parts or other plants (site data, operating values, fuel consumption, error messages, alarm messages, diagnostic codes). In addition, the so-called fault codes and fault environment data (e.g., when a specific fault occurred) are often read from the engines, spare parts or other plants as part of the repair work. These reports allow us to assess where to look for the source of a fault, how it can be rectified and whether structural parts and other components can be installed in the engines, spare parts or other plants or not. The data processed for this purpose is the serial number as well as data on the previous maintenance/services as well as the above-mentioned fault codes and fault environment data related to the corresponding engines, spare parts or other plants. We can also evaluate this data to ensure optimal maintenance condition of the engines, spare parts or other plants and carry out statistical analyses, so that we can advise you on the improved use of the engines, spare parts or other plants and inform you about customized offers for the Zeppelin Group's products and services, as well as carry out the development of new or improved products and services. The legal basis for the described processing of the data is Article 6(1)(b) GDPR (performance of contract) or Article 6(1)(f) GDPR (legitimate interests), since processing is regularly required to fulfil the service or repair order and to safeguard our legitimate interests in order to obtain the most accurate recommendations in the context of the diagnosis and to keep you informed of current developments in our products and services based on your individual needs in the future, and thus to establish a long-term business relationship.

Data on the performance of maintenance/services is used for invoicing and in some cases is subject to legal retention of up to 10 years, so that this data is only deleted once the statutory retention obligation has expired. The subsequent storage and use of the data for future diagnostic requests is based on the legitimate interest in order to obtain the most accurate recommendations in the context of the diagnosis, and thus to improve the quality of the repair and recommend new products and services (Article 6(1)(f) GDPR). This data may also be disclosed to the external auditors and/or tax consultants of ZPS for their advisory and audit purposes. Data collected to perform the contract is stored by ZPS in the operational system for as long as the warranty claims exist.

ZPS shares the master data (company name, contact person, address and contact details such as telephone number and email address) with other Zeppelin Group companies so that the data can be managed and used consistently across the Group companies. This also includes sharing updates to this data, of which we or another Group company become aware. These updates shall also be made available to other Group companies. This helps simplify our processes and means you do not need to resubmit master data when contacting a different Group company. This data processing takes place on the legal basis of Article 6(1)(a) GDPR (consent).

As we manage the overall risk of controlling and evaluating the financial obligations entered into across the Group, we provide the other companies belonging to the Group with a key indicator to enable us to Page 5 of 5 determine the amount of our customers' respective receivables. The legal basis is our legitimate interest in uniform risk management with regard to the financial burdens to which the Group is exposed (Article 6(1)(f) GDPR).

A summary of the Group companies is available at www.zeppelin.com. These data shall be erased five years after you last placed an order or used services, unless specific data are still subject to obligations for continued retention in accordance with Sections 146 et seqq. of the German Fiscal Code and/or Section 257 of the German Commercial Code. In this case, the data shall be deleted when the obligatory retention periods expire. These data are processed in accordance with point (f) of Article 6(1) GDPR.

ZPS transfers customer master data (company name, contact person, address) and details relating to purchased products (for example serial numbers of engines or parts) and/or used services, as well as to pseudonymized (that is, without a name reference) results of the telephone surveys (telephone interviews), to Caterpillar Inc. (CAT) in the USA. The data is processed there for any necessary recall actions or for own advertising purposes and to improve CAT's own products and services. Thus, we would like to give you an opportunity to obtain the best possible repair and maintenance service to ensure an optimal maintenance condition of your product and to be directly informed about the current news from CAT and/or be directly contacted regarding product safety in the event of a product recall. You may withdraw your consent to having your data disclosed to CAT in the USA for advertising purposes at any time by emailing dataprivacy@zeppelin.com.

Data processing in connection with results from telephone interviews is carried out on the basis of consent (Article 6(1)(a) GDPR) or with regard to the transfer of master data and service data on the basis of safeguarding the legitimate interests of ZPS and CAT (Article 6(1)(f) GDPR), such as the fulfilment of settlement and product registration purposes and the optimisation of products and services.

If you have expressly consented to this, ZPS shall forward your telephone number and/or e-mail address to Caterpillar Inc. (CAT) in the USA for advertising and/or telephone interview for market research purposes. The data is transmitted on the basis of Article 6(1)(a) GDPR.

To ensure that the level of data protection in the USA is adequate, ZPS and CAT have agreed to the standard EU contract clauses. You can obtain a copy of this Agreement from the Data Protection Officer. This data protection notice may be updated from time to time. You can find the current version of this data protection notice at zeppelin.com/de-en/powersystems/data-privacy. If there is a new intended use for data that has already been collected, we shall inform you without the need to be prompted to do so.

This data protection notice may be updated from time to time. You can find the current version of this data protection notice at https://www.zeppelin-powersystems.com/de/en/data-privacy/contracts. If there is a new intended use for data that has already been collected, we shall inform you without the need to be prompted to do so. 

October 2020