The controller as per the EU General Data Protection Regulation (GDPR) is:
Auto Sales (Mer) Ltd. ("We")
Mosta Road, Lija LJA 9011 Malta
Data Protection Officer:
Auto Sales (Mer) Ltd.
The person responsible within the meaning of the EU General Data Protection Regulation (GDPR) is:
Data Protection Officer:
Mercedes-Benz Group AG
Group Data Protection Officer
70546 Stuttgart, Germany
1. Data protection
Thank you for visiting our website and for your interest in our offers. The protection of your personal data is a central concern to us. In these data protection notices, we explain how we collect your personal data, what we do with them, for what purposes and on what legal bases this takes place, and what rights and entitlements are associated with this for you. In addition, we refer to the Mercedes-Benz Data Protection Policy:
Our data protection notice for the use of our websites and the Mercedes-Benz Group AG Data Protection Policy do not apply to your activities on the websites of social networks or other providers that you can reach via the links on our websites. Please obtain information about the respective data protection regulations on the websites of said providers.
2. Collection and processing of your personal data
a. When you visit our websites, we store certain information about the browser and operating system you use, the date and time of your visit, the access status (e.g. whether you were able to access a web page or received an error message), the use of functions of the web page, the search terms you may have entered, the frequency with which you access individual websites, the names of accessed files, the transferred data volume, the web page from which you came to our websites, and the web page you jump to from our websites, be it by clicking on links on our websites or by entering a domain directly into the input field of the same tab (or the same window) of your browser in which you opened our websites. For security reasons, in particular to prevent and recognise attacks on our websites or fraud attempts, we also store your IP address and the name of your Internet service provider for a period of seven days. In addition, we process your IP address in anonymised form for personalised advertising, i.e. we derive your approximate location from the anonymised IP address, which we use for advertising purposes if you consent to this (see section 3c).
b. We only store other personal data if you provide us with this data, e.g. as part of a registration, a contact form, a chat, a survey, a competition or for the performance of a contract, and even in these cases only to the extent that we are permitted to do so on the basis of consent given by you or in accordance with the applicable legal provisions (see section 7).
c. You are under no legal or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites depend on your providing personal data. If you do not provide personal data in these cases, these functions may not be available or be available only in limited form.
3. Purposes of use
a. We use the personal data we collect during a visit to our websites to make them as convenient as possible for you to use as well as to protect our IT systems against attacks and other illegal activities.
b. Insofar as you provide us with further personal data, e.g. as part of a registration, a chat, a contact form, a survey, promotional contest or for the execution of a contract, we will use these data for the aforementioned purposes, for customer administration purposes and – as far as necessary – for the purposes of processing and invoicing any business transactions, in each case to the extent required for this purpose.
c. For other purposes (e.g. display of personalised content or advertising based on your usage behaviour), we and, if applicable, selected third parties will use your data, provided that you give your consent (= approval) to this within the framework of our Consent Management System. For more information and decision-making options, click here:
Analytics, including profiling and scoring, may be used to display personalised content or advertising as part of consent(s) provided by you. The use of profiling and scoring enables us, for example, to provide you with individualised information and advice on specific vehicle models that is tailored to your interests. This is done, among other things, on the basis of the information you provide in connection with the use of our "EQ Registration" service.
d. In addition, we use personal data if we are legally obliged to do so (e.g. storage to comply with commercial or tax retention obligations, disclosure in accordance with official or court orders, e.g. to a law enforcement agency).
e. In addition, we process your personal data insofar as this is necessary to protect our legitimate interests. Based on your usage behaviour, we continuously adapt the functions and the offer of our websites to your needs and use your personal data for internal billing purposes.
4. Transfer of personal information to third parties; social plug-ins; use of service providers
a. Our websites may also involve third-party offers. If you click on such an offer, we send data to the necessary extent to the specific provider (e.g. the information that you found this offer on our website and, if applicable, additional information which you have already shared on our websites for this purpose).
b. If we use so-called "social plug-ins" of social networks such as Facebook and Twitter on our websites, we integrate them as follows:
When you visit our websites, the social plug-ins are deactivated, i.e. no data is transmitted to the operators of these networks.
If you would like to use one of the networks, click on the respective social plug-in to establish a direct connection with the server of the respective network. If you have a user account with the network and are logged in there at the time the social plug-in is activated, the network can assign your visit to our website to your user account. If you would like to prevent this, please log out from the network prior to activating the social plug-in. A social network is unable to assign a visit to other Mercedes-Benz websites until you have also activated any available social plug-in there.
If you activate a social plug-in, the network directly transfers the consequently available data to your browser which integrates it into our websites. In this situation there may also be data transfers that are initiated and controlled by the corresponding social network. Your connection to a social network, the data transfers taking place between the network and your system and your interactions on this platform are solely subject to the data protection provisions of the particular network.
The social plug-in remains active until you deactivate it or delete your cookies (see section 5.d).
c. When you click on the link for an offer or activate a social plug-in, personal data may be transferred to providers outside the European Economic Area, which from the point of view of the European Union ("EU") do not guarantee "adequate levels of protection" that meet EU standards for the processing of personal data. Please bear this in mind before you click on a link or activate a social plug-in and thereby trigger a transfer of your data.
d. We also use qualified service providers (e.g. IT service providers, marketing agencies) to operate, optimise and secure our websites. We only pass on personal information to them insofar as this is necessary for the provision and use of the websites and their functionalities, for the pursuit of legitimate interests, for the fulfilment of legal obligations or insofar as you have consented to this (see section 7). You can find more details about the recipients in our Consent Management System:
a. Cookies may be used when you visit our websites. Technically, these are so-called HTML cookies and similar software tools such as web/DOM storage or local shared objects (so-called "flash cookies"), which we refer to collectively as cookies.
b. Cookies are small files that are stored on your desktop, notebook or mobile device when you visit a website. From this, it is possible to recognise, for example, whether there has already been a connection between the device and the websites, to take into account your preferred language or other settings, to offer you certain functionalities (e.g. online shop, vehicle configurator) or to recognise your interests on a usage basis. Cookies may also contain personal data.
e. The consent (= approval) to as well as rejection or deletion of cookies are linked to the device used and also to the respective web browser used. If you use several devices or web browsers, you can make the decisions or settings differently for each.
We use technical and organisational security measures to protect the data we have under our control against manipulation, loss, destruction and against access by unauthorised persons. We continuously improve our security measures in line with technological developments.
7. Legal basis for processing
a. If you have given your consent to us processing your personal data, this constitutes the legal basis for said processing (Article 6 Section 1 Paragraph a GDPR).
b. The legal basis for processing personal data for the purposes of initiating or compliance with a contract with yourselves shall be Article 6 Section 1 Paragraph b GDPR.
c. If the processing of your personal data is required to meet our legal obligations (e.g. archiving data), we are authorised to do so as per Art. 6 Section 1 letter c DSGVO (GDPR, General Data Protection Regulation).
d. In addition, we process personal data for the purposes of safeguarding our rightful interests as well as the rightful interests of third parties as per Art. 6 Section 1 Paragraph f GDPR. Maintaining the functionality of our IT systems, the (direct) marketing of our own and third-party products and services (insofar as this does not take place with your consent) and the legally required documentation of business contacts are such legitimate interests. We take into account in particular the type of personal data, the purpose of the processing, the circumstances of the processing and your interest in the confidentiality of your personal data as part of the necessary balancing of interests in each case.
8. Deletion of your personal data
We delete your IP address and the name of your internet service provider, which we store for security reasons, after seven days. Otherwise, we delete your personal data as soon as the reason for which we collected and processed the data ceases to exist. Beyond this time, storage will only take place insofar as this is required in accordance with the laws, regulations or other legal provisions to which we are subject in the EU or in accordance with legal provisions in third countries, if an appropriate level of data protection is provided there in each case. Where deleting is not possible in an individual case, the relevant personal data shall be marked with the aim of restricting its future processing.
9. Data subject rights
a. As a person affected by data processing you have the right to information (Article 15 GDPR), correction (Article 16 GDPR), deletion of data (Article 17 GDPR), restricting processing (Article 18 GDPR) and transferring data (Article 20 GDPR).
Online form data protection rights management
b. If you consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. The legality of the processing of your personal data until the withdrawal of consent remains unaffected by the withdrawal. Likewise, further processing of this data on another legal basis, such as for the fulfilment of legal obligations, remains unaffected (see "Legal bases of the processing").
c. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 Section 1 e) GDPR (data processing in the interest of the public) or Article 6 Section 1 f) DSGVO (data processing based on a balancing of interests). If you lodge an objection, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If we process your personal data for the purpose of direct marketing to protect legitimate interests on the basis of balancing of interests, you also have the right to object to this at any time without giving reasons.
d. If possible, please send your claims or declarations to the following email address:
e. Should you believe that the processing of your personal data violates legal provisions, you have the right to file a complaint with a competent data protection authority (Art. 77 GDPR).
If you subscribe to one of the newsletters offered on our website, the data provided for the registration will only be used for the purpose of sending the newsletter, unless you agree to more extensive usage of the data. You can end the subscription at any time via the unsubscribe option in the newsletter.
11. Central access service of Mercedes-Benz Group AG
12. Data transfer to recipients outside the European Economic Area
a. When using service providers (see section 4. d.) and passing on data with your consent (= approval) to third parties (see section 3.c), personal data may be transferred to recipients in countries outside the European Union ("EU"), Iceland, Liechtenstein and Norway (= European Economic Area) and processed there, in particular USA, India.
b. The following countries are considered by the EU to have an adequate level of protection for the processing of personal data in line with EU standards (so-called adequacy decision): Andorra, Argentina, Canada (limited), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay. With recipients in other countries, we agree to use EU standard contractual clauses, binding corporate rules or other permissible mechanisms to provide an "adequate level of protection" in accordance with legal requirements. We will be happy to provide you with information on this via the contact details mentioned in the above section 9.d.
13. Information regarding data protection for the Roadside Assistance product and Service24h
We ask you to click Privacy Notice to view the pdf .
Last update: June 2022