Privacy Policy

This privacy policy (“Privacy Policy”) governs the processing of personal data obtained of REPA Holding GmbH and its affiliates (hereinafter referred to as “REPA“, “we“, “us“, “our“).
Your privacy is of the utmost importance to us. We provide information below regarding collection and use of personal data when you interact with us. Such interaction happens when:

  1. you visit our website https://repagroup.com/, one of our webshops or social media pages;
  2. you communicate with us via phone, fax, chat or e-mail;
  3. when you sell services to us; or
  4. purchase goods or services from us.

NOTE: If you would like information about how we process your personal data by using cookies and social network plug-ins, please refer to our Cookie Policy. If you wish to apply for one of the vacant positions on our website, you are kindly requested to consult the Privacy Policy for Applicants.

1. General information

1.1. Your personal data is processed by REPA Holding GmbH Gadastr. 4, 85232 Bergkirchen Tel.: +49 8142 6522-50, registered at the Munich District Court, Register No. HRB 227053 and its affiliates.

1.2. Any term beginning with a capital letter is expressly defined in this Privacy Policy. Where possible in the context of the situation, words in the singular shall be interpreted as including the plural and vice versa.

1.3. Where reference is made to certain laws or regulations, such reference shall also include any change, replacement or annulment of such laws or regulations, including any related executive decision.

1.4. REPA reserves the right to modify, revise or amend this Privacy Policy at its discretion and at any time. Such modification, revision or amendment must be communicated via the Website. If you do not accept the changes, revisions or amendments, you can let us know by sending an e-mail to datenschutz.de@repagroup.com.

1.5. Irrespective of your capacity under this Privacy Policy (website or social media page visitor, customer or supplier), we will always process your personal data for the following purposes:

  • To be able to prepare and undertake corporate transactions such as mergers, acquisitions or demergers, for which we rely on our legitimate interest to engage in such transactions;
  • To comply with legal obligations,;
  • To comply with any reasonable request from relevant officials or representatives of the police, judicial authorities, government agencies or governmental bodies, including relevant data protection authorities, for which we rely on our legal obligations;
  • To transfer your personal data at REPA’s initiative to the police or judicial authorities as evidence or in the event of reasonable suspicion of an illegal act or offence on your part when you register or use the Website, our social media pages or any other means of communication with us, for which we rely on our legitimate interest to be able to defend our interests.

2. You visit our website, webshops or social media pages or contact us via phone, fax, chat or e-mail

2.1 Each time you visit our Website or our webshops, we collect technical information related to the device you are using, such as your IP address, browser type, geographical location and operating system. Information about your browsing behaviour, such as the length of your visit, the links you click on, the pages you visit and how often you visit a page is also collected.

Such information is also collected when you visit our social media pages, but then the social media service provider is responsible for such collection. Please visit the privacy policies of these social media providers for more information on how they process your personal data:

2.2 When you complete a contact form on our Website or on our webshops or contact us via e-mail, telephone, fax, chat or via one of our social media pages, we collect:

  • the basic identity information you provide us, such as name, e-mail address, postal address, telephone number, company you work for, your position;
  • the content of your communications and the technical information of your communications (the person with whom we communicate on our side, the date and time, etc.)
  • your preferences regarding the receipt of our e-mail communications, such as newsletters, promotions, advertisements, etc., if you have chosen to receive these communications;
  • your profile information on social media pages made available to the public;
  • any other personal data you choose to provide to us.

2.3 All personal data listed above we receive directly from you. We may receive additional information about your preferences and browsing behaviour from partners such as Google, LinkedIn and Xing. If you require more information about the personal data about you that these parties process and make available to third parties, we invite you to consult their respective privacy policies as mentioned above.

2.4 REPA processes your personal data when you communicate with us via our Website, our chat or social media pages or when you call or send a fax or e-mail to:

  • respond to your questions, queries or other communications;
  • provide you with information about our products, services and activities;
  • keep our Website, social media pages, company, employees, assets and information safe;
  • make statistical analyses on the use of our communication channels;
  • improve our products, services or business processes or develop new products or services.

For all of the above purposes, we base ourselves on our legitimate interest to process your personal data to be able to engage in normal business communications and communicate about our products, services and activities, to understand how our communication channels are used and to evolve as a business.

2.5 When we collect your e-mail address with the intent of sending you commercial communications such as newsletters, promotions and advertisements of our products and services and those of our sister companies, we will ask your specific consent to send you such communications. You can withdraw your consent at any time. For our existing customers whom we wish to send such communications about similar products and services, we rely on our legitimate interest to communicate commercially with you.

3. You are or represent a REPA customer

3.1 Next to any interactions we may have with you as a consequence of your use of our Website, social media pages or communication via e-mail, phone, fax or chat, we also receive from you directly or from the company you work for, whenever you order goods or services via the REPA app, the REPA webshop, phone or e-mail:

  • Your basic identity information such as name, e-mail address, postal address, telephone number, company you work for, your position;
  • the content of your communications, and the technical information of your communications themselves (the person with whom we communicate on our side, the date and time, etc.);
  • payment and invoice related data if you order goods or services from us.

3.2 REPA processes your personal data in order to:

  • create a customer account on the webshop so that you can order our products via the webshop or the app;
  • process your order, send the order to you and handle invoicing and quality management;
  • engage in normal customer relationship management;
  • engage in normal internal management reporting activities.

For the first two purposes we process your personal data because it is necessary to come to an agreement with you and perform said agreement. If you represent a company we rely on our legitimate interest to process the contact details of the people who represent our customers. For the other two purposes the processing is based on our legitimate interest to engage in normal business and customer follow-up.

4. You are or represent a REPA supplier

4.1 Next to any interactions we may have with you as a consequence of your use of our Website, social media pages or communication via e-mail, phone, fax or chat we also receive from you directly or from the company you work for, whenever we receive a quotation for goods or services or order those goods or services from you:

  • Your basic identity information such as name, e-mail address, postal address, telephone number, company you work for, your position;
  • the content of your communications, and the technical information of your communications themselves (the person with whom we communicate on our side, the date and time, etc.);
  • payment and invoice related data when you invoice us for your goods or services.

4.2 REPA processes your personal data in order to:

  • get a quotation for goods or services from you;
  • compare your offer to similar offers in the market
  • process the order, receive the order from you and handle invoicing and quality management;
  • engage in normal supplier relationship management;
  • engage in normal internal management reporting activities.

4.3 For the first three purposes we process your personal data because it is necessary to come to an agreement with you and perform said agreement. If you represent a company we rely on our legitimate interest to process the contact details of the people who represent our suppliers. For the other two purposes the processing is based on our legitimate interest to engage in normal business and customer follow-up.

5. Recipients of the personal data

5.1 We will share your personal data within the REPA group and the Parts Town group, of which we are a member, and with governmental authorities to the extent necessary for the purposes listed above. In any case, we guarantee that your personal data will be processed by the entities within this group in accordance with this Privacy Policy.

5.2 If you use our social media pages, your personal data are also processed by social media service providers. More information about how they process your personal data can be found in their respective privacy policies, as explained above.

5.3 In some situations, we rely on carefully selected third parties to receive your data, such as financial institutions and IT service providers.

5.4 Your personal data will be transferred to countries outside the European Economic Area for which REPA has concluded the necessary contractual arrangements on the basis of the European Commission’s standard contractual clauses. For more information, you can contact the data protection officer (see contact details below).

6. Quality insurances

6.1 REPA will only process those personal data which are necessary for the purposes listed in Privacy Policy.

6.2 Your personal data will only be processed for the time necessary to achieve the purposes listed herein. More specifically:

  • Personal data of visitors of our website or social media page, which do not relate to specific questions, queries or similar communications, are kept for two years.
  • Personal data of anyone who has asked a question, query or sent a similar communication to us, irrespective of the communication channel will be kept for a maximum of ten years after such communication has been sent.
  • Personal data of customers or customer contact persons will be kept for as long as the customer remains a customer and until 10 years after the customer relationship has ended.
  • Personal data of suppliers or supplier contact persons will be kept for as long as the supplier remains a supplier and until 10 years after the supplier relationship has ended.
  • Personal data collected on the basis of consent, e.g. when we ask you whether you want to receive our newsletters, promotions or advertisements via e-mail or similar electronic channels, are retained until such time when you withdraw your consent.

6.3 You understand that making our marketing materials more relevant to you is an essential aspect of our marketing efforts. This means that REPA establishes a profile for you based on the relevant characteristics set out in Article 2 and then uses this profile to provide you with communications, promotions, offers, newsletters and other advertisements about products and services that may be of interest to you.

6.4 REPA will take appropriate technical and organisational measures to protect your personal data against unauthorised access or theft and against accidental loss, alteration or destruction. Only REPA staff or its third-party processors who need to know your confidential data will have access to it and will be subject to strict confidentiality obligations. However, you understand that safety and security are only best efforts obligations that can never be guaranteed.

7. Your rights

7.1 You have the right to request access to all personal data processed by REPA concerning you. REPA reserves the right to charge administrative fees for several subsequent access requests that are clearly submitted in order to harm or prejudice REPA.

7.2 You have the right to request the rectification, free of charge, of any personal data concerning you that are inaccurate. In the event of a request for rectification, this request must be accompanied by proof of the erroneous nature of the data which is the object of the request for rectification.

7.3 You have the right to withdraw your earlier given consent for the processing of your personal data.

7.4 You have the right to request the deletion of personal data concerning you if they are no longer necessary for the purposes set out above or if you withdraw your consent to their processing. However, you should keep in mind that REPA will assess your deletion request against:

  • the overriding interests of REPA or any other third party;
  • any legal or regulatory obligations or judicial or administrative orders that may conflict with such deletion.

Instead of requesting the deletion of your personal data, you may also request that REPA limits its processing if and when (a) you dispute the accuracy of the data, (b) the processing is unlawful or (c) the data are no longer necessary for the purposes listed in this Privacy Policy but you need them to defend yourself in legal proceedings.

7.5 You have the right to object to the processing of personal data if you can prove that there are serious and well-founded reasons linked to particular circumstances guaranteeing such opposition. However, if the processing operation envisaged is a direct marketing operation, you have the right to object to such processing free of charge and without justification.

7.6 If you wish to submit a request to exercise one or more of the rights listed above, you may send an e-mail to the data protection officer via datenschutz.de@repagroup.com. An e-mail requesting the exercise of a right shall not be construed as consent to the processing of your personal data beyond what is required for the processing of your request. This request must clearly indicate which right you wish to exercise and the reasons for the request, if required. It must also be dated, signed and completed by a scanned copy of a valid proof of identity.

REPA will inform you promptly of the receipt of this request. If the request is valid, REPA will honour it as soon as reasonably possible and no later than thirty (30) days after receiving the request.

If you have any complaints about REPA’s processing of your personal data, you can always contact REPA at the e-mail address indicated in the first paragraph of this clause. If you are still not satisfied with REPA’s response, you are free to lodge a complaint with the competent data protection authority, namely your local data protection authority or the Bavarian Data Protection Authority (https://www.lda.bayern.de).