In the following, we will inform you about the data we store about you when you use our website and how this data is used. If our website contains links that lead to the website of another provider, our data protection policy does not apply to the website to which you are forwarded. Please take enough time to read this note carefully.
Data Controller Data Controller is the entity that is responsible for the processing of your personal data and deciding on the purposes and means of the processing of your personal data. In this case the data controller is: CNH Trust You can contact our data protection officer at: info@uh-la.com If you want to object to the collection, processing or storage of your personal data by uh-la or exercise your other rights in accordance with the relevant data protection laws, you can send your objection via e-mail to the address stated above.
Your Rights You have the right to receive explicit information from uh-la about the personal data we have stored about you, free of charge. In addition, you have the following rights:
Right to access
Right to rectification and erasure
Right to restriction of processing of your personal data
Right to portability
Right to object
Right to lodge a complaint to a supervisory authority about the processing of your personal data by us.
If you would like to exercise your rights as a data subject, please do not hesitate to contact us via the contact information provided above.
Purposes and legal basis of our processing activities and our retention policy In order to be able to provide our services to you, we also have to collect, process, store and share certain personal data with contract processors. Below you can see which of your data we need for which purposes and on which legal basis we process them, as well as under which circumstances, we share your data with third parties. Personal data is information from which we can directly or indirectly relate to your person, such as first and last name, address, phone number, date of birth, location data or e-mail address.
Contact form “uh-la.com” We will store the personal data (name, e-mail address) you provide to us for contacting you and we will contact you as requested. This processing is based on our legitimate interest pursuant to Art. 6 para. 1 f) GDPR to be able to contact you immediately and process your request. We will store the personal data you have transmitted for one year and then delete it unless legal retention periods arise from the processing.
Contact form “ir.uh-la.com “ If you would like to contact us via the contact form under the “Investor Relations” tab, we will use the personal data you have provided to us for contacting you (mandatory fields: Name, first name; optional: telephone number, address, e-mail address, country) and contact you as requested. This contact form is technically administered by our data processor EQS Group AG and incorporated into our website. This processing is based on our legitimate interest pursuant to Art. 6 para. 1 f) GDPR to be able to contact you immediately and process your request. We will store the personal data you have transmitted for one year and then delete it unless legal retention periods arise from the processing.
Career We would be pleased if you searched our career page for interesting job offers. We use the services of our data processor Workday, and ASANA Inc. based in the USA to show you our vacant positions. If you are interested in a vacant position and click on “apply”, you will be redirected to the website of our processor. You will be asked to enter your master data in the input mask and upload relevant certificates. The mandatory fields are marked with a star (*). All other input fields are optional and do not have to be filled in by you. uh-la processes your personal data in this context for the purpose of recruitment and personnel selection. As a result, uh-la may use your personal data to evaluate and select applicants, including for example setting up and performing interviews and tests, assessing and evaluating results, and as otherwise required in the recruitment process, including final hiring. uh-la will not share your personal information with unauthorized third parties. However, as a global company consisting of several affiliates in different countries, uh-la has international locations. uh-la may from time to time use third parties on its behalf. You agree that your personal information may be shared and/or passed on as necessary to a uh-la group company and third parties acting on uh-la’s behalf, including servers and databases outside the country where you provided your personal information to uh-la. We will store the data you provide for a maximum period of six months and then delete them. If your application is successful, we will use the data submitted during the application process to prepare and perform the employment contract and then delete it from the application system. The legal basis for processing your personal data as part of the application process is Art. 6 para. 1 lit. b GDPR (performance of contract or implementation of pre-contractual measures) and for selecting and using suitable technical services and forwarding your application documents to affiliated group companies is Art. 6 para. 1 lit. f GDPR. You can also give us your consent to inform you about further vacant positions in the future for a maximum period of 12 months. The given consent can be revoked at any time and has no impact on your application process. In this case, please contact us at hr.team@uh-la.com and inform us of the revocation of your consent.
Analysis of the use of our website We are always striving to customize our website according to the wishes of the website users. In order to achieve this, we evaluate the use of our website in anonymous form. We record the name of the website accessed, the date and time of access, the browser type used and your IP address. This data is only processed for statistical purposes to optimize our website presence and to operate the website.
This processing is based on our legitimate interest under Art. 6 para. 1 f) GDPR to provide you with a functional and demand-driven website. We will keep your personal data for seven days and then anonymize this information by deleting any personally identifiable content of the information collected, such as your IP address.
Protection against attacks and other unlawful access attempts In order to protect you and ourselves from possible attacks by third parties and to ensure secure access to our website, we collect the name of the website accessed, the date and time of access, the type of browser used and your IP address in access logs. This processing is based on our legitimate interest according to Art. 6 para. 1 f) GDPR to provide you with a secure website and to protect us both preventively and in the event of an attack to immediately take appropriate measures. We will store the personal data transmitted by you for seven days and then anonymise this information by deleting any personally identifiable content of the information collected, such as your IP address. Categories of recipients and recipients of your personal data We make use of the professional services of data processors. These are natural or legal persons, authorities, institutions or other bodies that process personal data on behalf of the data controller. As the selection of our processors may change from time to time, we provide an overview of the categories of potential recipients below. If you wish to receive a complete list of our processors at the time of processing your personal data, please contact our data protection officer at help.desk@uh-la.com
Categories of recipients:
External service providers These are companies that support our business by evaluating and optimizing our marketing campaigns, but also by providing personalized advertising, IT solutions and infrastructure, or by ensuring the security of our business operations, for example by detecting and resolving malfunctions and identifying attempted attacks.
Affiliated companies If the content of your contact request refers to information from affiliated companies of uh-la, we will forward the content of your contact request to the respective addresses. We also include services from our affiliates in our business activities by helping us to ensure the security of this website.
Law enforcement agencies and legal proceedings Unfortunately, it can happen that visitors to our website do not behave according to the rules and want to harm us. In these cases, we are not only legally obliged to disclose personal data, it is of course also in our interest to avert damage, enforce our claims and reject unjustified claims.
Transfer of data to third countries We process your data mainly within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers mentioned above are based outside the EU and the EEA. Our Companies has high requirements for the transfer of personal data to third countries. All our data receivers have to measure up to these requirements. Before we transfer your data to a service provider in third countries, every service provider is first assessed with regard to its data protection level. They will only be shortlisted for service providers if they can demonstrate an adequate level of data protection. Regardless of whether our service providers are located within the EU/EEA or in third countries, each service provider must sign a data processing agreement with us. Service providers outside the EU/EEA must meet additional requirements. Personal data may be transferred to service providers that meet at least one of the following requirements:
The European Commission has decided that the third country ensures an adequate level of protection (e.g., Israel and Canada)
Standard data protection clauses adopted,
Approved certification mechanism.
These are statements of conformity ensuring an adequate level of data protection which cannot be modified by the contracting parties Under international agreements, companies can be certified according to defined criteria. One of these certifications is the EU-US Privacy Shield Agreement. On the following link you can see certified companies: https://www.privacyshield.gov/welcome We will only transfer your data to service providers who meet at least one of these requirements. If we transfer data to third countries, these are mainly companies based in the USA or Israel. Subject to change We reserve the right to change this privacy policy in accordance with legal requirements. Of course, we will inform you about any significant changes on this page.
Our new app is live. You’re officially invited to come check it out. Download on the App Store today.
