Data protection

General information

The KIRCHHOFF Automotive / KIRCHHOFF Group appreciates your interest in our company. We take the protection of your personal data seriously and hereby inform you about the type and scope of the personal data that we collect when you visit our website. The following data protection declaration applies to the websites and as well as their subdomains and the online presences on Facebook, LinkedIn, Xing and YouTube.

The use of our website is generally possible without providing personal data. As far as on our sides personal data (such as name, address or e-mail addresses) are collected, this is as far as possible on a voluntary basis. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

All personal data will be collected, processed and used in accordance with the applicable regulations for the protection of personal data.


Data protection for visitors

In the course of your visit to our website, we store personal data about you. The protection of your personal data is very important to us, so we would like to inform you here about how we handle it.


Cookies and server log files

The internet pages of KIRCHHOFF Automotive / the KIRCHHOFF Group use cookies. Cookies are text files which are filed and stored on a computer system via an internet browser.

The use of cookies enables the websites and servers visited to distinguish the individual browser of the person concerned from others.

Through the use of cookies, KIRCHHOFF Automotive / the KIRCHHOFF Group can improve the user-friendliness of this website and provide services that would not be possible without cookies. For example, the user of a website that uses cookies does not have to re-enter his or her access data each time he or she visits the website, because this is handled by the website and the cookie stored on the user's computer system.

By changing the setting of the respective Internet browser, the setting of cookies can be prevented for all Internet pages. Cookies that have already been set can be deleted again. This is possible in all common Internet browsers, but the function of the website is then partially restricted.

For technical reasons, so-called server log files are also created. In these files, the hosting provider stores technical data (e.g. browser type and version, operating system used, time of request, IP address, etc.) that the browser automatically transmits to him. ), which the browser automatically transmits to him. This data is not merged with other data, so that a personal reference is not possible.


Analysis tools and advertising

The use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). The responsible entity is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:

You can find more information about this at or at (general information about Google Analytics and data protection). We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure anonymous collection of IP addresses (so-called IP masking).


Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo, an InnoCraft company (InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand). Matomo uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website.

For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before storage.

Matomo cookies remain on your terminal device until you delete them. The storage of Matomo cookies is voluntary and only takes place with your consent in accordance with Art. 6 para. 1 lit. a DSGVO.

The information generated by the cookie about the use of this website will not be passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.


Purpose of the data collection and, if applicable, transmission of the data


Personal data is only collected by us if you provide it to us voluntarily, for example in the context of an inquiry or a registration. Data is entered in the areas described below:


Contact forms

The contact form offers interested parties the opportunity to send enquiries directly to KIRCHHOFF Automotive. Due to legal regulations, the website also contains information (e.g. in the imprint) which enables a quick electronic contact to our company (e.g. via e-mail address). In the context of an invitation to trade fairs or other events, you enter your data in an online registration form. We use this data only for the purpose of visitor planning and, if necessary, ticket allocation. If a person contacts us by e-mail or via a contact form, the personal data transmitted by the person is automatically stored. Data transmitted during this contact will be stored for the purpose of processing or contacting the person concerned. In most cases, the e-mails sent are delivered to general mailboxes of departments or representatives or assistants of senior staff. Unless required for the purpose of processing, this personal data is not passed on to third parties outside the Group companies.


Route calculation with Google Maps

We use "Google Maps" on our website. Google Maps is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The responsible body is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When using Google Maps, Google collects data on the use of the Maps functions by visitors to the websites. The data may be processed in the USA. You can find Google's privacy policy here: and the additional terms of use for Google Maps here:



For the processing of personal data in the application process, an additional privacy policy has been created, which can be viewed before submitting the data.

Online presence in social media

We provide online presences within social networks in order to be able to communicate with the interested parties and users active there and to inform them about us.

User data may be processed by the service provider outside the European Union. This may result in risks for the users, because, for example, the enforcement of the rights of the users could be made more difficult.

As a rule, the service provider processes user data for market research and advertising purposes. For example, the interests of users resulting from their usage behaviour can be used to place advertisements within and outside the platforms that could correspond to the interests of the users. Cookies are usually stored on the users' computers for this purpose. In addition, data can also be stored in the usage profiles independently of the devices used (especially if the users are members of the respective platforms and are logged in to them).

We inform you in the following about the processing of your personal data carried out by us within the framework of the online presences provided by us. In its ruling of 5 June 2018, the ECJ confirmed the joint responsibility of the service providers and the site operator.

The social media site you visit offers you the opportunity to respond to our posts, comment on them, create a user post yourself and send us private messages with personal concerns. The data you provide in this context and which may be accessible to us (e.g. user name, pictures, interests if applicable, contact data) will be used by us exclusively for the purpose of customer and interest communication. It is in our interest to provide you with a platform on which we can display up-to-date information and with the help of which you can address your request to us and we can respond to your request as quickly as possible.

We do not process any data other than the basic functions through the site. Please note that the service provider may use tracking tools and cookies independently of our use of the site.

For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers.

Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, you can contact us.


Name and address of the controller

The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is KIRCHHOFF Automotive GmbH. Contact details etc. can be found in the imprint.


Name and address of the data protection officer
The data protection officer of the controller is:

VIA Consult GmbH, Mr. KundeMartinstraße
2557462 Olpe

+49 (2761) 83668 - 0

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.


Legal basis of the processing

If we obtain consent for certain processing operations, this is based on Art. 6 I lit. a DS-GVO. If the processing of personal data is necessary for the performance of a contract, e.g. for the delivery of goods, or for pre-contractual measures, e.g. in the case of inquiries, the processing is based on Art. 6 I lit. b DS-GVO. If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DS-GVO. If a processing of personal data is not based on any of the aforementioned legal grounds, we process data to protect a legitimate interest of our company pursuant to Art. 6 (I) (f) DSGVO (improvement of the performance of business activities). In doing so, we always ensure that no interest of the data subject worthy of protection, which outweighs our legitimate interest, is opposed to this.


Duration for which the personal data are stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfilment of the contract or the initiation of the contract.

If you send applications to KIRCHHOFF Automotive, please note the additional data protection declaration for applications in the career section for information on the storage period.

If you send us an e-mail via the contact form, your e-mails will be received by the respective mailboxes and will be archived there for an unlimited period of time.

Your data, which are stored in the course of the use of our online presences, are deleted - as far as it is possible for us - when the operation of the site is discontinued.


Data subject rights

You have the right at any time to obtain information about the data we have stored about you and the purpose for which we have stored it. You can revoke your consent to the storage or use of your personal data in writing at any time. In addition to the revocation, you have the right to demand the correction as well as the restriction of processing and blocking or deletion of your data. Furthermore, you have the right to object to processing for legitimate interest.

You have the right to contact the relevant supervisory authority (for NRW: The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia in Düsseldorf) for complaints. In addition, you have the right to receive the data you have submitted in a machine-readable format for transmission.

If you have any questions regarding the processing of your personal data, you can also contact us directly (responsible office: see imprint). For all questions and requests for information, applications or complaints, you can also contact our external data protection officers directly.



KIRCHHOFF Automotive / the KIRCHHOFF Group uses technical and organizational security measures in order to protect the data you have provided against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

Our security measures are not only continuously improved in line with technological developments, but are also protected by an integrated information security management system (ISMS).



On our homepage under "Corporate Governance" > "Code of Conduct", it is described and outlined how violations can be reported. The reports are made by phone or email. Anonymous reporting is also possible. However, the whistleblower can voluntarily provide their identity, in order to receive feedback. The report is sent directly to a KIRCHHOFF Automotive authorized representative (Global Compliance Expert, Compliance Delegate, Managing Director, responsible manager) or to an ombudsman (external lawyer).

Reports usually include the identity of person(s) concerned by the reported event, as well as data of the whistleblower for non-anonymous reports. Other personal data is only collected if necessary to fulfill the purpose and is therefore legally permissible.

The processing of the personal data of both the (non-anonymous) whistleblower and the person(s) concerned by the reported event, serves the purpose of preventing violations of the law and of investigating violations in the interests of the injured party.

The processing of personal data takes place to protect legitimate interests in accordance with Art. 6 Para. 1 f) GDPR. The sincere interest here is to maintain compliance: compliant processes at KIRCHHOFF Automotive and equal and fair opportunity to conduct investigations.

If the whistleblowing is confirmed, the responsible manager and/or the HR Manager are informed. Possibly, personal data will then also be sent to government authorities, e.g. Prosecutor or courts. In the event of a breach affecting the global organization, the personal data will be transmitted to the Global Compliance Expert in Germany or to the countries where KIRCHHOFF Automotive operates and where investigations can take place. In all other cases, no personal data is shared to a third-party country. Any recipients only have access to the information necessary for their respective task(s).

The duration of the storage of the personal data of the person(s) concerned by the whistleblowing depends on the specific circumstances: personal data will be deleted if there is no initial suspicion or if the whistleblowing is deemed unfounded as soon as the corresponding determination has been made. If the internal investigation has confirmed the notification, the personal data will be deleted at the time when all legal measures have been completed. The endorsements in the personnel file resulting from confirmatory examinations, are subject to the deletion periods applicable to personal files.

The storage duration of personal data for a (non-anonymous) whistleblower corresponds to the storage duration of the relevant process according to the previous paragraph.

In the event of deliberately incorrect or defamatory notices by whistleblowers, deletion periods apply accordingly with regard to the investigations into the misconduct of the whistleblower.

Natural persons from whom we process personal data, are affected in the sense of General data protection regulation (GDPR). The rights of the data subject apply (Art 15-21 GDPR).