Privacy Policy

Privacy Policy of Toyo Tire Sales and Marketing Europe d.o.o. for website

Toyo Tire Sales and Marketing Europe d.o.o. (hereinafter "TSE" or "we") are committed to protecting your privacy.

This Privacy Policy sets out the basis on which any personal data we collect about you as a visitor to our website which you can access at [URL ].

1. Information on the collection of personal data and contact details of the controller

1.1 In the following, we provide information about the processing of personal data in our company.

1.2 Even if formulations in this text may be written in the generic masculine, all genders are of course addressed equally.

1.3 Personal data is all data that can be related to a person personally, e.g. name, address, email address, user behaviour.

1.4 The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. 

1.5 The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is

Toyo Tire Sales and Marketing Europe d.o.o. 

Industrijska 3 no. 5 

22320 Indjija, Serbia

Tel. : +381 63 8362155

E-Mail    contacttse@toyotires.rs

2. Data processing when visiting the website 

2.1. When using our website for information purposes only, i.e. if you do not provide us with any other information, the browser used on your device automatically sends information to our website server. If you use our website accordingly, we collect the following data:

- IP address

- Date and time of the enquiry

- Time zone difference to Greenwich Mean Time (GMT)

- Content of the request (specific page)

- Access status/HTTP status code

- Amount of data transferred in each case

- Website from which the request comes

- browser

- Operating system and its interface

- Internet service provider of the user

- Websites, which from the system of the user via our website are accessed

- Language and version of the browser software.

2.2. The legal basis for the processing of the aforementioned data is Art. 6 para. 1 (f) GDPR. The data mentioned under 2.1. are processed by us for the following purposes:

- Functionality of the website

- guarantee of a smooth connection setup of the website,

- Ensuring a comfortable use of our website,

- analysing system security and stability and

- for other administrative purposes.

2.3. The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The data stored during the informational use of our website is deleted or anonymised after 7 days at the latest.

3. Hosting

3.1. The website is hosted by an external service provider. This also means that the personal data collected on the website is stored on the servers of this host. This mainly concerns the IP-address of the website user.

3.2. External hosting is provided for us by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen . It processes your personal data on our behalf and under our instructions. A corresponding agreement on order processing in accordance with Art. 28 GDPR is in place. Further information on the data protection of Hetzner Online GmbH can be found, for example, at https://www.hetzner.com/de/legal/privacy-policy/ . 

3.3. The forwarding to the hoster takes place because we have a legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR in a fast, efficient and secure provision of our website by a provider of web hosting services.

4. Data processing when using the contact form and e-mail contact

4.1. You have the option of contacting us using the contact form provided on the website. If you use this option, the data entered in the input mask will be transmitted to us and stored (these data are e.g. name, telephone number, e-mail address, enquiry text). Mandatory information is marked with an asterisk. These are required in order to process your enquiry. Further information can be provided voluntarily via the contact form. In addition to the personal data that you enter directly into the contact form, the following metadata are also processed when the contact form is submitted:

- IP address of the user

- Date and time of the enquiry

4.2. Alternatively, it is possible to contact us via an e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation.

4.3. The legal basis for processing the data transmitted by contact form or email is contract performance and initiation (Art. 6(1)(b) GDPR) and, alternatively, our legitimate interest (Art. 6(1)(f) GDPR). 

4.4. The processing of personal data from the input screen or email is used solely to process the contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. These purposes also constitute the necessary legitimate interest in the processing of the data.

4.5. The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified and no longer has any legal effect. 

4.6. The additional personal data stored during the sending process (see above) will be deleted after a period of seven days at the latest.

5. Use of cookies and other tracking technologies

5.1. In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small data records that are stored on your browser's permanent storage medium and through which certain information flows to the organisation that sets the cookie. Cookies cannot execute programmes or transfer viruses to your computer. 

5.2. Most browsers accept cookies automatically. You can configure your browser so that no cookies are stored on your end device or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website to their full extent.

5.3. We use technically necessary cookies on our website in order to operate the website. These technically necessary cookies ensure that the website can be used by enabling basic functions. Without these cookies, the website would not function properly. The legal basis for this is Section 25 para. 2 no. 2 TDDDG and, secondarily, our legitimate interest (Art. 6 para. 1 (f) GDPR). Our legitimate interest lies in the provision of a functional website. 

We use the following technically necessary cookies:

Umami Analytics

6.1. Our website uses Umami, an open-source tool for web analysis provided by Umami Software, Inc., 1362 42nd Ave., San Francisco, CA, 94122 (USA). Umami enables us to understand how visitors use our website, for example, which pages are particularly popular or where usage problems occur. 

6.2. Umami generally collects information such as the pages visited and the respective access times, the previous website (referrer), the browser type used, the operating system and device type, as well as the geographical origin (e.g., country or region). This data is stored exclusively in anonymized form. The legal basis for processing this data is our legitimate interest pursuant to Art. 6 para. 1 (f) GDPR in analyzing user behavior in order to optimize our online offerings.

6.3. Umami does not use any cookies and does not store personal data such as IP addresses. This means that we are unable to draw any conclusions about individual users. 

7. Forwarding of data

7.1. Under certain circumstances (in addition to the cases already mentioned above), your personal data may be passed on for the above-mentioned purposes; in particular:

7.2. If it is necessary for the investigation or prosecution of unlawful or abusive incidents, personal data will be forwarded to our legal advisors, to authorities and courts and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behaviour. Data may also be passed on if this serves to enforce contractual regulations between us and our contractual and business partners

7.3. We are also legally obliged to provide information to certain public authorities on request. These are primarily law enforcement authorities, authorities that prosecute administrative offences subject to fines and the tax authorities.

7.4. If it is necessary for the processing of your enquiry or the conclusion or execution of a contractual or business relationship with you, as well as in the case of centralised or outsourced corporate functions, your data may be passed on to affiliated companies and service providers for the fulfilment of the above-mentioned purposes to companies and service providers affiliated with us.

7.5. As part of the further development of our business, the structure of our company may change by changing its legal form, founding, buying or selling subsidiaries, parts of the company or components. In such transactions, the information may be passed on together with the part of the company to be transferred. Whenever personal data is passed on to third parties to the extent described above, we ensure that this is done in accordance with this data protection notice and the relevant data protection law.

8. Recipients and transfer to third countries

8.1. Within our company, only those responsible for processing your data have access to it. We also engage external service providers under Art. 28 GDPR, such as IT and telecommunications providers, where we cannot perform services ourselves. These external service providers are primarily providers of IT services and telecommunication services.

8.2. Occasionally, in order to fulfil the purposes described in this data protection notice or to provide our services, we are required to transfer personal data to recipients in third countries, i.e. countries outside the European Union (EU) or the European Economic Area (EEA), for further processing by them. These recipients are usually contractually affiliated third-party companies or other co-operation partners as well as external service providers (e.g. IT service providers, logistics companies, business consultants and financial institutions). Such a transfer takes place exclusively for the fulfilment of contractual and business obligations and out of interest in effective business processes. The legal basis is Art. 6 para. 1 (b) or  (f) GDPR in conjunction with Art. 44 GDPR. We ensure an appropriate level of data protection. If available, we base the transfer on so-called adequacy decisions of the EU Commission, which certify that the third countries have a level of data protection that complies with the EU General Data Protection Regulation or EEA standard. If an adequacy decision is not available, we ensure that data protection is sufficiently guaranteed. This is possible via binding corporate rules, standard contractual clauses of the EU Commission for the protection of personal data pursuant to Art. 46 para. 1, 2 (c)GDPR (available at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D0915&locale-en), certificates or recognised codes of conduct. 

In the course of our business operations, it may, for example, be necessary to transfer personal data to affiliated companies in Japan. You can find the adequacy decision for Japan at the following address: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2019.076.01.0001.01.ENG&toc=OJ:L:2019:076:TOC . 

Please contact us if you would like more information on this.

9. Processing time

9.1. For the data processing carried out by us, we indicate in this data protection information how long your personal data will be stored by us and when it will be deleted or blocked. If no explicit storage period is specified, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. 

9.2. However, data may be stored beyond the specified period in the event of an (impending) legal dispute with you or other legal proceedings, or if storage is required by statutory provisions to which we are subject as the controller. If the storage period prescribed by the statutory provisions expires, your personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.

10. No obligation to provide personal data

In principle, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide us with the necessary data and/or do not give us your consent to process it.

11. No automated decision-making (including profiling)

The personal data collected from you will not be used for automated decision-making (including profiling).

12. Your rights as a data subject

12.1. You can assert your rights as a data subject with regard to your processed personal data at any time by contacting us using the contact details provided at the beginning. As the data subject, you have the right

12.2. to request information about your data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or the right to object, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

12.3. in accordance with Art. 16 GDPR, to immediately request the correction of incorrect data or the completion of your data stored by us;

12.4. in accordance with Art. 17 GDPR, to request the erasure of your data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

12.5. in accordance with Art. 18 GDPR, to demand the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful;

12.6. in accordance with Art. 20 GDPR, to receive your data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller ("data portability");

12.7. IN ACCORDANCE WITH ART. 21 GDPR TO OBJECT TO THE PROCESSING IF THE PROCESSING IS BASED ON ART. 6 PARA. 1 (E) GDPR (PROTECTION OF PUBLIC INTERESTS) OR ART. 6 PARA. 1 (F) GDPR (LEGITIMATE INTERESTS OF THE CONTROLLER). THIS IS PARTICULARLY THE CASE IF THE PROCESSING IS NOT NECESSARY FOR THE FULFILMENT OF A CONTRACT WITH YOU. IN THE EVENT OF YOUR JUSTIFIED OBJECTION, WE WILL EXAMINE THE SITUATION AND EITHER DISCONTINUE OR ADAPT THE DATA PROCESSING OR POINT OUT TO YOU OUR COMPELLING LEGITIMATE GROUNDS ON THE BASIS OF WHICH WE WILL CONTINUE THE PROCESSING;

12.8. in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given - i.e. your voluntary, informed and unequivocal declaration or other unambiguous confirmatory act that you consent to the processing of the personal data concerned for one or more specific purposes - at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;

12.9. In accordance with Art. 77 GDPR, you also have the right to lodge a complaint at any time with a supervisory authority at any time, in particular to a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that you have are of the opinion that the processing the you personal data concerning you violates data protection regulations. 

13. Up-to-dateness and amendment of this data protection notice

Due to the further development of our internal processes, offers and our website or due to changed legal or official requirements, it may become necessary to amend this data protection notice. You can access and print out the current data protection information on our website at any time.

Status Feb 2026