Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other national data protection laws and regulations is:

2. Data Collection on Our Website

We only collect personal data to the extent necessary to provide a functional website as well as our content and services. Personal data is all information relating to an identified or identifiable natural person.

Which data is collected?

• Server log data: Browser type, operating system, referrer URL, IP address (anonymised), access time, requested page
• Contact form: First name, last name, email address, phone number, subject, message text
• Profile and contract data: In the case of purchase, leasing or trade-in, further personal data may be required for contract processing

Legal bases

Insofar as we obtain the consent of the data subject for processing personal data (e.g. for contact inquiries), Art. 6(1)(a) GDPR serves as the legal basis. For contract processing, Art. 6(1)(b) GDPR serves as the basis, for legal obligations Art. 6(1)(c) GDPR, and for legitimate interests Art. 6(1)(f) GDPR.

3. Cookies

This website uses cookies. Cookies are small text files that are stored on your device (computer, tablet, smartphone, etc.) and enable an analysis of your use of the website. They do not cause any damage to your device and do not contain viruses or other malicious programs.

Types of Cookies

• Necessary Cookies (technically required): These cookies ensure the basic functionality of the website (e.g. session handling, cookie consent). Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
• Statistics / Analytics Cookies: These help us understand and improve the use of the website (e.g. visitor numbers, click behaviour). These are only set with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.
• Marketing Cookies: These are used to display personalised advertising on third-party sites. These are only set with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.

You can change your cookie settings at any time via the "Cookie Settings" button in the footer or via your browser. Deactivating cookies may limit the functionality of this website.

4. Server Log Files

Every time you access our website, the hoster automatically stores information in server log files. This data cannot be assigned to specific individuals and contains in particular:

• Browser type and browser version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer (anonymised IP address)
• Time of the server request
• Name and URL of the retrieved file

Storage takes place for technical reasons to ensure trouble-free operation and system security. This data is not merged with other data sources. IP addresses are anonymised or deleted after no later than 7 days. The legal basis for temporary storage is Art. 6(1)(f) GDPR.

5. Contact Form

If you send us inquiries via the contact form, your details from the inquiry form including the contact data you provide there will be stored with us for the purpose of processing the inquiry and in case of follow-up questions.

We will not pass on this data without your consent. The processing of the data entered in the contact form is based on your voluntarily given consent (Art. 6(1)(a) GDPR) or for the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR). You can revoke this consent at any time. The data remains stored for the duration of processing your inquiry and to fulfil statutory retention obligations.

6. SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Your Rights as a Data Subject

As a data subject, you have the following rights vis-à-vis the controller in accordance with the GDPR:

Right of Access (Art. 15 GDPR)

You can request confirmation as to whether we process personal data relating to you and, if so, request access to this data and a copy of the data.

Right to Rectification (Art. 16 GDPR)

You can request the rectification of inaccurate data and the completion of incomplete personal data without delay.

Right to Erasure (Art. 17 GDPR)

You can request the immediate erasure of your personal data, provided that statutory retention obligations do not conflict with this.

Right to Restriction (Art. 18 GDPR)

You can request the restriction of the processing of your personal data as long as the accuracy of your data is contested or there is a legitimate interest in not erasing it.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request its transmission to another controller.

Right to Object (Art. 21 GDPR)

For reasons arising from your particular situation, you may object at any time to the processing of your personal data. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

If you believe that the processing of your personal data by us is not lawful, you have the right to lodge a complaint with a data protection supervisory authority. As a rule, the supervisory authority of the German federal state of NRW is responsible.

8. Retention Period

As a general rule, we only store your personal data for as long as is necessary to fulfil the purposes for which it was collected, or insofar as statutory retention obligations (e.g. under HGB, AO, GoBD) exist.

• Contact inquiries: Storage for the duration of processing plus 3 years to defend against claims
• Server log files: Maximum 7 days, then anonymised
• Contract data: 10 years after the end of the contract (statutory retention obligations under AO)
• Consent data: Until consent is revoked

9. Right to Object to Advertising

Insofar as we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time to the processing for reasons arising from your particular situation. This also applies to profiling based on this provision.

If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Revocation of Consent

You have the right to revoke consent once given for the processing of personal data at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent shall remain unaffected by the revocation.

10. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy so that it always meets current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services or tools.