Privacy policy
The following information is generated from site settings for transparency. Have legally binding texts reviewed by counsel where needed, and complete register details under Settings → Legal.
1. Controller
The controller responsible for data processing on this website is:
2. Privacy contact
For privacy-related questions please contact:
3. Hosting and server log files
When you visit this website, the hosting provider automatically stores information in server log files (e.g. browser type/version, operating system, referrer URL, hostname, time of the server request and IP address). Processing is based on Art. 6(1)(f) GDPR to provide and secure the website.
4. Cookies and consent
We use cookies and similar technologies. Strictly necessary cookies are required to operate the site. Optional categories (functional, statistics, marketing) are set only after your consent via our cookie banner. You can change your choice at any time via “Cookie settings” in the footer or utility dock. Legal basis for optional cookies is Art. 6(1)(a) GDPR; for necessary cookies Art. 6(1)(f) GDPR.
5. Contact and enquiry forms
If you contact us via forms (contact, vehicle enquiry), we store the data you submit to handle your request and follow-up questions. Legal basis is Art. 6(1)(b) GDPR (pre-contractual steps / contract) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication). Data is deleted when no longer needed for the purpose, unless statutory retention applies.
6. User accounts (internal portal)
Public self-registration is not offered. Internal staff accounts are created by us. We process master data for those accounts to provide the internal portal and administration (Art. 6(1)(b) or (f) GDPR). Authorised users can export data or request account deletion under “Portal → Data privacy rights”.
7. Vehicle data and mobile.de
Vehicle listings may include technical data and images. Where a mobile.de connection is used, listing data may be exchanged with the platform operator. Legal basis is Art. 6(1)(b) or (f) GDPR. See the third-party privacy policies for their processing.
8. Recipients
Data may be shared with technical processors (hosting, email delivery, captcha providers, analytics if enabled and consented) and with authorities where legally required.
9. Third-country transfers
Where we use processors outside the EEA, this only happens with appropriate safeguards (e.g. adequacy decision or standard contractual clauses) or your consent.
10. Retention
We store personal data only as long as needed for the respective purposes or as required by law (e.g. commercial and tax retention). Consent records are documented according to our retention policy.
11. Your rights
You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on Art. 6(1)(f) GDPR. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.
12. Obligation to provide data
Providing personal data may be required to use forms or an account. Without the necessary data we may be unable to process your request.
13. Automated decisions
No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.
14. Changes
We may update this privacy policy to keep it aligned with legal requirements or changes to our services.