PRIVACY POLICY

Data Privacy Statement

How do we handle personal data?

We take the protection and security of personal data very seriously. The personal data that we obtain from you in connection with this website will be processed in compliance with the relevant data protection legislation. In particular, when we process personal data we are bound by the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

We would like to strengthen the confidence of users in our website, which is why we are disclosing below how we handle personal data and informing you in detail about how your data will be processed and of your rights in accordance with Art. 12, 13, 14 and 21 GDPR. This website-specific data privacy statement explains what personal data will be collected when you visit our website and how we handle these data and items of information.

Who is responsible for the data processing, and who can you contact?

The controller for data processing within the meaning of the GDPR and other data protection regulations is named in the Legal Notice.

For what purposes do we process your personal data? What is the legal basis for doing so when you visit this website?

We process personal data for defined purposes which are explained in detail below for your information. The extent to which your data will actually be processed, and how this will be done, depends especially on which services, functionalities and features of our website you make use of in the individual case. In particular, we process data so that

  • you can access and visit our website and we can protect our website and other systems from security risks;
  • you can get in touch with us (using the contact form or via email);
  • we can optimise our website content and make it more user-friendly and responsive to needs.

Any processing of your personal data other than as set out in this data privacy statement will only be performed in exceptional cases and where we are expressly entitled or required to do so by a legal provision or you have given your explicit consent to the data processing. We will inform you accordingly of any changes in these purposes, having regard for statutory requirements.

(1) Registration on our website

To order from our website and access information you need to register. The following data are collected as part of the registration process: forename and surname, company, email address, user name, password (encrypted) and preferred display language (English).

When you register on our website, the technical access data sent by your browser will also be stored automatically, i.e. the name of your internet service provider, the page from which you accessed us, the data and time of your visit and details identifying the browser/operating system used. The web server also needs to store your IP address, but not in a way that enables you personally to be identified. The above access data will be stored on our web server in what are known as server log files. We need to do so for technical reasons in order to provide a functioning website and to ensure the security of the system.

If you register on our website as a user in order to find out about vehicles and automobilia articles, the access data and log files will be stored on the basis of point (b) of Art. 6(1) GDPR (legal basis). In addition, point (f) of this Art. 6(1) GDPR serves as the legal basis for the temporary storage of the access data and log files. Our legitimate interest in doing so consists in being able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.

The data collected through your registration and use of our website will only be kept for the period for which these data are required in order to achieve these purposes. Your IP address will be deleted from our web server at regular intervals.

(2) Contact form/enquiries

We will collect and store personal data if you enter them on the contact form provided for that purpose on our website and send them to us, or if you contact us in any other way (e.g. by email). You can also send us email requests concerning the goods and services we offer. It is in principle up to you to decide whether and what information to give us when making such contact enquiries. If you contact us by email, we will save the data you that you provide in that regard. If you use the contact form on our website, we will not collect any further data. In addition to the vehicle/automobilia articles to which your enquiry relates, the contact form also contains a user-defined text field for you to enter your own message/question. This voluntary information will enable us to better assign your enquiry and respond to it.

If the contact form on our website is used, the following technical access data will also be stored when you send the form: the date and time the your enquiry was sent, details identifying the browser/operating system used and your IP address, but not in a way that enables you personally to be identified. We will use the personal data given to us on the basis of the contact form or an email enquiry solely for the purpose of dealing with the contact request or the enquiry.

If you get in touch with us or contact us in advance for information about our merchandise, the data and information you provide will be processed for the purposes of dealing with and answering your contact enquiry in accordance with point (b) of Art. 6(1) GDPR (legal basis).The technical access data recorded during the transmission process will likewise be stored on this legal basis for the purpose of the technical provision of the contact option and in order to protect our legitimate interests in maintaining the security of the system (point (f) of Art. 6(1) GDPR (legal basis)).

We will store the personal data collected in connection with your initial contact for the purposes and the duration of your enquiry. Subject to statutory retention periods, these data will be erased once your enquiry has been finally dealt with. The content of your enquiry may be stored in anonymised form where necessary. The technical access data stored in this regard will only be kept for the period for which these data are needed for technical reasons, in particular for the functioning provision of the contact options and to ensure the security of the system.

(3) Social media links / plugins

Links to social media services such as Instagram and YouTube are embedded in this website. When you click on the relevant links, you will be directed to the page of the particular provider. Please note that this will not entail the processing of any of your data by us and that we are not responsible for the content of internet pages to which we provide links. For the case that you follow a link to the social media services, please consider the respective data usage policies and data protection information of these providers.

(4) Newsletter

Our website provides an option to subscribe to a newsletter free of charge. If you apply to receive our newsletter, the email address you provide will be used in order to send the newsletter and will be stored on our servers.

To enable the processing of these data, your consent to receive our newsletter will be obtained during the registration process and reference will be made to this data privacy statement. Your data will be used solely for the purpose of sending the newsletter.

The data will be processed on the basis of your consent and point (a) of Art. 6(1) GDPR (legal basis). You can withdraw this consent at any time and unsubscribe from the newsletter. Withdrawal does not affect the lawfulness of the data processing operations that have already occurred.

We will store the data that you have given us for the purpose of receiving the newsletter until you unsubscribe from the newsletter. Once you have unsubscribed from the newsletter, the data will be erased from our servers. This does not affect data that we have stored for other purposes.

How do we protect your data?

We take precautions in order to guarantee the security of your personal data. We also protect our website and other systems through appropriate technical and organisational measures. In particular, your data will be protected from loss, destruction, distortion, manipulation and modification by unauthorised persons and from unauthorised access and unauthorised disclosure or dissemination. This website uses SSL encryption to protect the transmission of confidential content that you send to us. You can recognise an encrypted connection by the fact that the address bar of the browser changes from http:// to https:// and a padlock symbol appears in the browser bar. If SSL encryption is enabled, third parties are unable to read the data that you send us.

What regulations apply for links?

Some sections of our website contain links to the websites of third-party providers. These websites are subject to their own data privacy policies. We are not responsible for their operation or how they handled data. If you send information to or via such sites of third-party providers, you should check the data privacy policies of these sites before giving them information that will allow you personally to be identified.

What are the regulations for the erasure of my personal data?

Subject to statutory requirements, the stored personal data will be erased if you withdraw consent previously given to their storage, if they are no longer required in order to achieve the purpose of storage or if their storage is not allowed on other legal grounds.

Your rights

As a data subject, you have a number of rights in relation to your personal data and how we process these data.

Right of access

If you have questions and comments about the collection, processing and use of your personal data, you can contact us at the address given above. We will on request be happy to tell you whether and what personal data we hold concerning you.

Right of rectification

You also have the right to demand that we rectify incorrect personal data concerning you.

Right to withdraw consent

You have the right at any time to withdraw consents previously given by sending a corresponding message to us. Please note that your withdrawal of consent does not affect the lawfulness of the processing performed on the basis of consent until withdrawal.

Subject to statutory requirements, you have the right to demand that we erase the personal data concerning you, such as if the legal basis for processing no longer exists. In certain cases you can also demand that we restrict the processing of data, such as for the duration of a review, if you dispute the correctness of the data or if data are not allowed to be erased.

Right to object

You have the right to lodge an objection at any time to the processing of personal data concerning you if we claim that we are carrying out the processing on the basis of legitimate interests. On receipt of your objection, we will stop processing your personal data unless there are compelling legitimate grounds for processing or the data processing serves the establishment, exercise or defence of legal claims.

Right to data portability

Subject to statutory requirements, you also have the right to demand that we issue such personal data that you have given us in a commonly used and machine-readable format.

Right to lodge a complaint

If you believe that there are grounds for complaint in the processing of your personal data, you can contact the supervisory authority responsible for us, which is the Hesse Data Protection Officer (Hessische Datenschutzbeauftragter), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, or any other competent supervisory authority.

Is there a duty to provide data?

To enable us to make our website available to you and allow use of the corresponding services/functionalities (such as the contact form, etc.), we need you to provide us with the personal data required for that purpose. Without these data it will not be possible, or only possible to a limited extent, to access our website content while using the corresponding services/functionality.

Will your data be used for automated decision-making or profiling?

We do not use any automated decision-making processes on our website or in the associated data processing operations.

Can this data privacy statement change?

The further development of the internet and of our website may have an impact on our data privacy statement. We reserve the right to amend this website-specific data privacy statement at any time in the future in order to meet current legal requirements or to reflect expansions or changes to our website. Your visit is governed by the current version of this data privacy statement as amended at any given time. This can be accessed from any subpage using the "Data privacy statement" link.

As of August 2022