Privacy policy

This English version is provided for your convenience. Only the German version is legally binding.

Protecting your personal data is important to us. Below we inform you which personal data we process when you visit this website and when you contact us, for what purpose and on what legal basis this takes place, and what rights you have.

1. Controller

We have not appointed a data protection officer as there is no legal obligation to do so. If you have any questions about data protection, please use the contact details above.

2. Hosting

This website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. All data generated when visiting the website or via the enquiry form is processed on this provider's servers. This is based on our legitimate interest in a secure and reliable provision of our website (Art. 6 (1) (f) GDPR).

We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. Insofar as personal data is transferred to the USA, this is done on the basis of the EU standard contractual clauses (Art. 46 (2) (c) GDPR).

3. Visiting the website and server logs

Every time this website is accessed, your browser automatically transmits information to the server, which is stored in so-called server log files. In particular, these are:

• IP address of the requesting device,
• date and time of access,
• page or file accessed and amount of data transferred,
• notification whether the request was successful (HTTP status code),
• previously visited page (referrer), if transmitted by your browser,
• browser and operating system used.

This data is technically necessary to display the website to you and to ensure the stability and security of operation (Art. 6 (1) (f) GDPR). It is not combined with other data sources. The logs are kept by the host for a limited period only and then deleted.

4. Cookies, analytics and tracking

On the public pages of this website we do not use any cookies, advertising networks or third-party analytics or tracking services. No social media plugins, embedded maps or external fonts are loaded.

Audience measurement without cookies: To understand how our website is used and to improve our offer, we compile anonymous visitor statistics on our own server. We record the page visited, date and time, the time spent and scroll depth, simple actions on the page (e.g. a click on “Call” or viewing photos), the referring website, the device type (smartphone, tablet or computer) and the selected language. Your IP address is not stored: from the shortened IP address, the browser identifier and a random key that changes daily we form a check value that only allows page views to be linked to each other within the same day. The previous day’s random key is discarded, so no conclusions about your identity are possible. No cookies are set and no information is stored on or read from your device. The data is not passed on to third parties and is deleted after 13 months at the latest. The legal basis is our legitimate interest in analysing and improving our offer (Art. 6(1)(f) GDPR).

If your browser sends the “Do Not Track” or “Global Privacy Control” signal, we do not record any statistics data for you. This allows you to object to audience measurement at any time.

A technically necessary session cookie is set only for the password-protected administration area used by our staff after logging in. It serves solely for login purposes, contains no information about visitors to the website and is deleted when you log out or close the browser (Section 25 (2) No. 2 TDDDG, Art. 6 (1) (f) GDPR).

5. Enquiry, purchase and reservation forms

If you send us an enquiry using the form on a vehicle page or on the contact page, we process the details you provide (name, e-mail address and/or phone number, your message and, where applicable, the vehicle to which your enquiry relates).

If you bindingly buy or reserve a vehicle using the “Buy” or “Reserve” buttons, we additionally process your address as well as the purchase price and, where applicable, the deposit for the selected vehicle. We need this information to prepare the purchase or deposit agreement and to carry it out with you. If you then book an appointment via your personal order page, we also store the date and time of the appointment.

All details are stored in our database and also forwarded by e-mail to our mailbox so that we can contact you quickly.

So that we notice new enquiries immediately, even when on the move, our staff also receive a notification via the messaging service Telegram. In the process, the above details of your enquiry are transmitted to a Telegram bot used exclusively by us. The provider is Telegram FZ-LLC, based in Dubai (United Arab Emirates). The data may be transferred to a country outside the European Union for which there is no adequacy decision by the EU Commission; there is therefore a risk that authorities there may access the data and that your rights cannot be enforced to the same extent. The legal basis is our legitimate interest in processing your enquiry quickly (Art. 6 (1) (f) GDPR).

The legal basis is Art. 6 (1) (b) GDPR insofar as your details serve the conclusion or performance of a contract (e.g. purchase or reservation of a vehicle), otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR) and your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time with effect for the future.

To protect against abusive mass enquiries, we store an encrypted, irreversible identifier of your IP address for each enquiry for 30 days. We do not store your IP address itself.

We delete your enquiry as soon as it has been fully processed and no statutory retention obligations apply. If a purchase contract is concluded, the retention periods under commercial and tax law apply.

“Sell your vehicle” form

If you offer us your vehicle for sale using the “Sell your vehicle” form, we process your contact details (name, postcode, town, phone, e-mail), the vehicle details including the vehicle identification number, the photos of the vehicle and the photo or scan of the registration certificate (Zulassungsbescheinigung Teil I), which also contains details of the registered keeper. The purpose is to review your offer and prepare the sale (Art. 6 (1) (b) GDPR). When uploaded, photos are saved anew; embedded additional data such as location and camera data are removed in the process.

All details, photos and the registration certificate are stored in a protected area that is not publicly accessible. The registration certificate is used exclusively internally and is never published. Photos and vehicle data are only published once we add the vehicle to our range in agreement with you. We delete your request including all files as soon as it is no longer required for this purpose and no statutory retention obligations apply.

6. Contact by phone, e-mail or WhatsApp

If you contact us by phone or e-mail, we process your details to handle your request on the same legal bases as described under section 5.

If a WhatsApp button is shown on this website, it merely opens a link. A connection to WhatsApp is only established when you click on it. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. WhatsApp's privacy policy applies to the processing of your data by WhatsApp. Please only use this channel if you agree to this; alternatively, you can reach us at any time by phone, e-mail or via the enquiry form.

7. Links to map services

We link to Google Maps for route planning. No map is embedded on our website itself; data is only transferred to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) when you click the link and open Google's page. Google's privacy policy applies there.

8. Fonts

The font used on this website is stored locally on our server. No connection to third-party servers (e.g. Google Fonts) is established when the website is accessed.

9. Credit check

Our company regularly checks your creditworthiness when concluding contracts and, in certain cases where there is a legitimate interest, also for existing customers. For this purpose we work with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany, from which we receive the necessary data. To this end we transmit your name, address and date of birth to Creditreform Boniversum GmbH. The legal basis is Art. 6 (1) (b) and (f) GDPR.

Information pursuant to Art. 14 GDPR on the data processing carried out by Creditreform Boniversum GmbH can be found at www.boniversum.de.

10. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol and “https://” in your browser's address bar.

11. Your rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR),
• Right to erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to withdraw consent with effect for the future (Art. 7 (3) GDPR).

Right to object

Insofar as we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

12. Status of this policy

This privacy policy is dated September 2026. We update it when the website or the legal requirements change.