Privacy policy

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Auto Vermittler Pro
[Address / Anschrift]
Tel.: +49 15124487590
E-Mail: kontakt@auto-vermittler-pro.de

Data protection contact: kontakt@auto-vermittler-pro.de

2. Hosting and server log files

This website is hosted by the following provider: FlokiNET ehf., P.O. Box 4, 121 Reykjavík, Island (Server in den Niederlanden). When you visit the website, the web server automatically records information transmitted by your browser (IP address, date and time, page visited, referrer URL, browser type and operating system). This processing ensures secure and stable operation and is based on our legitimate interest (Art. 6 (1) (f) GDPR). The log files are deleted automatically after a short time unless they are needed to investigate a security incident. We have concluded a data processing agreement with the hosting provider (Art. 28 GDPR).

3. Cookies

We only use technically necessary cookies: a session cookie (for forms, protection against misuse and your customer account) and a cookie that stores your chosen language. These cookies are strictly necessary for the functions you request (§ 25 (2) no. 2 TDDDG); no consent is required for them. We do not use analytics, tracking or advertising cookies. Fonts are loaded locally from our server; there is no connection to Google Fonts or other third parties.

4. Contact and enquiry forms

When you contact us via a form (enquiry, reservation request, call-back request) or by e-mail, we process your details (name, e-mail address, phone number, message and, where applicable, the vehicle concerned) in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in replying). To protect against misuse, we also store the IP address. We delete enquiries that do not lead to a contract once they have been dealt with, at the latest after 24 months.

5. Vehicle purchase ("Sell your car")

In the sell-your-car form we process your contact details, information about the vehicle and the photos and documents you upload (e.g. registration certificate) in order to make you an offer (Art. 6 (1) (b) GDPR). Uploaded photos are re-encoded when saved, which removes metadata such as GPS location data. Photos and documents are stored securely outside the publicly accessible area and can only be viewed by our staff. Please black out any information on documents that we do not need. If no purchase takes place, we delete the data after 6 months at the latest.

6. Customer account, reservation and purchase

For reservations and purchases we process your name, address, e-mail address, phone number, order and payment data and the delivery-tracking data (Art. 6 (1) (b) GDPR). If you create a customer account, we additionally store your password, in encrypted (hashed) form only. We store your preferred language so that we can send you e-mails in that language.

7. Payment service providers

Depending on the payment method selected, we pass the data required to process the payment (name, e-mail address, amount, order number) to the respective payment service provider (Art. 6 (1) (b) GDPR):

• Credit card: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe may also process data in the USA; this is based on the EU-US Data Privacy Framework or EU standard contractual clauses.
• Cryptocurrency: NOWPayments. The payment is processed on the provider's page; the provider's privacy notice applies.
• Bank transfer: the payment is made via your bank; we receive the usual transfer details.

8. Sending e-mails

To send confirmation and service e-mails we use our e-mail server or the sending service Resend (Resend, Inc., USA) as a processor. The recipient address and the content of the e-mail are processed (Art. 6 (1) (b) GDPR). Where data is transferred to the USA, this is based on appropriate safeguards (Art. 44 et seq. GDPR, in particular EU standard contractual clauses).

9. Chat assistant

You can use a chat assistant on our website. Your messages are stored on our server to continue the conversation and improve our service. If the AI function is enabled, your messages are transmitted to Anthropic PBC (USA) to generate a reply; the transfer is based on appropriate safeguards (Art. 44 et seq. GDPR). The legal basis is Art. 6 (1) (b) or (f) GDPR. Please do not enter sensitive data in the chat. We delete chat histories after 6 months at the latest.

10. Contact via WhatsApp

If you contact us via WhatsApp, the message is processed by WhatsApp Ireland Limited (Meta), Merrion Road, Dublin 4, Ireland; data may also be transferred to the USA. We use your details (phone number, profile name, message content) only to handle your request (Art. 6(1)(b) or (f) GDPR). Using WhatsApp is voluntary; you can always reach us by phone, e-mail or the contact form instead.

11. Car photos and number plates

On the photos of our cars we cover the real number plates with a plate of our own. To find the plates automatically, the photos may be sent to the Plate Recognizer service (ParkPow / Plate Recognizer, USA); the transfer is based on appropriate safeguards (Art. 44 et seq. GDPR). The legal basis is our legitimate interest in publishing car photos without readable number plates (Art. 6(1)(f) GDPR).

12. Storage period

We only store personal data for as long as is necessary for the respective purpose. Due to statutory retention obligations (§ 147 AO, § 257 HGB), we keep contract and invoice data for up to ten years; it is then deleted.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR).

Right to object: where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular the authority of the German federal state in which we have our registered office.

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

Version: November 2026