Privacy Policy

Information on the processing of personal data under Art. 13 and 14 GDPR. Last updated: 28 August 2026.

1. Controller

Autohaus TTP GmbH
Schwabenstraße 10, 72535 Heroldstatt, Germany
Phone: 07389 75 832-0
Email: verkauf@autohaus-ttp.de

2. Hosting

This website and its enquiry backend are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes connection and server data required for operation as a processor. The legal basis for secure and reliable website operation is Art. 6(1)(f) GDPR.

3. Server log files

When the website is accessed, technically necessary information is processed, in particular the date and time, page requested, browser type, operating system and referrer URL. STRATO anonymises host names or IP addresses in the access logs it provides; these logs are available for the previous six weeks. Processing serves operational security, error analysis and abuse prevention (Art. 6(1)(f) GDPR).

4. Contact and vehicle enquiries

If you contact us via the form, by phone, by email or through WhatsApp, we process the contact and vehicle data you provide and any vehicle photos you upload in order to handle your enquiry and take pre-contractual steps (Art. 6(1)(b) GDPR).

The enquiry form saves a draft if you have entered a phone number or email address and then leave the page or move it to the background. This enables us to process a vehicle enquiry that was started but not fully submitted. The draft may also contain your name, brand and model if you have already entered them. Vehicle images that have only been selected locally are not transferred at this stage. The legal basis is processing your enquiry initiated by you under Art. 6(1)(b) GDPR.

Data is deleted when it is no longer required to handle the enquiry and no statutory retention obligation or legitimate reason for continued storage applies.

5. Protection against automated enquiries (Cloudflare Turnstile)

We use Cloudflare Turnstile to protect the form from spam and automated abuse. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Turnstile processes technical signals required for the security check, including IP address, TLS fingerprint, user-agent, sitekey and request origin. According to Cloudflare, Turnstile does not read form content. The legal basis is our legitimate interest in securely operating the form (Art. 6(1)(f) GDPR). More information is available in the Turnstile Privacy Addendum.

6. Google Ads conversion tracking and consent

Google Ads conversion tracking is loaded only if you explicitly select “Accept analytics” in the privacy settings. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Once you have consented, Google may process information about the page view and a successful form enquiry; data may be transferred to Google LLC in the USA. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG).

Your selection is stored in your browser's local storage under the key ttp-analytics-consent-v1. You can change your choice at any time via “Privacy settings” in the footer. The lawfulness of processing carried out before withdrawal remains unaffected.

7. Fonts

The fonts used by this website are hosted locally on our server. Loading them does not establish a connection to Google Fonts or any other font provider.

8. Your rights

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to the contact details above is sufficient to exercise your rights.

9. Right to complain

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

10. Data security

This website uses TLS encryption. Data you submit via the form is transmitted in encrypted form. We use technical and organisational measures to protect data against unauthorised access, loss and alteration.