Privacy Policy

Information on the processing of personal data under Art. 13, 14 GDPR. Last updated: [insert date before going live]

Internal note (remove before going live): this is a structural template. Every placeholder must be reconciled with the actual circumstances (hosting, tracking, backend) and the final text reviewed by legal counsel. Sections covering services that are not in use must be removed — sections covering services that are in use must not be missing.

1. Controller

Autohaus TTP GmbH
Schwabenstraße 10, 72535 Heroldstatt, Germany
Phone: 07389 75 832-0
Email: [ankauf@sportwagen-ankauf.de — confirm]

2. Hosting

This website is hosted by [hosting provider, registered office]. The provider processes visitors' connection data (server log files) on our behalf. A data processing agreement under Art. 28 GDPR is in place with the provider. [conclude the DPA and enter the provider]

3. Server log files

When you access the website, information is automatically collected (IP address, date and time, page accessed, browser type, operating system, referrer URL). This processing serves to ensure smooth operation and improve security on the basis of Art. 6(1)(f) GDPR. Log files are deleted after [e.g. 7–14 days].

4. Contact (form, phone, email, WhatsApp)

When you send us an inquiry about buying your vehicle — via the form, by phone, by email or via WhatsApp — we process the data you provide (in particular phone number, optionally email address, vehicle details) solely to process your inquiry and to carry out pre-contractual measures (Art. 6(1)(b) GDPR).

Your data is deleted as soon as it is no longer required for processing and no statutory retention obligations (in particular commercial and tax-law periods where a contract is concluded) apply.

WhatsApp: when you contact us via WhatsApp, data is processed by WhatsApp Ireland Ltd. and/or Meta; this may involve a transfer to third countries (the USA). Using WhatsApp is voluntary — you can always reach us instead by phone or via the form. [have this wording reviewed by legal counsel; add WhatsApp Business privacy notices if applicable]

5. Web analytics and advertising (Google Ads conversion tracking)

We use Google Ads with conversion tracking. Cookies and similar technologies are only set after your consent via our consent banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future. Provider: Google Ireland Ltd.; data may be transferred to the USA (basis: EU-US Data Privacy Framework / standard contractual clauses). [set up the consent management platform before activating tracking!]

6. Fonts

This website uses fonts that are stored locally on our server. No connection is made to Google's servers.

7. AI assistant

[Only include once live] This website provides an AI-powered assistant. Inputs are processed to answer your questions (Art. 6(1)(b) or (f) GDPR). Processing takes place on servers in the EU by [provider], with whom a data processing agreement is in place. The assistant does not issue binding offers. Please do not enter sensitive data.

8. Your rights

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
  • Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

An informal message to the contact details above is sufficient to exercise your rights.

9. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

10. Data security

This website uses TLS encryption. Data you submit via the form is transmitted in encrypted form.