Autowelt GmbHNiederlauer · Bad Neustadt an der Saale
+49 9771 6330588 Mobile +49 170 243 88 07
08:00–18:00 Mon–Fri
07:00–14:00 Sat
DEEN
Call now

Legal

Privacy policy

Note: This English version is provided for orientation only. The German version is legally binding.

We operate our websites according to the principles set out below:
We undertake to comply with the statutory data protection provisions and endeavour to always observe the principles of data avoidance and data minimisation.

1. Name and address of the controller and of the data protection officer

a) The controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States of the European Union and other data protection provisions is:
Autowelt GmbH
Industriestraße 1
97618 Niederlauer
Germany
Tel.: 09771 / 6330588
Fax: 09771 / 6869 - 05
Email: autowelt12@t-online.de
Website: https://www.autowelt1.de/en

b) The data protection officer

You can reach the controller's data protection officer as follows:
Sergej Beitel jun., Industriestraße 1, 97618 Niederlauer

2. Definitions

We have designed our privacy policy according to the principles of clarity and transparency. Should there nevertheless be any uncertainty about the use of various terms, the corresponding definitions can be viewed here.

3. Legal basis for the processing of data

a) Processing of personal data under the GDPR

We process your personal data, such as your first and last name, your email address and IP address, etc., only if there is a legal basis for doing so. Under the General Data Protection Regulation, the following provisions in particular come into consideration:

  • Art. 6(1) sentence 1 lit. a GDPR: the data subject has given consent to the processing of personal data concerning them for one or more specific purposes.
  • Art. 6(1) sentence 1 lit. b GDPR: the processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
  • Art. 6(1) sentence 1 lit. c GDPR: the processing is necessary for compliance with a legal obligation to which the controller is subject
  • Art. 6(1) sentence 1 lit. d GDPR: the processing is necessary in order to protect the vital interests of the data subject or of another natural person
  • Art. 6(1) sentence 1 lit. e GDPR: the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • Art. 6(1) sentence 1 lit. f GDPR: the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

However, at the relevant points in this privacy policy we will point out again the legal basis on which your personal data is processed.

b) Consent of the persons with parental authority under Art. 8(1) sentence 2 alt. 2 GDPR

A person with parental authority must consent to all data processing on this website for which the consent of a minor who has not yet reached the age of 16 is required.
You will find information on the individual data processing operations, their purposes and the categories of data concerned for which the data subject's consent is required in the privacy policy.

You can withdraw your consent at any time by sending a withdrawal declaration in text form to the controller's contact details. Processing up to the point of withdrawal remains lawful.

c) Processing of information under § 25(1) TDDDG (formerly TTDSG)

We also process information pursuant to § 25(1) TDDDG by storing information on your terminal equipment or accessing information already stored on your terminal equipment. This may be both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any equipment directly or indirectly connected to the interface of a public telecommunications network for sending, processing or receiving messages, § 2(2) no. 6 TDDDG.

We generally process this information on the basis of your consent, § 25(1) TDDDG.

Where an exception under § 25(2) nos. 1 and 2 TDDDG applies, we do not need consent. Such an exception applies if we access or store the information solely to transmit a message over a public telecommunications network, or if this is strictly necessary for us to provide a telemedia service that you have expressly requested. You can withdraw your consent at any time.

We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. Disclosure of personal data

The disclosure of personal data is also processing within the meaning of the preceding clause 3. At this point, however, we would like to inform you separately about disclosure to third parties. The protection of your personal data is very important to us. For this reason we are particularly careful when it comes to passing your data on to third parties.

Disclosure to third parties therefore only takes place if there is a legal basis for the processing. For example, we pass personal data on to persons or companies that act for us as processors under Art. 28 GDPR. A processor is anyone who processes personal data on our behalf – in particular in a relationship of instruction and control with us

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors to oblige them to comply with data protection regulations and thus to give your data comprehensive protection.

5. Storage period and deletion

Your personal data will be deleted by us insofar as it is no longer necessary for the purposes for which it was collected or otherwise processed, and the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

6. SSL / TLS encryption

For reasons of security and to protect the transmission of confidential content, such as the inquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Cookies

We use cookies on our website. Cookies are small data packets that your browser creates automatically and that are stored on your device when you visit our website. These cookies serve to store information in connection with the device in use.
When using cookies, a distinction is made between technically necessary cookies and “other” cookies. Cookies are technically necessary if they are strictly required to provide an information society service that you have expressly requested.

a) Technically necessary cookies
To make using our offering more pleasant for you, we use technically necessary cookies; these may be so-called session cookies (e.g. language and font selection, shopping cart, etc.), consent cookies, cookies to ensure server stability and security, or similar. The legal basis for the cookies is Art. 6(1) sentence 1 lit. f) GDPR, our legitimate interest in the error-free operation of the website and in providing you with our services in an optimised way.
b) Other cookies
Other cookies include cookies for statistical, analytics, marketing and retargeting purposes.
We set these cookies on the basis of your consent under Art. 6(1) sentence 1 lit. a) GDPR.

You can withdraw your consent to the use of cookies at any time.
We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To do so, you can either edit your cookie settings on our website, deactivate the use of cookies in your browser settings (which may also restrict the functionality of the online offering), or set an opt-out for the respective service in individual cases.

For the respective services within the privacy policy, we point out the legal basis on which this data is processed.

8. Consent management (cookie banner)

To obtain and manage your consents we use the open-source tool “tarteaucitron.js”. It is delivered from our own server; no connection to an external provider is established. The tool stores your selection in a technically necessary cookie (consent cookie) so that we can take your decision into account. The legal basis is Art. 6(1) sentence 1 lit. f GDPR, § 25(2) no. 2 TDDDG. You can change your selection at any time via the cookie settings.

9. Collection and storage of personal data and the nature and purpose of their use

a) External hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. For this reason, all personal data collected on our website is stored on the servers of our hosting provider, unless an external third-party service is embedded. This may include the IP address, your email address, communication data or similar. Which specific personal data this involves is explained below for the individual functions and services we describe. If we use an external third-party service, this is made clear in the description of the respective service or tool.

The hosting provider processes your data only on our instructions and only to the extent necessary to provide the services on the website. The hosting provider does not process the data for its own purposes. We have concluded a data processing agreement with it.

b) When visiting the website

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is stored temporarily in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the file accessed

We process the data mentioned for the following purposes:

• Evaluation of system security and stability

Data that allow conclusions to be drawn about you, such as the IP address, are deleted after 7 days at the latest. If we store the data beyond this period, it is pseudonymised so that it can no longer be attributed to you.
The legal basis for the data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes of data collection listed above. We never use the collected data for the purpose of drawing conclusions about you.

c) Contact by telephone and email

If you call us or write an email, we process the data you provide (for example name, telephone number, email address, vehicle data and your request) in order to handle your inquiry. The legal basis is Art. 6(1) sentence 1 lit. b GDPR, insofar as the inquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1) sentence 1 lit. f GDPR (legitimate interest in answering inquiries). Inquiries that do not lead to a contract are deleted by us no later than three months after the last communication, unless statutory retention obligations apply.

Phone number display for ads: If you reach our website through one of our ads, the address you open contains a campaign identifier (parameter “utm_id”). In that case we show you a second phone number of our workshop instead of our main number; it leads to the same line, so that we can evaluate the success of our advertising. The identifier is only appended to the internal links of the website so that you see the same number on every page; it is not stored in cookies or in your browser’s storage, and no data is transmitted to third parties for this purpose. When you call, we process the caller’s phone number as described under this point. The legal basis is our legitimate interest in measuring the success of our advertising (Art. 6(1)(1)(f) GDPR).

d) Inquiry forms (contact, vehicle purchase, tyre service, breakdown assistance)

On our website we offer forms with which you can prepare a message, for example for a repair inquiry, the sale of a vehicle or a tyre breakdown. What you enter remains exclusively in your browser. We only receive it when you yourself send the prepared message via WhatsApp or your email program. The forms do not transmit any data to our server and do not store anything. For the processing of the message after it has been sent, sections c) and e) apply.

e) WhatsApp

You can contact us via a link to WhatsApp and send texts, photos and location details. WhatsApp is operated by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, and belongs to Meta. When you click the link you leave our website; WhatsApp's privacy policy applies. Your messages are end-to-end encrypted in transit, but WhatsApp processes metadata (for example telephone number, time). We process the messages that reach us on the basis of Art. 6(1) sentence 1 lit. b and f GDPR in order to handle your inquiry. Please do not send us any sensitive data via WhatsApp that is not required for your inquiry. We delete messages and photos as soon as they are no longer needed for the purpose, at the latest after the periods stated in section c).

Note on third-country transfer and the business account: we use a WhatsApp Business account for communication. WhatsApp may transmit data to Meta Platforms, Inc. in the USA. Where this happens, the transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework or on standard data protection clauses (Art. 45, 46 GDPR).

f) Location detection in the browser

On individual pages (for example Mobile truck breakdown service) you can use a button to determine your location so that it can be included in the message. The location is requested only after your click and your approval in the browser and is written into the input field. It is not transmitted to us as long as you do not send the message yourself. The legal basis is your consent (Art. 6(1) sentence 1 lit. a GDPR, § 25(1) TDDDG), which you can withdraw at any time in the browser settings.

g) Lena, our AI telephone assistant

At the number given on the website you reach “Lena”, an AI-supported telephone assistant (artificial intelligence, not a person). Lena takes calls, answers questions about our services, records your request and passes urgent cases on to our on-call service. In doing so we process your telephone number, the content of the conversation (to record your request), the time and duration of the call and the details you provide (for example name, location, vehicle, problem). The legal basis is Art. 6(1) sentence 1 lit. b GDPR (handling your inquiry) and lit. f GDPR (legitimate interest in being reachable outside opening hours). Lena does not make decisions with legal effect on a solely automated basis.

Service provider used: we use the Placetel service for telephony. Recording and transcription: the call is not recorded or transcribed. At the start of the call, you are informed that you are speaking to an AI.

h) Google Maps (two-click solution)

On the “Directions” page we offer a map view from Google Maps. The map is only loaded when you click “Load map”. Before that, no connection to Google is made. With the click, a connection is established to Google's servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); among other things, your IP address, browser information, the page accessed and, where applicable, cookies are transmitted to Google, including to the USA. We have no influence on further processing by Google. You can find Google's privacy policy at policies.google.com/privacy. The legal basis is your consent by clicking (Art. 6(1) sentence 1 lit. a GDPR, § 25(1) TDDDG). You can withdraw your consent by leaving the page or by deleting cookies in your browser. Alternatively, you can open the location in a new window using the “Plan your route” or “Open the location directly in Google Maps” link; Google's privacy policy then applies.

i) Google Tag Manager

On our website we use Google Tag Manager from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager is an administration and management tool in which other tracking and/or statistics tools can be managed and deployed centrally.

When you visit our website and give your consent under Art. 6(1) sentence 1 lit. a) GDPR, Google Tag Manager collects and processes your IP address, which may also be transmitted to the USA. Google Tag Manager itself, however, does not create a user profile or any analyses.

The Google privacy policy is publicly available. [https://www.google.com/policies/privacy/?hl=en]

j) Applications

If you apply to us, we process your application data (for example name, contact details, CV, certificates, cover letter and information from interviews) in order to carry out the application process and decide on filling the position. The legal basis is § 26(1) BDSG in conjunction with Art. 88 GDPR and Art. 6(1) sentence 1 lit. b GDPR (measures prior to entering into an employment relationship). Applications reach us by email or post; when sent by email there is a risk that third parties can read the content. Please do not send us any information that is not required for the application, in particular no data under Art. 9 GDPR. After the process is complete we delete the documents after six months, unless you have consented to longer storage (for example for later vacancies) or we hire you. If you are hired, we transfer the required data to the personnel file.

10. Analytics and tracking tools

On our website we use the analytics and tracking tools listed below. They serve to ensure the continuous optimisation of our website and to design it according to demand.
We use these tools on the basis of the consent you have given under Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent at any time by changing the cookie settings. Processing up to the point of withdrawal remains lawful.
The respective data processing purposes and data categories can be found in the corresponding tools. Please note that we have no influence on whether and to what extent the service providers carry out further data processing.
Google Analytics

On our website we use Google Analytics, a web analytics service of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”).
In this context, Google Analytics uses cookies (see clause 7). The information generated by the cookie about your use of this website, such as

  • Name and version of the browser used
  • Operating system of your computer
  • Website from which access is made (referrer URL)
  • IP address of the requesting computer
  • Time of the server request

are usually transmitted to a Google server in the USA and stored there.
Your IP address is automatically anonymised by Google before it is recorded via EU domains and servers. Your IP address is therefore not logged or stored.

On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity and to provide us with further services associated with website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
We have concluded a data processing agreement with Google.
Please use the overview of data protection at Google. [https://support.google.com/analytics/answer/6004245]

Google Ads (conversion measurement)

We run ads via Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). With your consent, we measure whether a click on an ad led to a contact, for example a phone call, a WhatsApp message or an email (conversion measurement). For this purpose, Google's conversion linker is loaded via Google Tag Manager; Google Ads conversion tags may be added.

If you reach our website through an ad, the conversion linker stores the ad click identifier in a cookie in your browser (for example _gcl_aw, _gcl_au or _gcl_gb). When you contact us, this identifier, the type of action (for example a click on the phone number) and technical data such as your IP address and browser information may be transmitted to Google, including to the USA. We do not transmit the content of your messages or your entries in the forms.

The legal basis is your consent via the category "Marketing" in the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without this consent, the conversion linker and Google Ads measurement are not executed. You can withdraw your consent at any time via the cookie settings; processing carried out until withdrawal remains lawful. The transfer to the USA is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework or on standard data protection clauses (Art. 45, 46 GDPR). You can find further information from Google at policies.google.com/technologies/ads.

11. Embedding of images, audio and video

YouTube (two-click solution)

On individual pages we show videos from YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We embed the videos via the domain youtube-nocookie.com (extended privacy mode), and only after you click “Load and play video”. Before that, no connection to YouTube or Google is made; the preview images are stored on our server.

With the click, a connection is established to YouTube's servers. Among other things, your IP address and the page accessed are transmitted, possibly also to the USA. If your browser is logged in to Google, YouTube can assign your browsing behaviour to your profile; log out beforehand to prevent this. YouTube may set cookies. Further information: policies.google.com/privacy.

The legal basis is your consent by clicking (Art. 6(1) sentence 1 lit. a GDPR, § 25(1) TDDDG). Alternatively, you can open the video using the “Watch the video directly on YouTube” link.

12. Rights of the data subject

You have the following rights:

a) Information

Under Art. 15 GDPR you have the right to request information about your personal data processed by us. This right of access includes information about

  • the purposes of processing
  • the categories of personal data
  • the recipients or categories of recipients to whom your data has been or will be disclosed
  • the planned storage period or at least the criteria for determining the storage period
  • the existence of a right to rectification, erasure, restriction of processing or objection
  • the existence of a right to lodge a complaint with a supervisory authority
  • the origin of your personal data, if it was not collected from us
  • the existence of automated decision-making including profiling and, where applicable, meaningful information about its details

b) Rectification

Under Art. 16 GDPR you have the right to have inaccurate or incomplete personal data stored by us rectified without undue delay.
c) Erasure
Under Art. 17 GDPR you have the right to request the immediate erasure of your personal data from us, insofar as further processing is not necessary for one of the following reasons:

  • the personal data is still necessary for the purposes for which it was collected or otherwise processed
  • for exercising the right to freedom of expression and information
  • for compliance with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • for reasons of public interest in the area of public health pursuant to Art. 9(2) lit. h and i and Art. 9(3) GDPR
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right mentioned in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
  • for the establishment, exercise or defence of legal claims

d) Restriction of processing

Under Art. 18 GDPR you can request the restriction of the processing of your personal data for one of the following reasons:

  • You contest the accuracy of your personal data.
  • The processing is unlawful and you refuse the deletion of the personal data.
  • We no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims.
  • You object to the processing pursuant to Art. 21(1) GDPR.

e) Notification

If you have requested the rectification or erasure of your personal data or a restriction of processing under Art. 16, Art. 17 or Art. 18 GDPR, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You can request that we inform you of these recipients.
f) Transfer

You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to request that this data be transmitted to a third party, provided the processing was carried out by automated means and is based on consent under Art. 6(1) sentence 1 lit. a or Art. 9(2) lit. a, or on a contract under Art. 6(1) sentence 1 lit. b GDPR.

g) Withdrawal

Under Art. 7(3) GDPR you have the right to withdraw your consent to us at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In future we may no longer continue the data processing that was based on your withdrawn consent.

h) Complaint

Under Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR.

i) Objection

Where your personal data is processed on the basis of legitimate interests under Art. 6(1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data under Art. 21 GDPR, provided there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case you have a general right to object, which we will implement without you having to state your particular situation. If you wish to exercise your right of withdrawal or objection, an email to autowelt12@t-online.de is sufficient

j) Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

i. is necessary for entering into or performing a contract between you and us
ii. is authorised by Union or Member State law to which we are subject and that law contains appropriate measures to safeguard your rights and freedoms and legitimate interests
iii. is made with your explicit consent

However, these decisions must not be based on special categories of personal data under Art. 9(1) GDPR, unless Art. 9(2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
In the cases mentioned in i) and iii), we take appropriate measures to safeguard the rights and freedoms and your legitimate interests, which includes at least the right to obtain human intervention on our part, to express your own point of view and to contest the decision.

13. Changes to the privacy policy

If we change the privacy policy, this will be indicated on the website.
As of: 15 October 2026