privacy policy

This English version is provided for convenience only; the German version is legally binding.

Information pursuant to Art. 13 / 14 GDPR

1. Controller

The controller responsible for data processing on this website is:

Autohaus Mustermann GmbH
Musterstraße 12, 12345 Musterstadt
Phone: 01234 / 567890
Email: info@autohaus-mustermann.example

2. General information on data processing

We only process personal data to the extent necessary to provide a functional website and our content and services. This website uses no cookies, no tracking and no analytics or advertising services. Fonts and the location map are served locally from our server, so when a page is loaded there is no connection to third parties (e.g. Google). The one exception is the vehicle images in the "Current vehicles" section, which are loaded from mobile.de's image servers (see section 7).

3. Hosting

This website is hosted by Cloudflare (Cloudflare, Inc., USA, or Cloudflare Germany GmbH). When the website is accessed, technically necessary data (e.g. IP address, date/time, requested file, browser type) is processed in server log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). A data processing agreement (DPA) is in place with the provider. As Cloudflare also operates servers in the USA, any transfer of data to the USA is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR). We do not store these server log files permanently; they are only processed briefly to ensure operational security and protection against attacks and are then deleted automatically.

4. Contact form and getting in touch

If you contact us via the contact form or by email/phone, we process your details (name, email address, phone number if provided, subject and message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures/enquiries) or Art. 6(1)(f) GDPR.

Form messages are sent via the email service provider Resend (Resend, Inc., USA), which acts as a processor. Your data is used solely to deliver your message to us. A data processing agreement is in place with Resend; the transfer to the USA is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR).

5. Car rental: requests and availability

On the pages of our rental vehicles you can request a rental period. We process your details (name, email address, phone number if provided, requested period and message) to handle your rental request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).

These details are stored in a database on our website so that the request can be processed in our internal administration; the database is operated by our host Cloudflare (see section 3). We delete the request once it has been dealt with – at the latest after the process has been completed and any statutory retention periods have expired.

The availability calendar shown on the vehicle page contains dates only (booked or free). It gives no indication whatsoever of who rented a vehicle or why a day is booked. Internally, too, we only store the vehicle, date and status for a booked period – no names.

6. Location map

The map shown on the contact page is a static image loaded from our own server (map data: © OpenStreetMap contributors). No personal data is transferred to third parties in the process. Only when you actively click "Open in Google Maps" are you redirected to Google Maps; Google's privacy policy then applies.

7. Vehicle listings (mobile.de)

In the "Current vehicles" section we show our current vehicle stock. We retrieve the vehicle data server-side from mobile.de GmbH (Marktplatz 1, 14532 Kleinmachnow); no personal data about you is transmitted in the process. However, the vehicle images belonging to the listings are loaded into your browser directly from mobile.de's image servers (img.classistatic.de) when displayed. In the process your IP address is transmitted to this provider, which is technically necessary to display the images. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in presenting our vehicle offering). Further information can be found in mobile.de's privacy policy.

8. Audience measurement

This website uses no analytics or audience measurement service. No visitor profiles are created and no data is passed on to third parties for evaluation purposes.

Only aggregated information about each page view is collected, such as the page visited, the referring page, browser type and operating system, approximate origin at country level and loading-speed measurements. Your IP address is not stored permanently and is not used to recognise you. It is not combined with other data sources, nor are any conclusions drawn about you as a person.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in designing our website to meet needs and continuously improving it). As no information is stored on or read from your device, consent under § 25(1) TDDDG is not required. A data processing agreement (DPA) is in place with Cloudflare; any transfer to the USA is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR).

9. Storage period

We only store personal data for as long as is necessary for the respective purposes or as required by statutory retention periods. We delete enquiries made via the contact form and the related correspondence once the enquiry has been fully dealt with, provided no statutory retention obligations apply. Where data is subject to a statutory retention obligation (e.g. under commercial or tax law), it is deleted once the respective period has expired (usually 6 or 10 years).

10. Your rights

Under the GDPR you have, in particular, the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Lodging a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.

11. Last updated

This privacy policy was last updated: August 2026

← Back to the home page