Privacy Policy

Information on the collection and processing of personal data.

Privacy Statement

I. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

—

II. General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website and our content and services. Processing is generally carried out only with the user's consent, unless a statutory exception applies.

Legal bases include in particular Art. 6(1)(a), (b), (c) and (f) GDPR, depending on the purpose of processing.

Personal data is deleted or blocked as soon as the purpose of storage ceases to apply or statutory retention periods expire.

III. Provision of the Website and Server Log Files

Each time our website is accessed, the server automatically collects data in log files. Hosting is provided by Hetzner Online GmbH, Germany (Nuremberg data centre).

IP address
Date and time of the request
Page / URL accessed
HTTP status code
Amount of data transferred
Referrer URL (if transmitted)
Browser and operating system

The legal basis is Art. 6(1)(f) GDPR. Log files are deleted or anonymised after 31 days at the latest.

IV. Cookies and Caching

Our website uses cookies and similar technologies to provide functionality, performance and security.

These may include in particular technically necessary session cookies and language cookies (session-based locale). They serve the provision of the telemedia service and are stored on the basis of Section 25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.

You can restrict or delete cookies in your browser. Disabling technically necessary cookies may limit website functionality.

V. Contact Forms and Email Contact

Contact and purchase inquiry forms are available on our website, in particular on vehicle pages, the contact page and the purchase page. The following data may be processed:

Name, email address, phone number
Message / enquiry
Related vehicle (make, model, year, URL)
IP address, date and time of submission

The data is used solely to process your enquiry and is not passed on to third parties without a legal basis. Legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

The data is deleted once the enquiry has been fully processed, and technical log data at the latest after 30 days.

Alternatively, you may contact us by email: kilavuzhandel@gmail.com

VI. Processing in the dealer login area

For authorised dealers and staff we provide a protected area (“My Dashboard”). In particular, the following personal data is processed:

Login data (email, name, session identifier, password hash)
Profile and company data (address, phone, VAT ID, social media links)
Vehicle and listing data including images and technical vehicle details
Invoice and accounting data (customer names, addresses, invoice numbers, amounts, receipt files)
Log data relating to synchronisations and failed background tasks

Legal bases are Art. 6(1)(b) GDPR (contract / pre-contractual steps) and Art. 6(1)(f) GDPR (business administration). Retention follows statutory periods (in particular tax and commercial retention for invoices) and internal deletion policies for technical logs.

VII. Rights of the Data Subject

You have the following rights vis-à-vis the controller in particular:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)

VIII. Third-Party Providers and External Services

Hosting

This website is operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Processing generally takes place within the EU/EEA.

Image storage (cloud storage)

Vehicle and website images are stored in cloud object storage (Cloudflare R2, provider Cloudflare Inc.) and delivered from there. Technical access data (e.g. IP address) may be processed. Legal basis: Art. 6(1)(f) GDPR.

Central sync service (Hub)

For license validation and synchronisation of vehicle data (e.g. external marketplaces, profile sync) we use a central sync service operated by our platform provider. Vehicle and contact data may be transmitted in encrypted form. Legal basis: Art. 6(1)(b) and (f) GDPR.

mobile.de

If enabled by the operator, listing and vehicle data may be transmitted to the mobile.de Seller API (mobile.de GmbH) for publication. Legal basis: Art. 6(1)(b) and (f) GDPR. The privacy notices of mobile.de also apply.

Language selection

A session-based setting is used to store your language preference. Legal basis: Art. 6(1)(f) GDPR.

Social Media Links

Our website contains links to our social media profiles. You only leave our website when you click the link; the privacy policies of the respective platform then apply.