Privacy Policy

Privacy Statement

I. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Autogalerie Neuburg AY GmbH
Am Schwalbanger 48 • 86633 Neuburg a.d. Donau

Managing Director:
Kubilay Yildizli

Phone: +49 (0) 8431 3973469
Email: info@autogalerie-neuburg.com

II. Name and Address of the Data Protection Officer

Our data protection officer is:

Bozbel Law § Consulting
Prof. Dr. Savas Bozbel
Königstr. 72
90402 Nürnberg
Deutschland

Phone: +49 911 561 95 030
Fax: +49 911 561 95 031
Email: info@bozbel.de

III. General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website and our content and services. Processing is generally carried out only with the user's consent, unless a statutory exception applies.

Legal bases include in particular Art. 6(1)(a), (b), (c) and (f) GDPR, depending on the purpose of processing.

Personal data is deleted or blocked as soon as the purpose of storage ceases to apply or statutory retention periods expire.

IV. Provision of the Website and Server Log Files

Each time our website is accessed, the server automatically collects data in log files. Hosting is provided by Hetzner Online GmbH, Germany (Nuremberg data centre).

• IP address
• Date and time of the request
• Page / URL accessed
• HTTP status code
• Amount of data transferred
• Referrer URL (if transmitted)
• Browser and operating system

The legal basis is Art. 6(1)(f) GDPR. Log files are deleted or anonymised after 31 days at the latest.

V. Cookies and Caching

Our website uses cookies and similar technologies to provide functionality, performance and security.

These may include in particular technically necessary session cookies and language cookies (session-based locale). They serve the provision of the telemedia service and are stored on the basis of Section 25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.

You can restrict or delete cookies in your browser. Disabling technically necessary cookies may limit website functionality.

VI. Contact Forms and Email Contact

Contact and purchase inquiry forms are available on our website, in particular on vehicle pages, the contact page and the purchase page. The following data may be processed:

• Name, email address, phone number
• Message / enquiry
• Related vehicle (make, model, year, URL)
• IP address, date and time of submission

The data is used solely to process your enquiry and is not passed on to third parties without a legal basis. Legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

The data is deleted once the enquiry has been fully processed, and technical log data at the latest after 30 days.

Alternatively, you may contact us by email: info@autogalerie-neuburg.com

VII. Processing in the dealer login area

For authorised dealers and staff we provide a protected area (“My Dashboard”). In particular, the following personal data is processed:

• Login data (email, name, session identifier, password hash)
• Profile and company data (address, phone, VAT ID, social media links)
• Vehicle and listing data including images and technical vehicle details
• Invoice and accounting data (customer names, addresses, invoice numbers, amounts, receipt files)
• Log data relating to synchronisations and failed background tasks

Legal bases are Art. 6(1)(b) GDPR (contract / pre-contractual steps) and Art. 6(1)(f) GDPR (business administration). Retention follows statutory periods (in particular tax and commercial retention for invoices) and internal deletion policies for technical logs.

VIII. Rights of the Data Subject

You have the following rights vis-à-vis the controller in particular:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

IX. Third-Party Providers and External Services

Hosting

This website is operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Processing generally takes place within the EU/EEA.

Image storage (cloud storage)

Vehicle and website images are stored in cloud object storage (Cloudflare R2, provider Cloudflare Inc.) and delivered from there. Technical access data (e.g. IP address) may be processed. Legal basis: Art. 6(1)(f) GDPR.

Central sync service (Hub)

For license validation and synchronisation of vehicle data (e.g. external marketplaces, profile sync) we use a central sync service operated by our platform provider. Vehicle and contact data may be transmitted in encrypted form. Legal basis: Art. 6(1)(b) and (f) GDPR.

mobile.de

If enabled by the operator, listing and vehicle data may be transmitted to the mobile.de Seller API (mobile.de GmbH) for publication. Legal basis: Art. 6(1)(b) and (f) GDPR. The privacy notices of mobile.de also apply.

Google Maps

You may optionally load an embedded Google Maps map to view our location. The map is only embedded after you explicitly choose “Load map”; data (especially your IP address) may then be transmitted to Google Ireland Limited or Google LLC. Legal basis: Art. 6(1)(a) GDPR (consent). Alternatively, you can open our location in Google Maps via the “Get directions” link without loading the embedded map on our website.

Language selection

A session-based setting is used to store your language preference. Legal basis: Art. 6(1)(f) GDPR.

Social Media Links

Our website contains links to our social media profiles. You only leave our website when you click the link; the privacy policies of the respective platform then apply.