Privacy policy

This website runs on the Modulify platform. Frankfurt am Main is set as the server location for the website, the database and file storage. When you visit the website, the server processes technically necessary data, in particular your IP address, the date and time of access, the address requested, the referrer and your browser and device type. This is required to deliver the website and keep it secure.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website.

The data is processed on servers in Germany (Frankfurt am Main). We have concluded a data processing agreement with the provider under Art. 28 GDPR, which ensures that the data is processed only on our instructions and in compliance with the GDPR. Server log files are kept only as long as needed for secure operation and are then deleted.

For security reasons this website uses an encrypted connection, which you can recognize by the padlock symbol and "https://" in your browser's address bar.

We do not set any advertising or analytics cookies for visitors. A technically necessary cookie is only used in the password-protected internal area for authorized staff (see "Internal area"). We store your choice in the cookie banner in your browser's local storage so the banner does not appear on every page. This is technically necessary (Section 25(2) TDDDG) and no data is sent to us.

More information in our cookie policy.

We use the visitor statistics built into Modulify to understand which pages are visited. They work without cookies and, according to the provider, do not create personal user profiles. Aggregated data such as pages visited, referring page, country, browser, operating system and device type is evaluated.

IP addresses are not stored permanently and the data is not combined with other data. The statistics data is processed on servers in the EU.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is improving our website.

When you send us a request through a form on this website (for example an appointment, quote, business, partner or AGAP request), we process the data you enter. Depending on the form this is your name, email address, phone number, company, requested service, vehicle details, preferred date, pick-up address and your message.

Your request is stored in our database. We also receive a notification by email at info@ag-autopflege.de, and you receive an automatic confirmation of receipt at the address you gave. Both emails are sent through the email service of the Modulify platform.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest is handling your request.

Retention: we delete contact, appointment and quote requests 6 months after receipt, and business, partner and AGAP requests 12 months after receipt. Exceptions are requests needed for an ongoing order, a complaint or another open matter, and data subject to statutory retention obligations, for example under commercial and tax law.

Please note that copies of the email notifications are also kept in our mailbox and in the platform's sending history. We delete these as part of our regular mailbox maintenance.

To protect against spam we use an invisible check field and limit the number of requests per sender. For this we store a one-way hash of your IP address, from which the IP address cannot be recovered, and delete it after 24 hours at the latest. The legal basis is Art. 6(1)(f) GDPR.

When you apply through our application form, we process your first and last name, your phone number, the position you are interested in, your possible start date, whether you have a driving licence, your own assessment of your German and, if you add them voluntarily after sending, your message and your CV. None of these answers leads to an automatic rejection; we look at every application personally.

Uploaded documents are never stored publicly. They can only be accessed through our password-protected internal area. The email notification about a new application contains neither your CV nor your message.

The legal basis is Art. 6(1)(b) GDPR (initiating an employment relationship).

Retention: we delete your application data 6 months after the application process has ended. If you are hired, we transfer the necessary data to your personnel file.

Talent pool: only if you explicitly consent do we keep your application for 12 months after the process has ended, to contact you about suitable positions. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example by email to info@ag-autopflege.de.

Copies of the email notifications are also kept in our mailbox and in the platform's sending history.

When you buy a voucher on this website, we process the details of your order: the vouchers you choose, the names and the message on the voucher and, for gift post, the delivery address. From the payment form we receive your name, your email address and your country. We need this data to handle the order, issue the vouchers and email them to you, send the gift post and check the vouchers when they are redeemed. Until payment, the cart is kept in your browser's local storage.

Payments are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Stripe embeds the payment form directly in our payment page. Your payment details, such as your card number, go straight to Stripe; we never receive them. Stripe also processes data to prevent fraud and sets technically necessary cookies on the payment page for this. Stripe may transfer data to the USA and relies on the adequacy decision for the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(b) GDPR (contract) and, for fraud prevention, Art. 6(1)(f) GDPR. We keep order and voucher data for as long as the voucher can be redeemed and beyond that for as long as commercial and tax retention obligations require.

More information: Stripe privacy policy.

When you book an appointment online, we process the service with vehicle size and extras, the make, model and, if you wish, the number plate of your vehicle, the appointment, your name, email address, mobile number, your notes and, for a pick-up, the pick-up address with your handover notes. When we take the vehicle in, we record its condition (mileage, existing damage, keys) and may take photos of it. We need this data to plan and carry out the appointment, to send you the confirmation, reminders and status messages, and to carry out additional work only after your approval.

You reach your booking through a personal link; there is no customer account. During the booking your browser keeps only your choice and the number of the current booking in its session storage; both disappear when you close the window.

To improve online booking we count anonymously which booking steps are reached and where entries or payments fail, separately for phones, tablets and computers. We store neither your name nor contact details, addresses, free text or your IP address, and set no cookie; a random identifier applies only to the single page view and is not stored on your device. We delete these counts after 180 days.

For a pick-up we check the address and calculate the road distance from our headquarters with the Geocoding and Routes services of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Only the address is transmitted, not your name. Google may transfer data to the USA and relies on the adequacy decision for the EU-US Data Privacy Framework.

You pay the deposit through Stripe's embedded payment form, as described above for voucher purchases. We send messages about the booking by email. We only write to you by WhatsApp or text message if you choose this when booking; WhatsApp messages then go through Meta's WhatsApp Business Platform (WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland).

The legal basis is Art. 6(1)(b) GDPR (contract and pre-contractual steps); for recording the vehicle's condition Art. 6(1)(f) GDPR, our legitimate interest in being able to prove damage and the scope of work. We keep booking and payment data for as long as commercial and tax retention obligations require.

You may agree voluntarily when booking that we send you offers and vouchers by email or by WhatsApp, and that we ask you once for a review after the order. The legal basis is then your consent under Art. 6(1)(a) GDPR. It is not a condition of the booking and can be withdrawn at any time, through the link in the email concerned or by writing to info@ag-autopflege.de.

If you call us, email us or contact us on WhatsApp, we process your details to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR.

The WhatsApp button on this website is a plain link. WhatsApp only opens when you click it. When you use WhatsApp, the provider WhatsApp Ireland Limited processes data under its own privacy policy, including in third countries such as the USA. If you prefer not to use it, you can reach us by phone or email.

On some pages we can show a map of our location. For this we use Google Maps by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded once you have consented to "External media: Google Maps" in the cookie banner or clicked "Show map". Only then does your browser connect to Google's servers, transmitting your IP address among other data. Google may set cookies and may also transfer data to the USA.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link at the bottom of every page. For transfers to the USA, Google relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework.

More information: Google privacy policy.

The "Get directions" link opens Google Maps in a new window, where Google's privacy policy applies.

We link to our Instagram profile and our Google Business Profile. These are plain links, not embedded content. Data is only transmitted when you click a link, and then the provider's privacy policy applies.

The fonts used on this website are loaded from our own server. No connection to Google or other font providers is made.

Authorized staff use a password-protected internal area to handle requests and applications. After login, a technically necessary session cookie is set, which expires after 12 hours. The legal basis is Section 25(2)(2) TDDDG and Art. 6(1)(f) GDPR.

Within the limits of the law, you have the right to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Simply contact us at info@ag-autopflege.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Website: datenschutz.hessen.de

We update this privacy policy when the website or the legal requirements change. The version published here applies.