Privacy

Controller

TODO: Complete customer details – owner’s full name, legal form and any authorised representatives.

Hosting and server logs

The hosting provider processes connection data needed to deliver and protect this website, including IP address, access time, requested page, status code and browser or operating system information. The legal basis is Article 6(1)(f) GDPR, reflecting our interest in secure website operation.

TODO: Add hosting provider and address, server location, actual logging, retention period and processing agreement.

Contact form, service assistant, email and phone

We use the contact and vehicle details and request description you provide to respond and, where relevant, prepare a contract. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) for general enquiries. Required fields enable us to identify and answer the enquiry. No automated diagnosis, decision or appointment confirmation takes place. Email drafts are sent only when you send them from your email application.

Recipients and retention

Recipients are staff handling the request and the hosting and email providers used for delivery. Enquiries are deleted when processing is complete unless statutory retention duties or legitimate reasons require continued storage. A subsequent order may be subject to separate statutory retention periods.

TODO: Document email providers, including the Outlook mailbox, processing arrangements, specific retention periods and any international transfers with their legal basis.

Technical session and misuse prevention

Opening a form starts a technical session for secure delivery. A session cookie protects against requests initiated by third parties; it contains no advertising data and lasts for the browser session. A server-side hashed IP reference and request counter limit misuse. Entries older than 24 hours are removed at the next access. The legal basis is Article 6(1)(f) GDPR. The required cookie serves the requested form function under section 25(2)(2) TDDDG.

The service pilot stores your choices, vehicle and contact details, language and current question in your browser session storage. This lets you continue after changing pages or languages. Starting a new enquiry replaces the draft. After four hours without activity it is no longer loaded. Session storage is normally removed when the browser session closes; browser session restoration may retain it. Only “Send enquiry” transmits these details to the workshop. No analytics or advertising services are included.

Local files and external links

Images, styles and scripts load from our own webspace. No external fonts, analytics, advertising or AI services are embedded. Google Maps is provided only as a link. External providers receive a connection only when you open their links; their privacy notices then apply. Language selection uses ordinary links and is not stored in the browser.

Your rights

Subject to legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons related to your situation. Consent, where applicable, may be withdrawn for the future. You may complain to a data protection authority, particularly where you live or work or where the alleged infringement occurred. Contact us using the details above.

Supervisory authority in Lower Saxony: Landesbeauftragte/r für den Datenschutz Niedersachsen. lfd.niedersachsen.de

These details reflect the prepared technical implementation. Marked business and hosting information must be completed before publication.