Privacy at our company

1. Controller

The party responsible for data processing on this website within the meaning of the GDPR is checkdenwagen Automobile DE, Alexandrinenstraße 33, 10969 Berlin, email: info@checkdenwagen.de. Further details can be found in our Imprint.

2. Data Protection Officer

Our data protection officer can be reached at: Gökhan Cinar (info@checkdenwagen.de). Where there is no legal obligation to appoint one, the controller is the direct point of contact for data protection enquiries.

3. Data We Collect

We only process personal data when you provide it to us voluntarily — for example via the booking or contact form.

• Contact details: name, email, phone number
• Booking details: vehicle details, listing link, location/postal code, preferred appointment
• Payment details: processed via Stripe (we do not store any card data)
• Technical data: server logs (IP address, user agent, referrer, timestamp)

4. Purposes of Processing

• Handling booked vehicle checks and communicating with you and the seller
• Preparing and sending the inspection report
• Invoicing, payment processing, accounting
• Improving the website and analysing errors (only with consent)

5. Legal Bases

• Art. 6(1)(b) GDPR — performance of a contract (booking, check, report)
• Art. 6(1)(c) GDPR — legal obligations (accounting, tax)
• Art. 6(1)(a) GDPR — consent (e.g. for analytics cookies)
• Art. 6(1)(f) GDPR — legitimate interests (secure website, fraud prevention)

6. Retention Period

We only store data for as long as is necessary for the respective purpose or as required by statutory retention obligations. Booking and invoice data is retained for up to 10 years in accordance with the German Commercial Code (HGB) and Fiscal Code (AO). Contact enquiries that do not result in a contract are deleted no later than 12 months afterwards.

7. Cookies

We use technically necessary cookies as well as — subject to your consent — analytics cookies. An overview of all cookies in use can be found in our cookie policy at /cookies. You can withdraw your consent at any time.

8. Processors and Service Providers

To provide our services we work with carefully selected service providers. Data processing agreements pursuant to Art. 28 GDPR are in place with all of them:

• Stripe Payments Europe, Ltd. (Ireland) — payment processing
• Supabase (EU region) — database and auth infrastructure
• Medusa — e-commerce and booking backend (EU hosting)
• Resend (EU region) — transactional emails
• PostHog (EU host, Frankfurt) — product analytics (only with consent)
• Render — hosting and delivery of the website

9. Disclosure to Third Parties

We only disclose your data to third parties where this is necessary for the performance of the contract — e.g. to the vehicle seller for scheduling an appointment or to the commissioned appraiser. No disclosure beyond this takes place.

10. Your Rights

• Access to the data we have stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Lodging a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact info@checkdenwagen.de.

11. Changes to This Policy

We will update this privacy policy when the legal or factual framework changes. The current version is always available on this page.

This is a template. Legal review is required before production use.