Data Protection
Contenuti
2.1 Purposes, Legal Basis and Storage Period for Processing Log Files
Each time our website is accessed, information of a general nature (log files) is automatically recorded. This information includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, the IP address and the like. This information is technically necessary in order to correctly deliver the website content you have requested. In addition to the processing of log files for the provision of our website, we also process log files for a maximum of 7 days for the purposes of detecting and tracking misuse.
The legal basis for data processing in relation to log files is our legitimate interests in accordance with Article 6(1)(f) GDPR. Our legitimate interest lies in carrying out data processing that is necessary for the provision of our website. We also have a legitimate interest in using log files to detect and track misuse of the website.
2.2 Purposes, Legal Bases and Storage Duration when Processing Data in the Context of Making Contact
On our website, we provide you with contact details that you can use to get in touch with us. When you contact us, your details (including name, e-mail address, content of the message) will be processed in order to deal with your inquiry. In the event of queries, we will also use the data you have provided.
The legal basis for processing the data when contacting us is our legitimate interest in accordance with Art. 6 (1) (f) GDPR. If the contact is aimed at concluding a contract, but you do not want to become our contractual partner personally, the legal basis is our legitimate interest in accordance with Art. 6 (1) (f) GDPR. We have a legitimate interest in using the data you provide to respond to your request. If your contact is aimed at you personally becoming a contractual partner of ours, the legal basis is Art. 6 (1) (b) GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, unless we are obliged to retain the data due to a statutory retention obligation (e.g. § 147 German Tax Code (Abgabenordnung – “AO”) or § 257 German Commercial Code (Handelsgesetzbuch – “HGB”).
2.3 Purposes, Legal Bases and Storage Duration when Using Google Analytics
If you have given us your consent (pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG) in the cookie banner, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland (“Google”)). Google Analytics uses so-called “cookies” (text files), which are stored on your end device (computer or cell phone, for example) and which enable your use of the website to be analyzed. Google Analytics enables the creation of statistics on website usage and its sources. Google will use this information to evaluate the use of our online offer for us and to create reports on the activities within this online offer. Pseudonymous user profiles are created from the processed data. The maximum retention period agreed with Google for user and event data linked to cookies, user IDs and advertising IDs is up to 60 days from the time you give your consent. We use Google Analytics for statistical purposes, e.g. to track how many users have clicked on a particular element or piece of information. Furthermore, we also use Google Analytics to set a cookie that remembers whether and, if so, when you have given your consent for Google Analytics to collect data.
The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there. Data is transferred from Google in Ireland to the Google company in the US. The company based in the USA is certified under the Data Privacy Framework (the certification can be viewed at the following URL: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active). The transfer of personal data to the USA takes place on the basis of the EU-U.S. Data Privacy Framework. Google is certified according to the EU-U.S. Data Privacy Framework, so that an adequate level of data protection is guaranteed in accordance with the adequacy decision of the European Commission.
The legal basis for the use of Google Analytics and the resulting processing of personal data and the use of cookies is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) German Telecommunications Digital Services Act (Telekommnikations-Digitale-Dienste-Gesetz – “TDDDG”).
You have the option of revoking the consent you have given us for the use of Google Analytics in the cookie banner settings with effect for the future. You can change your settings at any time by accessing the Consent Manager icon / the data protection settings at the bottom left of the screen on our website and adjusting your settings. The permissibility of the processing of your data that took place before your revocation is not affected by your revocation. You can also change your settings for advertising on Google: https://support.google.com/ads/answer/7395996?hl=de. Please note that these settings may not affect all of your end devices and browsers. You can also find more information at https://support.google.com/ads/answer/2662922?hl=de. You can also change your settings at the following URL: https://adssettings.google.com/anonymous?hl=en-GB&sig=ACi0TCgjQOtZZmsnhor-F-jUaLKUXPozB-azrbC60G1nlIid6ZBXp9mJfsSLCyW2C06i4JsWIeRrQw2CyV7laWP2gtjISjDTv8QM7RXXbZBM5xM64a1uc.
2.4 Google Ads
We use Google Ads on our website. Google Ads is an online advertising program from Google. Google Ads enables us to present you with advertising tailored to your interests. For this purpose, statistical information about you is collected and processed by our advertising partners. In addition to cookies, Google Ads uses web beacons, invisible graphics that enable Google to analyze clicks on this website, traffic on this website and similar information.
The information obtained via cookies and web beacons, your IP address and the delivery of advertising formats are transmitted to a Google server located in US and stored there.
The transfer of personal data to the USA takes place on the basis of the EU-U.S. Data Privacy Framework. Google is certified according to the EU-U.S. Data Privacy Framework, so that an adequate level of data protection is guaranteed in accordance with the adequacy decision of the European Commission.
You can prevent the installation of Google AdSense cookies in various ways: a) by setting your browser software accordingly; in particular, suppressing third-party cookies will prevent you from receiving ads from third-party providers; b) by deactivating interest-based ads on Google via the link http://www.google. de/ads/preferences, whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can prevent the aforementioned cookies from being stored on your PC by making the appropriate settings in your Internet browser. However, this may mean that the content of this website can no longer be used to the same extent.
The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time by accessing the Consent Manager icon on our website / the data protection settings at the bottom left of the screen and adjusting your details. The permissibility of the processing of your data that took place before your revocation is not affected by your revocation.
2.5 Duda Inc.
We use the tool from Duda Inc., 1025 Cannon St, Louisville, CO 80027, USA („Duda“) to display our website. Duda is a tool for creating and hosting websites.
The transfer of personal data to the USA takes place on the basis of the EU-U.S. Data Privacy Framework. Duda is certified according to the EU-U.S. Data Privacy Framework, so that an adequate level of data protection is guaranteed in accordance with the adequacy decision of the European Commission. The hosting servers are located in the EU. Further information can be found at: https://www.duda.co/legal/privacy.
The legal basis for the use of Duda is Art. 7 (1) (f) GDPR. We have a legitimate interest in a reliable presentation of our website.
2.6 Amazon CloudFront
We use AWS CloudFront to properly provide the content of our website. AWS CloudFront is a service of Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg (“AWS CloudFront”), which acts as a content delivery network (CDN) on our website.
A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to Amazon Web Services, Inc. servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of AWS CloudFront.
The legal basis for the use of Amazon CloudFront is Art. 6 (1) (f) GDPR, § 25 (2) no. 2 TDDDG. The use of the content delivery network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offer.
2.7 Cloudflare
We use the service of Cloudflare Inc, Westminster Bridge Road, 6th Floor, Riverside Building, County Hall London SE1 7PB, UK (“Cloudflare”). The service filters the data traffic taking place via our website and analyzes the communication taking place via the website and the user's browser. Among other things, this collects analytical data that this website contains.
The transfer of personal data to the USA is based on the EU-U.S. Data Privacy Framework. Cloudflare is certified according to the EU-U.S. Data Privacy Framework, so that an adequate level of data protection is guaranteed in accordance with the adequacy decision of the European Commission. In addition, the European Commission has issued an adequacy decision regarding data transfer to the UK.
The legal basis for the use of Cloudflare is Art. 6 (1) (f) GDPR, § 25 (2) no. 2 TDDDG. The use is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer.
2.8 Facebook (Meta)
On our website, we use selected tools from Facebook, a social media platform from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). By using these tools, we can provide you and anyone interested in our products and services with the best possible offer.
If data is collected from you and passed on via the Facebook elements embedded by us or our Facebook page (fan page), both we and Meta are jointly responsible. Meta is responsible for the subsequent processing of this data. Our joint obligations are set out in a publicly available agreement, which you can view at https://www.facebook.com/legal/controller_addendum
This agreement states, among other things, that we will inform you about the use of Meta tools on our website. We are also responsible for ensuring that the tools are integrated into our website in compliance with data protection regulations. Meta is responsible for the data security of Meta products. If you have any questions about data collection and processing by Meta, please contact the company directly. If you have any queries, we will be happy to forward them to Meta.
Meta also processes your data in the USA, among other places. The transfer of personal data to the USA is based on the EU-U.S. Data Privacy Framework. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework to ensure an adequate level of data protection in accordance with the European Commission's adequacy decision. Further information can be found at: https://www.facebook.com/privacy/policy/?tid=331738844631.
The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time by accessing the Consent Manager icon on our website or the data protection settings at the bottom left of the screen and adjusting your details. The permissibility of the processing of your data that took place before your revocation is not affected by your revocation.
2.9 Consentmanager
We use the Consent Manager from consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden (“consentmanager”). This service makes it possible to offer you a comprehensive and data protection-compliant cookie and tracking notice for your decision as to which cookies you allow and which you do not. By using the service, data is sent from you to consentmanager and stored. Further information can be found at: https://www.consentmanager.net/en/privacy/.
The legal basis for the use of consentmanager and the transfer of your personal data is Art. 6 (1) (f) GDPR, § 25 (2) no. 2 TDDDG. The use is based on our legitimate interests, i.e. interest in operating the website in an efficient, legally compliant manner.
2.10 Snowplow
We use the Snowplow analytics service from Snowplow Analytics Ltd, The Roma Building, 48-50 Scrutton Street EC2A 4RQ London, UK (“Snowplow”). In this context, Snowplow stores cookies on your computer with the functions and content listed below. This website uses the data collected via the Snowplow cookie in order to be able to carry out authentic reach measurement. For this purpose, it is essential that the users concerned are recognized during the measurement carried out on our server. On the basis of this reach measurement, we create an (anonymous) report on the number of users, sessions and page views for our customers (service providers) in order to encourage them to use and continuously expand our website. Further information can be found at: https://snowplow.io/privacy-policy.
Data transfer to the UK takes place on the basis of the European Commission's adequacy decision regarding data transfer to the UK.
The use of Snowplow is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time by accessing the Consent Manager icon on our website or the data protection settings at the bottom left of the screen and adjusting your details. The permissibility of the processing of your data that took place before your revocation is not affected by your revocation.
2.11 Mapbox
On our website we use the services of the American software company Mapbox, Inc, 5th Floor 740 15th Street Northwest, Washington, DC 20005, USA (“Mapbox”). Mapbox is a service provided by Mapbox Inc. for the visualization of maps, with which the website/app can integrate corresponding content on our site. Mapbox can be used to visualize content on our website or, for example, to display routes graphically. The maps are integrated into our website using small code snippets. You can find more information at: https://www.mapbox.com/legal/privacy.
The use of Mapbox is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time by accessing the Consent Manager icon on our website or the data protection settings at the bottom left of the screen and adjusting your details. The permissibility of the processing of your data that took place before your revocation is not affected by your revocation.
The entity responsible for data processing on this website is AutoScout24 GmbH, Tölzer Straße 16, 82031 Grünwald (hereinafter also referred to as “we” or “us”), represented by the Management Board.
You can reach our data protection officer using the following contact details:
Data Protection Officer
Tölzer Straße 16, 82031 Grünwald
2. On the Individual Data Processing
3. Recipients of Personal Data
As a data subject, you are entitled to the following data subject rights under the conditions regulated for each data subject right in the GDPR:
- Art. 15 GDPR: Right of Access
- Art. 16 GDPR: Right to Rectification
- Art. 17 GDPR: Right to Erasure
- Art. 18 GDPR: Right to Restriction of Processing
- Art. 20 GDPR: Right to Data Portability
- Art. 21 GDPR: Right to Object against Processing, which is carried out on the basis of Art. 6 (1) (f) GDPR
- Art. 7 (3) GDPR: Right to Withdraw Given Consent
- Art. 77 GDPR: Right to Lodge a Complaint with a Supervisory Authority
We carry out the data processing described above with the help of service providers. These include service providers who work with us to provide the website or provide services for communication with you. Depending on the individual case, it may also be necessary for us to share data within the AutoScout24 group of companies. If we are legally obliged to do so, we will pass on data to government agencies, for example as part of government law enforcement measures.
4. Rights of Data Subjects
5.
Amendment of this Data Protection Information
Our offer may be changed from time to time. In particular, to further improve the functionalities of the website. Such changes may also affect the use of your personal data. For this reason, we reserve the right to adapt this data protection notice to the factual circumstances at any time. The current version is available on our website under the heading “Data Protection”. Please use this to inform yourself regularly about the current status of the data protection information.
For further information on our data processing, please refer to our general privacy policy at:
https://www.autoscout24.com/company/privacy/.
Status: February 2025