Controller
Hosting and delivery of the website
This website runs on the Modulify platform. Frankfurt am Main is set as the server location for the website, the database and file storage. When you visit the website, the server processes technically necessary data, in particular your IP address, the date and time of access, the address requested, the referrer and your browser and device type. This is required to deliver the website and keep it secure.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website.
The data is processed on servers in Germany (Frankfurt am Main). We have concluded a data processing agreement with the provider under Art. 28 GDPR, which ensures that the data is processed only on our instructions and in compliance with the GDPR. Server log files are kept only as long as needed for secure operation and are then deleted.
SSL/TLS encryption
For security reasons this website uses an encrypted connection, which you can recognize by the padlock symbol and "https://" in your browser's address bar.
Visitor statistics
We use the visitor statistics built into Modulify to understand which pages are visited. They work without cookies and, according to the provider, do not create personal user profiles. Aggregated data such as pages visited, referring page, country, browser, operating system and device type is evaluated.
IP addresses are not stored permanently and the data is not combined with other data. The statistics data is processed on servers in the EU.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is improving our website.
Contact form and requests
When you send us a request through a form on this website (for example an appointment, quote, business, partner or AGAP request), we process the data you enter. Depending on the form this is your name, email address, phone number, company, requested service, vehicle details, preferred date, pick-up address and your message.
Your request is stored in our database. We also receive a notification by email at info@ag-autopflege.de, sent through the email service of the Modulify platform.
The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest is handling your request.
Retention: we delete contact, appointment and quote requests 6 months after receipt, and business, partner and AGAP requests 12 months after receipt. Exceptions are requests needed for an ongoing order, a complaint or another open matter, and data subject to statutory retention obligations, for example under commercial and tax law.
Please note that copies of the email notifications are also kept in our mailbox and in the platform's sending history. We delete these as part of our regular mailbox maintenance.
To protect against spam we use an invisible check field and limit the number of requests per sender. For this we store a one-way hash of your IP address, from which the IP address cannot be recovered, and delete it after 24 hours at the latest. The legal basis is Art. 6(1)(f) GDPR.
Applications
When you apply through our application form, we process your name, contact details, the position you are interested in, your possible start date, your message and, if you upload it, your CV.
Uploaded documents are never stored publicly. They can only be accessed through our password-protected internal area. The email notification about a new application contains neither your CV nor your message.
The legal basis is Art. 6(1)(b) GDPR (initiating an employment relationship).
Retention: we delete your application data 6 months after the application process has ended. If you are hired, we transfer the necessary data to your personnel file.
Talent pool: only if you explicitly consent in the form do we keep your application for 12 months after the process has ended, to contact you about suitable positions. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example by email to info@ag-autopflege.de.
Copies of the email notifications are also kept in our mailbox and in the platform's sending history.
Contact by phone, email and WhatsApp
If you call us, email us or contact us on WhatsApp, we process your details to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR.
The WhatsApp button on this website is a plain link. WhatsApp only opens when you click it. When you use WhatsApp, the provider WhatsApp Ireland Limited processes data under its own privacy policy, including in third countries such as the USA. If you prefer not to use it, you can reach us by phone or email.
Map (Google Maps)
On some pages we show a map of our location. For this we use Google Maps by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open these pages, your browser connects to Google's servers, transmitting your IP address among other data. Google may set cookies and may also transfer data to the USA.
The legal basis is our legitimate interest in making our location easy to find under Art. 6(1)(f) GDPR. For transfers to the USA, Google relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework.
More information: Google privacy policy.
The "Get directions" link opens Google Maps in a new window, where Google's privacy policy applies.
Links to Instagram and Google
We link to our Instagram profile and our Google Business Profile. These are plain links, not embedded content. Data is only transmitted when you click a link, and then the provider's privacy policy applies.
Fonts
The fonts used on this website are loaded from our own server. No connection to Google or other font providers is made.
Internal area
Authorized staff use a password-protected internal area to handle requests and applications. After login, a technically necessary session cookie is set, which expires after 12 hours. The legal basis is Section 25(2)(2) TDDDG and Art. 6(1)(f) GDPR.
Your rights
Within the limits of the law, you have the right to:
- access the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7(3) GDPR)
Simply contact us at info@ag-autopflege.de.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und InformationsfreiheitGustav-Stresemann-Ring 165189 Wiesbaden, GermanyWebsite: datenschutz.hessen.de
Changes to this policy
We update this privacy policy when the website or the legal requirements change. The version published here applies.
Last updated: October 2026
