These data protection regulations apply to the portal of Autohaus Braunöhler GmbH, Gesellensteig 35, 38229 Salzgitter. The regulations of the data protection declaration are necessary for the use of the website.

1. Name and address of the person responsible

The person responsible within the meaning of data protection laws and other data protection regulations is:

Autohaus Braunöhler GmbH

2. Name and address of the data protection officer

We are not obliged to appoint a data protection officer.

3. Competent supervisory authority

The responsible supervisory authority and the contact details of the data protection officers in the federal states, the supervisory authorities for the non-public sector, broadcasting, churches, in Europe and elsewhere as well as the virtual data protection office can be found under the link of the Federal Commissioner for Data Protection (BFDI) at https://www.bfdi.bund.de/DE/Infothek/Anschrift_Links/anschrift_links-node.html

4. Subject of data protection

The subject of data protection is personal data.

According to the Federal Data Protection Act (BDSG), personal data is all individual information about the personal or factual circumstances of a specific or identifiable natural person. The GDPR further defines “personal data” as any information relating to an identified or identifiable natural person; A natural person is considered identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

Data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

Processing is any operation or series of operations carried out on personal data, whether or not by automated means, such as the collection, recording, organisation, structuring, storage, adaptation or modification, reading, querying, use, disclosure by transmission, distribution or other form of provision, alignment or association, restriction, deletion or destruction.

5. General information on data processing

As a general rule, we only collect and use personal data from our users to the extent that this is necessary to provide a functional website and our content and services. The collection and use of personal data from our users only occurs regularly if permitted by legal regulations or based on consent.

5.2 Legal basis for processing personal data

To the extent that we obtain the consent of the data subject for processing personal data, Article 6 Paragraph 1 Letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 Letter c GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing.

5.3 Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as they are no longer required for the purpose of storage. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to conclude or fulfill a contract.

5.4 Disclosure of personal data

Without your separate consent, your personal data will be used solely for the establishment, implementation or termination of a legal transaction or similar obligation or to carry out our obligations under public law. If you have given us a separate declaration of consent for the use and transfer of personal data, the personal data may also be passed on further to the recipients named there.

If personal data is passed on to service providers as part of order processing, they are also bound by the GDPR / BDSG and other applicable legal regulations. Data processing exclusively based on instructions is ensured by concluding order processing agreements that meet the requirements of the GDPR.

Personal customer data will not be passed on to third parties beyond this. To the extent that we are obliged to do so by law, court order or an enforceable official order, we will transmit your personal data to authorized bodies. In addition, we will pass on your personal data to third parties if the transfer is necessary to enforce existing agreements or our rights and claims arising from obligations that exist with you or to protect the rights of other users and/or third parties.

6. Collection of data when you visit the website

This website collects a series of general data and information every time a data subject or an automated system accesses a website.

The following data is collected:

Information about the browser type and version used

The user's operating system

The user's Internet service provider

The user's IP address

Date and time of access

Websites from which the user's system accesses our website

Websites that are accessed by the user's system via our website

Search terms entered

Frequency of page views

language settings

6.2 Purpose of data processing

This general data and information is stored in the log files of the web server. What can be recorded are the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referrer), the sub-websites that are accessed via an accessing system on our website, the date and the time of access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system and other similar data and information that serves to avert danger in the event of attacks on our information technology systems.

When using this general data and information, no conclusions are drawn about the data subject.

Rather, this information is needed to correctly deliver the content of our website, to optimize the content of the website, to ensure the long-term functionality of our information technology systems and the technology of our website, and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. This collected data and information is therefore evaluated both statistically and with the aim of increasing data protection and data security in the company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.

6.3 Duration of storage

The data is pseudonymized after a statistical analysis.

If the data is stored in log files, this is the case after 30 days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or altered so that it is no longer possible to assign the calling client.

6.4 Legal basis

The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.

6.5 Possibility of objection and removal

The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object.

7. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

language settings

We also use cookies on our website that enable analysis of users' surfing behavior.

The following data can be transmitted in this way:

Information about the browser type and version used

• The user's operating system
• The user's Internet service provider
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website
• Search terms entered
• Information about the type of device used
• language settings
• Frequency of page views
• Location




The user data collected in this way is pseudonymized using technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users. When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and are referred to this data protection declaration. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.

If - after our information on the use of cookies and the analysis of your user behavior has appeared on our homepage - (i) you use our online offering and (ii) you have allowed the acceptance of cookies in your browser settings, this means to us that You want to use our products and services and agree to the use of cookies, services and other technologies.

7.2 Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) (f) GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes, if the user has given his consent, is Article 6 (1) (a) GDPR.

7.3 Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:

Session cookie (for the duration of the browser session) to temporarily save filter selections made or information about completed forms

The user data collected through technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through analysis cookies we learn how the website is used and can therefore continually optimize our offering.

For these purposes, our legitimate interest lies in the processing of personal data in accordance with Article 6 Paragraph 1 Letter f of the GDPR.

7.4 Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Most browsers (e.g. Firefox, Chrome, Internet Explorer, Safari, etc.) accept cookies by default. However, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. The help pages of most browsers will tell you how to configure your browser as described above. You will also usually find out what you need to do so that your browser informs you about the receipt of a new cookie and how you can switch off or delete all cookies received. You can switch off or delete similar functions (such as Flash cookies) that are used by so-called browser add-ons by changing the settings of the browser add-on or via the website of the manufacturer of the browser add-on. However, we would like to expressly point out that certain features on our website will not be available to you and some websites may not be displayed correctly if you deactivate cookies.

8. Email contact and contact form

8.1 Description and scope of data processing

It is possible to contact us using the email address provided or a contact form. In this case, the user's personal data transmitted with the email will be stored. This also applies to the data you enter in the contact form (name, telephone, email address, IP address).

8.2 Purpose

We use the data sent to establish communication with you and answer your inquiries. For this purpose, your request and data will be processed and stored.

8.3 Legal basis for data processing

In this context, the data will not be passed on to third parties unless the transmission is the goal of the communication. We use the data exclusively to answer your inquiry and, if the inquiry relates to a contractual relationship or a contractual relationship arises from this, to initiate and process the contractual relationship (§ 28 para. 1 sentence no. 1, 2 BDSG old version; Art. 6 Paragraph 1 a, b, f GDPR).

8.4 Storage period

If you are already our customer or will become one in the future, we may collect, store, change and transmit the data to establish, implement or terminate the contractual relationship without your consent and as long as the law allows us to do so.

In other cases, including as long as the contractual relationship has not yet come into existence, we do not store your data for longer than 2 years, or longer if the law requires us to do so. You have the right to object to the data transmitted to us via the contact form with effect for the future. You can exercise your right of cancellation by notifying us.

9. Internal area portal

9.1 Description and scope of data processing

Access to the internal area is limited to portal members. Members can advertise vehicles on the portal.

When you visit the internal area we find the following data:




• ID number
• Input data







If you post offers in the internal area, we collect relevant data. These are:




• 9.2 Purpose
• The internal area is used to manage your offers. The data we process is used to implement and control your user account.
• 9.3 Legal basis for data processing
• The internal area is granted to you as a customer and is therefore based on Art. 6 Para. 1 lit. b GDPR.
• 9.4 Storage period
• We store the data for as long as you maintain a user account with us and, if necessary, in accordance with the statutory retention periods.
• 10. Newsletters
• 10.1 Description and scope of data processing
• A newsletter service is also offered to inform you about new activities, products and offers.
• 10.2 Purpose
• We use your personal data to send you a personalized newsletter by using your name for correct salutation and email address for receipt.
• 10.3 Legal basis for data processing
• In this context, the data will not be passed on to third parties. We use the data exclusively to answer your inquiry and, if the inquiry relates to a contractual relationship or a contractual relationship arises from this, to initiate and process the contractual relationship (§ 28 para. 1 sentence no. 1, 2 BDSG old version; Art. 6 Paragraph 1 a, b, f GDPR).
• 10.4 Storage period
• If you have registered for the newsletter, we will store your data for the duration of the customer relationship. You can unsubscribe from a newsletter at any time. To do this, please follow the unsubscribe link in every newsletter or send an email to help@webmobil24.com
• In other cases, including as long as the contractual relationship has not yet come into existence, we do not store your data for longer than 2 years, or longer if the law requires us to do so. You have the right to object to the data transmitted to us via the contact form with effect for the future. You can exercise your right of cancellation by notifying us.




11. Further data protection information on the use of social media and plugins

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the service servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. We therefore have no influence on the amount of data that the plugin providers collect with the help of these plugins and therefore inform users according to their level of knowledge. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page on our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is sent directly from your browser to a server of the respective provider, if necessary. also transmitted to the USA and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile on the respective service.

If you interact with the plugins, for example by clicking the "Like" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network or on your account and displayed there to your contacts. The purpose and scope of data collection and the further processing and use of the data by the providers as well as your related rights and setting options to protect your privacy can be found in the providers' data protection information.

12.1. on the application and use of Google Analytics

We have integrated the Google Analytics component on this website. Google Analytics is a web analysis service. Web analysis is the collection, collection and evaluation of data about the behavior of visitors to websites. A web analysis service collects data about the website from which a data subject came to a website (so-called referrer), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. Web analysis is mainly used to optimize a website and to analyze the cost-benefit of Internet advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The person responsible for processing uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. Using this addition, the IP address of the data subject's Internet connection is shortened and anonymized by Google if our websites are accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our websites, and to provide other services related to the use of our website.

Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is able to analyze the use of our website. Each time you access one of the individual pages of this website, which is operated by the controller and into which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis purposes. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission billing.

The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website by the data subject. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on the personal data collected via the technical process to third parties.

The person concerned can prevent the setting of cookies through our website, as already described above, at any time by means of an appropriate setting on the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

The data subject also has the possibility of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website as well as the processing of this data by Google. To do this, the data subject must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. Installing the browser add-on is viewed by Google as a contradiction. If the information technology system of the data subject is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.

Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/ and at https://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.

12.2 on the use of Facebook

The website uses social plugins (hereinafter referred to as "plugins") from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook") . The plugins can be recognized by one of the Facebook logos (white "f" on a blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of the Facebook social plugins can be viewed here https://developers.facebook.com/docs/plugins/

When a user accesses a page on this website that contains such a plugin, their browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's browser and integrated into the website by it. The provider therefore has no influence on the amount of data that Facebook collects using this plugin. According to the provider's current knowledge, Facebook is proceeding as follows:

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page on the provider's website. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, e.g. press the so-called Like button or make a comment, the corresponding information is transmitted directly from the user's browser to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of data collection and the further processing and use of the data by Facebook as well as the relevant rights and setting options to protect the privacy of users can be found in Facebook's data protection information https://www.facebook.com/about/privacy/

If a user is a member of Facebook and does not want Facebook to collect data about him via the provider's website and link it to his member data stored on Facebook, he must log out of Facebook before visiting the website. It is also possible to block Facebook social plugins with add-ons for the user's browser, for example with the "Facebook Blocker".

13. External links

For your optimal information, you will find links on our pages that refer to third-party websites. If such links are not obviously recognizable, we would like to point out that they are external links. We have no influence whatsoever on the content and design of these websites. The information in our data protection declaration therefore does not apply there.

14. Rights of the data subject

If your personal data is processed, you are the “data subject” within the meaning of the GDPR and you have the following rights towards us as the person responsible. You can exercise your rights by contacting our data protection officer or the service center staff stating your request.

14.1 Right to information

Every person affected by the processing of personal data has the right to obtain free information from the person responsible for processing at any time about the personal data stored about him or her (purpose of processing, categories of data processed, disclosure to third recipients, storage period, applicable rights to blocking, correction , deletion, complaint to supervisory authorities, information about automated decision-making so-called profiling, transfers to third countries or international organizations) as well as a copy of this data.

You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us.

14.2 Right to rectification

Every person affected by the processing of personal data has the right to request the immediate correction of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - including by means of a supplementary statement.

14.3 Right to restrict processing

Every person affected by the processing of personal data has the right to request that the person responsible restrict the processing if one of the conditions provided for by the legislature in Article 18 Para. 1 GDPR is met.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

14.4 Right to Deletion

Every person affected by the processing of personal data has the right to demand from the person responsible that the personal data concerning them be deleted immediately if one of the reasons listed in Article 17 Para. 1 GDPR applies.

The right to erasure does not apply if the processing is necessary: to exercise the right to freedom of expression and information; to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller; for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3 GDPR; for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, insofar as the law referred to in section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or to assert, Exercising or defending legal claims.

14.5 Right to data portability

Every person affected by the processing of personal data has the right to receive the personal data concerning them, which the data subject has provided to a controller, in a structured, common and machine-readable format. You also have the right to transmit these data to another controller without hindrance from the controller to whom the personal data were provided, provided that the processing is based on consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR or Article 9 Paragraph 2 Letter a GDPR or on a contract in accordance with Article 6 Paragraph 1 Letter b GDPR and the processing is carried out using automated procedures.

14.6 Right to object

Every person affected by the processing of personal data has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them, which is carried out on the basis of Article 6 Paragraph 1 Letters e or f GDPR, to lodge an objection. This also applies to profiling based on these provisions.

The company will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If the company processes personal data in order to conduct direct advertising, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected to such direct advertising. If the data subject objects to the processing for direct advertising purposes, the personal data will no longer be processed for these purposes.

14.7 Right to revoke the declaration of consent under data protection law

Every person affected by the processing of personal data has the right to revoke their consent to data collection and use at any time with future effect without giving reasons. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.

14.8 Right to information

If you have exercised the right to rectification, deletion or restriction of processing, we will inform all recipients to whom the personal data concerning you has been disclosed about the rectification, deletion or restriction, unless this involves disproportionate effort or effort is impossible. You have the right to be informed about these recipients.

14.9 Questions / Right to complain to a supervisory authority

If you have any further questions about the protection of your personal data, this data protection declaration, declarations of consent given and the processing of your personal data or if you have any complaints about data protection, you can contact our data protection officer at the following email address:

info@autohaus-braunoehler.de

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority.

15. Data Security

We take internal company data protection very seriously. Our employees and the processors (service companies) commissioned by us are contractually obliged by us to maintain confidentiality and to comply with IT/security regulations and the applicable data protection regulations.

We and our contractual partners protect your personal information from unauthorized access, loss, use or disclosure and ensure that your personal information is in a legally required, controlled secure environment in which unauthorized access, loss or disclosure is prevented.

Our company has taken technical and organizational measures to ensure that our company meets the legal requirements of the BDSG and the GDPR and to protect your data against damage, destruction, falsification, manipulation and unauthorized access.

To avoid unnecessary amounts of data, we only collect, process and use your personal data to the extent that this is necessary within the scope of our service offering. The data is collected by us and the processors we use.

16. Changes to the privacy policy

Please note that data protection regulations and data protection practices can change continuously and the contents of this data protection declaration must be adapted. It is also advisable to keep yourself informed about changes in legal regulations and our company's practices.

© 2020 Autohaus Braunöhler GmbH