Privacy Policy

Last updated: September 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Automobile Neumann
Owner: Marius Neumann
Schollenäcker 4
74538 Rosengarten
Germany
Phone: 0791 / 94949966
Email: info@automobile-neumann.de

We are not legally required to appoint a data protection officer. For any data protection enquiries, please contact us directly using the details above.

2. General principles

We only process personal data where this is necessary to provide a functional website and our content and services, or where you have given your consent. Processing is carried out in accordance with the GDPR and the German Federal Data Protection Act (BDSG).

Providing your data is neither legally nor contractually required. However, without the data marked as mandatory we cannot process an enquiry submitted through our forms.

3. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar starts with “https://”. Data you transmit to us cannot be read by third parties.

4. Hosting

This website is hosted by Cloudflare and delivered via its global content delivery network. The provider is Cloudflare, Inc., San Francisco, USA, represented for users in the European Economic Area by Cloudflare Germany GmbH, Munich.

In this context Cloudflare processes visitors' IP addresses in particular, in order to deliver the website, defend against attacks and improve loading times. The legal basis is our legitimate interest in the secure, fast and reliable provision of our online offering (Art. 6 (1) (f) GDPR).

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Any transfer to the USA is based on the European Commission's standard contractual clauses and the EU-US Data Privacy Framework.

5. Access data (server log files)

When you visit our website, your browser automatically transmits information to our server, which is stored temporarily in what are known as log files. The following is recorded in particular:

IP address of the requesting device
date and time of the request
page or file accessed
referrer URL
browser type, browser version and operating system
volume of data transferred and status message

This processing serves to ensure trouble-free operation and IT security on the basis of Art. 6 (1) (f) GDPR. This data is not merged with other data sources. Log files are deleted automatically after a short period.

6. Cookies and consent management

Cookies are small text files stored on your device. We use technically necessary cookies and comparable storage technologies on the basis of § 25 (2) TDDDG and Art. 6 (1) (f) GDPR.

All non-essential services – in particular Google Analytics and Google Maps – are only loaded after you have given your consent via our cookie banner (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Your choice is stored in your browser's local storage under the entry ahn_cookie_consent. Only the selected categories and the time of your decision are stored – no personal data. The entry remains stored until you delete it via your browser settings.

You can withdraw or change your consent at any time with effect for the future:

Your consent is valid for twelve months. After that period we automatically display the banner again and ask for your choice anew.

7. Contact by email or telephone

If you contact us by email or telephone, your details will be stored in order to process your enquiry and for any follow-up questions.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or pre-contractual measures, otherwise our legitimate interest in responding to enquiries (Art. 6 (1) (f) GDPR).

8. Contact form and car purchase form

Via our contact form we process your name, email address, optionally your phone number, the selected subject and your message. For an enquiry about a specific vehicle, the vehicle number is also transmitted.

Via our car purchase form we additionally process the vehicle details you provide (including make, model, year of first registration, mileage, fuel, transmission, power, condition, accident history, roadworthiness test and, optionally, your price expectation and vehicle identification number).

To protect against automated spam we rely exclusively on our own measures running on our server: a field that is invisible to you, in the contact form additionally a simple arithmetic question, and a limit on the number of requests per IP address. For that limit your IP address is stored in hashed form for a maximum of one hour and is deleted automatically afterwards. The legal basis is our legitimate interest in preventing misuse and in the security of our systems (Art. 6 (1) (f) GDPR). No data is transmitted to third parties and no cookies are set in this process; in particular we do not use Google reCAPTCHA or comparable services.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures). Your details remain with us until the purpose for storage no longer applies or you ask us to delete them; mandatory statutory retention periods – in particular commercial and tax law periods of up to ten years – remain unaffected.

9. Email delivery (Resend)

To deliver form enquiries to us and to send you an automatic confirmation of receipt, we use the email delivery service Resend provided by Resend, Inc., USA. The data you enter in the form and your email address are transmitted to this provider.

Resend acts as our processor pursuant to Art. 28 GDPR. The transfer to the USA is based on the European Commission's standard contractual clauses. The legal basis for use is our legitimate interest in reliable and secure email delivery (Art. 6 (1) (f) GDPR).

10. Google Analytics 4

This website uses the web analytics service Google Analytics 4 – exclusively after you have given your consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Our measurement ID is G-JV9KMSPXPX.

Google Analytics allows us to statistically evaluate visitor behaviour and thereby improve our offering. Among other things, it records the pages viewed, time spent on the site, source of the visit (referrer), approximate location based on the shortened IP address, and the device and browser used.

Google Analytics stores cookies on your device, in particular:

_ga – distinguishes visitors, lifetime 2 years
_ga_<property ID> – maintains session state, lifetime 2 years
_gid – distinguishes visitors, lifetime 24 hours
_gat – throttles the request rate, lifetime 1 minute

We have taken the following protective measures: Google Analytics is integrated via Google Consent Mode and is fully deactivated until you give your consent. Google Analytics 4 processes IP addresses in shortened form by default. “Google Signals” as well as advertising and personalisation features are disabled; we do not use your data for advertising purposes. If you withdraw your consent, the analytics cookies that have been set are deleted and measurement stops immediately.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the .

A transfer of data to Google LLC in the USA cannot be ruled out. It is based on the European Commission's adequacy decision regarding the EU-US Data Privacy Framework (Art. 45 GDPR) and additionally on the standard contractual clauses. A data processing agreement pursuant to Art. 28 GDPR is in place with Google. User- and event-level data in Google Analytics is deleted automatically after a maximum of 14 months.

Further information: policies.google.com/privacy
Browser add-on to opt out of Google Analytics: tools.google.com/dlpage/gaoptout

11. Google Maps

We embed map material from Google Maps to show our location. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is not loaded automatically. Initially you only see a placeholder. Only when you accept the “Maps” category in the cookie banner or click the “Load map” button is a connection to Google's servers established. Your IP address is then transmitted to Google, and Google may set cookies or use comparable technologies. Until then, no data is transmitted to Google.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Any transfer to the USA is based on the EU-US Data Privacy Framework and the standard contractual clauses.

Further information: policies.google.com/privacy

12. Fonts

This website uses only fonts that are already installed on your device (system fonts). Neither third-party fonts – in particular not Google Fonts – nor font files from our own server are loaded. Therefore, no IP address or other user data is transmitted to Google or other external font providers.

13. Vehicle data from mobile.de

Our vehicle inventory is integrated into our website via an interface provided by mobile.de GmbH, Kleinmachnow, Germany. The vehicle data is retrieved by our server – your IP address is not transmitted to mobile.de in this process.

The images belonging to the vehicles are not loaded into your browser directly from mobile.de either. They are retrieved by our server and delivered via our own domain. Your IP address is never transmitted to mobile.de, and your browser establishes no connection to mobile.de when visiting this website.

14. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you make a legitimate request for deletion or withdraw your consent, your data will be deleted unless there are other legally permissible grounds for storing it. Statutory retention periods – in particular under commercial and tax law (generally 6 to 10 years) – remain unaffected.

15. Transfers to third countries

Some of the services we use are based outside the EU/EEA or process data there. A transfer only takes place where an adequacy decision by the European Commission exists (such as the EU-US Data Privacy Framework), where appropriate safeguards such as the standard contractual clauses have been agreed, or where you have given your explicit consent. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in the USA and access by state authorities cannot be entirely ruled out.

16. No automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

17. Your rights

You have the right at any time:

to obtain information about the data we store about you (Art. 15 GDPR)
to have inaccurate data corrected (Art. 16 GDPR)
to request the erasure of your data (Art. 17 GDPR)
to request restriction of processing (Art. 18 GDPR)
to receive your data in a portable format (Art. 20 GDPR)
to object to processing (Art. 21 GDPR)

An informal message to the contact details listed under section 1 is sufficient to exercise these rights.

18. Right of withdrawal and objection

Withdrawal of your consent: Many processing operations are only possible with your express consent. You may withdraw consent already given at any time with effect for the future (Art. 7 (3) GDPR). The lawfulness of the processing carried out until withdrawal remains unaffected.

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

19. Right to lodge a complaint

Without prejudice to any other legal remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35, 70191 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

20. Changes to this privacy policy

We update this privacy policy whenever changes to our data processing activities or to the legal framework make this necessary. The current version applies to each new visit.