KFZ Auskunft24

Privacy Policy

The German version of these legal texts is exclusively binding. This translation is provided for convenience only; in the event of any discrepancy or question of interpretation, the German text alone shall govern.

1. Controller

EAS International, Klybeckstrasse 141, 4057 Basel, Switzerland (Kontakt: info@kfzauskunft24.de)

2. What data we process

Depending on how you use our service, we process the following data:

  • Vehicle enquiry: the vehicle identification number (VIN) or the official registration plate that you enter. This information may, in individual cases, relate to an identifiable person.
  • Ordering a report: your email address and the details required for payment.
  • Newsletter: your email address, if you sign up.
  • Automatically: technical access data (IP address, timestamp, browser type) collected when the site is accessed.

3. Purposes and legal basis

Processing takes place in order to perform the contract for the preparation of a vehicle report (Art. 6 Abs. 1 lit. b DSGVO), on the basis of your consent for the newsletter (Art. 6 Abs. 1 lit. a DSGVO), to comply with legal obligations (Art. 6 Abs. 1 lit. c DSGVO), and on the basis of our legitimate interest in the secure and functional operation of the website (Art. 6 Abs. 1 lit. f DSGVO).

4. Payment processing

Payments are processed via the payment service provider Stripe. The data required for payment is transmitted directly to Stripe and processed there.

5. Recipients and processors

Data is disclosed only where necessary for the provision of our service, in particular to:

  • Hosting/infrastructure: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, operates the servers of the website and the data storage in a data centre in Germany (Falkenstein) under a data processing agreement pursuant to Art. 28 GDPR,
  • Payment processing: Stripe handles the payment; for payment data Stripe acts partly as a processor and partly as an independent controller,
  • Database: Neon stores the application data required for operation as a processor in a data centre in the EU (Frankfurt am Main),
  • Vehicle data: the vehicle data supplier vindecoder.eu/Vincario (EU) provides the data queried for the report,
  • Reach measurement/advertising: Google Ads (Google Ireland Ltd.) is used only on the basis of your consent,
  • Email/newsletter delivery: an SMTP/email service provider sends confirmation and newsletter emails on our behalf.

Service providers are located in the EU or the USA. Where data is transferred to a third country, this is done on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses or an adequacy decision (EU-US Data Privacy Framework).

6. Retention period

We store your data only for as long as necessary for the purposes stated above or as required by statutory retention periods.

  • Invoicing and accounting data: 10 years (§ 147 AO, § 257 HGB).
  • Account data: until your account is deleted.
  • Server log files: short-term, usually a few days.
  • Consents (e.g. newsletter): until withdrawn.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw any consent given (e.g. for the newsletter) at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

The specific processors, periods and safeguards are currently being finalised with legal counsel.