privacy policy

1. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Boxenstopp
Website / business division: Kfz-Gutachter Boxenstopp
Owner: Ercan Kücükcetin
Schafhohle 2
74226 Nordheim
Germany

Telephone: 07133 / 92 20 552
Email: [email protected]

2. General legal bases and purposes

We process personal data only as necessary to operate the website, respond to enquiries, prepare or perform a contract, document an insurance claim or meet legal obligations.

Depending on the processing activity, the relevant legal bases may include Article 6(1)(b) GDPR (pre-contractual steps / contract), Article 6(1)(c) GDPR (legal obligations), Article 6(1)(f) GDPR (legitimate interests, particularly secure website delivery, communications and asserting or defending legal claims), and Article 6(1)(a) GDPR (consent) for optional external content.

3. Hosting via Cloudflare Pages and server logs

This website is provided through Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare uses a globally distributed network to deliver the site and protect it against technical disruptions and abusive access.

When you visit the website, technically necessary connection and access data may be processed, including IP address, date and time, pages requested, browser and device information, referrer and security information. The processing serves the secure, reliable and efficient operation of our website. Our legal basis is Article 6(1)(f) GDPR.

Personal data may also be processed outside the European Economic Area, especially in the USA. Cloudflare provides information about its participation in the EU–US Data Privacy Framework, standard contractual clauses and other safeguards for international transfers.

Further information: Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.

4. Contact by telephone or email

If you contact us by phone or email, we process the information you provide to handle your enquiry. This may include your name, contact information, vehicle and accident details and the content of your message.

If your enquiry concerns steps towards or performance of a contract, processing is based on Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR.

5. Damage report form on this website

The damage report form currently works as a static browser function. Your entries are initially processed only in your browser and assembled into a message for email or WhatsApp. The form data is not currently stored in a database belonging to this website.

No files are currently uploaded or transmitted to us through the form itself. After opening email or WhatsApp, you may attach the vehicle registration document and damage photos yourself.

Required form fields are necessary so we can identify and handle your damage report. The privacy checkbox merely confirms that you have read this privacy policy. It does not constitute separate consent where processing is already based on Article 6(1)(b) or (f) GDPR.

If you send information about another accident participant, a registration number, an insurer or a claim number, we process this only as necessary to handle and document the claim. The legal basis may be Article 6(1)(f) GDPR in particular.

6. Contact via WhatsApp

The website contains links to WhatsApp. A connection to WhatsApp is established only when you deliberately open one of these links or send a WhatsApp message.

For users in the European region, the provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp may process telephone numbers, profile details, message contents and technical connection data.

Our processing of contract-related enquiries is based on Article 6(1)(b) GDPR and other enquiries on Article 6(1)(f) GDPR. WhatsApp explains international data transfers and its safeguards in its privacy policy.

Further information: WhatsApp Privacy Policy.

7. Google Maps

Google Maps may be loaded to show our location. The map is not embedded automatically. It loads only when you expressly allow external content or deliberately click “Load Google Maps”.

For users in the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. After loading, IP address, device and browser information, usage data and possibly location information may be sent to Google.

The legal basis for loading the map is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can change your selection at any time via “Privacy settings” in the footer.

Further information: Google Privacy Policy.

8. Privacy settings and local browser storage

Your privacy preference is stored under the key gutachterConsent_v2 in your browser's local storage. Only your choice regarding external content, a version number and the time of your choice are stored. The preference is retained in the same browser on this device for up to 180 days. You will then be asked again. Deleting browser data or blocking storage may cause the notice to reappear sooner.

This storage is used only for the technically necessary management of your privacy choice. The legal basis for storage is Section 25(2)(2) TDDDG. You can withdraw your consent at any time for the future via “Privacy settings”.

9. Website analytics

This vehicle assessment website does not currently use Google Analytics or a comparable analytics service. If this changes, the privacy policy will be updated before activation and any necessary consent controls added.

10. Data retention

We keep personal data only as long as needed for the respective purpose. We then delete it unless statutory retention duties, legitimate interests in legal defence or other legal grounds require further storage.

11. Recipients and data transfers

Only parties that require data for the stated purposes receive it. Depending on how you contact us, these may include technical service providers, hosting and communications providers and, for a specific claim, insurers or other parties you have identified.

Services operated by companies outside the European Economic Area may involve transfers to third countries. Providers describe adequacy decisions, standard contractual clauses or other safeguards in their privacy notices.

12. Your rights

Subject to legal requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time with effect for the future.

You also have the right to complain to a data protection supervisory authority. In particular, companies based in Baden-Württemberg may contact:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
www.baden-wuerttemberg.datenschutz.de

13. Automated decisions and particularly sensitive data

This website does not use automated decision-making within the meaning of Article 22 GDPR or profiling to decide on your claim.

Please do not send medical records or other particularly sensitive personal data through the general damage report form, email or WhatsApp unless this has been expressly agreed with us in advance.

14. Changes to this privacy policy

We update this privacy policy when our services, data processing practices or legal requirements change.