Privacy Policy

1. Controller

contact@autorea.de

2. General Information

The protection of your personal data is important to us. We process your data exclusively in accordance with the legal provisions (GDPR, German BDSG 2018, German TTDSG).

This privacy policy applies to the website autorea.de.

3. Hosting

This website runs on our own infrastructure (self-hosting). When you access the website, server log files are created automatically containing: truncated IP address, date and time of the request, requested URL, referrer URL, and user agent (browser type and operating system). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and trouble-free operation). These log files are automatically deleted after a maximum of 30 days.

To deliver and protect the website, we use Cloudflare as a reverse proxy and content delivery network and for protection against attacks (including DDoS). The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Traffic is routed through Cloudflare servers; a transfer to the USA is possible. This is based on the EU-US Data Privacy Framework and standard contractual clauses. A Data Processing Agreement with Cloudflare is in place. Legal basis: Art. 6(1)(f) GDPR.

4. Contact Form

When you use our contact form, we process the data you enter:

• Name (required)
• Email address (required)
• Message (required)

The processing is solely for handling your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent).

Storage duration: Your data is stored for up to 6 months after the conclusion of communication and then deleted, unless statutory retention obligations apply.

Recipients: An email service provider will be connected as a data processor before launch and added here. The form contents are not stored in our content management system.

5. Cookies

This website uses no tracking cookies, no Google Analytics and no external tracking services.

We currently do not use any optional cookies (analytics, marketing). Should this change, we will obtain your prior consent.

6. External Services

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA — upstream hosting (reverse proxy/CDN) and attack protection. A transfer to the USA is possible, based on the EU-US Data Privacy Framework and standard contractual clauses. A Data Processing Agreement is in place.

Sanity AS, Akersgata 1, 0158 Oslo, Norway — management of website content. Data is processed within the EU/EEA. A Data Processing Agreement is in place.

7. Your Rights

You have the following rights under the GDPR:

• Access (Art. 15 GDPR) — what data we hold about you
• Rectification (Art. 16 GDPR) — correct inaccurate data
• Erasure (Art. 17 GDPR) — delete your data, unless retention obligations conflict
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR) — receive your data in a machine-readable format
• Objection (Art. 21 GDPR) — object to processing based on legitimate interest
• Complaint to a supervisory authority (Art. 77 GDPR)

Competent supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
https://www.datenschutz-berlin.de

Direct your requests to: contact@autorea.de

8. No Automated Decision-Making

We do not use automated decision-making or profiling pursuant to Art. 22 GDPR.

9. Changes to This Policy

We reserve the right to update this privacy policy in the event of legal or technical changes. The version available on the website at the time of your visit applies.