Legal
Privacy Policy
Last updated: [to be added]
REVIEW_REQUIRED — Placeholder template. Must be reviewed by a legal professional and adapted to the services and processes actually in use before going live.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is S&K Luxury Cars GmbH. Please refer to our legal notice for our address and contact details.
[REVIEW_REQUIRED — Add data protection officer if required.]
2. Hosting & Server Log Files
When you visit this website, the hosting provider automatically collects information in so-called server log files (e.g. IP address, date and time of access, page requested, browser type and operating system). This data is technically necessary to deliver the website and to ensure its stability and security.
The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a secure and stable operation of the website).
Hosting provider: [to be added]. [REVIEW_REQUIRED — Add provider, storage location and data processing agreement.]
3. Contact Form & Inquiries
When you contact us via the contact form, by email or by phone, we process the data you provide (e.g. name, email address, telephone number and the content of your message) in order to handle your inquiry.
This applies in particular to inquiries about specific vehicles as well as to purchase inquiries when you offer us your vehicle for purchase. The data is used exclusively to process the respective inquiry and — if a contract is concluded — to perform the contract.
The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures or performance of a contract) as well as Art. 6 (1) lit. f GDPR (legitimate interest in responding to inquiries).
4. Cookies & Consent
This website uses cookies. Technically necessary cookies are set without consent, as they are required for the operation of the website. All other cookies (functional, statistics, marketing) are only set with your explicit consent via our consent banner.
You can change or withdraw your consent at any time with effect for the future via the cookie settings in the footer of this website. Details on the individual cookies can be found in our cookie policy.
The legal basis for necessary cookies is § 25 (2) TDDDG in conjunction with Art. 6 (1) lit. f GDPR; for all other cookies § 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a GDPR.
5. Statistics & Analytics
[REVIEW_REQUIRED — No statistics or analytics tool is currently active. This section will be completed as soon as a corresponding service (e.g. Google Analytics) is used. Any such service will only be loaded after your consent.]
6. External Services & Maps (Google Maps)
To display our location, this website may embed the Google Maps service (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland).
The map is only loaded after you have consented via the consent banner or the consent prompt on the map view. Only then is a connection established to Google servers, transmitting in particular your IP address to Google. A transfer of data to the USA cannot be ruled out.
The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR, which you can withdraw at any time via the cookie settings. [REVIEW_REQUIRED — Legal review before activation.]
7. Retention Period
We store personal data only for as long as is necessary for the respective processing purposes. Inquiries that do not lead to a contractual relationship are deleted once processing is complete and no statutory retention obligations prevent this.
Data from contractual relationships is retained in accordance with statutory retention periods (in particular under commercial and tax law). [REVIEW_REQUIRED — Define specific periods before going live.]
8. Your Rights as a Data Subject
Within the framework of the statutory requirements, you have the following rights:
Right of access to the data stored about you (Art. 15 GDPR).
Right to rectification of inaccurate data (Art. 16 GDPR).
Right to erasure of your data (Art. 17 GDPR).
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object to processing where it is based on legitimate interests (Art. 21 GDPR).
In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is in particular the supervisory authority of the federal state in which we are headquartered: [to be added].
9. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content — such as the inquiries you send to us — this website uses SSL/TLS encryption. You can recognize an encrypted connection by the address line of your browser (“https://”) and the lock symbol.

