Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Christian Jakob Automobile
Parkstrasse 3
91154 Roth
Germany

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2. General information about data processing

We process visitors’ personal data only where this is necessary for the technical provision and security of the website or for responding to enquiries.

Personal data means any information relating to an identified or identifiable natural person. This may include IP addresses, contact details and the contents of communications.

This website does not use analytics, marketing or advertising-tracking services. Vercel Web Analytics and Vercel Speed Insights are not enabled.

3. Website hosting and delivery

This website is provided through the following service provider:

Vercel Inc.
440 N Barranca Avenue #4133
Covina, CA 91723
United States

When you access the website, technically necessary data is processed to deliver the website to your device and to operate it securely. This may include:

the IP address of the requesting device
date and time of access
the requested page or file
the amount of data transferred
referrer URL
browser type and version
operating system
HTTP status code
other technical connection and security information

The processing is carried out to ensure the secure, stable and technically error-free provision of the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website and protection against misuse and technical attacks.

Vercel may use additional technical service providers and subprocessors to provide its services.

Processing in the United States or other countries outside the European Economic Area cannot be ruled out. Vercel is certified under the EU–US Data Privacy Framework. Where required, the European Commission’s Standard Contractual Clauses may additionally be used as a legal basis for international data transfers.

Technical log data is retained only for as long as necessary for website delivery, security, error analysis and the prevention of misuse. Statutory retention requirements remain unaffected.

4. Vehicle images and mobile.de content

Vehicle information and images may be obtained from our dealer listings on mobile.de.

Some images may be downloaded during the website build process and subsequently delivered through our own website. In this case, no direct connection to mobile.de is established when the visitor later accesses the website.

Where vehicle images are loaded directly from servers operated by mobile.de or technical service providers used by mobile.de, the visitor’s browser establishes a connection to those servers. In particular, the visitor’s IP address, the date and time of the request, the page accessed, referrer information and browser or device information may be transmitted.

The provider is:

mobile.de GmbH
Albert-Einstein-Ring 26
14532 Kleinmachnow
Germany

The images are integrated so that we can display our currently available vehicles completely and with the corresponding photographs. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the current, clear and economically reasonable presentation of our vehicle inventory.

We do not have complete control over any subsequent processing performed by mobile.de or the technical service providers used by mobile.de.

5. Contact by email

This website does not use a contact form.

The email links provided on the website may open a pre-completed message in the visitor’s email application. Merely opening such a link does not transmit any message or contact details to us through the website. Information is transmitted only when the visitor sends the email using their own email application.

When you contact us by email, we process the information you provide. This may include:

your name
your email address
your telephone number, where provided
the subject and contents of the message
information concerning a particular vehicle
technical communication data
attachments and other information provided voluntarily

The information is processed so that we can respond to and handle your enquiry.

Where your enquiry relates to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. General business enquiries are processed on the basis of our legitimate interest in appropriate business communication and the handling of enquiries under Article 6(1)(f) GDPR.

The email and telecommunications providers used by you and by us may be involved in transmitting and storing emails.

The information will be erased once your enquiry has been conclusively dealt with, unless statutory retention requirements or other legitimate grounds require continued retention.

Please be aware that ordinary unencrypted email communication may involve security risks. Complete protection against access by unauthorised third parties cannot be guaranteed when unencrypted email is used.

6. Contact by telephone

When you contact us by telephone, we process the information you provide during the call and, where applicable, your telephone number in order to handle your enquiry.

The legal basis is Article 6(1)(b) GDPR where the communication concerns entering into or performing a contract. In other cases, processing is based on our legitimate interest in responding to business enquiries under Article 6(1)(f) GDPR.

Telephone notes and other information stored in connection with an enquiry will be erased once they are no longer required, unless statutory retention requirements or other legitimate grounds require continued retention.

7. Cookies, analytics and tracking

We do not use analytics, marketing, profiling or advertising-tracking services on this website.

In particular, neither Vercel Web Analytics nor Vercel Speed Insights is enabled. We do not create user profiles or evaluate visitor behaviour for advertising or analytics purposes.

Under the website’s current technical configuration, we do not use non-essential cookies or comparable storage technologies. A consent-management or cookie banner is therefore not used.

Should analytics, marketing, mapping, video, form-processing or other third-party services be introduced in the future, this Privacy Policy will be updated accordingly. Where legally required, such services will be activated only after valid consent has been obtained.

8. Locally hosted fonts

The fonts used on this website are hosted locally and delivered through our own website.

No connection to Google Fonts or another external font provider is therefore established when the fonts are loaded.

9. SSL or TLS encryption

For security reasons, this website uses SSL or TLS encryption.

An encrypted connection can generally be identified by the use of “https://” at the beginning of the website address and the padlock symbol displayed by your browser.

Encryption is intended to protect information transmitted between your browser and the website from unauthorised access by third parties.

10. Retention periods

Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the relevant processing purpose.

The information will then be erased or anonymised unless statutory retention obligations, legitimate interests in establishing or defending legal claims or other legally permitted reasons require continued retention.

Where statutory retention obligations apply, the relevant information will be restricted for the applicable retention period and erased after that period has expired.

11. Recipients of personal data

Personal data may be disclosed, where necessary, to technical service providers used to provide the website, maintain IT security or facilitate communications.

These recipients may include:

hosting and infrastructure providers
content-delivery and security providers
email and telecommunications providers
mobile.de and technical providers used by mobile.de where vehicle images are loaded directly from external servers
public authorities or other bodies where disclosure is required by law

Service providers receive only the information necessary to perform their respective tasks.

12. Your rights

Subject to the applicable statutory requirements, you have the following rights:

the right of access under Article 15 GDPR
the right to rectification under Article 16 GDPR
the right to erasure under Article 17 GDPR
the right to restriction of processing under Article 18 GDPR
the right to data portability under Article 20 GDPR
the right to object under Article 21 GDPR
the right to withdraw consent under Article 7(3) GDPR

Consent may be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing performed before the consent was withdrawn.

Objection to processing based on legitimate interests

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.

We will then cease processing the relevant information unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

You may exercise your rights by contacting us using the details provided in Section 1.

13. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

You may also contact another competent supervisory authority, particularly the authority responsible for your habitual residence or place of work.

14. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

15. Updates to this Privacy Policy

We may update this Privacy Policy when the website, the services used or the applicable legal requirements change.

Last updated: July 2026