Privacy policy
Last updated June 2026
This policy explains what personal data we process when you use this website or contact us, why we process it, and the rights you have. We keep data collection to what we actually need to answer you and run the site.
Controller
Autotakt GbR
[Straße & Hausnummer ergänzen]
[PLZ & Ort ergänzen], Deutschland
Data we collect
When you only read the site, our hosting providers process the technical data your browser sends automatically: IP address, the page requested, referrer, browser and operating system, and the time of the request. This is needed to deliver the site securely and is not combined with other data.
When you fill in a form or write to us, we process the details you give us, such as your name, business, phone number, email, and the content of your message.
Contact and call-request forms
If you ask us to call you or send us a message, we use your details to handle your request and reply. The legal basis is Article 6 (1) (b) GDPR (steps before a contract) and, for general enquiries, our legitimate interest in responding (Article 6 (1) (f) GDPR). We keep this data for as long as we need it to deal with your request and to meet any retention periods that apply.
AI voice agent
If you request a call, the call is placed and handled by our voice-agent provider, Retell AI, on our behalf as a processor. Processing a call means handling the phone number you gave us, the audio of the conversation, a transcript, and a short summary, so we can follow up. We use this only to qualify and answer your request. We do not use call recordings to train public models. We can walk you or your data protection officer through the details before anything goes live.
Hosting and infrastructure
The website is delivered through Vercel and its content is stored on Convex. Both act as processors under a data processing agreement and may process data on infrastructure inside and outside the EU under appropriate safeguards (EU standard contractual clauses). They process data only to host and serve the site.
Analytics
We use a privacy-first, self-hosted measurement that counts page views and which buttons get clicked. It does not set advertising cookies, does not build cross-site profiles, and does not sell data. The legal basis is our legitimate interest in understanding how the site is used (Article 6 (1) (f) GDPR).
Cookies
We do not use tracking or advertising cookies. Any storage we use is limited to what is technically necessary to run the site and, in the admin area, to keep you signed in.
Data retention
We keep personal data only as long as we need it for the purpose it was collected for, or as long as statutory retention periods require. After that we delete it. Lead and message records are removed once they are no longer needed for the enquiry or our records.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to data portability, within the limits of the GDPR.
You can withdraw any consent at any time with effect for the future.
To exercise any of these rights, write to us using the contact details in our imprint.
Right to complain
If you believe we process your data unlawfully, you have the right to complain to a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place.