Privacy Policy

1. Data controller

The controller responsible for data processing on this website is:

Boxenstopp
Owner: Ercan Kücükcetin
Schafhohle 2
74226 Nordheim
Germany

Telephone: 07133 9220552
Email: [email protected]

2. General information on processing

We take the protection of your personal data seriously. We process personal data only where necessary. Personal data is any information that can identify you directly or indirectly.

Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable statutory rules.

3. Access data and server logs

When you visit this website, certain technical information may be processed automatically. This may include:

• IP address
• Date and time of access
• Page accessed
• Browser type and version
• Operating system used
• Referrer URL

These details help ensure reliable and secure operation of the website. We do not combine these access logs with other data sources.

4. Hosting with Cloudflare Pages

This website is hosted using Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare operates a globally distributed network for delivering and protecting websites.

Technically necessary connection and access data may be processed, including IP addresses, timestamps, pages accessed, browser and device information and security-related information. Our legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure website operation).

Personal data may be processed outside the European Economic Area, especially in the United States. Cloudflare provides information about participation in the EU-US Data Privacy Framework, standard contractual clauses and additional safeguards.

Details: Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.

5. Contact by email or telephone

If you contact us by email or telephone, we process the details you provide to respond to your enquiry. These may include your name, phone number, email address, vehicle details and the contents of your message.

For enquiries relating to entering into or performing a contract, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, it is Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

We retain information only for as long as it is needed to handle the enquiry and any subsequent business relationship, or to comply with statutory retention obligations. Technical service providers may process data where necessary.

6. Contact and enquiries via WhatsApp

Our website provides links and forms for contacting us through WhatsApp. The provider for users in the EEA is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

For certain forms, information you enter is first assembled into a message in your browser. We do not store these form entries in our own website database. When you open WhatsApp or send your message, the selected information is passed to WhatsApp.

WhatsApp may process phone numbers, names, profile data, message contents and technical connection data. We cannot fully control WhatsApp's independent processing.

Our legal basis for processing contract-related enquiries is Art. 6(1)(b) GDPR, and for other enquiries Art. 6(1)(f) GDPR.

Automated WhatsApp assistance: Boxenstopp uses a digital assistant for incoming WhatsApp enquiries. Voluntarily provided messages, contact, vehicle and request details are processed through GREEN-API (Green-API LLC, Astana, Kazakhstan) and n8n Cloud (n8n GmbH, Novalisstr. 10, 10115 Berlin, Germany). GREEN-API may involve transfer of personal data outside the EEA. Where an AI model is used to formulate a response, selected enquiry content may be processed by OpenAI, potentially outside the EEA. The purpose is to respond to and organise enquiries; our legal basis is Art. 6(1)(b) or 6(1)(f) GDPR, as appropriate. The assistant does not make decisions solely by automated means with legal or similarly significant effects. Please avoid sending particularly sensitive personal details by WhatsApp.

More information: GREEN-API, n8n, OpenAI API data privacy and WhatsApp Privacy Policy.

7. Online booking with Cal.com

For some services, we link to our Cal.com booking system. Booking is not embedded on this website: only by opening a booking link do you leave our website and visit Cal.com.

The provider is Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. Booking data may include name, email address, phone number, appointment details, answers to booking questions and technical data. According to Cal.com's policy, booking data is processed on behalf of the account holder.

We process these details to manage your appointment. The legal basis is Art. 6(1)(b) GDPR where a contract is being initiated or performed.

Cal.com states that data may be processed in the USA, with appropriate transfer safeguards such as standard contractual clauses or an applicable adequacy mechanism. Cal.com Privacy Policy.

8. Google Maps

A Google Maps map may be embedded on the homepage to show our location and directions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The embedded map is not loaded automatically when you open the page. It is loaded only after you expressly consent to external content or deliberately click the button to load Google Maps. Before this, the embedded map does not establish a connection to Google Maps. An ordinary directions link also opens Google Maps only when clicked.

After consent, data such as IP address, device and browser information, location and usage data may be transmitted to Google. Processing outside the EU or EEA cannot be ruled out.

The legal basis for loading the embedded map is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may change or withdraw your consent for future use at any time via Privacy settings.

Google Privacy Policy.

9. Google Analytics

If you consent to the “Statistics / Analytics” category in the privacy settings, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The service helps us understand which pages are used, how visitors reach the website and how the website is used technically. Usage and device data may be processed using cookies or similar technologies.

Google Analytics is loaded only after your consent. If you reject optional cookies or deactivate analytics, the Google Analytics tag is not loaded by our website.

The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be changed or withdrawn via the privacy settings.

Google states that individual EU user IP addresses are not logged or stored in Google Analytics 4. Retention periods depend on the property settings and Google's technical limits. International transfers cannot be excluded. Further details: Google Privacy Policy and Analytics privacy information.

Further information about Google Analytics retention settings: Google Analytics data retention.

10. Privacy settings and local storage

On your first visit, you can accept all optional services, reject them or choose settings individually. The selection is stored locally in your browser and applies to the website within the same domain.

The choice is stored so that your refusal or consent can be remembered without asking again on every page. Your choice is requested again no later than 180 days later, or sooner if your browser data are deleted or the consent solution changes.

Saving your choice is strictly necessary for implementing it. Optional services are not activated automatically. You can change your choice at any time using “Privacy settings” in the footer.

11. Your rights

Subject to statutory conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. For businesses in Baden-Württemberg, you may particularly contact:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
www.baden-wuerttemberg.datenschutz.de

Contact us at any time if you have questions about data protection.

12. Changes to this privacy policy

We update this privacy policy when the services we use, our processing operations or legal requirements change.

Last updated: 18 October 2026