We, autoDATAexperts GmbH, take the protection of your personal data very seriously and strictly comply with the rules of the data protection laws. Below we inform you about the collection and use of personal data when you use our website. Our services are directed exclusively at businesses within the meaning of Section 14 of the German Civil Code (BGB). Personal data within the meaning of Art. 4 No. 1 GDPR is only processed to the extent necessary for carrying out and handling business transactions with legal entities or sole proprietorships.
1. Controller
The controller responsible for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation (GDPR) is
autoDATAexperts GmbH
Heinrich-Hertz-Straße 2
92224 Amberg
experts@autodataexperts.de
2. Collection, processing and use of personal data
a) When visiting the website
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:
IP address of the requesting computer,
date and time of access,
name and URL of the retrieved file,
website from which access was made (referrer URL),
browser used and, where applicable, the operating system of your computer and the name of your access provider.
We process the data mentioned above for the following purposes:
ensuring a smooth connection to the website,
ensuring convenient use of our website,
evaluating system security and stability, and
for further administrative purposes.
The legal basis for the data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you as a person.
In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under sections 4 and 5 of this privacy policy.
b) When using our contact form
If you have questions of any kind, we offer you the option of contacting us via a form provided on the website. A valid e-mail address is required so that we know who sent the enquiry and can respond to it. Further information can be provided voluntarily. The data processing for the purpose of contacting us is based on your voluntarily granted consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. The personal data we collect for the use of the contact form is automatically deleted once your enquiry has been dealt with.
c) When using the vsNEW app
Our app for carrying out battery tests does not collect, store or process any personal data of users. It is used exclusively on devices assigned to a company. This removes the obligation to provide
further information in accordance with Art. 13/14 GDPR.
Should we wish to process your data for a purpose other than the one for which it was originally collected, we will inform you accordingly and, where necessary, obtain your consent. The processing takes place exclusively in a B2B context and on the basis of our legitimate interest under Art. 6 (1) lit. f GDPR in providing efficient and scalable communication structures. Personal data is only stored for as long as is necessary to fulfil contractual, legal or organisational obligations. No storage beyond this takes place.
3. Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
- you have given your express consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR,
- the transfer is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being passed on,
- in the event that a legal obligation exists for the transfer in accordance with Art. 6 (1) sentence 1 lit. c GDPR, and
- this is legally permissible and necessary in accordance with Art. 6 (1) sentence 1 lit. b GDPR for the processing of contractual relationships with you.
In addition, we would like to point out: within our exclusively business-related (B2B) field of activity, no personal data is sold. Business contact data is only passed on to third parties within the framework of the aforementioned legal bases — for example in the course of a change of service provider or CRM system — and only to the extent necessary for the continuation or handling of the business relationship.
4. Cookies
We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. The cookie stores information that arises in connection with the specific device used. However, this does not mean that we gain direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our offering more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already been with us and which entries and settings you have made, so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offering for you (see section 5). These cookies enable us to automatically recognise that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. Completely deactivating cookies may, however, mean that you cannot use all functions of our website.
5. Analysis tools
a) Tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offering for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.
b) Google Analytics
For the purpose of needs-based design and continuous optimisation of our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as
browser type/version,
operating system used,
referrer URL (the previously visited page),
host name of the accessing computer (IP address),
time of the server request,
is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide further services associated with website use and internet use for the purposes of market research and needs-based design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that they cannot be assigned (IP masking). You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser plugin, you can click this link to prevent future collection by Google Analytics on this website. An opt-out cookie will be placed on your device. If you delete your cookies, you must click the link again.
c) Meta Pixel
This website uses the visitor action pixel from Facebook/Meta to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the data collected is also transferred to the USA and other third countries.
In this way, the behaviour of site visitors can be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy (https://de-de.facebook.com/about/privacy/). This enables Facebook to place advertisements on Facebook pages and outside of Facebook. As the site operator, we have no influence on this use of the data.
This service is used on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time.
We use the advanced matching function within the Meta pixel.
Advanced matching enables us to transmit various types of data (e.g. place of residence, federal state, postcode, hashed e-mail addresses, names, gender, date of birth or telephone number) of our customers and prospective customers, which we collect via our website, to Meta (Facebook). This activation allows us to tailor our advertising campaigns on Facebook even more precisely to people who are interested in our offers. In addition, advanced matching improves the attribution of website conversions and expands Custom Audiences.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing carried out by Facebook after the forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. You can find the wording of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for implementing the tool on our website in a manner that is secure under data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
You will find further information on protecting your privacy in Facebook’s privacy notices: https://de-de.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing function in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
6. Data subject rights
You have the right:
to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
to request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us in accordance with Art. 16 GDPR;
to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse its erasure and we no longer need the data, but you need it for the establishment, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 GDPR;
to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller in accordance with Art. 20 GDPR;
to revoke your consent once given to us at any time in accordance with Art. 7 (3) GDPR. As a result, we may no longer continue the data processing that was based on this consent in the future, and
to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
7. Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR. This right exists if there are reasons arising from your particular situation or if the objection is directed against direct advertising. In the case of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your right to object, you can use the contact details given under point 10.
Please note that this explanation gives you the opportunity to object to the processing of your personal data, in particular where it is based on legitimate interests or used for direct advertising.
8. Links to social media platforms
Our website contains links to our profiles on the social networks LinkedIn, Indeed, Facebook and Instagram. These links serve to provide you with further information about our company and to give you the opportunity to get in touch with us. Please note that when you click on these links, data may be transferred to the respective platforms. This may include, in particular, your IP address, the URL of the page from which you clicked the link, as well as information about the browser you use and your device.
The processing of your data by these platforms is subject to the respective data protection provisions of the providers. We have no influence on the processing of your data by these platforms and accept no responsibility for it. Please therefore inform yourself about the privacy policies of the respective platforms before using the links.
9. Changes to this privacy policy
This privacy policy is currently valid and was last updated in May 2025. As a result of the further development of our website and the offerings on it, or due to changed legal or official requirements, it may become necessary to amend this privacy policy. You can access and print the current privacy policy at any time on our website. This privacy policy is subject exclusively to German law. Consumer rights or consumer protection provisions do not apply.
10. Use of artificial intelligence (AI) in internal processes
In various areas of our company, we use technologies based on artificial intelligence (AI). These serve to support and automate internal processes, semantic analysis and the data-driven optimisation of business processes. In particular, AI-based systems are used that support the processing, evaluation and categorisation of structured and unstructured information.
All third-party providers used are contractually bound as processors in accordance with Art. 28 GDPR. Processing takes place exclusively on our behalf and according to our instructions. The technical tools used are contractually bound and committed to compliance with the applicable data protection requirements. For maximum transparency, we have linked the respective data protection policies directly next to the tool names.
- ChatGPT / OpenAI for text creation, semantic analysis and content support in internal processes
- Make for automating recurring processes
- HubSpot and ActiveCampaign for data-driven customer interaction and marketing optimisation
In certain cases, personal data may be processed in this context — e.g. when evaluating CRM information, support requests or project communication. The processing takes place exclusively within the scope of the respectively permissible purpose and on one of the following legal bases:
- Art. 6 (1) lit. b GDPR, where the processing serves the performance of a contract,
- Art. 6 (1) lit. f GDPR, where there is a legitimate interest in increasing the efficiency and quality assurance of our business processes.
Where personal data is processed by external service providers, this takes place on the basis of corresponding data processing agreements in accordance with Art. 28 GDPR and — in the case of transfers to third countries — on the basis of appropriate safeguards (e.g. EU standard contractual clauses in accordance with Art. 46 GDPR).
We reserve the right to integrate new technologies, e.g. based on artificial intelligence or machine learning, as part of the optimisation of our services, provided this is done in compliance with data protection law and in the legitimate interest of business operations.
Information on the use of AI-based language systems and automated communication can be found under point 11 of this privacy policy. Should the purpose of the processing change, you will be informed accordingly — where necessary, we will obtain your consent.
11. Automated communication and voice AI
For the efficient handling of business enquiries and for carrying out and automating communication processes — in particular in the area of outbound telephony and lead management — we use modern cloud-based and AI-supported tools.
If you contact us or provide your contact details in the context of business communication, an initial telephone contact may be made by an automated system. This system serves exclusively the structured acceptance, forwarding or pre-qualification of your enquiry. At the beginning of such a call, you will be informed that you are connected to an automated voice system. To process voice input in the context of automated calls, it is necessary for the transmitted voice content to be temporarily recorded, transcribed and systematically evaluated. This is necessary so that the AI system can understand and answer the enquiry at all, or forward it to the responsible department. Such processing takes place on the basis of our legitimate interest under Art. 6 (1) lit. f GDPR in the efficient handling of enquiries and the improvement of our service offering.
The transcripts generated in this way may be stored and used for internal quality assurance, for the analysis of conversation patterns and — where necessary — for follow-up within our CRM system. In individual cases, anonymised evaluation may also contribute to improving the AI systems (training). Complete audio recordings are not stored permanently. If there is no statutory retention obligation, audio and transcription data is regularly deleted or anonymised.
The processing of personal data in the context of automated communication takes place either on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR or for the implementation of pre-contractual measures or the performance of an existing contractual relationship in accordance with Art. 6 (1) lit. b GDPR. In certain cases, we also rely on our legitimate interest in accordance with Art. 6 (1) lit. f GDPR, in particular for the efficient handling of incoming enquiries.
Specialised providers are used in these processes:
- Vapi (
voice automation for inbound and outbound telephony), - Make (automation platform),
- ActiveCampaign and HubSpot (CRM, marketing and sales automation),
- ChatGPT (AI-based text generation for information and support processes),
- ElevenLabs and Deepgram (speech synthesis and speech recognition)
For maximum transparency, we have linked the respective data protection provisions directly next to the tool names. All third-party providers used are contractually bound as processors in accordance with Art. 28 GDPR. The processing takes place exclusively on our
behalf and according to our instructions.
Some of these service providers are based outside the European Union (e.g. in the USA). In these cases, data is transferred exclusively in compliance with data protection requirements, in particular on the basis of the standard contractual clauses of the European Commission in accordance with Art. 46 GDPR. No further use of the data or disclosure to third parties takes place.
We sometimes work with tools from companies based in the USA. In this context, personal data may be transferred to servers in the USA. The USA is currently not considered a secure third country within the meaning of EU data protection law. US companies may be obliged to hand over personal data to US authorities — in particular security authorities — without you as a data subject being able to take effective legal action against this. It can therefore not be ruled out that US authorities process, evaluate and permanently store your data stored on US servers for surveillance purposes. We have no influence on these processing activities.
We reserve the right to replace or supplement these services with functionally equivalent providers, provided they comply with comparable data protection standards and the service used continues to serve the provision, optimisation or automation of our contract-related services.
The processing takes place exclusively in a B2B context and on the basis of our legitimate interest under Art. 6 (1) lit. f GDPR in providing efficient and scalable communication and service structures. Personal data is only stored for as long as is necessary to fulfil contractual, legal or organisational obligations. No further storage takes place.
No automated decision-making with legal effect within the meaning of Art. 22 GDPR takes place. You have the right at any time to object to the processing or to revoke consent you have given. Further information on your rights can be found under point 6 (“Data subject rights”) and point 7 (“Right to object”) of this privacy policy.
12. Opt-out and objection to advertising (marketing purposes)
As part of our business activities in the B2B sector, we also process your contact data for direct advertising on the basis of our legitimate interest in accordance with Art. 6 (1) sentence 1 lit. f GDPR. In doing so, we always ensure an appropriate balance between our legitimate interests and your rights worthy of protection.
You have the right at any time to object to the processing of your personal data for the purposes of direct advertising in accordance with Art. 21 GDPR. You can send us your objection in any form — for example by e-mail to experts@autodataexperts.de. After receipt of your objection, your data will no longer be processed for advertising purposes.
13. Contact
If you have any questions about data protection on our website or about the handling of your data, please feel free to contact us:
autoDATAexperts GmbH
Heinrich-Hertz-Straße 2
92224 Amberg
experts@autodataexperts.de
We are happy to provide you with further information at any time.