Legal information
Privacy policy
Information on the processing of personal data on the website of MT Autobörse GmbH.
Controller
The controller within the meaning of the General Data Protection Regulation is MT Autobörse GmbH, Daimlerstraße 1, 64347 Griesheim, Germany, represented by managing director Marko Tomic. Phone: +49 6155 6678970. Email: info@mt-autoboerse.de.
Commercial register: Local Court of Darmstadt, HRB 8005.
Data protection officer
Whether there is a statutory obligation to appoint a data protection officer under Art. 37 GDPR and § 38 BDSG will be assessed against the actual organisation before launch. Until this has been clarified, please direct all data protection questions to info@mt-autoboerse.de or to the postal address above, marked "Data protection".
Hosting and server logs
The hosting provider, server location and data processing agreement will be added before launch on the basis of the actual production system. This working draft makes no assumption about them.
When you visit the website, the web server processes technically necessary connection data. This includes IP address, date and time of access, requested address, transferred data volume, referrer, browser, operating system and access status.
Processing serves the secure and stable provision of the website, error analysis and the prevention of attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable and secure operation of the website.
The specific server-log retention period will be checked with the selected hosting provider and inserted here before launch.
Enquiry forms
The website provides seven enquiry forms: the contact form, the callback form, the enquiry about a specific vehicle, the financing enquiry, the leasing enquiry, the purchase and trade-in enquiry and the test-drive enquiry. Depending on the form, we process your name, email address, phone number, your message, the vehicle reference, the preferred callback time, details of the financing or leasing framework such as deposit and term, the key details of an offered vehicle or the requested test-drive date.
The purpose of processing is the handling of your enquiry and the performance of pre-contractual steps. The legal basis is Art. 6(1)(b) GDPR; for enquiries without a contractual context, the legal basis is Art. 6(1)(f) GDPR, our legitimate interest being the proper handling of business enquiries.
Form recipients, the email and SMTP providers and the technical delivery route will be added before launch on the basis of the production system. Form data will not be displayed publicly.
The operational retention period for completed enquiries will be defined and inserted before launch. Statutory retention obligations remain unaffected.
Special categories of personal data within the meaning of Art. 9 GDPR, such as health data, are neither requested nor required by the forms. Please do not send us such data. Special data received accidentally will be deleted unless a separate legal basis permits its processing.
Vehicle search alert with double opt-in
For a vehicle search alert we process your email address and the selected search criteria. The alert becomes active only after you click a confirmation link sent by email (double opt-in). To document your consent, we store the time of subscription and of confirmation.
The legal basis is your consent under Art. 6(1)(a) GDPR. You can revoke the search alert at any time with effect for the future by using the unsubscribe link contained in every notification or by emailing info@mt-autoboerse.de.
Search alert data is stored in the website database. Unconfirmed subscriptions are deleted automatically after seven days. Upon unsubscribing, the search alert and all related data are deleted completely.
Email and telephone
When you contact us by email or telephone, we process your contact data and the communicated content to handle the matter. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR.
The provider and location of the production email system and the operational deletion period will be added before launch. Business and commercial letters and tax-relevant documents are retained for the applicable statutory periods.
Vehicle inventory and mobile.de
The website imports vehicle data and vehicle images through an interface from the dealer inventory maintained by MT Autobörse GmbH on mobile.de. The import runs server-side and keeps the displayed inventory current. No personal data of website visitors is transmitted to mobile.de.
If you open an external link to mobile.de, the privacy information of the respective platform operator applies.
Google Maps as click-to-load embed
The route map is not loaded automatically. Only when you activate the clearly labelled map function is a connection to Google Maps established. This may transmit in particular your IP address, browser data and approximate location information to Google.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Use of the map may involve a transfer to Google LLC in the USA and thus to a third country. Google is certified under the EU-US Data Privacy Framework; standard contractual clauses pursuant to Art. 46 GDPR apply in addition.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by activating the map. The consent applies to the respective visit; without renewed activation, no connection is established. Google privacy information: policies.google.com/privacy.
WhatsApp and other external channels
WhatsApp, Google, mobile.de, Instagram and Facebook are integrated exclusively as external links. As long as you do not open one of these links, no connection to the respective provider is established. When opened, its privacy terms apply.
If you contact us via WhatsApp, WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, processes the data you transmit under its own terms. This may involve a transfer to Meta companies in the USA and thus to a third country; Meta is certified under the EU-US Data Privacy Framework. The legal basis for our processing is Art. 6(1)(b) GDPR for contract-related matters, otherwise Art. 6(1)(f) GDPR based on the contact channel you have chosen yourself.
Please do not send confidential documents such as ID copies or financing documents via WhatsApp; use email or personal contact instead.
Recipients and third-country transfers
Personal data is shared only with parties that need it for the relevant purpose. The specific roles of the hosting and email providers and of financing, warranty, transport or registration partners will be added before launch on the basis of the providers actually used.
Possible third-country transfers through external services will be assessed for every service that is actually activated before launch. Google Maps and other external channels are not loaded without prior activation.
Storage periods
The following periods are already implemented technically: unconfirmed search alerts are deleted after seven days; active search alerts remain stored until you unsubscribe. The periods for server logs, form enquiries, email correspondence and backups will be added before launch on the basis of the actual service providers and the operational deletion policy.
If a contract is concluded, contract-related and tax-relevant documents are retained for the applicable statutory periods. Beyond that, we store data only for as long as required to assert or defend legal claims.
Your rights in detail
Right of access (Art. 15 GDPR): you may request information on whether and which personal data we process about you.
Right to rectification (Art. 16 GDPR): you may request the correction of inaccurate data and the completion of incomplete data.
Right to erasure (Art. 17 GDPR): you may request the deletion of your data unless a legal obligation or a legitimate reason requires continued storage.
Right to restriction of processing (Art. 18 GDPR): you may request the restriction of processing under the statutory conditions.
Right to data portability (Art. 20 GDPR): you may request that we provide the data you have supplied in a structured, commonly used and machine-readable format.
Right to withdraw consent (Art. 7(3) GDPR): you may withdraw consent you have given at any time with effect for the future; the lawfulness of processing carried out before the withdrawal remains unaffected.
An informal message to info@mt-autoboerse.de or to our postal address is sufficient to exercise your rights.
Right to object under Art. 21 GDPR
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON ART. 6(1)(F) GDPR. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
We do not conduct direct marketing through this website. Should we use your data for direct marketing in the future, you may object at any time without giving reasons; the data will then no longer be processed for this purpose.
Objections should be addressed to info@mt-autoboerse.de or to our postal address.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.
The supervisory authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (the Hessian Commissioner for Data Protection and Freedom of Information), Wilhelmstraße 7, 65185 Wiesbaden, Germany, postal address: Postfach 3163, 65021 Wiesbaden, phone: +49 611 1408-0, email: poststelle@datenschutz.hessen.de, website: datenschutz.hessen.de.
Obligation to provide data and automated decisions
Providing personal data is neither legally nor contractually required. Without the information marked as required in the forms, however, we cannot process the respective enquiry.
No decision-making based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR takes place on this website. Decisions on financing applications are made by the financing bank on its own responsibility under its own privacy information; leasing requests are decided by us after individual assessment.
Version and changes
Version dated 13 August 2026. We will update this privacy policy if website functions, service providers or legal requirements change. The current version is always available on this page.