1. Data protection at a glance
General notes
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.
Data collection on this website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.
How do we collect your data?
Your data is collected in particular by you submitting it to us. This can, for example, be data that you enter in a contact form. Other data is automatically collected by our IT systems when you visit the website. These are primarily technical data (e.g., internet browser, operating system, or time of page visit). The collection of this data takes place automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the flawless provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. For this and any other questions regarding data protection, you can contact us at any time at the address provided in the legal notice. In addition, you have the right to lodge a complaint with the competent supervisory authority. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. Details can be found in the privacy policy under „Right to restriction of processing“.
Analysis tools and third-party tools
When visiting this website, your browsing behavior can be statistically analyzed. This is mainly done using cookies and so-called analysis programs. The analysis of your browsing behavior generally takes place anonymously; the browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your options for objecting to them can be found in the following privacy policy.
2. Hosting
External hosting
This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses, and other data generated through a website.
The hosting service is used for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online offering securely, quickly and efficiently by a professional provider (Art. 6(1)(f) GDPR). Our hosting provider will process your data only to the extent necessary to fulfill its obligations under the contract and comply with our instructions regarding this data.
3. General notes and mandatory information
Privacy policy
The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy statement. When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy statement explains which data we collect and for what purposes we use it. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can involve security vulnerabilities. It is not possible to completely protect data from access by third parties.
Information regarding the responsible body
The responsible party for data processing on this website is:
Automobile expert agency
Dipl.-Ing. Adam Spiczak-Brzezinski
Braunschweiger Str. 47
38302 Salzdahlum
Phone: +49 1769 77 33 667
Email: info@kfzgutachter-bs.de
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage duration
Unless a specific storage period is specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you file a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for its retention. We retain documents related to order requests (e.g., reports, order documents, invoices, and business correspondence) for six, eight, or ten years, depending on the type of document, within the framework of statutory retention obligations (in particular § 147 AO, § 257 HGB); beyond that, insofar as this is necessary for the assertion, exercise, or defense of legal claims (e.g., during ongoing claims settlement or court proceedings). After these deadlines have passed, the data will be deleted.
General information about the legal bases for data processing
We process your personal data, in particular, based on the following legal bases: to fulfill a contract or to perform pre-contractual measures (Article 6(1)(b) GDPR), to fulfill legal obligations (Article 6(1)(c) GDPR), on the basis of our legitimate interests (Article 6(1)(f) GDPR), and – if necessary – based on your consent (Article 6(1)(a) GDPR). Where information is stored on or read from your end device (e.g., cookies or local storage), this is done on the basis of § 25(1) TDDDG (consent) or – if this is absolutely necessary for a service explicitly requested by you – pursuant to § 25(2)(2) TDDDG. The respective legal basis is further specified in the following sections.
Recipients of personal data
As part of the preparation of expert opinions and the settlement of claims, we transmit personal data, insofar as necessary, in particular to the liable third-party insurance company of the accident victim or to your own insurer, to lawyers you have appointed or authorized, to repair shops, and – for the purpose of determining the residual value – to residual value exchanges or residual value purchasers and providers of calculation systems. In addition, we use external service providers (e.g., hosting, email, IT maintenance) who, as processors under Art. 28 GDPR, are bound by contract to us. A transmission to authorities only takes place insofar as we are legally obliged to do so. The legal basis is Art. 6(1)(b), (c) or (f) GDPR.
Data transfer to third countries
Some of the services used on this website (e.g., those from Google or Meta) may transfer personal data to countries outside the European Economic Area, in particular to the USA. For the USA, an adequacy decision has been issued by the EU Commission (EU-US Data Privacy Framework, Art. 45 GDPR), provided that the respective recipient is certified under this framework. Otherwise, the transfer takes place on the basis of the EU standard contractual clauses (Art. 46, Para. 2, letter c GDPR).
Competent supervisory authority
The competent supervisory authority for us is: The State Data Protection Commissioner of Lower Saxony, Prinzenstraße 5, 30159 Hanover, www.lfd.niedersachsen.de.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke a consent that has already been given at any time. This can be done by sending an informal email to us. The legality of data processing carried out up to the time of revocation remains unaffected by the revocation.
Right of objection to data collection in special cases as well as to direct advertising (Art. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ARTICLE 6(1)(e) OR (f) OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE EACH LEGAL BASIS ON WHICH A PROCESSING IS BASED SHALL BE NOTIFIED IN THIS DATA PROTECTION NOTICE. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, PROVIDED THAT WE CAN PROVE MANDATORY PROTECTION REASONS FOR THE PROCESSING, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THAT THE PROCESSING IS NECESSARY FOR THE ASSERTION, THE EXERCISE OR THE DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) OF THE GDPR). IF YOUR PERSONAL DATA ARE BEING PROCESSED TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, WHICH IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF SUCH DIRECT MARKETING (OBJECTION IN ACCORDANCE WITH ARTICLE 21(2) OF THE GDPR).
Right to appeal to the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place where the alleged violation occurred. This right to complain is without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have the data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from „http://“ http://„ to “https://”https://“ and the lock symbol appears in your browser line. When SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.
Information, deletion and correction
You have the right, within the framework of applicable legal regulations, at any time to obtain free information about your stored personal data, their origin and recipients, and the purpose of data processing, and, if applicable, a right to rectification or deletion of this data. For this purpose, as well as for any further questions regarding personal data, you can contact us at any time at the address provided in the legal notice.
Right to restrict the processing
You have the right to request the restriction of the processing of your personal data. To exercise this right, you can contact us at any time at the address provided in the legal notice. The right to restrict the processing exists in the following cases:
– If you dispute the accuracy of the personal data we have stored about you, we usually need time to verify this. During the period of the verification, you have the right to request the restriction of the processing of your personal data.
– If the processing of your personal data has taken place/takes place unlawfully, you may request the restriction of data processing instead of deletion.
– If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
– If you have filed a complaint under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data may – apart from their storage – only be processed with your consent or to assert, exercise or defend legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.
4. Data collection on this website
Cookies and similar technologies
Our website uses cookies and similar technologies (e.g., local storage). These are small data files that are stored on or read from your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored (persistent cookies) until you delete them yourself or they automatically expire.
The storage of information on your device and access to it take place only if this is absolutely necessary for the provision of a service explicitly requested by you (§ 25, Para. 2 No. 2 TDDDG), or if you have previously given your consent (§ 25, Para. 1 TDDDG). The subsequent processing of personal data takes place with technically necessary cookies based on our legitimate interest in the technically error-free provision of our services (Art. 6, Para. 1 lit. f GDPR), otherwise based on your consent (Art. 6, Para. 1 lit. a GDPR). You may revoke your consent at any time with effect for the future.
You can set your browser to be informed about the setting of cookies, to allow cookies only in individual cases or to generally exclude them. When cookies are deactivated, the functionality of this website may be limited. You can find out which services use cookies or similar technologies in this privacy policy and in our cookie banner.
Consent management with Real Cookie Banner
We use the WordPress plugin „Real Cookie Banner“ (devowl.io GmbH, Germany) to obtain, manage, and document your consent to the storage of cookies and the use of services. In doing so, your selection, a pseudonymized identifier, the time of the decision, and technical information about your browser are stored on our server. The processing serves to fulfill our documentation obligation (Art. 7, Para. 1 GDPR) and is based on Art. 6, Para. 1, lit. c GDPR. You can change or revoke your settings at any time via the cookie banner or the corresponding link on our website.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files that your browser automatically transmits to us. These include:
– Browser type and browser version
– used operating system
– Referrer URL
– Hostname of the accessing computer
– Time of the server request
– IP address
These data will not be merged with other data sources.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website – for this purpose, the server log files must be collected.
contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR, provided that your request relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing the inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), provided that it has been requested.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been completed). Compulsory legal regulations – in particular retention periods – remain unaffected.
Request via email or phone
If you contact us by email or phone, your request, including all personal data derived from it (name, request), will be stored and processed by us for the purpose of processing your request. We will not disclose this data without your consent.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in effectively processing the requests submitted to us.
The data you submit to us via contact requests remains with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Compulsory statutory provisions – in particular statutory retention periods – remain unaffected.
Online damage report form (damage notification)
Through our online claim form, you can report an accident and request a report from us. In doing so, we process the data you provide, namely your name, address, telephone number, email address, information about your vehicle (e.g., license plate number, vehicle identification number), information about the sequence of events including the accident sketch, information about the offender and their insurance, information about the police, bank details (IBAN), your request regarding the time and location of the inspection, uploaded photos and documents, and your digital signature on the assignment/payment instruction and the power of attorney.
The purpose of the processing is the preparation of the expert report, the execution of the contract, and the enforcement of claims for damages against the regulated insurer. The legal basis is Art. 6(1)(b) GDPR (contract or pre-contractual measures). We process the data of the accident victim based on our and your legitimate interest in the settlement of the claim (Art. 6(1)(f) GDPR). The information is voluntary; however, without the required information, we cannot prepare the report or only to a limited extent.
After submitting, your information, the generated PDF documents, and your files are transmitted encrypted (TLS) to our web server and forwarded to us via email (Contact Form 7 plugin). No permanent storage in the website database takes place; only for your personal link, your information is temporarily stored (see „Personal link to the questionnaire“). For assigning a continuous report number, only a daily counter without personal reference is stored on our server. The recipients of your data and the storage duration result from the sections „Recipients of personal data“ and „Storage duration“.
To ensure that your entries are not lost if the page closes accidentally, a draft is stored locally in your browser's memory (Local Storage) on your device; it is not transmitted to us before you submit the form. The draft is automatically deleted after successful submission; you can also remove it at any time via the Reset Form function or by deleting your browser data. This storage is absolutely necessary for the function you requested (§ 25, Para. 2, No. 2 TDDDG).
Personal link to the questionnaire
To allow you to add or sign the questionnaire later, we store your details (without photos and documents) and – if you have already signed – your signature when submitting them for 30 days on our web server under a randomly generated, non-predictable key. When you reopen the link, only the information that has already been sent and the signature that has already been made will be displayed and cannot be changed again. You will receive the link in the confirmation email and on the confirmation page; only those who know this link have access to it – please do not forward it. After 30 days, the data will be automatically deleted. The legal basis is Art. 6(1)(b) GDPR (contract initiation and execution).
Language input (typing function)
In the field for the sequence of events, you can optionally dictate your text using a microphone. The function only starts when you tap „Dictate“ and allow microphone access in your browser. The conversion to text is handled by your browser’s speech recognition; your input is processed by the respective browser provider (in Chrome by Google, in Edge by Microsoft, in Safari by Apple) and can be sent to their servers, also in the USA. The transmission to the USA is based on the EU-US Data Privacy Framework. We ourselves do not receive audio recordings but only the text you send. The legal basis is your consent (Art. 6(1)(a) GDPR); you can also type the text yourself at any time.
AI-based sketch proposal
Optionally, you can have a proposal for the accident sketch created from your accident description. This only happens if you trigger the function yourself by clicking the „Suggest accident sketch from my description“ button; by clicking this button, you consent to the transmission. Only the text of your accident description is transmitted; after that, any identifiable email addresses, phone numbers, and license plates are automatically removed. The recipient is the AI service from Anthropic (Anthropic Ireland, Limited or Anthropic, PBC, USA), which calculates the vehicle list from it. Anthropic processes the data on our behalf and does not use it for training its AI models. A transmission to the USA takes place based on the EU standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can revoke at any time with effect for the future. Without consent, you can create the sketch yourself as usual.
Communication and shipping via WhatsApp
You can contact us via WhatsApp (e.g., via the WhatsApp button on our website) and, if desired, send us the documents of the damage report via WhatsApp in addition. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of the Meta group. A connection to WhatsApp is only established when you yourself press the button or use the sharing function. The content is end-to-end encrypted; however, WhatsApp processes metadata (e.g., phone number, time of communication) and may also transfer it to the USA (EU-US Data Privacy Framework). The use of WhatsApp is voluntary; alternatively, you can contact us by email or phone. The legal basis is Art. 6(1)(b) GDPR or your consent (Art. 6(1)(a) GDPR). Further information: https://www.whatsapp.com/legal/privacy-policy-eea
5. Plugins and Tools
Google reCAPTCHA
To protect our forms from spam and automated access, we use „Google reCAPTCHA“ by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA checks whether input is made by a human using various features (e.g., IP address, duration of stay, mouse movements, browser information); this data is transmitted to Google, also to the USA (EU-US Data Privacy Framework). The use is based on our legitimate interest in protecting our website from abuse (Art. 6(1)(f) GDPR). If appropriate consent has been requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG; consent can be revoked at any time. Further information: https://policies.google.com/privacy
Google Fonts
This website uses „Google Fonts“ from Google Ireland Limited for uniform display of fonts. When a page is accessed, your browser loads the required fonts from Google servers; Google is informed that this website was accessed via your IP address. A transfer to the USA is possible (EU-US Data Privacy Framework). Use is based on Art. 6(1)(f) GDPR; we have a legitimate interest in uniform display of the font. If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Further information: https://developers.google.com/fonts/faq/privacy
Google Analytics
This website uses Google Analytics 4, provided by Google Ireland Limited (integrated via the „MonsterInsights“ plugin), with your consent, to statistically analyze website usage. This includes information about the pages visited, time spent on the site, the origin of the visit, and device and browser information; IP addresses are not stored in Google Analytics 4. A transfer to the USA is possible (EU-US Data Privacy Framework). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can revoke at any time via the cookie banner. Further information: https://policies.google.com/privacy
Google reviews (Trust index)
To display customer reviews from Google, we use a widget from the provider Trustindex.io. When the widget is loaded, content and profile images are retrieved from servers owned by Trustindex and Google; in doing so, your IP address is transmitted to these providers. The use is based on our legitimate interest in presenting customer reviews in an appealing manner (Art. 6(1)(f) GDPR). If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Instagram and Facebook content
This website displays posts and images from our social media profiles on Instagram and Facebook (Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland). When loading these content, images are retrieved from Meta servers and your IP address is transmitted to Meta, possibly also to the USA (EU-US Data Privacy Framework). Links to our profiles are included as simple links; data is only transmitted when clicking on them. Use is based on Art. 6(1)(f) GDPR; if appropriate consent has been requested, solely on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Status: October 2026
