1. Controller
Ingenieurbüro Ghalkhani GmbH
Felix-Wankel-Straße 3
26125 Oldenburg
Telephone: 0441 / 30 49 123
Email: kontakt@kfz-abnahme.de
2. Accessing the website and server logs
When you access the website, technically necessary connection data is processed. This may include your IP address, time of access, requested address, volume of data transferred, referrer, and browser and operating-system information. Processing is necessary to provide the website securely and without errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of this website. Logs are used only for operation and abuse prevention and are not used to create profiles.
3. Hosting
A server service provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, is intended for production operation. The hosting provider processes the data required for operation on our behalf. A data processing agreement will be concluded and the specific server region documented before the website goes live.
4. Contact form and contacting us
When you write to us, we process your name, email address, where applicable your telephone number and preferred location, as well as the subject and message. We use this information solely to handle your enquiry and answer follow-up questions. If the enquiry concerns a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. General enquiries are processed on the basis of our legitimate interest in appropriate communication under Art. 6(1)(f) GDPR.
After successful submission, we send an automatic acknowledgement to the email address provided. It contains the selected subject area, but not the complete message or uploaded documents. It is sent through the same email service used to process the enquiry.
The required confirmation in the form documents that you have taken note of this information; it does not replace separate consent as a legal basis. We delete messages once the enquiry has been fully handled and no statutory retention or documentation obligations prevent deletion.
5. ALTCHA security check
The contact form uses ALTCHA as a self-hosted, privacy-friendly security check. Your browser solves a cryptographic task to make automated form submissions more difficult. No content from Google or other CAPTCHA providers is loaded, no tracking cookies are set, and no data is used for advertising. Technical challenge data and the IP address are processed briefly in memory for rate limiting and abuse prevention. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the form against spam and attacks.
6. Map and route links
Maps are not embedded automatically. Location maps are provided solely as external links to Google Maps. When you select a route link, a privacy notice first appears on our website. Google Maps opens in a new window and a connection to Google is established only after your express confirmation. Google may then process your IP address, browser and device information and, depending on your settings, location data. Google’s privacy policy applies to the subsequent processing.
7. Essential storage, tracking and external fonts
This website uses the essential cookie ghalkhani_walk_in_dismissed. For 180 days it remembers that the notice about inspections without an appointment was closed, so that it does not open automatically again on other pages. The cookie is set only by this website, contains no information that identifies a person, and cannot be used for analytics or advertising.
When you select a language, we store only the selected language code in your browser’s local storage under ghalkhani_language. This ensures that your manual choice takes priority over automatic browser-language detection. The entry remains until you make another selection or delete the website data in your browser.
Both storage values serve only the interface settings you have chosen. The legal basis is Section 25(2)(2) TDDDG in conjunction with Art. 6(1)(f) GDPR. Our legitimate interest is an uninterrupted, user-friendly presentation.
We do not use web analytics, advertising trackers or social-media pixels. The website uses local system fonts; no font files are loaded from external services. A complete overview is available under Cookie Settings. As only technically necessary storage is used, no consent selection is required.
8. Recipients and transfers to third countries
Within the company, access is limited to persons who need to handle your enquiry. Technical service providers receive data only to the extent necessary and on a contractual basis. Transfers to countries outside the EU or EEA are not intended for normal website operation. This does not affect a switch to an external provider such as Google Maps that you deliberately initiate.
9. Your rights
Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation. You may also lodge a complaint with a data protection supervisory authority. In particular, the State Commissioner for Data Protection of Lower Saxony is competent.
10. Security and updates
We use technical and organisational measures to protect data against loss, manipulation and unauthorised access. These include encrypted transmission, restrictive security headers, input validation and access controls. We update this policy when technology, service providers or the legal situation change.