Privacy and data security are fundamental principles for classic-analytics. We adhere to all data protection regulations in all of our
understandable for you. To ensure this, we would like to explain the terms used in advance.
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject").
An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name,
an identification number, location data, an online identifier, or one or more specific factors that express the physical, physiological, genetic,
mental, economic, cultural, or social identity of that natural person.
A data subject is any identified or identifiable natural person whose personal data is processed by the data controller.
Processing refers to any operation or set of operations, whether carried out by automated means or not, concerning personal
data. This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval,
consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination,
restriction, erasure, or destruction of personal data.
Limitation of Processing
Limitation of processing involves marking stored personal data with the aim of restricting their future processing.
Profiling is any form of automated processing of personal data that involves the use of these personal data to evaluate
certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that person's
job performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Pseudonymization is the processing of personal data in a way that the data can no longer be attributed to a specific data
subject without the use of additional information, provided that such additional information is kept separately and subject
to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable
Controller or data controller means the natural or legal person, authority, agency, or other body that, alone or jointly with
others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing
are determined by Union law or the law of Member States, the controller or the specific criteria for their nomination may be
provided for by Union law or the law of Member States.
Processor means a natural or legal person, authority, agency, or other body that processes personal data on behalf of the controller.
Recipient means a natural or legal person, authority, agency, or other body to whom personal data is disclosed, whether a third party
or not. However, authorities that may receive personal data in the context of a particular inquiry in accordance with Union or Member
State law are not considered recipients.
A third party is a natural or legal person, authority, agency, or other body other than the data subject, the controller, the processor,
and the persons who, under the direct authority of the controller or the processor, are authorized to process personal data.
Consent means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they,
by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
Name and Contact Details of the Controller
Controller for the processing of personal data according to Art. 4 No. 7 GDPR is:
Classic Car Analytics GmbH
Represented by the Managing Directors Frank Wilke, McKeel Hagerty, and Fred Turcotte
Tel. +49 (0)234-8901600
Fax +49 (0)234-89016020
Your contact person for data protection questions is Frank Wilke
Processing of Personal Data and the Nature and Purpose of Their Use
We process personal data exclusively within the legal framework of the relevant legal provisions. Personal data includes all
information that relates to a natural person or is at least relatable to a person and allows conclusions to be drawn about that person.
Processing includes any operation or set of operations performed with or without the aid of automated processes concerning personal data.
This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use,
disclosure by transmission, dissemination, or any other form of provision, comparison, or linking, restriction, erasure, or destruction.
When you visit our website, information is automatically sent to the server of our website by the web browser on your device. This
information is temporarily stored in a so-called log file or access logs of the web server.
The following information is collected without your intervention and stored until automated deletion:
IP address of the requesting computer,
Date and time of access,
Name and URL of the accessed file,
Website from which access is made (referrer URL),
Browser used and the operating system of your computer, as well as the name of your access provider.
We process the aforementioned data for the following purposes:
Ensuring a smooth connection setup of the website,
Ensuring comfortable use of our website,
Evaluation of system security and stability,
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes listed
above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
Use of Our Contact Form
If you send us inquiries via our contact form, providing a valid email address is required so that we know who the inquiry is from and can
respond to it. Additional information can be provided voluntarily.
The data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR based on your
voluntarily given consent.
Disclosure of Data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only share your personal data
with third parties if:
You have given us explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the disclosure is necessary for the establishment,
exercise, or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding
legitimate interest in not disclosing your data, there is a legal obligation to disclose data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, or
the disclosure is legally permissible and is necessary for the performance of a contract with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.
Some of our data is stored at the Amazon Web Services EU location (in Frankfurt am Main). Therefore, European and German data protection laws apply,
meaning that all data is protected by the EU GDPR as well as the Federal Data Protection Act. For more detailed information on data protection at AWS,
please refer to the following link: https://aws.amazon.com/de
Our company regularly checks the creditworthiness of new customers when concluding contracts and, in certain cases where there is a legitimate interest,
even with existing customers. For this purpose, we cooperate with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from whom we receive the
data required for this purpose. To this end, we transmit your name and contact details to Creditreform Boniversum GmbH. Information in accordance with
Art. 14 of the EU General Data Protection Regulation regarding the data processing carried out at Creditreform Boniversum GmbH can be found
The cookie stores information that is specific to the device you are using.
Furthermore, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific, defined period of time. If you visit
our site again to use our services, it will automatically be recognized that you have already been with us and what inputs and settings you have made, so that
you do not have to enter them again.
(see section 5). These cookies enable us to automatically recognize, when you visit our site again, that you have already been with us. These cookies are
automatically deleted after a defined period of time.
The data processed by cookies is necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with
Art. 6 para. 1 sentence 1 lit. f GDPR. If you do not want this, you can disable the storage of cookies in the browser you are using or set your browser to notify
you when cookies are sent.
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want
to ensure that our website is designed to meet your needs and is continually optimized. On the other hand, we use the tracking measures to statistically record
the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified within the meaning of
the aforementioned provision.
The respective purposes of data processing and the categories of data are to be taken from the relevant tracking tools.
For the purpose of customizing and optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymous usage profiles are created and cookies are used. The information generated
by the cookie about your use of this website, such as
Operating system used,
Hostname of the accessing computer (IP address),
Time of the server request
is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities,
and to provide further services related to website use and internet use for the purposes of market research and customizing these web pages. This information may
also be transferred to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be
merged with other Google data. IP addresses are anonymized, so that assignment is not possible (IP masking).
You can prevent the installation of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all
the features of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website to
Google and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
Alternatively to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the button
below. An opt-out cookie will be set that prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser
and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data
protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European
Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full
IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to
evaluate your use of the website, to compile reports on website activities, and to provide other services related to website usage and internet usage to the
website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Plugins and Tools
This site uses web fonts provided by Google for the uniform representation of fonts. When you access a page, your browser loads the required web fonts into your
browser cache to display text and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This allows Google to know that our website has been accessed via your IP address.
The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the
meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font will be used by your computer.
Social Media Plugins
On our website, we use social media plugins from the social networks Facebook and Twitter based on Art. 6 para. 1 s. 1 lit. f DSGVO. The underlying promotional
purpose is to be considered a legitimate interest within the meaning of the DSGVO. The responsibility for the data protection-compliant operation is to be guaranteed
by their respective providers.
On our website, social media plugins from Facebook are used to make their use more personal. We use the "LIKE" or "SHARE" button for this purpose. This is an
offer from Facebook. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers.
The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. Through the integration of the plugins, Facebook
receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently
logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for
example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The
information is also published on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purpose of advertising, market research, and tailoring Facebook pages to your needs. For this purpose, Facebook creates
usage, interest, and relationship profiles, e.g., to evaluate your use of our website with regard to the ads displayed to you on Facebook, to inform other
Facebook users about your activities on our website, and to provide further services related to the use of Facebook. If you do not want Facebook to associate
the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website. For the purpose and scope of data
collection and the further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to
Our website includes plugins from the Twitter Inc. (Twitter) short message network. You can recognize Twitter plugins (tweet button) by the Twitter logo on
our site. You can find an overview of tweet buttons here (https://about.twitter.com/resources/buttons). When you visit a page of our website that contains such
a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with
your IP address. If you click on the Twitter "tweet button" while logged into your Twitter account, you can link the content of our pages to your Twitter profile.
This allows Twitter to associate the visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no
knowledge of the content of the data transmitted or how it will be used by Twitter. If you do not want Twitter to be able to associate your visit to our pages,
Rights of Data Subjects
As we process your personal data, you have the following rights:
Right to Information
You can request information about your personal data processed by us in accordance with Art. 15 of the GDPR. In particular, you can obtain information about
the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the
envisaged storage period, the existence of the right to rectification, erasure, restriction of processing, or objection, the right to lodge a complaint, the
source of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful
information about the details thereof.
You have the right under Art. 16 of the GDPR to request the immediate correction of inaccurate or incomplete personal data stored by us.
You have the right under Art. 17 of the GDPR to request the deletion of your personal data stored by us, unless processing is necessary for the exercise
of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment,
exercise, or defense of legal claims.
Restriction of Processing
You have the right under Art. 18 of the GDPR to request the restriction of the processing of your personal data in cases where the accuracy of the data
is contested by you, the processing is unlawful, but you oppose its erasure, and we no longer need the data, but you require it for the establishment,
exercise, or defense of legal claims, or if you have objected to processing under Art. 21 of the GDPR.
According to Art. 20 of the GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and
machine-readable format, or you can request the transmission of this data to another controller.
Revocation of Consent
According to Art. 7 para. 3 of the GDPR, you have the right to withdraw your consent to us at any time. This withdrawal will not affect the lawfulness
of processing based on consent before its withdrawal.
Right to Lodge a Complaint
According to Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal
data violates data protection regulations. Typically, you can do this by contacting the supervisory authority in your habitual residence or place of work,
or our company's registered office.
Right to Object
If your personal data is processed based on legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f of the GDPR, you have the right, according to
Art. 21 of the GDPR, to object to the processing of your personal data, provided there are reasons arising from your particular situation or if the
objection is against direct marketing. In the latter case, you have a general right to object that will be implemented by us without specifying any
If you wish to exercise your right to withdraw or object, a notification by mail, fax, or email will suffice.
Data Protection in the Application Process
We process the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is
particularly the case when an applicant submits relevant application documents to us electronically. If we conclude an employment contract with an applicant,
the data transmitted will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no contract is
concluded between the data controller and the applicant, the application documents will be deleted after the rejection decision is communicated, provided
that there are no other legitimate interests of the data controller that oppose deletion. Another legitimate interest in this sense, for example, is the
obligation to provide evidence in a proceeding under the General Equal Treatment Act (AGG).
Duration of Personal Data Storage
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiry of the period, the corresponding
data is routinely deleted, provided it is no longer required for contract fulfillment or initiation.
During your website visit, we use the widely adopted SSL (Secure Socket Layer) protocol for encryption. Whether an individual page of our website is transmitted
in encrypted form can be recognized by the closed display of the key or padlock symbol in the lower status bar of your browser.
We employ technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction,
or unauthorized access by third parties.
As of May 2018