Privacy Policy
Preliminary note
This privacy notices apply to individuals who use our website or online presences within social networks, register on our website or otherwise communicate with our company.
1. Controller for data processing
1.1 The controller for data processing within the meaning of Art. 4 para. 7 GDPR is:
AUCTIONCENTER.de
Adam Krumbach
Berggartenstrasse 19
01277 Dresden
+49 351 41892617
email@auktionszentrum.de
1.2 If you use our online presence on Facebook (so-called "fanpage") or Instagram, we are jointly responsible for the collection of Insight data with the operator of the platforms, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Meta"). We have concluded a controller agreement with Meta regarding the joint processing of personal data (Controller Addendum), which specifies which data processing operations we or Meta are responsible for when you visit our fanpage or Instagram page. This agreement can be viewed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
For further information, please see Section 6.
2. General information on data processing when using our websites
2.1 Server log files
Nature and purpose of processing:
When you visit our website and each time you access a file, our website provider automatically collects and stores information in so-called server log files. These include: browser type and version, operating system used, referrer URL, host name of the accessing computer, date and time of access, and IP address.
The data will be processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability as well as
- to optimize our website.
We do not use your data to draw conclusions about you personally. We may statistically evaluate this type of information anonymously to optimize our website and the technology behind it.
Legal basis:
The processing is carried out in accordance with Art. 6 para. 1 f GDPR based on our legitimate interest in improving the stability and functionality of our website. For this purpose, the server log files must be temporarily recorded.
Recipient:
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website. We have concluded a contract for order processing with these service providers in accordance with Art. 28 para 3 GDPR, which guarantees that your personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Transfer to third countries:
The data collected will not be transferred to third countries.
Storage period:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this generally occurs when the respective session ends. If the data is stored in log files, this occurs after 14 days at the latest. Longer storage is possible. In this case, the users' IP addresses are anonymized so that the accessing client can no longer be identified.
Provision required or necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted.
2.2 Cookies
Type and purpose of use:
These websites use cookies that enable the use of our website's technical functions (technically necessary cookies). Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Most of the cookies we use are automatically deleted after your visit. You can set your browser to inform you when cookies are set, to allow cookies only in individual cases, to exclude cookies for certain cases or generally, and to activate the automatic deletion of cookies when closing the browser. Depending on your browser provider, you can find the necessary information under the following links:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
If cookies are deactivated, the functionality of this website will be limited.
Legal basis:
To the extent that personal data is processed with the help of cookies that are necessary for the electronic communication process, this is done on the basis of Art. 6 para. 1 f GDPR, and otherwise on the basis of Section 25 (2) No. 2 TTDSG. We have a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of our services.
3. Special information when registering on our website
Registration on our website is required if you wish to participate as a bidder/buyer in one of our online auctions.
Nature and purpose of processing:
To register on our website, we require some personal data, which is transmitted to us via an input mask. This data includes the following: company name, first and last name, user name, address and contact details, date of birth, VAT identification number, acceptance of general terms and conditions, newsletter desired yes/no, and the date and time of your registration. The purpose of processing is to identify you in the bidding process and to verify your eligibility to participate. If you are awarded a bid, contract data, payment transaction data, data about correspondence with you or other parties, and receivables and payment data will also be processed. The purpose of processing is to fulfill our mutual contractual obligations.
Legal basis:
The processing of the data entered during registration is based on Art. 6 para.1 b GDPR for the initiation and execution of a contractual relationship.
Recipient:
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website. If a purchase contract for the auctioned item is concluded, your first and last name, as well as your address and contact details, may be transmitted to the seller.
Transfer to third countries:
The data collected will not be transferred to third countries.
Storage period:
If you have not participated in an auction or have not been awarded a bid, your registration data will be stored until you request that we cancel your registration. If a purchase contract has been concluded, the personal data will be stored until the mutual obligations arising from this contractual relationship have been fully fulfilled. Storage beyond this point in time will occur if this is required due to commercial and tax law regulations for the recording of business transactions and the retention of documents. The periods stipulated in commercial and tax law are 2-10 years. If the data is no longer required to fulfill contractual or legal obligations, it will be deleted. A review of whether the conditions for deletion are met is generally carried out annually.
Provision required or necessary:
There is no legal obligation to provide data. However, there is a contractual obligation to provide data if you wish to participate in an auction as a bidder. Without providing the data, you cannot participate in any auction.
4. Special information on data processing when registering for our newsletter
Nature and purpose of processing:
If you sign up for our free newsletter, the data you provide, i.e., your email address, will be transmitted to us. The email address is processed for the purpose of delivering the newsletter and to verify that the registration was actually made by the owner of the email address. For this purpose, we use the "double opt-in" procedure. We log the newsletter registration, the sending of a confirmation email, and the receipt of the requested response. No further data is collected.
Legal basis:
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 a GDPR.
Recipient:
Recipients of the data may be our technical service providers (website and email account providers).
Transfer to third countries:
The data collected will not be transferred to third countries.
Storage period:
In this context, the data will only be processed as long as the corresponding consent has been obtained. After that, it will be deleted.
Provision required or necessary:
The provision of your personal data for the purpose of sending the newsletter is voluntary. However, without your consent, we unfortunately cannot send you our newsletter.
Revocation of consent:
You can revoke your consent to the processing of your data for the purpose of sending the newsletter at any time with future effect. A corresponding link is included in every newsletter. You can also unsubscribe directly on this website at any time or notify us of your revocation using the contact option provided at the end of this privacy policy.
5. Special instructions for contacting us by email or other electronic means of communication
Nature and purpose of processing:
If you contact us via email or other electronic means of communication, the data you provide will be processed. This data may include your email address and other contact details, your name, and your request. We process the data to respond to your message or answer your inquiry.
Legal basis:
The data is processed on the basis of a legitimate interest (Art. 6 para. 1 f GDPR). We have a legitimate interest in the effective processing of inquiries and requests addressed to us. If you contact us to request a quote, the data transmitted to us will be processed to carry out pre-contractual measures (Art. 6 para. 1 b GDPR).
Recipient:
Recipients of the data may be our technical service providers, e.g. the email service provider.
Transfer to third countries:
The data collected will not be transferred to third countries.
Storage period:
The data you provide will remain with us until you request its deletion or the purpose for storing it no longer applies (e.g., after your request has been processed). Storage beyond this point in time will occur if required by commercial and tax law for recording business transactions and retaining documents. The retention periods stipulated in commercial and tax law are 2-10 years. If the data is no longer required to fulfill contractual or legal obligations, it will be deleted.
Provision required or necessary:
Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the subject of your request.
6. Special information on data processing on YouTube, Facebook fan page and Instagram
This privacy policy applies to the following social media presences
- https://www.facebook.com/p/Autobox-Dresden-GmbH-100086700134598
- https://www.instagram.com/autobox.de/
- https://www.youtube.com/@auktionszentrum-de
Data processing by social networks
We maintain publicly accessible profiles on social networks. You can find the social networks we use below.
Social networks such as Facebook, Instagram, LinkedIn, and YouTube can generally comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g., Like buttons or advertising banners). Visiting our social media presences triggers a variety of data processing operations. Below, we provide you with an overview of which of your personal data we collect, use, and store when you visit our profiles.
In detail:
When you visit our profiles, your personal data is collected, used, and stored not only by us but also by the operators of the respective social network. This occurs regardless of whether you are logged into your social network or not, or even if you do not have a profile on the respective social network.
Using the data collected in this way, the operators of the respective social network can create user profiles that contain your preferences and interests. This allows them to display interest-based advertising both within and outside of the respective social network. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please note that we are not necessarily able to trace the individual data processing operations and their scope. These vary depending on the operator of the respective social network. Details about the collection and storage of your personal data, as well as the type, scope, and purpose of its use by the operator of the respective social network, can be found in the terms of use and privacy policies of the respective operator.
Legal basis
The data processing within the framework of our social networks is intended to improve the user experience when visiting our fan pages in a target group-oriented manner and to ensure the most comprehensive presence possible on the Internet.
The legal basis for data processing is therefore a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).
Responsible person and assertion of rights
If you visit one of our social networks (e.g., Facebook, Instagram, LinkedIn), we and the operator of the respective social network are jointly responsible for the data processing operations initiated during this visit. You can generally assert your rights (rights to information, rectification, erasure, restriction of processing, data portability, and complaints) both against us and against the operator of the respective social network (e.g., Facebook, Instagram, LinkedIn).
Please note that despite our shared responsibility with the social media portal operators, we do not have full influence over the data processing practices of the respective social network. Our options depend largely on the company policies of the respective provider.
Storage period
The data we collect directly via social networks will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g., in their privacy policy, see below).
Your rights
As a data subject, you have the following rights:
– You have the right to obtain information from us free of charge about the processing of your personal data within the scope of Art. 15 GDPR;
– You have the right to request that we immediately rectify any inaccurate personal data concerning you and/or complete any incomplete personal data within the scope of Art. 16 GDPR;
– You have the right to demand the immediate erasure of personal data concerning you within the scope of Art. 17 GDPR;
– You have the right to request the restriction of data processing concerning you within the scope of Art. 18 GDPR; – You have the right to receive the personal data concerning you that you have provided to us in a structured and machine-readable format and to transmit this data to another controller within the scope of Art. 20 GDPR;
– You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation, within the scope of Art. 21 GDPR, provided that the processing is based on an overriding interest or your data is used for the purpose of direct marketing;
– You have the right to withdraw your consent to data processing at any time, without affecting the legality of the data processing carried out on the basis of the consent up to the time of withdrawal;
– You have the right to complain to a supervisory authority about our processing of your data.
Social networks in detail
Facebook
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as Meta). According to Meta, the collected data is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details, see Meta’s privacy policy: https://www.facebook.com/about/privacy/For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission. Further information on this can be found from the provider at the following link: www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
Instagram
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
For details on how they handle your personal data, please see Instagram’s privacy policy: https://help.instagram.com/519522125107875For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission. Further information on this can be found from the provider at the following link: www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon
House, Barrow Street, Dublin 4, Ireland. Details on how they handle your
For information about personal data, please refer to YouTube’s privacy policy:
https://policies.google.com/privacy?hl=deFor data transfers to the USA, the
Providers are affiliated to the EU-US Data Privacy Framework,
which, on the basis of an adequacy decision of the European Commission,
ensures compliance with European data protection standards. Further information
You can get it from the provider at the following link:
www.dataprivacyframework.gov/s/participant-search/participant-
detail?contact=true&id=a2zt000000001L5AAI&status=Active
7. Information about your rights
7.1 You have the following rights with regard to the data concerning you:
- Right to information, Art. 15 GDPR
- Right to rectification, Art. 16 GDPR
- Right to erasure, Art. 17 GDPR
- Right to restriction of processing, Art. 18 GDPR
- Right to object to the collection, processing and/or use, Art. 21 GDPR (for legal reasons, we will specifically inform you of this right in section 7.4 of this privacy policy)
- Right to data portability, Art. 20 GDPR
7.2. If the processing of personal data is based on your consent pursuant to Art. 6 para 1 a GDPR, you can freely revoke this consent at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of the consent up to the time of revocation. To exercise your revocation, please use the contact details provided in Section 1 or the technical options we referred to in Section 4.
7.3. You can lodge a complaint with a supervisory authority at any time, e.g., the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller. The address of the supervisory authority responsible for us is:
The Saxon Data Protection and Transparency Commissioner
Postal address: PO Box 11 01 32, 01330 Dresden
House address: Devrientstraße 5, 01067 Dresden
Phone: 0351/85471 101
Fax: 0351/85471 109
Internet: www.datenschutz.sachsen.de
Email: post@sdtb.sachsen.de
7.4 Information about your right of objection under Art. 21 GDPR
1) Individual right of objection
You have the right to object at any time to the processing of personal data concerning you based on Art. 6 para.1f GDPR (data processing based on a balance of interests), for reasons related to your particular situation; this also applies to profiling based on this provision within the meaning of Art. 4 para. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2) Right to object to the processing of data for advertising purposes
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling insofar as it is related to direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally using the following contact details:
AUCTIONCENTER.de
Adam Krumbach
Berggartenstrasse 19
01277 Dresden
+49 351 41892617
email@auktionszentrum.de