Privacy Policy
Last updated: 20 October 2025
1. Controller
Delta Garage UG (haftungsbeschränkt)
Adam Wesolowski
Pfaffenhofener Str. 3 A
85302 Gerolsbach, Germany
Phone: +49 160 94663915
E-mail: service@deltagarage.de
2. General information on data processing
Unless stated otherwise below, the provision of personal data is neither legally nor contractually required. You are not obliged to provide data; failure to provide data has no consequences. “Personal data” means any information relating to an identified or identifiable natural person.
3. Server log files
When you access our website, your browser automatically transmits usage data (e.g., requested URL, date/time, IP address, transferred data volume, referrer, user agent) to us and/or our hosting provider where it is stored in server log files.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure, error-free operation and optimisation of our website).
4. Hosting / Data Processing Agreement
Hosting is provided by 1blu AG, Riedemannweg 60, 13627 Berlin, Germany.
We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with 1blu.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable website operation).
5. Consent Management (CMP) / IAB TCF 2.2 / Withdrawal
We use the certified consent management platform Consentmanager.net. Via this CMP we obtain consent pursuant to Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act) and control all non-essential cookies/IDs. Consentmanager transmits the IAB TCF 2.2 transparency and consent string to integrated vendors.
The Google Consent Mode v2 is active: by default, the signals (ad_user_data, ad_personalization, ad_storage, analytics_storage) are set to “denied” and will only be updated after you give consent.
You can change or withdraw your choice at any time: Cookie settings.
The current vendor and purpose list (incl. retention periods and legal bases) is displayed dynamically in the CMP.
6. Contact
6.1 E-mail contact
We process the data you provide to handle your enquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual) or Art. 6(1)(f) GDPR (legitimate interest in communication; right to object).
6.2 Contact form
As above; processing is carried out to handle your enquiry.
6.3 WhatsApp Business
Provider: WhatsApp Ireland Ltd. (EU) / WhatsApp Inc., USA. Data transfers to the USA may occur (TADPF adequacy decision).
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR (legitimate interest in fast communication; right to object).
7. Customer account & orders
7.1 Customer account
Processing to create and manage your account.
Legal basis: Art. 6(1)(a) GDPR (consent).
7.2 Order and fulfilment data
Processing to perform the contract and sharing with shipping, payment and IT service providers to the extent necessary.
Legal basis: Art. 6(1)(b) GDPR.
8. Advertising & newsletters
8.1 Postal advertising
Use of your name and address for direct marketing of our own products.
Legal basis: Art. 6(1)(f) GDPR (right to object at any time).
8.2 Direct e-mail marketing to existing customers
E-mail marketing for similar own products after a purchase, unless you object.
Legal basis: Art. 6(1)(f) GDPR in conjunction with Sec. 7(3) UWG (German Unfair Competition Act).
8.3 Newsletter
Sent to subscribers after consent; you can unsubscribe at any time.
Legal basis: Art. 6(1)(a) GDPR.
9. Payment services (extract)
PayPal Express / PayPal Check-Out
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. When using PayPal options, PayPal may process device/usage data and set cookies.
Legal bases: Sec. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (technologies after consent), Art. 6(1)(b) GDPR (payment processing).
Details are provided by PayPal and Ratepay during checkout.
10. Cookies
Technically necessary cookies serve functionality and security. Non-essential cookies/IDs for analytics and marketing are set only after consent via the CMP.
Legal bases: Sec. 25(2) or Sec. 25(1) TDDDG in conjunction with Art. 6(1)(f) or Art. 6(1)(a) GDPR.
Withdrawal:Cookie settings
11. Analytics & marketing
11.1 Google Tag Manager
Controls tags according to your CMP consent; does not set cookies itself and does not process personal data.
Legal basis: Art. 6(1)(f) GDPR.
11.2 Google Analytics 4 (with Consent Mode v2)
Provider: Google Ireland Limited, Dublin.
Purposes: Reach and usage analysis and — if consent is given — optimisation.
Consent Mode v2: Before consent, no analytics/marketing cookies are set; Google only receives “cookieless pings” (e.g., timestamp, referrer, user agent) for modelling. IP addresses are not logged in GA4.
Legal bases: Sec. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
Third-country transfer: USA possible (Google is certified under the TADPF).
Withdrawal:Cookie settings
Further information: Google Privacy | Partner sites
11.3 Google Ads (Conversion Tracking)
Provider: Google Ireland Limited, Dublin.
Purpose: Measuring the success of our Google ads (conversions). (No remarketing in use.)
Consent Mode v2: Before consent, no advertising cookies; Google may receive anonymous signals for modelling.
Legal bases: Sec. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
Third-country transfer: USA (TADPF).
Withdrawal:Cookie settings
12. Maps & media
12.1 Google Maps
Embedding for location display; processing by Google.
Legal bases: Sec. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR; USA transfer (TADPF).
Withdrawal:Cookie settings
12.2 OpenStreetMap
Open-source maps (OSMF, UK); data such as IP, date, browser may be processed. If logged into OSM, association with your account may occur.
Legal bases: Sec. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR; UK adequacy decision.
12.3 YouTube (Enhanced Privacy Mode)
Videos are loaded only when played; data is then transmitted to YouTube (Google).
Legal bases: Sec. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR; USA transfer (TADPF).
Withdrawal:Cookie settings
13. Fonts (Google Fonts)
Fonts are hosted locally; no connection to Google servers is established.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a uniform display).
14. Händlerbund membership logo
When accessed, temporary technical log data (IP, time, URL, referrer, browser) is processed for up to 7 days.
Legal basis: Art. 6(1)(f) GDPR (security and functionality).
15. Retention
After full performance of the contract, data is retained until expiry of statutory retention periods and then deleted, unless consent or overriding legitimate interests justify longer storage.
16. Rights of data subjects
You have the rights under Art. 15–20 GDPR (access, rectification, erasure, restriction, portability). Under Art. 21 GDPR you have a right to object to processing based on Art. 6(1)(f) GDPR and to direct marketing. You can withdraw consent (Art. 6(1)(a) GDPR) at any time with effect for the future — easiest via Cookie settings.
17. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Competent for us, inter alia:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 981 180093-0 • E-mail: poststelle@lda.bayern.de