Privacy Policy (Datenschutzerklärung)

1. Name and Address of the Data Controller

The controller within the meaning of the General Data Protection Regulation (Art. 4 No. 7 GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG) for www.carwashh.shop is:

2. Data Protection Officer (DPO)

In accordance with Art. 37 GDPR and § 38 BDSG, our designated Data Protection Officer can be contacted directly at:

Data Protection Officer
Carwashh Shop GmbH
Friedrichstraße 176–179, 10117 Berlin, Germany
E-Mail: dpo@carwashh.shop

3. General Information on Data Processing

3.1 Scope of Processing

We only process personal data of our users insofar as this is necessary to provide a functional website as well as our automotive detailing and car wash services, reservation systems, and customer support.

3.2 Legal Bases under Art. 6(1) GDPR

• Consent (Art. 6(1)(a) GDPR): When you have explicitly granted consent (e.g. for marketing cookies or voluntary newsletter subscription).
• Contractual Performance (Art. 6(1)(b) GDPR): When processing is required to fulfill a vehicle detailing service agreement or pre-contractual booking quote.
• Legal Obligation (Art. 6(1)(c) GDPR): For mandatory financial record preservation under the German Commercial Code (§ 257 HGB) and Fiscal Code (§ 147 AO).
• Legitimate Interests (Art. 6(1)(f) GDPR): For server security, DDoS defense, fraud prevention, and quality assurance.

4. Data Collected When Visiting www.carwashh.shop

Every time you access our website, our server infrastructure automatically collects temporary technical information in server log files:

• Browser type and version installed on client machine
• Operating system used
• Referrer URL (the previous page from which you arrived)
• Host name and IP address of the accessing terminal
• Date and exact server timestamp of request
• HTTP status code and volume of bytes transferred

Legal basis: Art. 6(1)(f) GDPR. Data is stored for a maximum of 14 days solely for security monitoring, after which IP addresses are permanently anonymized or purged.

5. Online Detailing Bookings & Vehicle Data

When you submit an appointment reservation through carwashh.shop/booking, we collect:

• Full Name and Salutation
• Contact details: Email address and telephone / mobile number
• Vehicle data: Make, Model, License plate registration number (e.g., B-CW-2026), vehicle classification (Hatchback, Sedan, SUV, Supercar)
• Selected detailing package and optional upgrades (e.g., 9H Ceramic coating, Steam Interior)
• Preferred appointment date and workshop branch (Berlin-Schöneberg or Mobile Unit)

Legal basis: Art. 6(1)(b) GDPR. This data is strictly utilized to schedule detailing bay allocations, perform vehicle condition checks, and generate statutory tax receipts.

6. Contact Forms and Inquiries

If you send us inquiries via our contact form or email (info@carwashh.shop), your provided inquiry details including contact particulars are stored for the purpose of processing the request and in case of follow-up questions.

7. Cookies and Storage Technologies

In strict adherence to the German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz - TDDDG) and the ePrivacy Directive:

• Technically Essential Cookies: Strictly required to operate the site, security tokens, and maintain session selections (§ 25 Abs. 2 Nr. 2 TDDDG). No prior consent required.
• Analytical / Performance Cookies: Only activated after your voluntary opt-in consent through our DSGVO Cookie Banner (§ 25 Abs. 1 TDDDG & Art. 6(1)(a) GDPR).

You can review or revoke your consent preferences at any time by clicking the "Cookie Preferences" link in our footer.

8. Statutory Data Retention Periods in Germany

Personal data is deleted as soon as the purpose for which it was collected ceases to apply. Under German law, commercial and tax documentation must be retained:

• 6 Years: Commercial correspondence (§ 257 Abs. 4 HGB).
• 10 Years: Accounting records, tax invoices, and booking transaction logs (§ 147 Abs. 3 AO).

9. Your Rights as a Data Subject under GDPR

As a user residing in Germany, the EU, or internationally, you hold the following unconditional rights:

• Art. 15 GDPR (Right of Access): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and to request a free copy.
• Art. 16 GDPR (Right to Rectification): You have the right to request the immediate correction of inaccurate or incomplete personal records.
• Art. 17 GDPR (Right to Erasure / 'Right to be Forgotten'): You may request the deletion of your data unless processing is required by law (e.g. tax retention).
• Art. 18 GDPR (Right to Restriction): You have the right to restrict processing under certain statutory circumstances.
• Art. 20 GDPR (Right to Data Portability): You may request your data in a structured, commonly used, and machine-readable format.
• Art. 21 GDPR (Right to Object): You may object at any time to the processing of your personal data on grounds relating to your particular situation.
• Art. 7(3) GDPR (Withdrawal of Consent): You may revoke any previously granted consent at any time with effect for the future.

10. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory data protection authority, in particular in the Member State of your habitual residence or workplace.

Our competent lead supervisory authority in Berlin is:

11. SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, such as appointment reservations and contact requests that you send to us as the site operator, www.carwashh.shop utilizes end-to-end 256-bit SSL/TLS encryption. You can verify an encrypted connection by the padlock icon in your browser address bar and the "https://" protocol.

12. Status and Amendments

This Privacy Policy was last updated in 2026. We reserve the right to adapt this declaration in order to conform with altered legal requirements or new studio services.