Privacy notice

1. Controller

CleanDrive Mobil, owner Petru Ristea, Ackermannstr. 11, 94342 Irlbach, Germany; +49 172 9292838; info@cleandrivemobil.de.

2. Principles and legal bases

Data is processed only for the website, enquiries, contracts, legal duties or legitimate interests. Main bases are Article 6(1)(a), (b), (c) and (f) GDPR.

3. Hosting and logs

Netlify provides hosting and serverless functions. Technical request, security and log data may be processed to deliver and protect the site, normally for a limited period.

4. Contact

Email, phone and form communications are processed to answer enquiries or perform a contract. Enquiries without a contract are normally deleted after final handling, unless retention is required.

5. Online booking

Name, email, phone, address, postal-code zone, travel fee, vehicle, service, appointment, price, confirmations, identifier and status are processed for pre-contractual measures and performance.

6. Google services

Google Apps Script, Calendar, Sheets, Drive and email process bookings, availability, private registers, PDF contracts and messages. No Google map, route or mileage service is embedded.

7. Contract, invoice and payment

Customer, service, appointment, invoice and payment data is processed under Article 6(1)(b) and (c) GDPR. Tax records are generally kept eight years and business correspondence six years.

8. Reminders and Care Program

Contract reminders are sent under Article 6(1)(b). Care-code status, validity, customer and vehicle are stored for 35-day follow-up care. No automatic Google review request is currently sent.

9. Cancellation and withdrawal

Tokens, booking status and time are processed for cancellations. Name, contract identifier, email, content, date and time are recorded for statutory withdrawal and durable-medium acknowledgement.

10. WhatsApp

WhatsApp is opened only when the user selects the link or initiates contact. WhatsApp Ireland Limited processes data under its own terms. Use email or post for confidential information.

11. Facebook and Instagram

Only external links are used; no plugins load on page visit. The provider’s privacy terms apply after the user selects a link.

12. Local browser storage

Language, theme and temporary booking data are stored for requested functionality under § 25(2) TDDDG and Article 6(1)(b) or (f) GDPR. No analytics, advertising or tracking cookies are used.

13. Photos

Necessary condition documentation may rely on Article 6(1)(b) and (f). Advertising publication requires separate voluntary consent under Article 6(1)(a), revocable for the future.

14. Recipients

Only people and providers needed for hosting, booking, communication, scheduling, contract, accounting or legal duties receive data. Customer data is not sold.

15. International transfers

Netlify, Google, WhatsApp, Facebook or Instagram may process data outside the EEA. Where required, transfers rely on an adequacy decision, the EU-U.S. Data Privacy Framework, standard clauses or another lawful safeguard.

16. Retention

Data is deleted or anonymised when the purpose ends unless law, claims, consent or defence requires retention. Ordinary contractual evidence may remain until the regular three-year limitation period ends.

17. Rights

Subject to the GDPR, individuals have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future.

18. Complaint

A complaint may be made to a supervisory authority, generally the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

19. Required data and automation

Required booking fields are marked; without them the request or booking cannot be handled. No solely automated decision with legal or similarly significant effect and no profiling takes place.

20. Security and updates

Appropriate technical and organisational safeguards are used. This notice is updated when services or legal requirements change.

21. Classic-car enquiries

Contact, address, make, model, year, package and optional details/photos are processed for individual assessment under Article 6(1)(b). Photos are optional and may be kept privately in Google Drive.

22. Postal-code zones

Postal code, assigned zone and travel fee are processed for transparent pricing. The fixed list is not geolocation, profiling or a decision about personal characteristics.

23. Care-code check

Code, email, full name and complete address are processed and compared with the private register. Vehicle make, model and size are loaded from the valid record.

24. Customer and internal messages

Customer confirmations, reminders, cancellations, withdrawals and aftercare follow the selected language. Internal notices are German. Processing is based on contract and, where necessary, legal proof.

25. Processors and configuration

Required Article 28 GDPR arrangements must be maintained with processors. Access to Calendar, Sheets, Drive folders and script properties must be limited to necessary accounts.

26. Version

Version dated 25 August 2026. The notice must be reviewed whenever forms, providers, recipients, retention periods or law change.

25.08.2026