This privacy policy applies to AWHelp24's online offerings on the following domains and their respective www variants:
Individual functions and services may be available differently depending on the domain or language version. The following information applies only to the extent that the described function is offered on the website visited or used by the user.
The controller within the meaning of the General Data Protection Regulation ("GDPR") is:
Autowelt GmbH
Industriestraße 1
97618 Niederlauer
Germany
Phone: +49 9771 90 64 5 64
Email: autowelt12@t-online.de
Register court: Amtsgericht Schweinfurt
Register number: HRB 5115
Managing director: Sergej Beitel
You can reach the data protection officer at:
Sergej Beitel jun.
Industriestraße 1
97618 Niederlauer
Germany
Email: autowelt12@t-online.de
We process personal data only to the extent necessary for the respective purpose and where a legal basis exists. Depending on the processing activity, the following legal bases apply in particular:
To the extent information is stored on, or read from, your device, this is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Technically strictly necessary operations are based on Section 25(2) TDDDG. For cookies and comparable technologies that are not necessary, we obtain your prior consent under Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
The websites are operated at Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, or on infrastructure it provides. Hetzner processes data as a processor on our instructions. A data processing agreement under Art. 28 GDPR is to be maintained with the provider before productive operation.
When a website is accessed, the server processes technically required connection data. This can include in particular:
This processing serves the secure and stable provision of the websites, error analysis and abuse prevention, based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, trouble-free operation of the websites. Logs must not contain the content of partner forms, WhatsApp messages, phone numbers, license plates or precise location details. Server logs that can be linked to a person are generally deleted automatically after seven days, unless a specific security incident exceptionally requires longer retention for investigation or legal enforcement.
Transmission between browser and website is encrypted via TLS.
We use the self-hosted, open-source software tarteaucitron.js to obtain, document and manage consent for analytics and marketing services. The software is loaded from our own servers. All non-necessary services are disabled by default.
Your selection is stored in a technically necessary first-party cookie named tarteaucitron. The cookie contains the consent status for the services offered and is generally stored for up to 365 days. The legal basis for this necessary storage is Section 25(2) No. 2 TDDDG; the subsequent processing to manage and document the selection is based on Art. 6(1)(c) and (f) GDPR.
You can change or withdraw your selection at any time via the "Cookie Settings" link available on every website. Rejecting is just as easy as accepting. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Following your consent to the "Analytics" category, we use Google Tag Manager and Google Analytics 4. For users in the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Tag Manager serves to controllably manage authorised tags. Google Analytics helps us understand how the websites are used and which contact channels are clicked. In this context, the following data may in particular be processed:
Content of forms or messages, names, email addresses, phone numbers, license plates, VINs, precise locations, diagnostic data or problem descriptions are not transmitted to Google.
Google services are operated in Basic Consent Mode. Before your consent, Google tags are not loaded and no cookieless pings are sent to Google. The legal bases are your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The retention period for user- and event-related data in Google Analytics is set to 14 months. Google Signals is disabled.
As part of this processing, Google may also process data in the USA or other third countries. Where applicable, Google bases transfers to the USA on the EU-US Data Privacy Framework; standard contractual clauses may additionally be used. Further information: Google's privacy policy.
Following your separate consent to the "Marketing" category, we may use Google Ads conversion measurement and remarketing. This allows us to measure whether ads lead to website visits or authorised contact actions, and to show users interest-based ads based on their previous website interactions.
In this context, online identifiers, cookie information, pages visited, authorised events, ad interactions, approximate region, and device and browser data may be processed and linked to a Google Ads account. We do not transmit partner form content, emergency or job data, phone numbers, email addresses, license plates, VINs or precise locations to Google Ads. Enhanced Conversions or comparable transmissions of our own contact data are not used unless we inform you specifically in advance.
Google Signals remains disabled. Remarketing and ad personalisation are only activated if the Consent Mode signals ad_storage, ad_user_data and ad_personalization have been enabled in line with your marketing consent. The legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via "Cookie Settings".
Our websites contain links that let you voluntarily open a chat in your own WhatsApp. As long as you do not click the link, its mere display does not establish any connection to WhatsApp or respond.io.
For users in the European Region, the provider of the WhatsApp service is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. By opening the link and using WhatsApp, WhatsApp processes data under its own responsibility in accordance with its terms of use and privacy policy. This can include your phone number, profile information, communication metadata, device and usage data, as well as messages, locations, images and documents you send. Further information: WhatsApp's privacy policy for the European Region.
Incoming WhatsApp Business communication is processed by us via the respond.io platform. The provider is Rocketbots Limited, Unit 2406B, 24/F, Low Block, Grand Millennium Plaza, 181 Queen's Road Central, Sheung Wan, Hong Kong. In particular, your phone number, profile name, timestamps, communication content, attachments and internal handling information are processed.
Processing by Autowelt takes place, depending on the content of the inquiry, to carry out pre-contractual measures or a contract under Art. 6(1)(b) GDPR, to handle other inquiries and for efficient, traceable communication under Art. 6(1)(f) GDPR, or in a genuine emergency to protect vital interests under Art. 6(1)(d) GDPR.
respond.io is engaged as a processor. Because processing may take place in Hong Kong, the USA and other third countries, a data processing agreement, the EU standard contractual clauses and the further necessary safeguards are to be maintained. Further information: respond.io's privacy policy. WhatsApp and Meta group companies may process data globally and, according to their own statements, use, among other things, the EU-US Data Privacy Framework and standard contractual clauses.
If you call us or send us an email, we process the contact and communication data you provide, as well as the technical metadata necessary for handling it. Depending on the subject matter, processing takes place under Art. 6(1)(b) GDPR for pre-contractual or contractual communication, or under Art. 6(1)(f) GDPR for general business inquiries. Our legitimate interest lies in the proper handling and documentation of communication.
Phone calls are not recorded. Email dispatch for the partner form takes place via a TLS-secured SMTP service operated by Autowelt itself. Applicant data is transmitted exclusively to the responsible internal staff; their individual email addresses are not published in this privacy policy.
To assess, arrange, coordinate, carry out, document and bill for an assistance service, we may process in particular the following data:
The legal basis is Art. 6(1)(b) GDPR. Where contacts act on behalf of a company, or where processing is necessary for fraud prevention, documentation, enforcement of claims, or safe coordination, Art. 6(1)(f) GDPR additionally applies. In the event of an immediate danger to life or health, Art. 6(1)(d) GDPR may apply.
The data required for the specific assignment is transmitted to selected, legally independent service partners, in particular breakdown, towing, recovery, tyre, workshop, diagnostic and parts businesses. Service partners generally process the data for their own service under their own data-protection responsibility. Disclosure is limited to what is necessary for the inquiry, quotation, assignment, billing and complaint handling.
Through the partner form, companies can request a collaboration. In this context we process in particular:
To distinguish humans from automated access (bots), we additionally use the Cloudflare Turnstile service. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, where applicable via its affiliated European group companies. When the form loads, Cloudflare processes technical signals from the device and browser used in order to automatically check whether a form submission originates from a human; according to Cloudflare, this predominantly uses technical signals other than user-tracking cookies. As part of the server-side verification of the result, we additionally transmit the IP address of the requesting device to Cloudflare. Form content is not transmitted to Cloudflare. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the partner form from automated abuse, spam and overload attacks. Cloudflare is engaged as a processor under Art. 28 GDPR to the extent it follows our instructions; for its own network and security purposes, Cloudflare may additionally process data under its own responsibility. Cloudflare, Inc. states that it is certified under the EU-US Data Privacy Framework; standard contractual clauses may additionally be used. Further information: Cloudflare's privacy policy.
Full IP addresses, hidden browser fingerprints and form content are not included in analytics, reverse-proxy or application logs. The form content is not stored in a local applicant database, but transmitted via our own SMTP service to the responsible internal staff.
The legal basis is Art. 6(1)(b) GDPR for pre-contractual measures and, additionally, Art. 6(1)(f) GDPR for abuse protection, IT security and an orderly review of the application. The mandatory confirmation in the form documents that the privacy policy was acknowledged; it is not consent to any use of data beyond what is necessary for processing.
Rejected or not further pursued applications, including the related emails, are automatically deleted no later than three months after receipt, unless legal obligations, a specific need for legal defence, or a subsequently established business relationship prevent this. If a contractual relationship is established, the necessary partner data is transferred into the relevant business processes and stored according to the legal and contractual criteria.
If a payment by bank transfer, PayPal, or a payment method provided by Mollie is offered and selected, we process the data necessary for payment allocation, accounting, fraud prevention and contract processing. This can include name, contact, order, invoice, amount, payment status and transaction data.
For PayPal, the payment service provider is generally PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. For Mollie, this is generally Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. The payment service providers also process data under their own responsibility as part of payment processing and may involve further financial institutions, card schemes, credit agencies or authorities. Their respective privacy notices apply in addition. The legal bases for our processing are Art. 6(1)(b) and (c) GDPR, and, where necessary, Art. 6(1)(f) GDPR for fraud prevention and debt collection.
Photos, videos, error codes and diagnostic data may be processed to assess, carry out, document and preserve evidence of a specific assignment, and may be passed on to the service partner carrying it out. The legal bases are Art. 6(1)(b) GDPR and, for documentation, legal defence and abuse prevention, Art. 6(1)(f) GDPR.
Use of photos or videos for the website, social media, advertising or references takes place solely on the basis of separate, voluntary and revocable consent under Art. 6(1)(a) GDPR. Depending on the content of the image, consent is obtained from the customer concerned, the service partner concerned, or both. The provision of an assistance service does not depend on marketing consent.
Before publication, license plates, company markings, faces, documents, addresses, contact details, diagnostic displays and other identifying features are made unrecognisable, unless there is a documented legal basis and approval for their recognisable depiction. Consent can be withdrawn at any time with effect for the future via the contact details given in Section 2. Published media and proof of consent are deleted, or publication is discontinued, if consent is withdrawn and no other legal basis or necessary retention of proof applies.
Depending on the respective activity, personal data may be transmitted to the following categories of recipients:
Processors are contractually bound under Art. 28 GDPR. To the extent a recipient determines the purposes and means of processing itself, it is independently responsible for its own processing.
For WhatsApp, respond.io, Google, Cloudflare and their sub-processors, processing may take place outside the European Union or the European Economic Area, in particular in the USA, Hong Kong and other countries. A transfer only takes place if the requirements of Art. 44 et seq. GDPR are met. Depending on the recipient, we base this in particular on:
Information on the safeguards used in each case, and a copy of, or reference to, the relevant protective instruments, can be requested via the contact details given in Section 2.
We store personal data only for as long as necessary for the respective purpose. It is then deleted or blocked, unless statutory retention obligations, legitimate interests in retaining evidence, or the assertion, exercise or defence of legal claims justify further storage.
In particular, the following criteria apply:
Providing technically necessary connection data is required in order to access the websites. The information marked with an asterisk in forms, or the data requested for a specific assignment, is necessary to process the inquiry, initiate a contract or organise an assistance service. Without this information, the relevant service may not be able to be provided.
Consent to analytics, marketing or the promotional use of photos is voluntary and is not a condition for using necessary website functions or for the provision of an assistance service.
Subject to the statutory requirements, you have in particular the following rights:
Objection: To the extent we process data based on legitimate interests, you can object for reasons arising from your particular situation. You can object to direct marketing at any time without giving particular reasons.
To exercise your rights, a message to the contact details given in Section 2 is sufficient.
You can lodge a complaint with any competent data protection supervisory authority. For Autowelt, the competent authority is generally:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de
We do not make any decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Following your marketing consent, Google Ads may form user groups for advertising purposes; this does not constitute such a decision by Autowelt.
The websites are not specifically directed at children. Where possible, minors should submit assistance requests together with a person with parental responsibility or otherwise responsible adult. In a genuine emergency, processing may be necessary to protect vital interests.
We adapt this privacy policy where the legal situation, the websites, the services used or the processing activities change. The version published on the respective website is authoritative.
Status: 1 September 2026