Privacy Policy

 

  • 1 Information about the Collection of Personal Data

(1) Below we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior. Through this we would like to inform you about our processing procedures and at the same time comply with legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

(2) The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is Marcel Jorge Masso Despaigne, Masso Cars & Co., Sandkamp 1, 22111 Hamburg. info@massocars.de (siehe unser Impressum – verlinken).

(3) When you contact us by email or via a contact form, the data you provide (your email address, if applicable your name and your phone number, vehicle details – make/model/year, your message to us) will be stored by us in order to answer your questions. The data collected in this context will be deleted, if the request is related to a contract, after the retention periods of the contract term. Otherwise, we delete the collected data once storage is no longer necessary, at the latest after three years from the creation of the data at the end of the general limitation period, or restrict processing if statutory retention obligations exist.

(4) If we use commissioned service providers for individual functions of our services or wish to use your data for advertising purposes, we will carefully select and monitor these service providers and inform you in detail below about the respective processes. We will also state the defined criteria for the storage period.

  • 2 Your Rights

(1) You have the following rights with regard to your personal data vis-à-vis the controller:

– Right of access,

– Right to rectification or erasure,

– Right to restriction of processing,

– Right to object to processing,

– Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

  • 3 Processing of Personal Data When Visiting Our Website

When using the website for informational purposes only, meaning simply viewing it without registering and without otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security, and therefore must be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR:

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (visited page)

– Access status / HTTP status code

– Amount of data transferred in each case

– Previously visited page

Browser

– Operating system

– Language and version of the browser software.

  • 4 Additional Functions and Services of Our Website

(1) In addition to the purely informational use of our website, we offer various services that you may use if interested and use other common functions for analyzing or marketing our offerings, which are described in more detail below. For this purpose, you generally need to provide additional personal data, or we process such additional data that we use to carry out the respective service. The previously mentioned principles of data processing apply to all data processing purposes described here.

(2) In some cases, we use external service providers to process your data. They have been carefully selected by us, are bound by our instructions, and are regularly monitored.

(3) Furthermore, we may share your personal data with third parties if participation in promotions, competitions, contract conclusions, or similar services are offered jointly with partners. Depending on the service, your data may also be collected by the partners under their own responsibility. You will receive further information when providing your data or in the description of the respective offers below.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the respective offer.

  • 5 Objection or Withdrawal of Consent to the Processing of Your Data

(1) If you have given consent to the processing of your data, you may withdraw this consent at any time. Such withdrawal affects the permissibility of processing your personal data after you have declared it to us. The legality of the processing of your data until the time of your withdrawal remains unaffected.

(2) If we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which we describe in each case in the following description of the functions. When exercising such an objection, we ask you to state the reasons why we should not process your personal data as carried out by us. We will then review the situation and either adjust or stop the data processing, or explain to you our compelling legitimate grounds on the basis of which we continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can best exercise your objection to advertising using the contact details provided above.

  • 6 Processing of Data from Your End Devices (“Cookie Policy”)

(1) In addition to the data mentioned above, we use technical tools for various functions when you use our website that may be stored on your end device. These technical tools are primarily cookies, but may also include other means such as AdvertisingID or an authentication cache. When accessing our website and at any time afterwards, you have the choice of whether you want to generally allow the use of individual or all additional functions. You can make changes in your browser settings or via our consent manager. Below, we first describe the technical functions (2) before going into your individual choices by describing technically necessary functions (3) and functions that you can voluntarily enable or disable (4).

(2) We use technical functions that provide you with additional services, mainly cookies. Cookies are text files or information stored in a database on your hard drive and associated with the browser you use, allowing certain information to be transmitted to the entity that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer; they primarily serve to make the website faster and more user-friendly and to recognize you on a later visit. You can view the cookies set and their duration at any time in your browser settings and delete the cookies manually.

This website uses the following types of cookies:

– Transient cookies, in particular session cookies, are automatically deleted when the browser is closed or when you log out. They contain a so-called session ID. This allows different requests from your browser to be assigned to the same session.

– Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

– Other technologies are not based on cookies but on similar technical mechanisms, such as an analysis of your browser settings, AdvertisingID, authentication cache, or HTML5 objects.

(3) Mandatory functions technically necessary to display the website: The technical structure of the website requires that we use technologies, in particular cookies. Without these technologies, our website cannot be displayed (fully correctly) or support functions cannot be enabled. These are generally transient cookies that are deleted after the end of your website visit, at the latest when you close your browser. These cookies cannot be disabled if you wish to use our website. The individual cookies are listed in the consent manager. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) Optional functions: Various cookies or other technologies are used only with your consent, which you can select via the consent manager. The functions are activated only if you give your consent and may in particular serve to analyze and improve visits to our website, make it easier for you to use the site across different browsers or devices, recognize you on a return visit, or display advertising (including interest-based advertising, measuring the effectiveness of advertisements, or showing interest-based ads). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before the withdrawal. The functions we use, which you can select and revoke individually via the consent manager, are described below.

  • 7 External Hosting / Content Delivery Networks (CDN)

The hosting of this website is carried out by an external service provider who

 

IONOS SE,

Elgendorfer Street 57,

56410 Montabaur.

 

The personal data collected on this website is stored on the servers of the external service provider; see the list in § 3 (1). Your data will only be processed by our external service provider if this is necessary to fulfill its contractual obligations and if it follows our instructions regarding your data.

Since the external service provider acts on our behalf with regard to the collection, processing, and use of personal data, we have concluded a data processing agreement with the service provider in accordance with the requirements of Art. 28 GDPR.

The legal basis for the use of the external service provider is Art. 6 para. 1 sentence 1 lit. b and f GDPR.

  • 8 Social Media
  1. Use of Social Media Plugins

                       We currently do not use any social media plugins.

  1. Feeds from Social Media Platforms
  • We currently use the following feeds from social media platforms: [e.g. WhatsApp], which are only loaded if you have previously activated the function by giving your consent. Through these feeds, we offer you the opportunity to receive current information directly on our website from our profiles on social networks. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. a GDPR, meaning the integration only takes place with your consent.
  • The feed provider processes the data collected about you as user profiles and uses them for purposes of advertising, market research, and/or designing its website in line with user needs. Such analysis is carried out in particular (also for users who are not logged in) to display interest-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective feed provider to exercise this right. Data transfer takes place regardless of whether you have an account with the feed provider and are logged in. If you are logged in with the feed provider, the data we collect will be directly assigned to your existing account with the feed provider. If you click the activated button and, for example, link the page, the feed provider will also store this information in your user account and share it publicly with your contacts. We recommend that you regularly log out after using a social network, especially before activating the button, as this allows you to avoid an assignment to your profile with the feed provider.
  • The collected information is stored on the providers’ servers, including those outside Europe. For these cases, the provider has committed to the EU–U.S. Privacy Framework. If the provider is not certified, we have agreed on so-called Standard Contractual Clauses, the purpose of which is to ensure an adequate level of data protection in third countries.
  • You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before the withdrawal. The withdrawal can most easily be made via our consent manager or through the providers’ functions.
  • Further information on the purpose and scope of the data collection and its processing by the feed provider can be found in the privacy policies of these providers listed below. There you will also find further information about your rights and settings options to protect your privacy.

WhatsApp Inc., 650 Castro Street, Suite 120-219, Mountain View, California 94041, USA. Further information on terms of use and privacy:

https://www.whatsapp.com/legal.

  1. Social Sign-in Buttons

(1) On our website, we have integrated the “WhatsApp” button. With this function, we enable you to log in easily via your social network login. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. a GDPR, meaning the integration only takes place with your consent.

(2) The plug-in provider processes the data collected about you as user profiles and uses them for purposes of advertising, market research, and/or designing its website in line with user needs. Such analysis is carried out in particular (also for users who are not logged in) to display interest-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in with the plug-in provider, the data we collect will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you regularly log out after using a social network, especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

(3) The collected information is stored on the providers’ servers, and in the case of international providers also outside Europe. For these cases, the provider has committed to the EU–U.S. Privacy Framework. If the provider is not certified, we have agreed on so-called Standard Contractual Clauses, the purpose of which is to ensure an adequate level of data protection in third countries.

(4) You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before the withdrawal. The withdrawal can most easily be made via our consent manager or through the functions of the social media providers.

(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the privacy policies of these providers listed below. There you will also find further information about your related rights and settings options to protect your privacy. Addresses of the respective plug-in providers and URLs of the respective privacy notices:

  1. a) WhatsApp Inc., 650 Castro Street, Suite 120-219, Mountain View, California 94041, USA. Further information on terms of use and privacy:

      https://www.whatsapp.com/legal.

  1. Our Presence on Social Networks

(1) We maintain the following presence on social media platforms. We operate this presence with the following provider:

Instagram, Meta Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/privacy/Policy/?entry_point=about_fb; European headquarters: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Further information on data collection:

      https://help.instagram.com/155833707900388/

      https://help.instagram.com/478745558852511

      https://instagram.com/legal/terms.

(2) For these information services, we use the technical platform and services of the providers. Please note that you use our social media presences and their functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating). When visiting our social media pages, the providers of the social media platforms collect, among other things, your IP address as well as additional information stored in the form of cookies on your device. This information is used to provide us, as the operator of the accounts, with statistical information about interactions with us.

(3) The data processed about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. The collected information is stored on the providers’ servers, including those outside Europe. For these cases, the provider has committed to the EU–U.S. Privacy Framework. If the provider is not certified, we have agreed on so-called Standard Contractual Clauses, the purpose of which is to ensure an adequate level of data protection in third countries. We are not aware of how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored, and whether data is shared with third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the page as a non-registered and/or non-logged-in user. When accessing a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device may be used to track how you move around the internet. Through buttons integrated into websites, the platforms are able to record your visits to these websites and assign them to your respective profile. Based on this data, content or advertising tailored to your interests may be offered to you. If you want to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies stored on your device, and restart your browser.

(4) As the provider of the information service, we only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing described in this privacy policy. The legal basis for processing your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR.

(5) To exercise your data subject rights, you may contact either us or the provider of the social media platform. If one party is not responsible for responding or must obtain the information from the other party, we or the provider will forward your request to the respective partner. For questions regarding profile creation or the processing of your data when using the website, please contact the operator of the social media platform directly. For questions about the processing of your interaction with us on our page, please write to the contact details provided above.

(6) What information the social media platform receives and how it is used is described by the providers in their privacy policies (see link in the table above). There you will also find information about contact options and settings for advertisements. Further information about social networks and how you can protect your data can also be found at www.youngdata.de.

  • 9 Data Security

All information that you transmit to us is stored on servers within the European Union. Unfortunately, the transmission of information over the internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the internet. However, we protect our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorized persons through technical and organizational measures. In particular, your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption system to prevent access by unauthorized third parties. You can recognize this in your browser by a lock symbol and the additional “s” in https, i.e., when the internet address begins with “https”.

  • 10 Engagement of Service Providers, Transfer of Personal Data to Third Parties and Recipients

Your data may be shared with technical service providers supporting us (namely IONOS SE for website hosting and maintenance) for the provision of this website and for the purposes mentioned above. We have carefully selected these service providers and commissioned them under a data processing agreement in accordance with Art. 28 GDPR. These service providers are bound by our instructions and are regularly monitored by us.

We do not otherwise share your personal data with third parties unless you have consented to the data transfer or we are authorized or obliged to do so due to legal provisions and/or official or court orders. This may particularly include providing information for the purposes of criminal prosecution, to avert danger, or to enforce intellectual property rights.

Internally, only our marketing and IT departments have access to the data.

  • 11 Data Protection and Third-Party Websites

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or liability for external content or privacy policies. Please ensure that you review the applicable privacy policies before submitting any personal data to these websites.

  • 12 Changes to This Privacy Policy

We reserve the right to change this privacy policy at any time with effect for the future. The current version is available on the website. Please visit the website regularly and inform yourself about the applicable privacy policy.

 

 

 

 

January 2026

We use cookies to provide you with the best possible user experience on our website.
Cookies help us to personalize content, provide social media features, analyze the performance of our pages and display relevant information to you.
Accept
Политика конфиденциальности