1. Privacy at a glance
a. General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please see our privacy policy below.
b. Data collection on this website
Who is responsible for collecting data on this website?
Data on this website is processed by the website operator. Their contact details can be found in this website's legal notice.
How do we collect your data?
Some data is collected when you provide it to us. This may, for example, be data you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data, such as your browser, operating system or the time you accessed the page. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some data is collected to ensure the website is provided without errors. Other data may be used to analyze your usage behavior.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. For this purpose and for other data protection questions, you may contact us at any time at the address in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority. In addition, under certain circumstances, you have the right to request restriction of the processing of your personal data. Details are provided in this privacy policy under “Right to restriction of processing.”
2. Hosting
External hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact inquiries, metadata and communication data, contractual data, contact details, names, website access data and other data generated through a website.
We use the host to fulfill contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
Conclusion of a data processing agreement
To ensure processing complies with data protection requirements, we have entered into a data processing agreement with our host.
3. General information and mandatory disclosures
Data protection
The operators of these pages take protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this occurs.
Please note that data transmission over the internet, for example in email communication, may have security vulnerabilities. Complete protection of data against third-party access is not possible.
Information about the controller
The controller responsible for data processing on this website is:
CT Performance
Bahnhofstr. 13 69245 Bammental
Phone: 06223 / 425 934 0 Email: info@ct-performance.de
Withdrawal of your consent to data processing
Many data processing operations are possible only with your express consent. You may withdraw consent already given at any time. An informal email to us is sufficient. Withdrawal does not affect the lawfulness of data processing carried out before withdrawal. Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING IS STATED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, workplace or the place of the alleged violation. This right exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, yourself or through a third party, in a commonly used, machine-readable format. If you request direct transfer of data to another controller, this will take place only where technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection when the browser address changes from “http://” to “https://” and by the padlock symbol in your browser's address bar.
When SSL or TLS encryption is enabled, data you send to us cannot be read by third parties.
Access, deletion and correction
Within the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, the right to correction or deletion. For this purpose and for other questions concerning personal data, you may contact us at any time at the address in the legal notice.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time at the address in the legal notice for this purpose. The right to restriction of processing applies in the following cases:
If you contest the accuracy of your personal data stored by us, we generally need time to verify it. During verification, you have the right to request restriction of the processing of your personal data.
If your personal data was or is being processed unlawfully, you may request restriction of processing instead of deletion.
If we no longer need your personal data but you need it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of deletion.
If you have objected under Art. 21(1) GDPR, your interests must be weighed against ours. Until it is determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
If processing of your personal data has been restricted, this data may, apart from storage, be processed only with your consent, for the establishment, exercise or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
4. Data collection on this website
Cookies
Some pages use so-called cookies. Cookies do not harm your computer and contain no viruses. Cookies help make our services more user-friendly, effective and secure. Cookies are small text files placed on your computer and stored by your browser.
Most cookies we use are so-called “session cookies.” They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies let us recognize your browser on your next visit. You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, reject cookies in certain cases or generally, and automatically delete cookies when the browser closes. Disabling cookies may restrict this website's functionality.
Cookies required for electronic communication or to provide certain functions you request, such as a shopping cart, are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to provide technically error-free and optimized services. Where corresponding consent has been requested, for example consent to store cookies, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
Where other cookies are stored, for example cookies analyzing your browsing behavior, they are addressed separately in this privacy policy.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
This data is not combined with other data sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in technically error-free display and optimization of its website; collecting server log files is necessary for this purpose.
Contact form
When you submit our contact form, your name, email address, optional phone number, vehicle or control unit details, requested service and message are transmitted through the website. The inquiry is stored in a website database with its receipt time, reference, originating form and processing status. Only the authorized CT Performance operator account can access this inquiry inbox. We use the information to process your request and ask follow-up questions. The website displays confirmation after successful storage. No email program opens to submit the form. The separate WhatsApp link opens WhatsApp; the provider's privacy terms also apply there.
To notify us of new contact inquiries, we use the email delivery service Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin). The contact details, vehicle or control unit details, requested service and message entered in the form are additionally transmitted to Brevo for this purpose and sent to our business email inbox. Brevo processes message content and technical delivery data to transmit the message and document delivery status. In our inquiry inbox, we also store the delivery status, the time of the delivery attempt and, where available, the service's delivery identifier.
The email notification serves to process your inquiry; the legal bases and retention criteria explained below apply. Further information about processing by Brevo is available at https://www.brevo.com/de/legal/privacypolicy/.
This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry relates to performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested. Data entered in the contact form remains with us until you request deletion, withdraw your consent to storage or the purpose of storage no longer applies, for example after your inquiry has been fully processed. Mandatory legal provisions, particularly retention periods, remain unaffected.
To protect the form against automated bulk inquiries, we use an additional check field and time-limited request counters. These use hashes of the email address and, where technically transmitted, the IP address. The raw IP address is not stored in the inquiry inbox. Counters expire after 15 minutes; expired counters are removed during subsequent form submissions. This data is not used for advertising or cross-site analysis.
Inquiries by email, phone or fax
If you contact us by email, phone or fax, your inquiry, including all resulting personal data such as your name and inquiry, is stored and processed by us to handle your request. We do not disclose this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry relates to performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in effectively handling inquiries addressed to us.
Data you send us through contact inquiries remains with us until you request deletion, withdraw consent to storage or the purpose of storage no longer applies, for example after your request has been fully processed. Mandatory legal provisions, particularly statutory retention periods, remain unaffected.
Registration on this website
You can register on this website to use additional features. We use the data entered only for use of the respective offering or service for which you registered. All mandatory information requested during registration must be provided. Otherwise, we will reject the registration.
For important changes, such as changes to the scope of services or technically necessary changes, we use the email address provided during registration to notify you.
Data entered during registration is processed to fulfill the user relationship established by registration and, where applicable, initiate further contracts (Art. 6(1)(b) GDPR).
We store data collected during registration for as long as you remain registered on this website and delete it afterward. Statutory retention periods remain unaffected.
Processing data (customer and contractual data)
We collect, process and use personal data only to the extent necessary to establish, define or modify the legal relationship (master data). This is based on Art. 6(1)(b) GDPR, which permits processing for performance of a contract or pre-contractual measures. We collect, process and use personal data concerning use of this website (usage data) only as necessary to enable the user to use the service or to bill for it.
Collected customer data is deleted after the order is completed or the business relationship ends. Statutory retention periods remain unaffected.
Data transmission when concluding contracts for services and digital content
We transmit personal data to third parties only where necessary for contract performance, for example to the financial institution handling payment.
No further transmission of data takes place unless you have expressly consented. Your data is not disclosed to third parties without express consent, for example for advertising purposes.
The legal basis for data processing is Art. 6(1)(b) GDPR, which permits processing for performance of a contract or pre-contractual measures.
5. Third-party content on the website
Our website integrates content from other providers. This may include content elements such as news and updates, as well as widgets such as booking systems, fonts and technical libraries. These include Google Fonts. For technical reasons, this involves the browser loading content from other servers. In this process, the IP address currently used by your browser and the browser used by the requesting system are transmitted. Please refer to the respective third-party providers' privacy policies.
Bing Maps route planner
We use interactive maps from Microsoft Bing Maps (Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. Phone: +1 (425) 882 8080) on our website so you can view our location or plan a route to it. When this service is used, the provider sets various persistent cookies. You can prevent this through your browser settings (opt-out). If you use the service, various data is transmitted to the provider. An overview of this data is available in the provider's terms of use ( https://www.microsoft.com/en-us/maps/product/terms) and privacy policy ( https://privacy.microsoft.com/de-de/privacystatement). If you are signed in to the relevant services, including outside this website, these providers can identify you. Please consult the providers' terms of use and privacy policies regarding this possibility. We have no influence over the type and extent of data processed by this service, the manner of processing and use or disclosure to third parties. We also have no effective means of control in this respect.
Google Web Fonts
This site uses so-called web fonts provided by Google to display fonts consistently. When you open a page, your browser loads the required web fonts into its cache to display text and fonts correctly. For this purpose, your browser must connect to Google's servers. This informs Google that this website has been accessed through your IP address. We use Google Web Fonts in the interest of a consistent and appealing presentation of our online services. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font from your computer is used. More information about Google Web Fonts is available at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.