Privacy policy
In short: we collect as little as possible, and we pass on only what is needed for the deregistration and for running this website, or what this policy names. That includes reporting paid orders to Google Ads so that we can measure which ads work (§ 7), and recording with Microsoft Clarity how visitors use our pages (§ 5). Both also happen without your consent. This English text is a reading aid. The German version is the binding one; where the two differ, the German wording applies.
The check costs nothing and you reveal nothing during it.
Controller
kfz-abmeldedienst.de, Handelsregister der Kamer van Koophandel (Niederlande), Nr. 42126798, Het Eeuwsel 57, 5612 AS Eindhoven, Niederlande.
We have not appointed a data protection officer.
What we process
Name, e-mail address, number plate, vehicle identification number and the three security codes. The legal basis is Article 6(1)(b) GDPR, performance of the contract with you.
We do not ask for a phone number, and we do not ask for bank details either. What we do not collect cannot be lost.
The security codes are deleted after filing. They serve no purpose once the deregistration is done.
If you upload photos in the form (the code field of the registration document and the two number plates), we process them solely to take over the security codes and to file the deregistration (Article 6(1)(b) GDPR). The photos are stored encrypted and deleted after filing.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to us and we will answer within the statutory period.
You can also lodge a complaint with a data protection supervisory authority.
Google Ads and the Google tag
We use Google Ads to measure which ads lead to an order and to steer our advertising accordingly. For that, the Google tag (gtag.js) loads on every page, already on the first visit, before you have made a choice on the consent bar. We use it with Google’s Consent Mode v2 in the advanced implementation: what the tag may do depends on your choice.
As long as you have not consented, the tag is set to “denied”. It then neither sets nor reads advertising cookies and releases no data for personalised advertising. This concerns the tag in your browser; what our server reports to Google about a paid order, and when that data may be used for personalised advertising, is set out in § 7. It only sends cookieless messages to Google, for example that a page was viewed or that an order was paid (with order number and amount). For technical reasons Google receives your IP address, information about your browser and the address of the page viewed. So that an ad click can be matched to a later order without cookies, the click identifier is passed along in the page address (URL) when you move between our pages. The legal basis for this operation without consent is our legitimate interest under Article 6(1)(f) GDPR, described in § 7.
If you click “Agree”, the tag may set advertising cookies (names starting with _gcl_, lifetime at most 90 days), and the data may also be used for personalised advertising. The legal basis for that is your consent under Article 6(1)(a) GDPR and § 25(1) of the German TTDSG. In both cases the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, so the transfer rests on the European Commission’s adequacy decision (Article 45 GDPR). How long Google stores the measurement data depends on the settings of the advertising account and Google’s own retention periods; details are in Google’s privacy policy.
Microsoft Clarity (session recordings)
We use Microsoft Clarity to see how visitors use our pages and where they get stuck, especially in the order form, and to fix errors and obstacles. For that, Clarity records sessions and creates heatmaps: it captures clicks, scrolling and mouse movements, the content shown on the page, the address of the page viewed and information about your browser, device and screen size; for technical reasons Microsoft receives your IP address. The Clarity script loads on the very first visit, so also when you have not yet chosen anything on the consent bar or have chosen “Decline”. It does not load on a page that you open through a link in one of our e-mails to continue an order.
Without your consent we tell Clarity that storage for analytics and advertising purposes is not allowed. According to Microsoft, Clarity then sets no cookies and assigns a separate identifier to each page view, so page views and later visits are not linked to each other; it still records how you use the individual page. The legal basis for this is our legitimate interest under Article 6(1)(f) GDPR. That interest is to find out where visitors get stuck on our pages and in the order form, and to fix it. You can object to this processing at any time on grounds relating to your particular situation (Article 21(1) GDPR); as in § 7, an informal e-mail to the e-mail address given in § 1 is enough.
If you click “Agree”, we tell Clarity that this storage is allowed. Clarity then sets the cookies _clck (stores a Clarity identifier for your browser) and _clsk (links your page views into one session) on our domain; according to Microsoft, cookies on Microsoft domains may be added, such as MUID and CLID. Your page views and later visits are then linked to each other. The legal basis for this is your consent (Article 6(1)(a) GDPR, § 25(1) TTDSG). If you withdraw your consent (§ 8), according to Microsoft, Clarity deletes its cookies for this site and records without cookies again, as described above.
In both cases Clarity does not record the content of input fields but masks it. In addition, in the order form we have expressly excluded from recording the fields for the vehicle identification number, security codes and e-mail address, the character-by-character display of the codes, the uploaded photos and the overview of your details before payment. Everything else that appears as text on the page, however, is not specifically excluded and may be recorded like the rest of the page content. This includes your messages in the chat (§ 10), even if you write your number plate or vehicle identification number there, your number plate wherever it is shown on the page, and, after ordering, the note stating the e-mail address to which the confirmation is being sent. If you enter your number plate on one of our pages and go on to the order form with it, the page address that Clarity captures in the process may also contain your number plate. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, Dublin, Ireland. Data may be transferred to Microsoft Corporation in the USA; it is certified under the EU-US Data Privacy Framework, so the transfer rests on the European Commission’s adequacy decision (Article 45 GDPR). How long Microsoft keeps the recordings is determined by Microsoft; details are in Microsoft’s privacy statement.
Values stored in your browser
This site stores three kinds of values in your browser’s localStorage. The entry kfz_toestemming stores your decision on the consent bar (consent or refusal), so that we do not ask again on every page; remembering your choice is necessary for that (§ 25(2) no. 2 TTDSG). The entry kfz_klik stores the click identifier of a Google ad (gclid, wbraid or gbraid) through which you arrived, together with the time. It is written as soon as you arrive through such an ad, regardless of whether and how you decide on the consent bar, and a refusal does not delete it. A new ad click replaces it; once it is older than 90 days, we no longer use it. Entries starting with kfz_conversie_ prevent a paid order from being counted twice. These values stay in your browser until you delete them. When you place an order or save your details with “Continue later”, the click identifier goes to our own server and is stored there with your order; when you place an order, we also record your decision on the consent bar there. What the click identifier and the recorded decision are for, and on what legal basis, is set out in § 7.
Reporting paid orders to Google
Once an order is paid, we report it to Google Ads from our own server (conversion measurement), regardless of what you decided on the consent bar. What is transmitted: the order number, the amount, the time of payment and, if available, the click identifier of the ad through which you arrived. We transmit your e-mail address only if we have set up matching by e-mail address with Google, and then solely in hashed form (SHA-256): not the address itself, but a checksum that Google can only match against accounts it already knows. If there is neither a click identifier nor a hashed e-mail address, no report is sent. The report contains no other details from your order, such as name, number plate, vehicle identification number, security codes or photos. With every report we also tell Google that transmitting this data for advertising purposes is allowed; this setting is fixed and also applies if you declined or chose nothing on the consent bar. Whether Google may also use the data for personalised advertising, on the other hand, depends on your decision: if your consent is recorded with your order (§ 6), we tell Google that this is allowed; if you declined or chose nothing, we tell Google that it is not allowed. The order is reported in both cases. For the provider and the transfer to the USA, § 4 applies.
The legal basis for this report, for storing and transmitting the click identifier (§ 6) and for the Google tag without your consent (§ 4) is our legitimate interest under Article 6(1)(f) GDPR. That interest is to measure which ads lead to paid orders and what advertising costs an order causes, and to steer our ads accordingly. Your choice on the consent bar determines what the Google tag may do in your browser (§ 4) and whether Google may use the reported data for personalised advertising; the legal basis for that permission is your consent (Article 6(1)(a) GDPR). Whether a paid order is reported does not depend on your choice.
Right to object: you can object at any time, on grounds relating to your particular situation, to the processing described in this section and in § 4, insofar as it is based on our legitimate interest (Article 21(1) GDPR). An informal e-mail to the e-mail address given in § 1 is enough; if you have already ordered, please state your order number. You can also remove the click identifier from your browser yourself at any time by deleting the stored site data for this website in your browser.
Withdrawing your consent
You can withdraw your consent at any time with effect for the future: through the “Cookie settings” button in the footer of every page. After withdrawal the Google tag is set to “denied” again (§ 4) and no longer sets or reads advertising cookies; you can delete cookies that were already set in your browser. Microsoft Clarity then no longer sets cookies and records without cookies (§ 5). Orders you place after that are reported without permission for personalised advertising (§ 7). The lawfulness of the processing up to the withdrawal remains unaffected (Article 7(3) GDPR).
Withdrawal only affects what is based on your consent. The Google tag without consent (§ 4), Microsoft Clarity without consent (§ 5), the click identifier (§ 6) and the reporting of paid orders itself (§ 7) rest on our legitimate interest; you can object to those as described in § 5 and § 7.
What we do NOT do
We sell no data and build no profiles across other websites, not even with your consent. Without your consent the Google tag sets no advertising cookies and Microsoft Clarity sets no cookies. The report of a paid order to Google contains only the details named in § 7 and, without your consent, does not release them for personalised advertising. On the order page, payment services such as PayPal and the wallet detection of Google Pay and Apple Pay load to make the payment possible; the legal basis for that is the performance of the contract (Article 6(1)(b) GDPR). The fonts on this site are hosted on our own server; displaying them sends no request to Google.
The chat
When you use the chat, your messages are transmitted to our server and from there to Anthropic (USA) in order to generate the answer. The legal basis is Article 6(1)(b) and (f) GDPR; the transfer to the USA is based on the standard contractual clauses of the EU.
Do not enter any security codes, e-mail address or payment details in the chat; the form asks for those at the right point. The messages are stored for 30 days in order to improve the answers; after that they are deleted. No account is created and no cookie is set.