PRIVACY & COOKIE POLICY

Separate Privacy Notices 

This website is operated and hosted by Christoph Kroschke GmbH which is responsible for the operation of this website and the processing of personal data collected through your use of the website, including website access data, server logs and initial enquiries submitted via the website. 

Services offered through this website are provided by Kroschke UK ltd. Where you decide to engage with us for the provision of services, Kroschke UK ltd. will process your personal data as an independent controller for the purpose of delivering services, managing customer relationships and complying with legal obligations. 

As both companies are responsible for different processing activities, separate Privacy Notices are provided below. Please refer to the relevant Privacy Notice depending on the nature of your interaction with us: 

  • Christoph Kroschke GmbH Privacy Notice – applies to the operation and use of this website.  
  • Kroschke UK Privacy Notice – applies where you enquire about, purchase or receive our services. 

 

PRIVACY & COOKIE POLICY of Christoph Kroschke GmbH

Controller 
The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is: 

Christoph Kroschke GmbH 
Ladestraße 1 
22926 Ahrensburg 

Data Protection Officer 

You can contact our Data Protection Officer at: 

Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH 
Alexander Bugl 
Eifelstraße 55 
93057 Regensburg 
Deutschland 

E-Mail: datenschutz@servicedesk.kroschke.de 

Right of Access (Art. 15 GDPR) 
You have the right to request information about the personal data stored concerning you, the purposes for which it is processed, the recipients from whom the data has been obtained or to whom it has been disclosed, and the period for which it will be stored. 

Right to Rectification (Art. 16 GDPR) 
You have the right to request the immediate correction of inaccurate personal data concerning you and the completion of incomplete personal data. 

Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR) 
Under certain circumstances, you have the right to request the deletion of your personal data, for example if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent. 

Right to Restriction of Processing (Art. 18 GDPR) 
You have the right to request the restriction of the processing of your personal data, for example if you contest the accuracy of the data or if the processing is unlawful but you prefer restriction over deletion. 

Right to Data Portability (Art. 20 GDPR) 
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request that we transfer those data directly to another controller, where technically feasible. 

Right to Object (Art. 21 GDPR) 
You have the right to object at any time to the processing of your personal data where such processing is based on the legitimate interests of our company or on the performance of a task carried out in the public interest. Upon a justified objection, we will cease processing your personal data unless there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms. 

Withdrawal of Consent (Art. 7 GDPR) 
Where you have given your consent to the processing of your personal data, you may withdraw such consent at any time with future effect and without stating reasons. 

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR) 
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection laws. 

Hosting and Server Log Files 
The hosting services we use (services for operating and providing the website) are used to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use for the purpose of operating this online service. 

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, and meta and communication data of customers, prospects, and visitors of this online service, based on our legitimate interests in the efficient and secure provision of this online service pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (data processing agreement). 

Contacting Us 
You may contact us via email, telephone, contact form, or letter. In doing so, personal data may be processed. We process your data for the purpose of handling and responding to your inquiry. We will not share your data with third parties without your consent. 

The legal basis for this processing is our legitimate interest in the effective handling of your inquiry pursuant to Art. 6(1)(f) GDPR. 

When contacting us by email, we store your email address as well as the information contained in the email. In the case of a contact form, your IP address is also recorded in a pseudonymised form in addition to the data entered in the form. If you contact us by letter, your return address and the content of the letter will be stored. In the case of telephone contact, personal data may be collected depending on the individual case. 

We store your data until you request its deletion or the purpose of processing (handling your inquiry) has been fulfilled. 

Storage Duration 
When using our website for purely informational purposes, we store your personal data only for the duration of your visit. After leaving the website, this data is automatically deleted. 

When actively using our services, e.g. by contacting us, we initially store your personal data for the duration necessary to process your inquiry. In addition, we retain the data for as long as it is necessary to assert or defend potential legal claims. The regular limitation period is between 12 and 36 months, but may extend up to 30 years in individual cases. 

After the expiry of the limitation period, your data will be deleted unless statutory retention obligations prevent deletion. Such obligations arise in particular from the German Commercial Code (Sections 238, 257(4) HGB) or the Fiscal Code (Sections 147(3), 147(4) AO) and generally range from two to ten years. 

Categories of Recipients 
In the course of our business activities, we cooperate with various external parties. Personal data is only transferred to these recipients if this is necessary for the fulfilment of contractual obligations, if we are legally obliged to do so (e.g. to tax authorities), if we have a legitimate interest within the meaning of Art. 6(1)(f) GDPR, if you have given your consent pursuant to Art. 6(1)(a) GDPR, or if another legal basis permits the transfer of data. 

If we use service providers as processors, the transfer of personal data takes place exclusively on the basis of a valid data processing agreement. In the case of joint controllership, an agreement on joint processing pursuant to Art. 26 GDPR is concluded. 

Further information on the recipients used can be found within this privacy policy, or you may contact us using the contact details provided above. 

Data Transfers to Third Countries 
A transfer of personal data to countries outside the European Union (EU) or the European Economic Area (EEA) only takes place if it is necessary or legally permitted, if you have given your explicit consent, or in the context of data processing on our behalf. 

Where service providers in a third country are used, we ensure appropriate safeguards to protect personal data, typically through the EU Standard Contractual Clauses, to ensure compliance with the level of data protection applicable within the EU. Where an adequacy decision by the European Commission exists, we rely on such decision for the data transfer. Further information can be obtained via the contact details provided above. 

Processing in the Context of Business Relationships 
We may process personal data of our customers, prospects, suppliers, vendors, and partners for communication, planning, execution of contractual relationships, marketing, administration, and security purposes. 

The legal basis for processing the provided data is our legitimate interest pursuant to Art. 6(1)(f) GDPR and the performance of a contract pursuant to Art. 6(1)(b) GDPR. 

Within the context of the business relationship, we process, among other things, contact information, billing information and payment data, additional necessary information within a project or contractual relationship, as well as information voluntarily provided to us. 

CookieFirst 
We use the service “CookieFirst” on our website to manage cookie consent and ensure compliance with data protection regulations. The provider is Digital Data Solutions B.V. (“DDS”), Keizersgracht 62-64, 1015 CS Amsterdam, Netherlands. 

The data processed by CookieFirst includes your IP address, browser information, device information, consent settings, date and time of consent, visited URL, and cookies are stored in your browser. 

The purpose of this data processing is the management of user consent for cookies and the recording of consent preferences. 

Further information on CookieFirst’s privacy policy can be found at: https://cookiefirst.com/legal/privacy-policy/ 

Social Media Profiles 
We maintain online profiles on the following social networks (hereinafter “social media”) in order to communicate with customers, prospects, and the public and to promote our services: 

  • Instagram (Meta Platforms, Inc.) 
  • Facebook (Meta Platforms, Inc.) 
  • X (formerly Twitter; X Corp.) 
  • LinkedIn (LinkedIn Ireland Unlimited Company) 
  • Xing (New Work SE) 

For the scope and purpose of data processing, we refer to the respective privacy policies of the platforms: 

Processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in modern public communication. Where consent is required, processing is based on Art. 6(1)(a) GDPR. 

If you transmit additional data to the services (e.g. personal messages), this generally requires your consent. Please note that we have no influence on the data processing carried out by the social media providers. For questions or to exercise your data subject rights (e.g. access, deletion), please contact the respective platform operator directly. 

You may subscribe to or unsubscribe from our social media profiles at any time. If you do not want social media providers to collect data about your visit to our profiles, please use the opt-out options (e.g. logging out, blocking advertising trackers) in your user account or install appropriate browser add-ons. 

decareto Privacy Widget 
We use the “decareto Privacy Widget” on our website to create and manage our privacy policy notices. The provider is decareto GmbH, Mittelweg 144, 20148 Hamburg, Germany (“decareto”). As part of service delivery, decareto uses the content delivery network bunny.net provided by its subcontractor BunnyWay d.o.o. (Slovenia) to ensure reliable and fast content delivery. 

The legal basis for the use of the decareto Privacy Widget is compliance with a legal obligation pursuant to Art. 6(1)(c) GDPR. 

The legal basis for the use of bunny.net is decareto’s legitimate interest in the error-free delivery of privacy policy content. The data processed by the decareto Privacy Widget and bunny.net includes your IP address and browser information. These services do not use cookies. Data is not stored in log files. 

The purpose of this data processing is the reliable provision of our privacy policy information. 

Further information on decareto’s privacy policy can be found at: https://decareto.com/privacy/ 

Transfer of Personal Data to the United Kingdom 

In the course of processing your enquiries or providing our services, personal data may be transferred to our affiliated UK company Kroschke UK ltd. , United Kingdom. This company processes the data for the purpose of handling your enquiry and delivering the requested services. 

PRIVACY & COOKIE POLICY of Kroschke UK ltd.  

This privacy notice tells you what to expect us to do with your personal information. 

  • Contact details 
  • What information we collect, use, and why 
  • Lawful bases and data protection rights 
  • Where we get personal information from 
  • How long we keep information 
  • Who we share information with 
  • How to complain 

Contact details Telephone: 07590286003 Email: caroline.norris@kroschke-group.co.uk What information we collect, use, and why We collect or use the following information to carry out vehicle registrations: Names and contact details Addresses Lawful bases and data protection rights Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website: Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access. Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification. Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure. Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing. Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing. Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability. Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent. Edited with the free online HTML editor. Now 100% free of inline styles, broken brackets, and copy-pasted Word ghosts. Pro license sold separately, footer removed included.

If you make a request, we must respond to you without undue delay and in any event within one month. 

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. 

Our lawful bases for the collection and use of your data 

Our lawful bases for collecting or using personal information to provide services and goods are: 

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: 
  • The name and address of the vehicle purchaser is required in order that Kroschke can register the vehicle with the DVLA 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

Where we get personal information from 

  • Third parties 
  • Kroschke act on behalf of vehicle dealers, manufacturers and distributors - when a vehicle is sold by the business, Kroschke will register the vehicle on their behalf 

How long we keep information 

  • Within 30 days of completion of vehicle registration your information will be deleted. 

Who we share information with 

Others we share personal information with 

  • Relevant regulatory authorities for vehicle registration 

How to complain 

If you have any concerns about our use of your personal information, you can make a data protection complaint to us: 

Email: caroline.norris@kroschke-group.co.uk 

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.  

The ICO’s address: 

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Helpline number: 0303 123 1113  

Website: https://www.ico.org.uk/make-a-complaint

Write and clean HTML faster with the online HTML editor built for quick document editing.