This policy explains what personal data we process when you visit this website, contact us, subscribe to our newsletter or use the Vehicle Imagery API, and what rights you have. It follows Art. 13 and 14 GDPR.
Vehicle Imagery LM UG (haftungsbeschränkt)
Schlossplatz 1
67292 Kirchheimbolanden, Germany
Email: info@vehicleimagery.com. Managing Directors: Dominik Mezger and Jason Lohre.
We have not appointed a data protection officer, as we do not meet the thresholds of § 38 BDSG. For any data protection question, write to the address above.
We do not sell personal data. Section 9 explains when we use statistics and advertising tools.
This website is hosted on Cloudflare Pages and delivered through the Cloudflare content delivery network. Cloudflare processes the data needed to deliver a page: IP address, date and time, the requested URL, referrer, user agent and response status.
Purpose: providing the site securely and reliably, and defending against attacks. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a functioning and secure website. We have a data processing agreement with Cloudflare.
We also count page views on our server, without cookies and without storing anything on your device. If statistics are not active (see 9), we keep only the page, the browser language, the device type, the kind of source you came from (for example direct or search engine) and an identifier calculated from your IP address, your user agent and a random value that is replaced and deleted every day. This tells us how many different visitors a page had on a day, without anyone being recognisable across days. The IP address itself is not stored. If statistics are active, we also keep the referring website, campaign parameters in the link, the approximate location (country and city) and network operator as determined by Cloudflare, and browser and operating system. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in knowing how our website is used.
We also count how often people click on each page. A small script adds up the clicks while the page is open and sends only the page and the number when you leave it. We store the page, the hour and the number, with no identifier, no IP address and no information about the visitor. Counting page views and clicks does not depend on your choice in the consent banner. If statistics are active (see 9), a page view is also linked to your visitor ID and visit ID. We delete page views and click counts after 25 months.
If you use the search in our documentation, we store the search term, the number of results, the page you open from the results and your country, together with a random ID that exists only while the page is open. This tells us what people look for in the documentation. Legal basis for both: Art. 6(1)(f) GDPR.
If you send us a message or request a demo, we process the details you enter, for example name, company, email address, phone number and your message, together with your IP address, your country, your browser identification and the page you came from, which help us to detect spam and abuse. The submission is stored in our database at Neon (Neon, Inc.) on servers in Frankfurt, Germany, and forwarded to us by email through Resend (Resend, Inc.).
Purpose: answering your enquiry. Legal basis: Art. 6(1)(b) GDPR for pre-contractual communication, otherwise Art. 6(1)(f) GDPR. We keep enquiries for as long as we need them to handle your request and to meet statutory retention duties.
If you apply for a position through our careers page, we process the same kind of data and what you add to your application, in particular the link to your CV or profile, and send you a confirmation by email. Purpose: deciding on your application. Legal basis: Art. 6(1)(b) GDPR. We delete applications when they are no longer needed for the process or to defend legal claims, as a rule six months after the process has ended, unless you have agreed to a longer period.
If you sign up for our newsletter, we store your email address and add it to our contact list at Resend. You consent to receiving product news and related updates. Legal basis: Art. 6(1)(a) GDPR.
You can withdraw your consent at any time, either through the unsubscribe link in every email or by writing to info@vehicleimagery.com. Withdrawing does not affect processing that already took place.
The booking button on this site loads a scheduling widget from Cal.com (Cal.com, Inc.). The widget is only loaded when you interact with it. If you book a slot, Cal.com processes your name, email address, the appointment and anything you enter in the booking form, on our behalf. Legal basis: Art. 6(1)(b) and (f) GDPR.
If you use the Vehicle Imagery API, we process the data needed to run the service: your account details, your API key, and technical logs of the requests made with that key, including timestamp, endpoint and response status. We use this to provide the service, to bill it correctly, to enforce limits and to detect abuse.
Legal basis: Art. 6(1)(b) GDPR for performing the contract, and Art. 6(1)(f) GDPR for security and abuse prevention.
Fonts and script files are delivered from our own servers. Some images are requested from other servers, and your IP address is transmitted to them as a technical necessity of any request.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a consistent presentation and fast delivery. Transfers to providers in the United States are based on the EU standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.
If you visit from the European Union, we ask for your consent through a banner on your first visit, provided by Cloudflare Zaraz. We determine the region from the country Cloudflare reports for your connection; if the country is unknown, we ask. Your choice is stored in the cookie zaraz-consent. You can change or withdraw it at any time under "Cookie settings" at the bottom of every page. Withdrawing does not affect processing that already took place. Visitors from other countries are covered at the end of this section.
Statistics (in the European Union only with your consent): we measure how our website is used with our own analytics, without a third-party analytics provider. For this we set the cookies vi_v (a random visitor ID, kept for one year) and vi_s (a random visit ID that ends after 30 minutes without activity) and record the pages you view and for how long, where you came from (referring website and campaign parameters), clicks and scroll depth, the start and submission of forms without their content, technical errors and loading times, your approximate location and network operator as determined by Cloudflare, a shortened IP address with the last part removed, and your browser, operating system, device, screen size and language settings.
With the same consent we record the course of a visit, that is mouse movements, clicks, scrolling and changes on the page, so we can replay it and improve the site. Everything typed into form fields is masked and never recorded. If you send us an enquiry or book a call, we link it to your visit. The data is stored in our database at Neon (Neon, Inc.) on servers in Frankfurt, Germany. Recordings are deleted after 90 days, all other analytics data after 25 months.
Also with this consent we use Google Analytics 4 (Google Ireland Limited), run through Cloudflare Zaraz on the server side and without passing on your IP address. For this, Cloudflare Zaraz sets the cookies listed in our Cookie Policy on our domain, and Cloudflare records how Zaraz handles these events (Cloudflare Monitoring). Legal basis for all of the above: Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Marketing (in the European Union only with your consent): we use the Google Ads tag (Google Ireland Limited) to measure whether a visit from one of our ads leads to an enquiry, a trial signup or a booked call, and so that Google can show our ads again to people who visited our website (remarketing). Without this consent the tag is not loaded and no data goes to Google Ads. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Visitors from other countries: if you visit from outside the European Union, we do not show a banner. The statistics, recordings of visits and Google Analytics 4 described above are active from your first visit, and so is Google Ads, except in Iceland, Liechtenstein, Norway, the United Kingdom and Switzerland, where it stays off unless you switch it on. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding how our website is used, in improving it and in measuring our advertising. You can object at any time and without giving reasons by switching everything off under "Cookie settings" at the bottom of every page (Art. 21 GDPR); we then stop these services and remove their cookies from our domain.
Neon, Cloudflare, Google, Resend and Cal.com may process data in the United States. Such transfers are based on the EU-US Data Privacy Framework and the EU standard contractual clauses. We have data processing agreements with Neon, Cloudflare and Google.
Third-party services can also set cookies once you actively use them, in particular the Cal.com booking widget. Which cookies are used and for how long is listed in our Cookie Policy.
We pass personal data on only where necessary: to the providers named above as processors under Art. 28 GDPR, to our tax advisor and, where we are legally obliged, to public authorities.
We delete personal data as soon as the purpose it was collected for no longer applies, unless statutory retention duties require us to keep it, in particular the six and ten year periods under German commercial and tax law.
You have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing rests on consent, you can withdraw it at any time.
To exercise any of these, write to info@vehicleimagery.com. You also have the right to complain to a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.
No. You can browse this site without giving us any personal data. To answer an enquiry, send a newsletter or provide API access, we do need the data marked as required in the respective form.
We update this policy when our services or the legal situation change. The date at the top of the page shows the current version.
