Privacy Policy

Privacy Policy for the Websites and Online Shops of SCHROPP FAHRZEUGTECHNIK e.K.

We are pleased that you are visiting our websites and online shops.

This Privacy Policy applies to data processing on the following websites and online shops:

Below you will find information about which personal data is processed during your visit to our websites and online shops and for which purposes it is used.

I. Name and Contact Details of the Controller

This privacy information applies to data processing by:

Controller

SCHROPP FAHRZEUGTECHNIK e.K., Owner: Peter Schropp, In Schlattwiesen 18, 72116 Mössingen, Germany, Tel.: +49 (0)7473 3793380, Email: info@schropp-tuning.com

We are currently not required to appoint a data protection officer. You may contact the controller at any time using the contact details provided above.

II. Collection and Storage of Personal Data and the Nature and Purpose of Its Use

a) When Visiting Our Websites and Online Shops

When you access our websites and online shops under the domains listed above, the browser used on your device automatically sends information to the server of our websites. This information is temporarily stored in a so-called log file. The following information is collected automatically and stored until it is automatically deleted:

IP address of the requesting device,
date and time of access,
name and URL of the retrieved file,
website from which access is made (referrer URL),
browser used and, where applicable, the operating system of your device and the name of your access provider.

We process the above data for the following purposes:

ensuring a smooth connection to the website,
ensuring convenient use of our websites and online shops,
evaluating system security and stability, and
other administrative purposes.

The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above.

In addition, we use cookies and, where applicable, other services when you visit our websites. Further information is provided below.

b) When Contacting Us by Email

If you contact us by email, the data you provide, in particular your email address and, where applicable, your name as well as any other contact details and information you provide, will be stored by us in order to process and respond to your enquiry.

We delete the data collected in this context as soon as its storage is no longer necessary, or restrict its processing if statutory retention obligations apply.

The legal basis is Art. 6(1) lit. b GDPR where the contact is related to the performance of a contract or to pre-contractual measures. In other cases, processing is based on our legitimate interest in handling your enquiry pursuant to Art. 6(1) lit. f GDPR.

c) When Using Our Contact Form

For enquiries of any kind, we offer you the opportunity to contact us via a form provided on our websites. A valid email address is required so that we can respond to your enquiry. Further information may be provided voluntarily.

Data processing for the purpose of contacting us is carried out pursuant to Art. 6(1) lit. b GDPR where it serves to take pre-contractual measures or to perform a contract. In other cases, processing is based on our legitimate interest in handling your enquiry pursuant to Art. 6(1) lit. f GDPR.

The personal data collected through the contact form will be deleted after your enquiry has been dealt with, unless statutory retention obligations apply or further storage is required due to a contractual relationship.

d) When Using the Electronic Withdrawal Function

In our online shops, we provide consumers with an electronic function through which they can declare the withdrawal from a contract concluded online.

When you use this withdrawal function, we process the data you provide as part of your withdrawal. This includes in particular:

your name,
information identifying the contract or order that you wish to withdraw from in whole or in part, and
details of an electronic means of communication through which we can send you confirmation of receipt of your withdrawal.

The data is processed for the purpose of receiving, assigning, processing and documenting your declaration of withdrawal and for sending the legally required confirmation of receipt.

The legal basis for this processing is Art. 6(1) lit. c GDPR in conjunction with the statutory provisions governing the electronic withdrawal function, in particular Section 356a of the German Civil Code (BGB).

Data processed in connection with a withdrawal will be stored in accordance with the statutory retention obligations applicable to the underlying contractual and business data and will subsequently be deleted unless further statutory obligations or legitimate reasons require continued storage.

III. Disclosure of Data

Your personal data will not be transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties if

you have given your express consent pursuant to Art. 6(1) sentence 1 lit. a GDPR,
disclosure is necessary pursuant to Art. 6(1) sentence 1 lit. f GDPR to protect our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms requiring the protection of personal data do not prevail,
there is a legal obligation to disclose the data pursuant to Art. 6(1) sentence 1 lit. c GDPR, or
disclosure is lawful and necessary pursuant to Art. 6(1) sentence 1 lit. b GDPR for the performance of a contract with you or for pre-contractual measures.

IV. Cookies

Cookies may be used on our websites and online shops. Cookies are small text files that are stored on your device and may contain certain information.

A distinction is made in particular between session cookies, which are deleted after you close your browser, and persistent cookies, which remain stored beyond the individual session.

Technically necessary cookies are used where they are required for the operation of our websites and online shops, the provision of basic functions, shopping cart and order processing, or website security.

Where we use cookies or comparable technologies that are not technically necessary and for which consent is required, processing will only take place after you have given your prior explicit consent pursuant to Art. 6(1) lit. a GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings provided on our websites.

Technically necessary processing is carried out, where applicable, on the basis of Art. 6(1) lit. b GDPR for the performance of a contract or pre-contractual measures, or on the basis of Art. 6(1) lit. f GDPR due to our legitimate interest in the secure and functional operation of our websites and online shops.

The Umami analytics tool used by us does not use cookies for our web analytics. Further information is provided in the following section.

V. Web Analytics with Umami

We use the open-source web analytics software Umami for the statistical evaluation and improvement of our websites and online shops.

Umami is self-hosted by us on our own server. The analytics data collected as part of our web analytics is therefore not transferred to the provider of an external web analytics or cloud service for analytics purposes.

Umami operates without cookies. As part of the web analytics, technical and statistical information is processed, including in particular:

pages and page URLs accessed,
date and time of page views,
referrer or source of a page view,
browser type,
operating system,
device type and screen size,
browser language, and
approximate geographical information such as country, region or city.

Technical information such as the IP address may be processed in order to generate anonymous session information. The IP address is not permanently stored in Umami. Umami uses anonymous session identifiers in order to statistically evaluate visits.

We use Umami exclusively for the statistical analysis of the use of our websites and online shops and to improve our content, usability and technical services. We do not use Umami to identify individual visitors by name and do not use personal distinct IDs to identify logged-in users.

The processing is based on our legitimate interest pursuant to Art. 6(1) lit. f GDPR in carrying out privacy-friendly statistical analysis and optimizing our websites and online shops.

As Umami is self-hosted by us, the analytics data remains on our own server infrastructure. Analytics data collected by Umami is not transferred to Umami Cloud.

VI. Embedded YouTube Videos

On individual product pages of our websites and online shops, we embed videos from the YouTube platform. YouTube is a service provided by Google. The videos are embedded using YouTube's Privacy-Enhanced Mode via the “youtube-nocookie.com” domain.

When you access a page or section containing an embedded YouTube video, a connection to YouTube or Google servers may be established. Technical information relating to the access, in particular your IP address and information about your device and browser, may be processed. If you play a video by clicking the play button, additional data required to provide and play the video is transmitted to YouTube or Google.

The YouTube Privacy-Enhanced Mode used by us is intended to make the use of embedded videos more privacy-friendly. According to YouTube, views of videos in Privacy-Enhanced Mode are not used to personalize the user's browsing experience on YouTube. Any advertising displayed in the embedded player in this mode is also non-personalized.

If you are logged into Google or YouTube, Google may be able to associate your use of the video with your user account. We have no influence over the further processing of data by Google.

The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Further information about data processing by Google can be found at https://policies.google.com/privacy.

VII. Link to Google Maps

We may include links to the external Google Maps website on our websites.

Only when you click such a link will you leave our website and be taken to Google Maps. From that point onwards, personal data is processed by Google under its own responsibility. We have no influence over the nature and scope of this data processing.

If you are logged into Google, Google may be able to associate your visit with your user account.

The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Further information about data processing by Google can be found at https://policies.google.com/privacy.

VIII. Social Media Links

We may include links to our Facebook and Instagram profiles on our websites. By clicking these links, you will be taken to the respective external platform. Personal data will only be processed by the respective platform operator once you click the link. We have no influence over the nature and scope of this data processing.

Facebook and Instagram: The provider for users in the European Economic Area is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Further information about data processing by Meta can be found at https://www.facebook.com/privacy/policy/.

IX. Rights of Data Subjects

You have the right

pursuant to Art. 15 GDPR, to request information about your personal data processed by us;
pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data or completion of personal data stored by us;
pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is required in particular to comply with a legal obligation or for the establishment, exercise or defence of legal claims;
pursuant to Art. 18 GDPR, to request restriction of the processing of your personal data;
pursuant to Art. 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller, provided the statutory requirements are met;
pursuant to Art. 7(3) GDPR, to withdraw consent previously given at any time with effect for the future;
pursuant to Art. 77 GDPR, to lodge a complaint with a competent data protection supervisory authority.

X. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1) lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes.

If you wish to exercise your right to object or submit a data protection enquiry to us, an email to info@schropp-tuning.com is sufficient.

XI. Data Security

Our websites and online shops are transmitted using SSL/TLS encryption. You can identify an encrypted connection in particular by the use of “https://” in your browser's address bar and by the lock symbol displayed by your browser.

We also use appropriate technical and organizational security measures to protect personal data against accidental or intentional manipulation, loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

XII. Current Version and Changes to this Privacy Policy

This Privacy Policy is currently valid and is dated October 2026.

Due to the further development of our websites and online shops as well as changes in legal, technical or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed at any time on the respective website under “Privacy Policy”.