1. Data Controller

The data controller responsible for processing personal data on this website is:

2. General Information on Data Processing

We take the protection of your personal data very seriously. Personal data is treated confidentially and processed in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and this Privacy Policy.

You can generally use our website without providing personal data. Where personal data is collected on our website, for example your name, address, email address, phone number or payment information, this is done only where it is necessary for the respective function, enquiry or contract processing, or where you have given your explicit consent.

Personal data is only passed on to third parties if this is necessary for contract processing, if there is a legal obligation, if we have a legitimate interest, or if you have previously given your consent.

3. Collection and Storage of Personal Data and Type and Purpose of Use

a) When Visiting the Website

When you access our website, information is automatically transmitted by the browser of your device to our server. This information is temporarily stored in so-called server log files. In particular, the following information may be collected:

• IP address of the requesting device
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and, where applicable, the operating system of your device
• Name of your access provider

The data mentioned above is processed to ensure a smooth connection to the website, convenient use of our website, system security and stability, and for administrative purposes.

Legal basis: Art. 6 (1) lit. f GDPR. Our legitimate interest follows from the purposes listed above.

b) When Using the Contact Form or Contacting Us by Email

If you contact us via a contact form or by email, we process the data you provide. This may include, in particular, your name, email address, phone number, message content and any other information you voluntarily provide.

The processing is carried out in order to handle your enquiry and communicate with you.

Legal basis: Art. 6 (1) lit. b GDPR, if your enquiry relates to a contract or pre-contractual measures. In all other cases, the processing is based on our legitimate interest in handling your enquiry pursuant to Art. 6 (1) lit. f GDPR.

c) When Placing an Order in the Online Shop

When you place an order in our online shop, we process the data required for contract processing. This includes in particular:

• Name and billing address
• Delivery address, if different
• Email address
• Phone number, if provided or required for delivery
• Order data and purchased items
• Payment and transaction information

The processing is carried out for the performance of the purchase contract, delivery of the goods, payment processing, invoicing, and handling warranty, return or service cases.

Legal basis: Art. 6 (1) lit. b GDPR. Where tax or commercial law retention obligations apply, processing is additionally based on Art. 6 (1) lit. c GDPR.

4. Customer Account

If you create a customer account, we store the data you provide so that you can manage your orders and place future orders more quickly. This includes, in particular, your name, address, email address, login data and order history.

You may request deletion of your customer account at any time. Statutory retention obligations, especially for invoice and order data, remain unaffected.

Legal basis: Art. 6 (1) lit. b GDPR.

5. Payment Providers

For payment processing in our online shop, we use, among others, the payment service provider PayPal (PayPal Europe S.à r.l. et Cie, S.C.A., Luxembourg). Depending on the selected payment method, the following payment options may be processed through PayPal or related payment services:

The data required for payment processing is transmitted to the respective payment service provider. This may include, in particular, your name, billing address, email address, order amount, payment information and transaction data.

The specific processing of data is also subject to the privacy policy of the respective payment service provider.

Legal basis: Art. 6 (1) lit. b GDPR, as the processing is necessary for performing the purchase contract and processing payment.

If you select bank transfer / prepayment, we process the payment and bank information required to allocate the payment to your order.

6. Shipping, Fulfillment and Delivery of Goods

For the delivery of your order, we pass on the data required for this purpose to shipping providers, fulfillment service providers or freight forwarding companies. This may include, in particular, your name, delivery address, email address, phone number, order number and parcel- or shipment-related information.

The data is passed on only to the extent necessary for delivering the ordered goods, shipment tracking or coordinating the delivery.

Legal basis: Art. 6 (1) lit. b GDPR. If we or the shipping provider inform you by email about the shipping status, the processing may additionally be based on Art. 6 (1) lit. f GDPR.

7. Newsletter

If you subscribe to our newsletter, we use your email address and, where applicable, further voluntary information to send you regular information about products, offers and news from 4 Wheel Parts.

Registration is generally carried out using a double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your subscription.

You can withdraw your consent at any time with effect for the future, for example by using the unsubscribe link included in every newsletter.

Legal basis: Your consent pursuant to Art. 6 (1) lit. a GDPR.

If we use an external service provider, such as Brevo, for sending newsletters, the processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

8. Cookies, Consent Tool and Tracking

Our website uses cookies and similar technologies. Cookies are small text files stored on your device. Some cookies are technically necessary for our website to function properly. Other cookies and technologies are used for analytics, reach measurement, optimisation or advertising.

a) Technically Necessary Cookies

Technically necessary cookies are required for the operation of the website. They enable, for example, the shopping cart, login functions, language settings, security functions or the storage of your privacy settings.

Legal basis: The storage of information on your device or access to information stored on your device is based on Section 25 (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). The processing of personal data is based on Art. 6 (1) lit. f GDPR, insofar as it is necessary to provide a functional website.

b) Analytics, Marketing and External Media Services

If you give your consent via our consent tool, we may use analytics, marketing and external media services. These may include in particular the following services:

These services are only activated if you have previously given your consent via the consent tool. You can withdraw or change your consent at any time with effect for the future.

Legal basis: The legal basis for storing information on your device or accessing information stored on your device is Section 25 (1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6 (1) lit. a GDPR.

9. Hosting

Our website is hosted by TimmeHosting GmbH & Co. KG. The hosting provider processes data required for the operation and security of the website, in particular server log files.

The processing is carried out to provide, maintain and secure our website.

Legal basis: Art. 6 (1) lit. f GDPR. Where necessary, a data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

10. Social Media and External Links

Our website may contain links to our profiles on social networks and external platforms, in particular Facebook, Instagram and YouTube.

If you click on such a link, you will be redirected to the respective platform. From that point onwards, the privacy policy of the respective provider applies. We have no influence on the data processing carried out there.

If social plugins or embedded content from external providers are used on our website, they are activated only after your consent via our consent tool.

11. Storage Period

We store personal data only for as long as is necessary for the respective processing purposes. Where statutory retention obligations exist, in particular under commercial or tax law, the relevant data is stored for the duration of the statutory periods.

After the respective purpose no longer applies or statutory retention periods have expired, the data will be deleted or blocked, unless there is another legal basis for further processing.

12. Your Rights

Within the scope of the statutory requirements, you have the following rights:

If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a data protection supervisory authority.

13. Objection to Advertising Emails

We hereby object to the use of contact data published as part of legal notice obligations or on this website for sending unsolicited advertising and information materials.

We reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam emails.

14. Contact for Privacy Matters

If you have any questions about data protection or wish to exercise your rights, you may contact us at any time: