Privacy Policy

Last update: 11/16/2022


Section 1: Information on the collection of personal data


(1) We provide information in the following on the collection of personal data during the use of our website ( Personal data are all data that relate to you personally, such as your name, address, email addresses and user behavior.


(2) The controller, as defined by Art. 4, para. 7 of the EU General Data Protection Regulation (GDPR), is Holger G. Weiss, German Auto Labs GAL GmbH, Köpenicker Straße 154a, 10997 Berlin, Email: our imprint). You can contact our data protection officer at privacy@germanautolabs.comor via our postal address by including “Data Protection Officer” in the address.


(3) When you contact us by email, chat, telephone, or via a contact form, we will store the data you share with us (your email address and possibly your name and phone number) in order to respond to your questions as well as to be able to provide you with the best possible service in the future.


(4) In the event that we commission service providers for individual functions of our website or would like to use your data for commercial purposes, we will inform you of the relevant procedures in detail below. We will also specify the criteria that have been established for determining the storage period.


Section 2: Your rights


(1) You have the following rights regarding our use of the personal data that relates to you:


–     The right to information

–     The right to rectification and deletion

–     The right to restriction of processing

–     The right to object to the processing

–     The right to data portability


(2) In addition, you have the right to file a complaint with a data protection supervisory authority concerning our processing of your personal data.


Berliner Beauftragte für Datenschutz und Informationsfreiheit [Berlin Data Protection and Freedom of Information Commissioners]


Address: Alt-Moabit 59-61, 10555 Berlin, Germany

Telephone: +49 30 13889-0




Section 3: Collection of personal data when visiting our website


(1) When the website is used for purely informational purposes, i.e., when you do not register or otherwise share information with us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we must collect the following data that are technically required to display our website and to ensure its stability and security (legal basis: Art. 6, para. 1, no. 1 (f) of the GDPR):


–     IP address

–     Date and time of the request

–     Time zone difference with respect to Greenwich Mean Time (GMT)

–     Content of the request (specific page)

–     Access status/HTTP status codes

–     The volume of data transmitted in each case

–     Website from which the request is sent

–     Browser

–     Operating system and its interface

–     Language and version of the browser software


(2) In addition to the aforementioned data, cookies will be stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and allocated to the browser used by you and are used to forward certain information to the site that installed the cookie (in this case by us). Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website more user-friendly and effective.


(3) Use of cookies:

a) This website uses the following types of cookies, the scope and function of which are explained below:

–     Transient cookies (see b)

–     Persistent cookies (see c)

b) Transient cookies are automatically deleted when you close your browser. These particularly include session cookies. Session cookies store what is called a session ID with which the various requests made by your browser are allocated to a collective session. This allows your computer to be recognized again when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a predetermined period of time that may vary between cookies. You can delete the cookies at any time in your browser’s security settings.

d) Your browser settings can be configured according to your wishes. For example, you can reject the acceptance of third-party cookies or all cookies. Please note that if you do this, you may not be able to use all of the functions of this website.


(4) Cookies from third-party providers

a)    In order to improve our website as well as for economic interests, such as reminding interested website visitors of our offers (remarketing), we use third-party cookies as described below:


- Amazon Web Services (File hosting). Personal data: Various types of data as specified in the privacy policy of the service.

- Cloudflare (Website security against malicious activity). Personal data: IP.

- Google Tag Manager (Tag Management). Personal data: Usage data.

- Google Analytics (Analytics). Personal data: Tracker, usage data.

- LinkedIn (Analytics, Remarketing and behavioral targeting). Personal data: Cookies, usage data.

- Mailchimp widget (Managing contacts and sending messages, registration and authentication). Personal data: company name; email address; first name; last name.

- Webflow (Platform services and hosting, optimization). Personal data: Various types of data as specified in the privacy policy of the service.

- Vimeo video widget (Displaying content from external platforms). Personal data: Tracker, usage data.

- Youtube video widget without cookies (Displaying content from external platforms). Personal data: Usage data.


b) When you visit our website, we notify you of our use of the described third-party cookies. An option for preventing these cookies from being stored on your computer can be found in your browser’s settings (legal basis: Art. 6, para. 1 (f) of the GDPR).


Section 4: Additional functions and services on our website


(1) Aside from the purely informational use of our website, we offer various services that you can use if interested. For this purpose, you must generally provide additional personal data, which we use in order to provide the relevant service and to which the aforementioned principles of data processing apply.


(2) We sometimes use external service providers to process your data. These external service providers have been carefully selected and commissioned, they are bound to our instructions and they are monitored on a regular basis.


(3) Furthermore, we may transfer your personal data to third parties when we offer sales promotions, sweepstakes, contracts, or similar services together with partners. Additional information will be provided when you share your personal data, and it can also be found at the bottom of the description of the offer.


(4) Insofar as our service providers are registered in a state outside of the European Economic Area (EEA), we will inform you of the consequences of these circumstances in the description of the offer.


Section 5: Objecting or withdrawing consent to the processing of your data


(1) If you have consented to the processing of your data, you may withdraw your consent at any time. Such a withdrawal of consent will affect the reliability of the processing of your data after you have sent us the declaration of your withdrawal.


(2) To the extent that we process your data on the basis of a balance of interests, you may object to the processing of your data. This is the case, if the processing is not specifically necessary for the fulfillment of a contract, which is indicated by us in each case in the following description of functions. When submitting such an objection, please explain the reasons why we should not process your personal data in the manner implemented by us. In the event of a justified objection, we will review the facts and either cease/adapt the processing of your data or demonstrate our compelling legitimate grounds, on the basis of which we will continue to process the data.


(3) Of course, you may object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can notify us of your objection to advertising using the following contact information:via email: privacy@germanautolabs.comor via our postal address by including “Advertising Objection” in the address: German Auto Labs GAL GmbH, Köpenicker Strasse 154a, 10997 Berlin.


Section 6: Website Hosting

(1) Our website is hosted by Webflow, which includes forms on the site. When you visit the site or submit a contact form, Webflow receives the corresponding information. The legal basis for this is Art. 6, para. 1, no. 1 (f) of the GDPR.

(2) Further information about the content of our order processing agreement with Webflow can be found here:


Section 7: Newsletter


(1) With your consent, you can subscribe to our newsletter, which we use to inform you of our current interesting offers. The advertised goods and services are specified in the declaration of consent.


(2) For the subscription to our newsletter, we use what is known as the double-opt-in procedure. This means that, after you subscribe, we will send an email to the email address provided asking you to confirm that you would like to receive the newsletter. If you do not confirm your subscription, then your information will be blocked and automatically deleted after one month. Moreover, we will store the times of the subscription and confirmation as well as the IP address you used in each case. The purpose of this procedure is to verify your subscription and to be able to detect a possible abuse of your personal data.


(3) Your email address is the only information required to send you the newsletter. Providing additional, separately marked data is voluntary; such data will be used to address you personally. After we receive your confirmation, we will store your email address for the purpose of sending the newsletter. Legal basis: Art. 6, para. 1, no. 1 (a) of the GDPR.


(4) You may withdraw your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your withdrawal by clicking on the link provided in every newsletter email by sending an email to, or by sending a message via the contact information provided in the imprint.


(5) Please note that we evaluate your user behavior when you receive the newsletter. For this evaluation, the emails we send contain what are known as web beacons or tracking pixels, which are one-pixel image files that are stored on our website. In conducting evaluations, we combine the data mentioned in Section 3 and the web beacons with your email address and individual ID. We use the data obtained in this way to create a user profile so that we can tailor the newsletter to your individual interests. In doing so, we record when you read our newsletter and which links you click within the newsletter to draw conclusions about your personal interests. We combine these data with actions you take on our website. 

You can object to this tracking at any time by clicking on the separate link provided in each email or by notifying us via another contact option. The information will be stored for as long as you subscribe to the newsletter. After you unsubscribe, we store the data anonymously and in a purely statistical form.


Section 8: Online Advertising / Content


1. Linkedin


(1) We use the “LinkedIn Insight Tag” of LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA (“LinkedIn”) on our website. It helps us with in-depth campaign reporting and insights about our website visitors. It can also be used to track conversions, retarget website visitors, and unlock additional insights about members interacting with our ads on LinkedIn.

(2) The LinkedIn Insight Tag enables the collection of data regarding members’ visits to our website, including the URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. This data is encrypted, the IP addresses are truncated, and members’ direct identifiers are removed within seven days in order to make the data pseudonymous. This remaining, pseudonymized data is then deleted within 90 days.

(3) LinkedIn does not share personal data with us, it only provides aggregated reports about the website audience and ad performance. LinkedIn also provides retargeting for website visitors, enabling us to show personalized ads off our website by using this data, but without identifying the member. LinkedIn members can control the use of their personal data for advertising purposes through their account settings. All this in accordance with LinkedIn terms and cookie policies.


2. A/B Testing


(1) This website also analyzes user behavior by means of A/B testing. This means that we may display our website with slightly varying content depending on the profile that has been assigned to a user. Tools used include Google Optimize and Google Optimize 360. In this way, we can analyze and regularly improve our website and make it more interesting for you as a user. Legal basis for the A/B testing: Art. 6, para. 1, no. 1 (f) of the GDPR.


3. YouTube Videos

(1) Our website integrates YouTube videos that are stored at and can be played directly on our website. 


(2) When you visit our website, YouTube receives the information that you visited the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this Policy are transmitted. This occurs regardless of whether you have logged into a user account provided by YouTube or do not have a user account. When you are logged into Google, your data will be directly allocated to your account. If you do not want your data to be allocated to your profile in YouTube, you must log out before clicking the button. YouTube stores your data as a user profile and uses them for the purposes of advertising, market research, and/or to adapt its website to your needs. Such an evaluation is conducted, in particular (and even for users who are not logged in), to display appropriate advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles; you must contact YouTube if you wish to exercise this right.


(3) Additional information regarding the purpose and scope of the data collection and processing by YouTube can be found in their Privacy Policy, which also includes additional information regarding your rights and setting options to protect your privacy: Google processes your personal data in the US and is subject to the new Standard Contractual Clauses (SCCs) published by the European Comission to help safeguard personal data. More information can be found here:


4. Google Tag Manager


(1) Google Tag Manager (GTM) is a tag management system to manage JavaScript and HTML tags used for tracking and analytics on websites. Tags are small code elements that, among other things, are used to measure traffic and visitor behaviour: to understand the effect of online advertising and social channels; to set up remarketing and orientation towards target groups; and to test and optimize websites. GTM makes it easier for us to integrate and manage our tags. We use GTM on our website to include the following tracking tools:

● Google Analytics

● LinkedIn Conversion Pixel

(2) If you have performed deactivation, GTM takes this deactivation into account. For more information about GTM’s privacy practices can be found at and terms of use at Google processes your personal data in the US and is subject to the new Standard Contractual Clauses (SCCs) published by the European Comission to help safeguard personal data. More information can be found here:

4. Amazon Web Services


(1) We use the Amazon Web Services S3 service by Amazon Web Services, Inc., 410 Terry Avenue North Seattle WA 98109, USA for the purpose of hosting files such as PDFs or videos whereas data might be processed in the USA. AWS complies with data protection standards applicable in the EU by agreeing to abide by and process EU Data in compliance with the Standard Contractual Clauses for processors approved by the European Commission (SCC) which are incorporated by reference and form an integral part of the DPA. Notwithstanding the foregoing, the Standard Contractual Clauses (or obligations the same as those under the Standard Contractual Clauses) will not apply if AWS has adopted Binding Corporate Rules for Processors or an alternative recognised compliance standard for the lawful transfer of personal data (as defined in the GDPR) outside the EEA. For further information please refer to and

5. Vimeo Videos


(1) Our website includes plugins of the Vimeo video portal by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Each time you visit a site that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. By interacting with the Vimeo plugins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there.

(2) If you have a Vimeo account and do not want Vimeo to collect information about you through this website and link to your Vimeo membership information, you must log out of Vimeo before visiting this website. For more information about Vimeo’s collection and use of your information can be found at Vimeo’s Privacy Policy:

(3) Vimeo also uses an iFrame to show videos. This iFrame connects to Google Analytics. This is Vimeo’s own tracking system to which we have no access. You can stop tracking by Google Analytics by using the opt-out tools that Google offers for some internet browsers. Users can also prevent Google from collecting data generated by Google Analytics and relating to their use of the website (including their IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Further information on Vimeo’s data processing and information on data protection can be found at or

Section 9: Application for Jobs

Our website offers the opportunity to apply for employment, either via a job advertisement published on our side, or as speculative application. If you make use of these possibilities by providing your personal data, including contact details, experiences, roles, etc. or provide (solicited or unsolicited) special categories of personal data (see Section 7), the information inserted in the application form or otherwise provided (e.g., by you including it in a resume) will be transmitted to Personio as data controller. With regard to the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR. We store this personal data only for internal use to handle your application. We will delete your personal data on completion of the application process if further retention is not required for the establishment, exercise or defence of legal claims occurring out of the application process, or unless this personal data are required for the formation of or performance under a contract.

Please be aware that application forms will be provided and managed by Personio GmbH, Rundfunkplatz 4, 80335 München, Germany, (“Personio”) as our service provider. The personal data you provide will thus be collected and stored on our behalf by Personio and shared with the respective Personio entity(ies) processing your application. See for more information.

At your registration on the job application portal, your IP-address and date and time of your registration will be collected. This allows us to prevent misuse of our services. The legal basis for this processing is Art. 6(1)(f) GDPR.


© 2022 German Autolabs