Data protection
explanation

The person responsible within the meaning of the GDPR is:

Driving school S.U.V. GmbH
Attaouil Abdelhafid
Mindenerstrasse 106 · 40227 Dusseldorf
Telephone: 0211 21098911
Email: info@fahrschulesuv.de

We take the protection of your personal data seriously and treat it confidentially in accordance with the statutory data protection regulations (GDPR, BDSG, TDDDG — formerly TTDSG) and this data protection declaration.

This website is hosted at Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. To provide the website, Vercel processes server log files (IP address, date/time, page accessed, user agent). Data processing takes place to fulfill the contract and in the legitimate interest of technically secure provision (Art. 6 Para. 1 lit. b and f GDPR). If data is transferred to the USA, the transfer is based on standard contractual clauses and the EU-US Data Privacy Framework.

We store data on pre-registrations, inquiries and bookings in a database Supabase Inc., operated in the EU region (Frankfurt, Germany). Processing to fulfill the contract in accordance with Article 6 Paragraph 1 Letter b GDPR. Order processing contract exists.

We send transactional emails (e.g. confirmations, callbacks) via Resend Inc., EU region. Processing for contract initiation/fulfillment in accordance with Article 6 Paragraph 1 Letter b GDPR. Order processing contract exists.

If you make a non-binding request using our pre-registration form, we will process the data you provide to process your request and initiate the training contract. In particular, the following is collected: salutation, first and last name, birth name if applicable, date and place of birth, address, email address, telephone number, nationality, desired driver's license class/course as well as voluntary information (e.g. special requests, visual aid, existing driver's license, previous driving school). We use the contact form to process your name, email address, if applicable, telephone number, subject and message.

The legal basis is Article 6 Paragraph 1 Letter b GDPR (contract initiation) and - for verifiable consent to data processing – Article 6 Paragraph 1 Letter a GDPR. The data protection consent granted is documented with a time stamp (obligation to provide proof in accordance with Art. 7 Para. 1 GDPR). Required fields are marked as such; Without this information we cannot process the request. For the storage period, see section 11a.

If you agree to receive our newsletter, we will use your email address to send you information about the driving school and promotions. Registration takes place in Double opt-in procedure: After your consent, we will first send you a confirmation email; Only after clicking on the confirmation link contained therein will your address be included in the newsletter distribution list. This is how we ensure that the registration actually comes from you. The time of registration and confirmation are recorded.

The legal basis is your consent in accordance with Article 6 Paragraph 1 Letter a GDPR. You can unsubscribe from the newsletter at any time using the unsubscribe link at the end of every newsletter email or by sending a message to info@fahrschulesuv.de unsubscribe; The revocation does not affect the lawfulness of the processing that has taken place up to that point. After you unsubscribe, your address will be removed from the mailing list and placed on a blacklist to avoid being sent again.

We use technically necessary cookies (e.g. session, cookie consent, language preference) without consent in accordance with Section 25 Paragraph 2 TDDDG (formerly TTDSG). Other cookies and tracking services (analysis, marketing) - in particular Google Tag Manager, Meta-Pixel and the Meta Conversions API - will only be loaded with your express consent in the cookie banner in accordance with Section 25 Paragraph 1 TDDDG and Art. 6 Paragraph 1 Letter a GDPR. As long as you have not given your consent, neither the scripts will be executed nor the associated scripts will be integrated by the server. You can revoke your consent at any time using the cookie settings button in the footer; Any data processing that has already taken place remains lawful.

In the pre-registration form we use the OSM-based geocoding service Photon (komoot, hosted in the EU) to speed up entering your address. When using the search field, the search text entered (and only this text) is transmitted to photon.komoot.io. No cookies are set and no personal data is stored. Legal basis: Art. 6 Para. 1 lit. b GDPR (contract initiation) and Art. 6 Para. 1 lit. f GDPR (legitimate interest in efficient registration).

If you have consented to statistical or marketing cookies, we load the tag management service Google Tag Manager (GTM) the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Container ID: GTM-M9TFFHX5. GTM itself is a tag container that can integrate additional tags (e.g. conversion pixels) in the browser; The respective tags within GTM are also secured against premature triggering by our Consent Mode v2 signal (default "denied") and only become active once the respective category has been consented to.

Processed data: IP address (shortened if processed by Google), user agent, referrer, URL accessed. Legal basis: Art. 6 Para. 1 lit. a GDPR in conjunction with V. m. § 25 paragraph 1 TDDDG. A transfer to third countries can take place; Guarantees in accordance with Art. 46 GDPR (standard contractual clauses) and the EU-US Data Privacy Framework exist.

If you have consented to this, we will use the meta pixel Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The pixel allows us to deliver targeted ads on Facebook/Instagram, measure conversions and create custom audiences. Pixel ID: 1393209932293551. Events captured: PageView (page views) and Lead (successful pre-registration). Processed data: IP address, user agent, shortened referrer/URL data, cookies (_fbp, _fbc), browser fingerprint and the click ID cookie generated by Meta. Legal basis: Art. 6 Para. 1 lit. a GDPR in conjunction with V. m. § 25 paragraph 1 TDDDG. You can revoke your consent at any time via the cookie settings.

In addition to the meta pixel, we use the Meta Conversions API the Meta Platforms Ireland Limited. The conversion event “Lead” is also transmitted to Meta from our server (Vercel, EU region). Both broadcasts use a common event ID, so Meta deduplicates the event and counts it only once. This hop is also only triggered after consent to marketing cookies - the consent status is checked on both the client and server side (belt and braces gate). Data submitted: hashed (SHA-256) reference ID, IP address, user agent, event source URL, timestamp. Legal basis: Art. 6 Para. 1 lit. a GDPR in conjunction with V. m. § 25 paragraph 1 TDDDG. The transfer to the USA takes place on the basis of the standard contractual clauses and the EU-US Data Privacy Framework.

Unless you are in Statistics cookies If you have consented, we will use the product analysis software PostHog the PostHog Inc., 965 Mission St #425, San Francisco, CA 94103, USA. Data processing takes place via the EU hosting cluster (eu.i.posthog.com) within the European Union. PostHog collects aggregated usage statistics (e.g. page views, button clicks, time spent, anonymized device information) so that we can continually improve the usability of the website. Unless you have given consent, the script is loaded but is in opt-out mode and does not transmit events; after consent, it switches to opt-in mode. If revoked, the visitor will immediately be set to opt-out and the local visitor ID will be reset. Processed data: pseudonymous visitor ID, IP address (processed shortened by the EU server), user agent, URL accessed, event parameters. Legal basis: Art. 6 Para. 1 lit. a GDPR in conjunction with V. m. § 25 paragraph 1 TDDDG. You can revoke your consent at any time via the cookie settings in the footer.

To ensure secure and trouble-free operation, we log operationally relevant events on the server (e.g. registrations in the internal administration area, receipt of new pre-registrations and contact requests, technical errors). These logs are included in our database Supabase (EU region, Frankfurt) and also sent to the logging service PostHog via its EU cluster (eu.i.posthog.com) transmitted. When you log into the administration area, your IP address and browser identifier (user agent) are recorded to prevent unauthorized access. This server-side logging takes place independently of cookies and without consent based on our legitimate interest in IT security and proper operation (Art. 6 Para. 1 lit. f GDPR). The logs are only retained for as long as necessary for these purposes and then deleted.

On our location page we integrate the map services of Google Maps the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The card will only after active consent loaded — either by confirming in the cookie banner (statistics or marketing) or by clicking on the explicit “Activate map” button on the location page. Unless you have given your consent, no iframe or script will be loaded by Google; Instead of the map you will see a static placeholder with an address. When activated, among other things: Transfer IP address, user agent, cookies and timestamp to Google; a transfer to the USA can take place. Legal basis: Art. 6 Para. 1 lit. a GDPR in conjunction with V. m. § 25 paragraph 1 TDDDG. Guarantees in accordance with Art. 46 GDPR (standard contractual clauses) and the EU-US Data Privacy Framework exist. You can revoke your consent at any time via the cookie settings in the footer.

If you use our AI chat, your entries will be sent to Google Gemini APItransmitted to generate a response. provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Depending on the technical processing, a transmission may be possible Google LLC take place in the USA. Chat content is not used to train the models (zero data retention setting active). Legal basis: Article 6 Paragraph 1 Letters b and f GDPR.

Our website can be viewed in multiple languages. The translation of the page content is done on the server side Google Cloud Translation API the Google Ireland Limited or Google LLC (USA). Only the page texts to be displayed are transmitted from our server to Google and the result is temporarily stored; Your IP address will not be transmitted to Google, because the request comes from our server (not your browser). No personal data from visitors is transmitted to Google. Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in barrier-free, multilingual provision of content). Any transfer to the USA takes place on the basis of the standard contractual clauses and the EU-US Data Privacy Framework.

We only store personal data for as long as it is necessary for the respective purposes or as long as there are legal retention requirements:

• Pre-registrations that lead to a training contract: for the duration of the training relationship and subsequently within the framework of the statutory retention periods (in particular Section 257 HGB: 6 years, Section 147 AO: 10 years for tax-relevant documents).
• Pre-registrations without conclusion of contract: until the processing and deletion are completed, at the latest after the purpose of the processing no longer applies.
• Contact inquiries: until your request has been fully processed and then only for as long as a legitimate interest (e.g. queries) or legal obligations require this.
• Newsletter: until you unsubscribe; The blocking list to avoid re-sending is maintained permanently.
• Server logs & security data: only for a short time, then deletion (see section 9c).

After the respective deadline has expired, the data will be deleted or anonymized, provided there are no legal obligations to the contrary.

You have the right to information (Article 15), rectification (Article 16), deletion (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21). Please contact us informally info@fahrschulesuv.de.

You also have the right to complain to a supervisory authority - the state commissioner for data protection and freedom of information for North Rhine-Westphalia is responsible.

We reserve the right to adapt this statement so that it always complies with current legal requirements or to implement changes to our services. Status: 10.6.2026.