Your data.Clearly protected.

XeonEurope Deutschland

XeonEurope Deutschland can provide support with technical questions relating to the website, its security logic and technical processing. The controller under data-protection law remains EU-New vehicle-Verkauf KH GmbH & Co KG.

Hosting, server log files and IT security

When you access this website, the web server processes technically required connection data. This may include your IP address, date and time, requested URL, data volume, referrer URL, browser type, operating system and HTTP status code.

This processing supports secure and stable operation, troubleshooting, attack prevention and abuse detection. The legal basis is generally Art. 6(1)(f) GDPR.

Contact form and email communication

If you use the contact form, we process the information you provide, including your name, email address, optional phone number, vehicle/offer number, subject and message, in order to respond to your enquiry.

The enquiry is sent as an HTML email to eu-neuwagen-vermittlung@web.de. An automatic confirmation may be sent to the email address you provide.

Depending on the context, processing is based on Art. 6(1)(b), Art. 6(1)(f) or, where consent is required, Art. 6(1)(a) GDPR.

Spam protection and abuse prevention

The contact form uses several protective mechanisms, including WordPress nonces, honeypot fields, timing and origin checks, a server-side calculation challenge, plausibility checks and rate limits based on pseudonymised IP/email identifiers.

IP addresses used by the theme for rate limiting are not stored in plain text; a server-side keyed hash is used and counters expire automatically. Normal server log files may nevertheless contain IP addresses.

The legal basis for these security measures is Art. 6(1)(f) GDPR.

mobile.de and vehicle inventory

The vehicle page embeds the dealer inventory page from mobile.de as external content. When this area is loaded, your browser establishes a direct connection to mobile.de servers. In particular, IP address, browser/device information and technically required connection data may be transmitted to mobile.de.

Search, vehicle and consent functions within the embedded dealer page are provided by mobile.de. mobile.de may display its own privacy and cookie settings within the embedded content. Server-side Seller API functions may additionally be used for inventory management.

Services used by this theme

The theme itself does not load Google Fonts, Google Analytics, Google Maps, YouTube or Meta Pixel by default. No external CAPTCHA service is loaded by default for spam protection.

Non-essential cookies or comparable access to end-user devices may require prior consent under Section 25 TDDDG in conjunction with the GDPR. Additional plugins, analytics tools, videos, maps, social-media embeds, advertising pixels or external fonts must be reviewed separately before use.

Legal grounds for processing

Who may receive data

Within the company, access is limited to persons who need the data to process your enquiry or the relevant business transaction.

Necessary service providers, such as hosting, email, maintenance or support providers, may receive access within the scope of their services. Where they process personal data on our behalf, the relevant data-protection requirements for processors apply.

Further disclosure takes place only where a legal basis exists, you have consented, or disclosure is necessary for your request or contractual processing.

How long data is retained

Personal data is retained only for as long as required for the relevant purpose. Enquiries without a subsequent contractual relationship are deleted once processing is complete and there are no legal or legitimate grounds for further retention.

If an enquiry becomes part of an offer, order, contract, accounting or warranty process, statutory retention periods may require longer storage.

Your rights under the GDPR

Where the legal requirements are met, you may exercise in particular the following rights:

You may withdraw consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

Data-protection supervisory authority

If you believe that processing of your personal data infringes data-protection law, you have the right to lodge a complaint with a supervisory authority. For non-public companies in Bavaria, the relevant authority is in particular:

SSL/TLS and organisational security

The website is intended to be delivered over an encrypted HTTPS connection. We also use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unauthorised alteration.

Changes to this privacy policy

We update this privacy policy when the website, services used or legal requirements change. The version published on this page is the applicable version.

Version date: 16 September 2026.