Privacy Policy
1 Introduction and contact details of the controller
| 1.1 |
We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally. |
| 1.2 |
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ACPS Automotive Services GmbH |
| 1.3 |
The controller has appointed a data protection officer, who can be contacted as follows: TÜV SÜD Akademie GmbH |
2 Data collection when visiting our website
| 2.1 |
When you use our website for information purposes only, without registering or otherwise providing us with information, we collect only the data that your browser transmits to the website server (known as ‘server log files’). When you access our website, we collect the following data, which we need for technical reasons to display the website to you:
Processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use. |
| 2.2 |
For security reasons and to protect the transmission of personal data and other confidential content (such as orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by ‘https://’ and the padlock symbol in your browser’s address bar. |
3 Cookies
To make visiting our website attractive and enable certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are deleted automatically when you close your browser (‘session cookies’), while others remain on your device for longer and allow website settings to be saved (‘persistent cookies’). In the latter case, you can find the storage period in the cookie settings overview of your web browser.
Where individual cookies used by us also involve the processing of personal data, processing is carried out either under Art. 6(1)(b) GDPR to perform the contract, under Art. 6(1)(a) GDPR where consent has been given, or under Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly, effective website experience.
You can configure your browser to inform you when cookies are set, decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or altogether.
Please note that the functionality of our website may be restricted if you do not accept cookies.
An overview of the specific cookies we use, including their purposes and storage periods, is provided below under ‘Overview of cookies used’.
Overview of cookies used
Below is an overview of the cookies we use, insofar as they are not already explained elsewhere in this Privacy Policy (see in particular Section 8 on YouTube and Google Maps). You can give or manage your consent to cookies that are not technically necessary using our cookie consent tool.
Cookie(s) |
Purpose |
Storage period |
Category |
|---|---|---|---|
t3D, tADe, tADu, tAE, tC, tMQ, tPL, tTDe, tTDu, tTE, tTf, tnsApp |
Basic technical functions of our shop system (including display and language settings) |
Persistent |
Technically necessary |
timezone |
Stores the user’s time zone to display the correct time |
30 days |
Technically necessary |
session-, session-language |
Session and language settings during the website visit |
End of session |
Technically necessary |
cookie-preference |
Stores the selection you make using the cookie consent tool |
30 days |
Technically necessary |
itemsManufactures, itemsVehicleModelSeries, itemsVehicleYears, itemsVehicles, totalItemsManufactures, totalItemsVehicleModelSeries, totalItemsVehicleYears, totalItemsVehicles |
Store the vehicle data you select (manufacturer, model, year) for the compatibility search for suitable towbars/wiring kits |
Persistent |
Technically necessary/functional |
acpsatsw-login-redirect, acpsatsw-search-country |
Technical control of login redirection and country selection within the compatibility search |
End of session |
Technically necessary |
wishlist-enabled |
Stores whether the wishlist function is enabled for you |
30 days |
Functional |
neti-store-locator-google-consent |
Stores your consent to display maps in our dealer search (see Section 8.2 Google Maps) |
30 days |
Consent-dependent |
Some of the technical identifiers listed above are automatically generated names used by our shop system exclusively for internal display and control purposes; no data is transmitted to third parties in this respect.
4 Contacting us
When you contact us (for example, using a contact form or by email), personal data is processed solely to deal with and respond to your enquiry and only to the extent necessary for that purpose.
The legal basis for processing this data is our legitimate interest in responding to your enquiry under Art. 6(1)(f) GDPR. If you contact us in connection with a contract, Art. 6(1)(b) GDPR is an additional legal basis. Your data will be deleted when it is apparent from the circumstances that the matter has been fully resolved, unless statutory retention obligations prevent deletion.
5 Data processing when opening a customer account
Under Art. 6(1)(b) GDPR, personal data is also collected and processed to the extent necessary when you provide it to us while opening a customer account. The data required to open an account is shown in the input fields of the relevant form on our website.
You can delete your customer account at any time by sending a message to the controller at the address given above. Once your customer account has been deleted, your data will be deleted provided that all contracts concluded through the account have been fully performed, no statutory retention periods prevent deletion and we have no continuing legitimate interest in further storage.
6 Use of customer data for direct marketing
| 6.1 |
Subscribing to our email newsletter If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Any additional information is voluntary and is used to address you personally. We use the ‘double opt-in’ procedure for newsletter subscriptions. This ensures that you receive newsletters only after you have expressly confirmed your consent to receiving them by clicking a verification link sent to the email address provided. By activating the confirmation link, you give your consent to the use of your personal data under Art. 6(1)(a) GDPR. We record the IP address assigned by your Internet Service Provider (ISP), together with the date and time of registration, so that any misuse of your email address can be traced at a later date. The data collected when you subscribe to the newsletter is used strictly for the specified purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending an appropriate message to the controller named at the beginning of this policy. After you unsubscribe, your email address will be removed from our newsletter mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law and explained in this policy. |
| 6.2 |
Postal advertising On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first name, surname and postal address and, where we have received this additional information from you in the course of the contractual relationship, your title, academic degree, year of birth and professional, sector or business designation under Art. 6(1)(f) GDPR, and to use them to send you interesting offers and information about our products by post. You can object to our storing and using your data for this purpose at any time. |
7 Data processing for order fulfilment
| 7.1 |
General information Where necessary to perform the contract for delivery and payment purposes, the personal data we collect is disclosed to the commissioned transport company and financial institution under Art. 6(1)(b) GDPR. If, under a corresponding contract, we are required to provide you with updates for goods with digital elements or digital products, we process the contact details you provide when placing your order (name, address and email address) to inform you personally of forthcoming updates within the statutory period, by an appropriate means of communication (for example, post or email), as part of our statutory information obligations under Art. 6(1)(c) GDPR. Your contact details are used strictly for notifications about updates we are required to provide and are processed for this purpose only to the extent necessary for the relevant notification. We also work with the following service provider(s) to process your order. They assist us with performing all or part of the contracts concluded. Certain personal data is transmitted to these service providers in accordance with the information below. |
| 7.2 |
Disclosure of personal data to shipping service providers: DACHSER SE: We use the following transport service provider: DACHSER SE, Logistikzentrum München, European Logistics, Zamilastraße 11,81677 München, Germany Under Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery to arrange a delivery date or notify you of delivery, provided that you have given your express consent during the ordering process. Otherwise, we disclose only the recipient’s name and delivery address to the provider for delivery purposes under Art. 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date with the provider in advance or provide a delivery notification. Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider. DHL: We use the following transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany Under Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery to arrange a delivery date or notify you of delivery, provided that you have given your express consent during the ordering process. Otherwise, we disclose only the recipient’s name and delivery address to the provider for delivery purposes under Art. 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date with the provider in advance or provide a delivery notification. Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider. DHL Express: We use the following transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany Under Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery to arrange a delivery date or notify you of delivery, provided that you have given your express consent during the ordering process. Otherwise, we disclose only the recipient’s name and delivery address to the provider for delivery purposes under Art. 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date with the provider in advance or provide a delivery notification. Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider. DPD: We use the following transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany Under Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery to arrange a delivery date or notify you of delivery, provided that you have given your express consent during the ordering process. Otherwise, we disclose only the recipient’s name and delivery address to the provider for delivery purposes under Art. 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date with the provider in advance or provide a delivery notification. Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider. GLS: We use the following transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany Under Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery to arrange a delivery date or notify you of delivery, provided that you have given your express consent during the ordering process. Otherwise, we disclose only the recipient’s name and delivery address to the provider for delivery purposes under Art. 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date with the provider in advance or provide a delivery notification. Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider. NOX Nachtexpress: We use the following transport service provider: Innight Express Germany GmbH, Katzbergstr. 3, D-40764 Langenfeld, Germany Under Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery to arrange a delivery date or notify you of delivery, provided that you have given your express consent during the ordering process. Otherwise, we disclose only the recipient’s name and delivery address to the provider for delivery purposes under Art. 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date with the provider in advance or provide a delivery notification. Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider. |
| 7.3 |
Use of payment service providers: Novalnet: One or more online payment methods from the following provider are available on this website: Novalnet AG, Gutenbergstraße 7, 85748 Garching bei München , Germany If you select a payment method offered by the provider under which you pay in advance (such as payment by credit card), the payment details you provide during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, are disclosed to the provider under Art. 6(1)(b) GDPR. In this case, your data is disclosed solely to process payment with the provider and only to the extent necessary for that purpose. If you select a payment method under which the provider provides a service in advance (such as payment on invoice, by instalments or by direct debit), you will also be asked during the ordering process to provide certain personal information (first name and surname, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative means of payment). To safeguard our legitimate interest in establishing our customers’ ability to pay, we disclose this data to the provider for a credit check under Art. 6(1)(f) GDPR. Using the personal data you provide and additional data (such as your shopping basket, invoice amount, order history and payment experience), the provider assesses whether the payment option you selected can be granted in view of payment and/or bad debt risks. In deciding on your application, the provider may consider its own internal criteria and identity and credit information from the following credit reference agencies under Art. 6(1)(f) GDPR:
The credit report may contain probability values (‘scores’). Where scores form part of the result of a credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data, among other information, is used to calculate these scores. You may object to this processing of your data at any time by contacting us or the provider. However, the provider may still be entitled to process your personal data where this is necessary to process payment in accordance with the contract. Paypal: One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg If you select a payment method offered by the provider under which you pay in advance, the payment details you provide during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, are disclosed to the provider under Art. 6(1)(b) GDPR. In this case, your data is disclosed solely to process payment with the provider and only to the extent necessary for that purpose. If you select a payment method under which we provide a service in advance, you will also be asked during the ordering process to provide certain personal information (first name and surname, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative means of payment). To safeguard our legitimate interest in establishing your ability to pay in such cases, we disclose this data to the provider for a credit check under Art. 6(1)(f) GDPR. Using the personal data you provide and additional data (such as your shopping basket, invoice amount, order history and payment experience), the provider assesses whether the payment option you selected can be granted in view of payment and/or bad debt risks. The credit report may contain probability values (‘scores’). Where scores form part of the result of a credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data, among other information, is used to calculate these scores. You may object to this processing of your data at any time by contacting us or the provider. However, the provider may still be entitled to process your personal data where this is necessary to process payment in accordance with the contract. |
8 Website features
| 8.1 |
Youtube This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland Data may also be transmitted to: Google LLC., USA When you access a page on our website containing such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider in this process. When playback of embedded videos is started using the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent misuse. If you are logged into a user account with the provider when visiting our website, clicking a video will directly associate your data with your account. If you do not want your data to be associated with your account, you must log out before clicking the play button. All of the processing described above, in particular the setting of cookies to read information from your device, takes place only if you have given us your express consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission. |
| 8.2 |
Google Maps As part of our dealer and workshop search, this website uses an online mapping service from the following provider: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). The maps are technically displayed using the ‘Store Locator’ shop plugin from Net Inventors GmbH, which accesses the Google Maps interface. Google Maps is a web service that displays interactive maps to present geographical information visually. Using this service shows you dealer and workshop locations near you and makes it easier to find directions. When you access a page containing a Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google’s servers. It may also be transferred to Google LLC. servers in the USA. This occurs regardless of whether Google provides a user account into which you are logged in or whether a user account exists. If you are logged into Google, your data is directly associated with your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles (even if you are not logged in) and evaluates them. Collection, storage and evaluation take place under Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, conducting market research and/or designing Google websites to meet users’ needs. You have the right to object to the creation of these usage profiles; you must contact Google to exercise this right. If you do not agree to your data being transmitted to Google in future when using Google Maps, you can also disable the Google Maps web service entirely by switching off JavaScript in your browser. Google Maps and the map display on this website will then no longer be available. Where legally required, we have obtained your consent under Art. 6(1)(a) GDPR to the processing described above. You may withdraw your consent at any time with effect for the future. To withdraw your consent, please follow the objection procedure described above. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission. |
| 8.3 |
Google Fonts To display fonts consistently, our website uses fonts from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google Fonts’). When you access our website, your browser connects to Google’s servers to load the fonts. This may also involve transmission to Google LLC. servers in the USA. Google thereby receives information that our website has been accessed via your IP address. Google Fonts is used on the basis of your consent under Art. 6(1)(a) GDPR, which you give through our cookie consent tool. You can withdraw your consent at any time with effect for the future using the cookie consent tool. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission. |
9 Use of the TecAlliance product catalogue
This website uses a plugin from TecAlliance GmbH, Steinheilstr. 10, 85737 Ismaning, which allows you to search for suitable ACPS Automotive Services GmbH accessories for your vehicle. The plugin automatically redirects you to https://web.tecalliance.net/acps/de/home. In doing so, TecAlliance processes your IP address. TecAlliance GmbH is responsible for any further processing of your data when you use the catalogue. Further details are available in the privacy policy on the TecAlliance website at https://www.tecalliance.net/de/privacy-policy/.
10 Cookie consent tool
This website uses a cookie consent tool provided by our shop platform to obtain valid user consent for cookies and cookie-based applications that require consent. When users access the website, the tool appears as an interactive interface in which they can tick boxes to give consent to particular cookies and/or cookie-based applications. The tool loads cookies/services requiring consent only when the relevant user has ticked the corresponding boxes. This ensures that such cookies are placed on the user’s device only where consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this process.
If, in individual cases, personal data (such as an IP address) is nevertheless processed to store, associate or log cookie settings, this processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in ensuring that our website complies with the law.
Art. 6(1)(c) GDPR provides an additional legal basis for processing. As the controller, we have a legal obligation to make the use of technically unnecessary cookies dependent on the relevant user’s consent.
Where necessary, we have concluded a data processing agreement with the provider to protect the data of visitors to our website and prevent unauthorised disclosure to third parties.
Further information about the operator and settings of the cookie consent tool is available directly in the relevant user interface on our website.
11 Duration of storage of personal data
The storage period for personal data depends on the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (such as retention periods under commercial and tax law).
Where personal data is processed on the basis of express consent under Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.
Where statutory retention periods apply to data processed in connection with contractual or similar obligations under Art. 6(1)(b) GDPR, this data is routinely deleted once the retention periods expire, provided that it is no longer required to perform or enter into a contract and/or we have no continuing legitimate interest in further storage.
Where personal data is processed under Art. 6(1)(f) GDPR, it is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves to establish, exercise or defend legal claims.
Where personal data is processed for direct marketing under Art. 6(1)(f) GDPR, it is stored until you exercise your right to object under Art. 21(2) GDPR.
Unless the other information in this policy concerning specific processing situations states otherwise, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
12 Data protection in job applications and recruitment procedures
We collect and process applicants’ personal data to conduct the recruitment procedure. Processing may also take place electronically. If the recruitment procedure results in an employment contract with an applicant, we store the data provided to us to manage the employment relationship in compliance with statutory requirements. If the application does not result in employment, we will delete the application documents no later than three months after notifying the applicant of the rejection, unless other legitimate interests of our company prevent deletion.
13 Automated decision-making
We do not use the data we process about you for automated decision-making or ‘profiling’.
14 Social media
In addition to this website, we operate various social media channels. We currently have a presence on Facebook, YouTube, LinkedIn and Twitter. You can access our pages there using the relevant buttons on our website. We expressly point out that you use these pages and their functions on your own responsibility.
When you visit our pages on these platforms, personal data, such as your IP address, processor type and browser version including plugins, may be transmitted to and processed by the operator of the respective platform. The social media provider processes the data collected about you in this context and may also transfer it to countries outside the European Economic Area (EEA).
If you are logged in with your personal user account when visiting such a website, the operator can associate your visit with your account. To avoid this, you should log out with the relevant platform operator before visiting our online presence, or disable the ‘stay logged in’ function, delete the cookies stored on your device, and close and restart your browser.
For the purpose and scope of data collection and the further processing and use of data by the respective platform operator, as well as your associated rights and settings to protect your privacy, please refer to the relevant privacy notices:
Facebook: https://www.facebook.com/privacy/center/
Instagram: https://help.instagram.com/519522125107875
LinkedIn: https://www.linkedin.com/legal/privacy-policy
X: https://privacy.x.com/de
YouTube: https://policies.google.com/privacy
We do not otherwise collect or process any data from your use of our presence on the respective social media platforms.
15 Your rights of access, rectification, blocking, erasure and objection
You have the right to obtain information at any time about the personal data we store about you. You also have the right to rectification, blocking or erasure of your personal data, except where data must be stored for business processing purposes. Please contact our data protection officer by email at datenschutz-mg@acps-automotive.com.
To ensure that a block on data can be respected at all times, the data must be retained in a blocking file for control purposes. You can also request erasure of the data, provided there is no statutory archiving obligation. Where such an obligation exists, we will block your data on request.
You have the right to withdraw consent previously given to the processing of personal data at any time with effect for the future. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You may make changes to or withdraw your consent with effect for the future by notifying us by email at datenschutz-mg@acps-automotive.com.
We have a statutory period of one month to respond to your request, which may be extended by a further two months in exceptional cases. We endeavour to deal with your request in full within the first month after receiving it. Please note that statutory retention periods may require us to continue storing certain personal data even after you have requested its erasure.
If you consider that the processing of personal data concerning you infringes the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work or the alleged infringement.
The data protection supervisory authority responsible for us is
State Commissioner for Data Protection and Freedom of Information for North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
16 Changes to our data protection provisions
We reserve the right to amend this Privacy Policy as necessary to ensure that it always meets current legal requirements or to reflect changes to our services, for example when introducing new services. The new Privacy Policy will apply when you next visit our website.
Mönchengladbach, October 2026