Privacy policy

This is an AI-assisted translation for your convenience. Only the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Reifen Krautwurst GmbH
Tennenloher Str. 51
91058 Erlangen
Phone: +49 9131 685920
Email: info@reifen-krautwurst.de

Managing directors authorized to represent the company: Holger Richter, Tobias Richter. Commercial register: Amtsgericht Fürth (Local Court of Fürth), HRB 9392. No data protection officer has been appointed.

2. General principle

We process personal data only to the extent necessary for operating the website and for handling your requests. This website uses no cookies, no third-party analytics or tracking services, no advertising networks and no social networks. When you visit the site, no content is loaded from third-party servers: the fonts used are stored on our own server. Your IP address is therefore not passed on to anyone outside when you merely visit the site. The only exception is the map on the contact page, which is loaded from Google only after you click (Section 11).

If we display a notice as a window and you close it, your browser remembers this in its local storage (localStorage) under an entry such as rk_hinweis_… with the value 1, so that the window does not reappear on every page view. The entry stays in your browser, is not transmitted to us and contains no information about you personally. You can delete it at any time via your browser settings. Legal basis: Section 25(2) no. 2 of the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG, German Telecommunications Digital Services Data Protection Act), as the entry is strictly necessary for the display you requested.

3. Accessing the website and server log files

When you access this website, your browser transmits technically necessary data to our hosting provider, which stores it in log files. This data is:

• IP address of the requesting device
• date and time of access
• address accessed and amount of data transferred
• message whether the request was successful
• browser and operating system used
• previously visited page, if your browser sends it

Purpose: delivery of the website, operational security and defense against attacks. Legal basis: legitimate interest under Art. 6(1)(f) of the General Data Protection Regulation (GDPR, DSGVO). This data is not combined with other data sources, and we do not analyze it on a personal basis.

The hosting provider stores the IP addresses in these log files for a maximum of seven days and then deletes them; we do not analyze the log files.

Counting visits from AI services. If you come to our website via a link from an AI service such as ChatGPT, Gemini, Perplexity, Microsoft Copilot or Claude, our server recognizes this from information that your browser sends anyway when the page is requested: the source information (referrer) or an addition to the link such as utm_source=chatgpt.com. From this, we only count how often each service leads to which of our pages per month. In doing so, we do not store any IP address, do not set a cookie, do not run any script in your browser for this purpose and do not store anything on your device. It is not possible to identify you from this. We likewise count how often search engines and AI services automatically access our website. In the same way, we count links from our own posts, for example on Instagram, that carry an addition such as utm_source=instagram&utm_campaign=winterreifen: how often the link was accessed per month and how often an appointment was booked afterwards. For this purpose, our server passes the link’s identifier to the appointment form, which sends it back with the booking; only the number per post is stored, not who booked. Legal basis: our legitimate interest under Art. 6(1)(f) GDPR in knowing through which services and posts customers find us.

4. Hosting

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. The hosting provider processes the data mentioned above on our behalf and is bound by a data processing agreement under Art. 28 GDPR. The servers are located in Germany.

5. Tire request via the form

If you fill out the request form, we process the information you enter:

• About the tires you want: tire type, quantity, tire size including load index and speed rating, desired price range, if you wish your annual mileage and the tires currently fitted, for complete wheels the rims you want and the year of manufacture
• About the vehicle: vehicle model; if you wish, license plate, manufacturer and type codes (HSN/TSN) or vehicle identification number; the license plate also helps us find stored wheels
• About you: name and phone number or email address, one of the two is enough
• Optional: comments and a photo of the tire sidewall or of the vehicle registration certificate (Fahrzeugschein), if you do not want to read the size yourself

Purpose: preparing the requested quote and contacting you. Legal basis: taking steps prior to entering into a contract under Art. 6(1)(b) GDPR and your consent under Art. 6(1)(a) GDPR, which you give expressly in the form. You can withdraw this consent at any time without any particular form; the lawfulness of the processing carried out until then remains unaffected.

The information is stored on our server and also sent by email to our mailbox. An uploaded photo is stored together with the request. If you provide an email address, we use it exclusively to answer your request. It is not used for advertising.

Spam protection: The form contains a field that is invisible to humans and checks how much time has passed between opening and submitting it. To slow down mass requests, we store for one hour a check value (hash) derived from your IP address and count how many requests come from there; after that it is deleted automatically. For the tire request, we also store the time taken to fill out the form and your browser’s identifier (user agent) with the request in order to detect automated requests (legitimate interest, Art. 6(1)(f) GDPR). No external service is used. The same applies to the contact form and the workshop request (Section 8).

Storage period: We automatically delete requests made via the forms on this website from the web server after six months, including any photos sent. If an order results, we transfer the information required for it to our order records. The retention periods under commercial and tax law of six and ten years respectively apply there.

6. Online appointment booking

You can book a workshop appointment via the appointment page. The page works in four steps, and in each step we only process what you enter there:

• License plate: We match it against our workshop planning. If we know the vehicle, the page shows this, together with the type of wheels stored with us and the email address on file in shortened form (such as t***@web.de). The page does not show any further information about the vehicle or person based on the license plate alone
• Vehicle record, optional: If you also enter your customer number, the page shows the tread depths measured by us, the make and size of your stored wheels and the date of the next main inspection (Hauptuntersuchung, HU). This data comes from our workshop planning and is only displayed with a matching customer number
• Fleet access, for business customers only: Fleet managers log in with a user name and password and see their company’s vehicles. The password is used solely for verification and is not stored permanently
• About the appointment: desired service, preferred day and time
• About you: for known vehicles, the email address on file with us or a newly entered one; for new customers, name and phone number or email address
• About the vehicle, for new customers only: make and model, if you wish the tire size
• Optional: comments on your request

Your requested appointment is reserved in our workshop’s appointment planning, which is also the source of the available times shown, and is confirmed after we have checked it. The booking runs entirely through our own systems; no external appointment service provider is involved. Technically, the website briefly stores your entries on the web server, our workshop system collects them from there and places the response back. This intermediate storage is deleted after one hour at the latest, login data for fleet access after two minutes at the latest. The website itself does not access our workshop network.

After booking, the page offers a calendar file for download. It is kept for two days under a random address on our server and contains the appointment, service and license plate. We also send you a confirmation by email, see Section 7.

Purpose: arranging and carrying out the workshop appointment and providing information about your wheels stored with us. Legal basis: Art. 6(1)(b) GDPR. Storage period: appointment data becomes part of the order records; the periods in Section 5 apply.

7. Appointment confirmation and email mailboxes (Microsoft 365)

Our email mailboxes, including info@, termin@ and website@reifen-krautwurst.de, run on Microsoft 365. The confirmation of your online booking is sent from the mailbox termin@ and kept there as a sent message. It contains the appointment, service, license plate and the calendar file. The website sends the notifications from the tire request, the workshop request and the contact form via the mailbox website@ to our business mailbox. Requests that you send us by email are also stored in these mailboxes.

The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as a processor under Art. 28 GDPR on the basis of the Microsoft Data Protection Addendum. The data is stored in data centers in the European Union. Insofar as Microsoft, as a US company, accesses data from a third country in individual cases, this is safeguarded by the EU Standard Contractual Clauses and Microsoft’s certification under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(b) GDPR for the confirmation, otherwise our legitimate interest in reliable email operations under Art. 6(1)(f) GDPR.

8. Contact by email, phone, WhatsApp or form

If you call us or write an email, we process your information to handle your request. The legal basis is Art. 6(1)(b) GDPR if it concerns the initiation or performance of a contract, otherwise our legitimate interest in answering under Art. 6(1)(f) GDPR. Please note that emails are generally unencrypted in transit. We are happy to discuss confidential matters by phone or in person.

Via the contact form on the contact page, we receive your name, a phone number or email address and your message. The information is stored on our web server and forwarded by email to our mailbox (see Section 7). We delete it as soon as your request has been dealt with and no retention obligation prevents this. To protect against automated entries, the form uses a check field that is invisible to humans; no external captcha service is used.

Via the workshop request on the Car service page, we receive your concern, license plate or vehicle, if you wish a message, your name and a phone number or email address, as well as the page from which you sent the request. The information is stored on our web server and forwarded by email to our mailbox (see Section 7). Purpose: arranging a workshop appointment. Legal basis: Art. 6(1)(b) GDPR. Storage period: as for the tire request in Section 5. Section 5 also applies to spam protection.

On mobile phones, we offer a link that lets you write to us via WhatsApp. WhatsApp is not embedded on our website; as long as you do not tap the link, no data is transmitted to WhatsApp. If you write to us there, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of the Meta group, processes your phone number, your profile, connection data and the content of the messages; the content is end-to-end encrypted. Data may be transferred to Meta Platforms Inc. in the USA in the process. We use a WhatsApp Business account, and an employee answers your message. Legal basis: Art. 6(1)(b) GDPR if it concerns an order, otherwise Art. 6(1)(f) GDPR. If you do not want this, you can also reach us by phone, email or form.

9. Google reviews and opening hours

On the home page, we show reviews from our Google Business Profile, and on the contact page the opening hours maintained there. Our server retrieves both once a day via the Google Places API and stores them with us. Your browser does not connect to Google in the process; Google learns neither your IP address nor that you have visited our site. We no longer show reviews that were retrieved more than 30 days ago.

The text, number of stars and approximate date of the review are shown. We do not show the name of the author or their profile picture. Legal basis: our legitimate interest in reproducing publicly posted reviews of our business unchanged, Art. 6(1)(f) GDPR. Anyone who does not want their review to appear on our site can let us know informally or change the review on Google. The link “See all reviews on Google” leads to Google; only once you click it do Google’s privacy notices apply.

10. Links to external services

This website contains links to services of third parties, for example to the wheel configurator. This content is not embedded on our site. As long as you do not click the link, no data is transmitted there. After the click, the privacy policy of the respective provider applies, over whose content we have no influence.

The wheel configurator is a service of our network point S (felgen-b2c.point-s.de) and opens as a separate website. We do not transmit any data there; only when you access it do the provider’s privacy notices apply.

11. Map and directions

On the contact page, we initially show only a photo of our business. Only when you click “Load map from Google Maps” is a map from Google Maps embedded. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In the process, your browser transmits data to Google, in particular your IP address, the page accessed and information about your device. Google may set cookies in the process, and the data may reach servers of Google LLC in the USA. Before the click, no connection to Google takes place.

Legal basis: your consent by clicking, Art. 6(1)(a) GDPR and Section 25(1) TDDDG. It applies only to this page view; on your next visit, the photo appears again. The link “Plan route” also leads to Google Maps; data is only transmitted to Google once you click it.

12. Recipients of your data

Your data is only transferred to third parties to the extent necessary for handling your request: to our hosting provider STRATO (Section 4) and to Microsoft as the operator of our email mailboxes (Section 7), both as processors, or, in the case of an order, to the tire supplier. Our systems and those of our processors are located in the European Union. Section 7 applies to possible access by Microsoft from the USA. Only if you yourself load the map or write to us via WhatsApp does data go to Google or WhatsApp respectively, and it may reach the USA in the process (Sections 8 and 11).

13. Encryption

This website is delivered over an encrypted connection (TLS). You can recognize this by the lock symbol in your browser’s address bar. This means that the information you send us via the form cannot be read by third parties.

14. Your rights

You have the following rights against us with regard to the personal data concerning you:

• Access to information about which data we process (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure, unless a retention obligation prevents this (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to object: If we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this at any time on grounds relating to your particular situation. We will then no longer process the data, unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defense of legal claims.

An informal message to info@reifen-krautwurst.de or a call to +49 9131 685920 is sufficient.

15. Right to lodge a complaint

If you believe that we are not processing your data lawfully, you can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) (Bavarian State Office for Data Protection Supervision), Promenade 18, 91522 Ansbach.

16. Job applications

If you apply to us by email or on paper, we process your information and documents in order to decide on filling the position. Legal basis: Art. 6(1)(b) GDPR in conjunction with Section 26 of the Bundesdatenschutzgesetz (BDSG, German Federal Data Protection Act). Your documents are seen only by the persons who decide on the hiring. If no employment relationship results, we delete them no later than six months after the procedure has been completed, unless you consent to longer retention. If you are hired, the documents are placed in your personnel file.

17. No automated decision-making

No automated decision-making, including profiling, under Art. 22 GDPR takes place. Your request is handled by a human being.

18. Changes

We adapt this policy when the website or the legal situation changes. The version published here applies in each case.

As of October 4, 2026.