Privacy policy
01. Introduction
For us, a trusting working relationship begins with the small details. This includes protecting your data from the outset. This privacy policy explains the nature, scope and purpose of the processing of your personal data when you visit our website. The following information is based on the European Union’s General Data Protection Regulation (GDPR).
02. General information
a. Controller
The controller within the meaning of the GDPR is:
Audi Zentrum Flensburg Vertriebs GmbH
Liebigstraße 8, 24941 Flensburg
Telephone: +49 461 - 90 20 50
Fax: +49 461 - 90 20 55 6
Email: info@azf-gruppe.de
b. Data protection officer
Bjarne Schulz
CausaConfido Rechtsanwälte Andresen Issel PartG mbB
Marie-Curie-Ring 1, 24941 Flensburg
c. Types of data
We process the following types of data where needed for your enquiry or the technical operation of the website:
- Basic personal data, such as your name.
- Contact data, such as your email address or telephone number.
- Content data, such as your message and your choice of car brand and request.
- Vehicle data, such as the VIN, mileage and registration number.
- Usage data, such as access times and pages visited.
- Communication data, such as browser, device information and IP address.
If your enquiry leads to a contract, the company may also process contract data (such as the content and duration of the contract) and payment data (such as bank details and accounting history). Payment details are not collected by this contact form.
d. Data subjects and purposes of processing
We process data relating to visitors and people contacting us to provide this website, respond to enquiries and prepare or carry out the related work. azf.dk does not use audience measurement, analytics or marketing services. The specific legal bases are described below.
e. Withdrawal of consent
Where processing is based on your consent, you may withdraw it at any time without giving reasons, with effect for the future, under Article 7(3) GDPR. No particular form is required; withdrawal takes effect when we receive it. For practical reasons, please send it to our email address. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
f. Cookies
azf.dk does not set cookies or use tracking services. The form’s temporary security token and the information you are entering are kept temporarily in the browser’s memory. They are not stored in cookies or persistent browser storage.
g. Right to object
Under Article 21(1) GDPR, you may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f). Under Article 21(2), you may also object at any time to processing for direct marketing. No particular form is required. You can send an objection to our email address. The mandatory acknowledgement in this form does not authorise marketing use of your data.
h. Erasure and restriction
We erase data or restrict its processing in accordance with Articles 17 and 18 GDPR. In particular, data is erased when the purpose for which it was collected no longer applies, unless tax or commercial retention and documentation duties require longer retention under Article 6(1)(c). In that case, processing is restricted to the legally required purpose. The web application does not store submitted enquiries in a database or files. Enquiries are nevertheless held in the company’s email account; retention there depends on the purpose of the case and any statutory obligations.
i. Data security
In production, the website is served over HTTPS. Form data is sent to the company’s configured mail server. Mail server credentials are only available on the server and are not sent to your browser. The specific protection of email transport depends on the mail server and its configuration.
03. Your rights
Our aim is to ensure that you retain control over your personal data. In addition to the rights described above, you have the following rights:
a. Confirmation of processing
Under Article 15 GDPR, you may obtain confirmation of whether we process personal data relating to you.
b. Access
If we process personal data relating to you, Article 15 entitles you to access that data and the information specified in that Article.
c. Rectification and completion
Under Article 16, you may require inaccurate personal data to be corrected without undue delay and incomplete data to be completed.
d. Erasure
Subject to the conditions of Article 17, you may require personal data relating to you to be erased without undue delay.
e. Restriction of processing
Subject to the conditions of Article 18, you may require processing to be restricted.
f. Data portability
Under the conditions of Article 20, you may receive your personal data in a structured, commonly used and machine-readable format and have it transmitted to another controller without hindrance. The limitations set out in Article 20 apply.
g. Complaint
Under Article 77, you may lodge a complaint with a supervisory authority, including in the EU country of your habitual residence or place of work. The supervisory authority identified for the company is:
Unabhängiges Landeszentrum für den Datenschutz Schleswig-Holstein
Holstenstraße 98, 24103 Kiel
Tel.: +49 431 9881200
Fax: +49 431 9881223
mail@datenschutzzentrum.de
04. Technical operation and contact
a. Hosting and access data
The hosting provider supplies the technical infrastructure. When you access the website, your IP address, time of access, requested page and browser and device information may be processed to deliver and protect the website. The legal basis is our legitimate interest in secure and stable operation under Article 6(1)(f) GDPR. Actual logging and retention depend on the operating configuration. You may contact the controller for information about the hosting provider and specific retention periods.
b. Contact form and enquiry-related processing
When you contact us through the form, by email or by telephone, we process your data to respond. Requests for quotations, appointments or work are processed to take steps at your request before entering into a contract or to perform a contract under Article 6(1)(b). Other enquiries are processed on the basis of our legitimate interest in responding under Article 6(1)(f).
The form includes your name, email address, optional telephone number, car brand, request, message and relevant vehicle details. Required fields are marked. The mandatory checkbox confirms that you have read this policy and accept processing for your specific enquiry and the related work. It does not provide consent for advertising and does not replace the legal bases above. Without this acknowledgement, the form cannot be submitted; you can still contact us by email or telephone.
Data is sent via SMTP to the company’s email account and processed by the relevant staff and the necessary hosting and email providers. If you request a copy, it is also sent to your email address. The email includes the acknowledgement, its wording, the privacy policy version and the server timestamp. The web application does not retain a copy of the enquiry.
c. Abuse prevention
The form uses a honeypot field, a temporary security token, timing checks and temporary request limits. The server keeps only limited, temporary hash values in memory to prevent abuse and replay. No permanent enquiry database is created. This processing is based on our legitimate interest in protecting the form against abuse under Article 6(1)(f).
05. External links and services
Images, fonts and brand logos are served locally. azf.dk does not embed Google Analytics, Google Maps, Monotype/hellofonts, AutoScout24, AutoUncle or social plugins. External links, such as those to AZF-Gruppe, tourism or route planning, connect to the respective service only when you open the link. The external website’s own privacy terms then apply.
06. Version
Version: 5 October 2026. Company details, the data protection officer and general rights have been taken and translated from the AZF-Gruppe privacy policy. Technical sections have been adapted to the actual operation of azf.dk. The policy is updated when processing changes.