Privacy Notice pursuant to Article 13
of the General Data Protection Regulation (GDPR)
RARE BIRDS GmbH & Co. KG is very committed to protecting your privacy. But we are not able to provide our services as a dealer of historic racing and rally cars entirely without your data. Below please find detailed information about how we use your data.
I. Information & legal basis for data processing
We collect the personal data that you voluntarily provide to us when you contact us (e.g. via the contact form or email).
Contact data will be used by us for customer inquiries, customer service and order processing.
Purpose of data processing
The personal data provided by you to use our goods and services, in conjunction with the technical data of your vehicle, are processed by us for the purpose of initiating and implementing the proposed contracts. Please note that contracts cannot be concluded or processed without providing these data.
Data processing is based on Article 6(1)(b) and (1)(c) GDPR.
Recipients of data & transmission of data to third countries
To process the contract concluded with you, we will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment.
As an international automotive dealer for racing and rally cars, we draw on a global network of appraisers, restoration, and transport companies. We will transmit only the documents that our customers have submitted to us – and no other personal data. All our partners have undertaken to keep all personal data confidential.
Companies that have their registered office in an EU Member State are obliged to comply with the GDPR. Adequate protection of data is therefore guaranteed in this regard too.
The legal basis for the transfer of these data is Art. 6(1)(b) GDPR.
The GDPR is the legal basis for data protection at European companies: Art. 6(1)(a) and (b).
The provision of the contractually agreed data processing shall take place exclusively in a Member State of the European Union or in another Contracting State of the Agreement on the European Economic Area. Any transfer of data to a third country requires the prior consent of the data subject and depends on compliance with the special requirements set out in Art. 44 et seq. GDPR.
Data collection while visiting the website
For technical reasons, data will be sent by your internet browser to us or to our webspace provider, especially to ensure a secure and stable website:
These server log files record, i.a. the type and version of your internet browser, operating system, the website from which you changed to our website (referrer URL), the page(s) of our website you visited, the date and time of your visit, as well as the IP address from which you made use of our website.
We have a legitimate interest in the improvement, stability, functionality, and security of our website.
The data will be deleted again within no more than seven days, unless continued storage is required for evidentiary purposes. In this case, all or part of the data will be excluded from erasure until the investigation of the relevant incident is finally resolved.
The basis for this storage is Art. 6(1)(f) GDPR.
On our site, we offer the possibility to contact us by e-mail and/or via a contact form. In this case, the information provided by the user is stored for the purpose of processing his or her contact request. The data will not be transferred to third parties. We will not compare the data collected during newsletter registration with any other data that might be collected by other components of our site. A valid e-mail address is required so that we know who sent the request and can respond to it. All information is provided voluntary.
Any personal data collected for processing the contact form will be automatically deleted after the inquiry has been resolved.
Data processing for the purpose of making contact is deemed to be voluntary consent pursuant to Art. 6(1)(a).
Newsletter subscription & deregistration
On our website, we offer you the opportunity to subscribe to our newsletter. By registering for our newsletter, your
• IP address
• the date and
• the time of your registration
will be recorded. The data collected will be used exclusively for the subscription to our newsletter.
You can deregister from the newsletter at any time, either by sending an email to firstname.lastname@example.org, or for the link provided for this purpose in the newsletter. After deregistration, we will delete your email address unless you have expressly consented to the further use of your data.
Your personal data encrypted with SSL for transmission over the internet. We secure our website and other systems using technical and organisational measures against the loss, destruction, access, modification or dissemination of your data by unauthorised persons.
We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”.
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through certification according to the EU-US Privacy Shield
Google and its subsidiary YouTube guarantee that they will follow the EU’s data protection requirements even when processing data in the United States.
We use YouTube in conjunction with its “advanced privacy mode” function to show you videos.
The legal basis is Art. 6 (1)(f) GDPR.
We have a legitimate interest to improve the quality of our website. According to YouTube, the “advanced privacy mode” means that the data specified below will only be transmitted to the YouTube server if you actually start a video.
Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established.
If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our website or adjust the appropriate settings in your YouTube account.
For the purpose of functionality and analysis of usage behaviour, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by adjusting the appropriate settings in your browser. Further details can be found in the section about cookies above.
We use Google Analytics on our website. This is a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through certification according to the EU-US Privacy Shield
Google guarantee that they will follow the EU’s data protection requirements even when processing data in the United States.
The Google Analytics service is used to analyse how our website is being used.
The legal basis is Art. 6 (1)(f) GDPR.
We have a legitimate interest in the analysis, improvement and economic operation of our website.
Usage-specific and user-specific information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the “anonymisation” function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general. Google state that they will not connect your IP address to other data. In addition, Google provide further information with regard to its data protection practices at
including options you can exercise to prevent such use of your data.
In addition, Google offer an opt-out add-on at
Duration of storage
The stored personal data will be deleted when they are no longer needed for the performance and processing of the contract (also after final resolution of all possible legal claims), provided that no statutory retention obligations prevent their erasure, e.g. for commercial or statutory reasons for a period of 6 or 10 years.
II. Your rights
Of course you have rights regarding the collection of your data. By virtue of the applicable
law, we are obliged to inform you about these rights.
You are entitled
In addition, the controller is obliged to inform all recipients to whom they have disclosed data about any such corrections, deletions, or restrictions placed on processing the same pursuant to Art. 16, 17(1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding the above, users have a right to information about those recipients.
Pursuant to Art. 21 GDPR, users and data subjects have the right to object to the future processing of the data concerning them, provided the data are processed by the provider pursuant to Art. 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
You may revoke your consent to data processing at any time by notifying us, without affecting the legality of any processing carried out on the basis of consent prior to the time of revocation. We will only use your email address to respond to your enquiry. Your data will be deleted unless you have consented to its further processing and use.
Updates and amendments to this Data Protection Declaration
This data protection declaration is currently in effect and was last updated in September 2018. It may be necessary to change this data protection declaration as a result of further development of our website and services, or due to changes in statutory or regulatory requirements. You can retrieve the most recent data protection declaration at any time from the website http://rare-birds.de/datenschutz/.
III. Information about us as controllers of your data & contact persons
If you have questions about the collection, processing or use of your personal data, the disclosure, correction, blocking or erasure of data, and if applicable, the revocation of a permission granted, or objection to a particular use of the data, please contact
Rare-Birds GmbH & Co. KG
Leopoldring 1, 79098 Freiburg
T +49 761 154 333 80
Contact person for data protection issues:
T +49 761 154 333 90