This is a courtesy translation of the German privacy policy (Datenschutzerklärung). In case of discrepancies, the German version prevails.
1. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Cevik Mobility GmbH
Am Ehrenmal 7A, 38239 Salzgitter, Germany
Represented by Managing Director Ayla Cevik
E-mail: info@cevik-mobility.de
2. Data protection officer
No data protection officer has currently been appointed. You can reach us on all data protection matters at info@cevik-mobility.de.
3. Hosting, content delivery network and server log files
This website is not operated on our own servers. It is hosted and delivered via the hosting platform of our technical service provider and an upstream content delivery network (CDN) that serves the content from distributed locations and protects the website against overload and attacks.
When the website is accessed, the following data is processed automatically:
- IP address of the requesting device
- date and time of access
- page or file requested and volume of data transferred
- notification of successful retrieval, browser type and operating system
- referrer URL
This data is required to deliver the website, to ensure its stability and security and to detect misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and functional provision). Data processing agreements pursuant to Art. 28 GDPR are in place with the service providers used. This data is not merged with other data sources and is not evaluated on a personal basis.
4. Legal bases of processing
- Art. 6(1)(b) GDPR — performance of a contract and pre-contractual measures
- Art. 6(1)(c) GDPR — compliance with legal obligations
- Art. 6(1)(f) GDPR — legitimate interests (secure provision of the website, communication with business partners)
- Sect. 25(2) no. 2 TDDDG — access to information on your device where strictly necessary for the service explicitly requested
5. Retention periods
Personal data is deleted as soon as the purpose of processing no longer applies and no legal retention obligations prevent deletion. Server log files are deleted or anonymised after a short period. Inquiries by e-mail or form are deleted once they have been fully processed and no retention obligations apply. Business correspondence is subject to commercial and tax retention periods, generally six or ten years.
6. Contact by e-mail
If you contact us by e-mail, we process the data you provide (e.g. name, company, e-mail address, content of your inquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR for contract-related inquiries, otherwise Art. 6(1)(f) GDPR. E-mail is transmitted via the e-mail service of our IT service provider.
7. Contact and inquiry form
We provide forms on the pages “Kontakt” and “Enterprise-Anfrage”. These forms do not transmit data to our servers and do not use an external form service: your entries are compiled into an e-mail within your browser and handed over to your own e-mail program when you submit the form. The message only leaves your device once you send it there yourself.
The contact form processes exclusively:
- first name and last name
- e-mail address
- your message
- confirmation of the data protection consent
No telephone number is collected via the contact form. The data is processed solely to handle your inquiry and to contact you. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR. Data is not passed on to third parties unless this is necessary to provide the requested service. Mandatory fields are marked; without this information we cannot process your inquiry. Data is deleted once your inquiry has been finally processed and no statutory retention obligations apply.
8. Cookies and storage technologies
This website does not set cookies in the technical sense. Only strictly necessary entries are stored in your browser’s local storage:
- your language selection for the website
- your last scroll position on the home page
- your acknowledgement of the storage notice (key “cm-storage-notice-v2”, valid for up to 6 months)
This information remains in your browser, is not transmitted to us and serves solely to operate the website. You can reset it at any time via the cookie settings or delete it in your browser. Legal basis: Sect. 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. Session storage is not used.
9. Services not used
No consent-requiring services are integrated on this website. In particular, we do not use: web analytics or audience measurement (e.g. Google Analytics, Matomo), tracking or advertising pixels, social media plugins, external map services (e.g. Google Maps), embedded videos from external platforms (e.g. YouTube, Vimeo), chat or support services, newsletter distribution, external form or captcha services, or online application (recruitment) functions. We do not accept job applications via this website. Should consent-requiring services be used in future, they will only be loaded after your explicit consent and will be named here.
10. Fonts, images, videos and external links
All fonts used are loaded locally from our own deployment package. No connection is established to servers of external font providers — in particular not to Google Fonts. Images and videos are also delivered via our own infrastructure and are not embedded from third-party platforms.
External links are implemented as plain links. You only leave this website when you actively click them; from that point on, the privacy policy of the respective provider applies.
11. Recipients and processors
Personal data is only passed on to recipients where this is necessary to provide our services or where a legal obligation exists. Recipients may in particular be: our hosting and CDN provider, our e-mail and IT service provider, as well as tax advisors and authorities within the scope of statutory obligations. Data processing agreements pursuant to Art. 28 GDPR are in place with processors.
12. Transfers to third countries
We do not deliberately transfer personal data to countries outside the EU or EEA. Where access from a third country cannot be excluded in the course of technical delivery via hosting and CDN infrastructure, such access takes place exclusively on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the EU Commission’s standard contractual clauses or an adequacy decision.
13. Your rights
You have the following rights under the GDPR:
- access to the data processed (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
- withdrawal of consent with effect for the future (Art. 7(3) GDPR)
To exercise your rights, a message to info@cevik-mobility.de is sufficient. Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement.
14. Status of this privacy policy
This privacy policy is updated whenever the functions of this website or the legal framework change. Status: August 2026.
