Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website or place an order with us. Personal data is any data with which you can be personally identified.

Data Collection on Our Website

Who is responsible for data collection on this website?
The controller is the website operator: Andreas Fix, LEVEL ABOVE, In der Krakau 18, 30900 Wedemark, Germany (phone: +49 5130 9690555, email: info@levelabove.pro).

How do we collect your data?
Some data is collected when you provide it to us, for example in the contact form, by email, phone or WhatsApp or as an uploaded PDF file. Other data is collected automatically by our hosting provider’s server when you visit the website (technical data such as browser and time of access).

What do we use your data for?
Part of the data is collected to provide the website without errors. Other data is used to answer your enquiries and carry out your orders (for example new car brokerage, car sourcing, inspections, detailing, storage or transport).

What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipients and purpose of your stored data, and to have it corrected, deleted or its processing restricted. Details can be found in section 7.

2. Hosting and Server Log Files

Our website is hosted by an external service provider: Netlify, Inc., San Francisco (USA). Details can be found in Netlify’s privacy policy: netlify.com/privacy. The personal data collected on this website is stored on the hosting provider’s servers. The hosting provider is used to fulfil contracts with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online services (Art. 6 (1) (f) GDPR).

Our hosting provider automatically collects and stores information in server log files, which your browser automatically transmits to us:

  • Browser type and version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

3. General Information and Mandatory Disclosures

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Revoking Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke any consent already given at any time. The lawfulness of the processing carried out until the revocation remains unaffected.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany

4. Data Collection on This Website

Contact Form, Email and Phone

If you send us enquiries via the contact form, email or phone, we store your details to process the enquiry and for follow-up questions. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual steps, otherwise our legitimate interest in responding (Art. 6 (1) (f) GDPR). We pass your details on to third parties only insofar as this is necessary for your order (section 5) or you have consented.

Form service provider Web3Forms
Form data is technically transmitted via the Web3Forms service (api.web3forms.com), which forwards your enquiry to us by email. More information: web3forms.com/privacy.

Files with your enquiry (PDF, photos, documents)
In the enquiry forms you can optionally attach files, for example a vehicle configuration as a PDF, the registration document or photos. They may contain technical vehicle data and personal details. Your browser transmits files together with the text of your enquiry to the form service of our host Netlify (Netlify Forms, Netlify, Inc., USA; see section 2), where they are stored until we have retrieved them, and we receive a notification. We additionally receive the text of your enquiry by email via Web3Forms. We use the files only to process your enquiry and, if necessary, to obtain quotations (Art. 6 (1) (b) GDPR). We delete files relating to enquiries that do not lead to an order once the enquiry has been dealt with (section 7). If the transfer fails, your enquiry reaches us without the files and we ask you to send them another way.

Photos of vehicle damage (dents and smart repair)
For a first estimate, you can send us photos of damage via the enquiry form, WhatsApp or email. When uploading via the form, your browser reduces the photos before sending and removes embedded metadata such as the location (GPS) and camera data; the photos are transmitted to us together with your enquiry via Netlify Forms (see “Files with your enquiry”). If the photos cannot be transmitted, your enquiry reaches us without them and we ask you to send them another way. We use the photos only to assess the damage, prepare an offer and carry out the order, including before-and-after documentation (Art. 6 (1) (b) GDPR). Please make sure that no people and, where possible, no number plates are visible; they are not needed for the estimate. We delete photos relating to enquiries that do not lead to an order once the enquiry has been dealt with (section 7). We keep photo reports for orders as long as they are required for performance, invoicing and warranty rights. We do not publish photos of your vehicle without your express consent.

On-site damage assessment
If you would like a damage assessment at your location, we additionally process the place (postcode, town and, if applicable, address) and the appointment in order to plan and calculate the journey (Art. 6 (1) (b) GDPR).

WhatsApp

Our website contains links to the WhatsApp messenger (provider: WhatsApp Ireland Limited). Only when you click one of these links does WhatsApp open, and data may be transmitted to WhatsApp. If you write to us via WhatsApp, we process your message like an enquiry by email. If you prefer not to, you can also reach us by email or phone.

Vehicle Photos from Vehicle Marketplaces

Some photos of our stock vehicles are loaded directly from the servers of the vehicle marketplaces mobile.de (mobile.de GmbH) and AutoScout24 (AutoScout24 GmbH). For technical reasons, your browser transmits your IP address and the address of the page you are viewing to these providers. The legal basis is our legitimate interest in showing the vehicles with the photos from the listings (Art. 6 (1) (f) GDPR).

Cookies and Browser Storage

We do not use cookies or any analytics, advertising or tracking services. In your browser’s storage we only keep small entries for features you use: the selected language (preferredLang, local storage), whether you closed the language notice (langSuggestDismissed), whether the short introduction on the home page has already played in this session (la_intro) and whether you confirmed the notes in the new car dialogue (la-cfg-ack). The last three entries are kept in session storage and deleted when you close the browser. None of these entries is transmitted to us. The legal basis is § 25 (2) no. 2 TDDDG.

Fonts and Icons

Fonts and icons are loaded locally from our own web server. No connection to Google Fonts or other content delivery networks is made.

5. Disclosure for Carrying Out Your Order

For your order, we pass on personal data only insofar as this is necessary (Art. 6 (1) (b) GDPR) or we are legally obliged to do so (Art. 6 (1) (c) GDPR). Recipients may be:

  • Car dealers from whom we obtain quotations for you or with whom we prepare a purchase
  • Sellers of the vehicles we search for or inspect for you
  • Specialist businesses and workshops carrying out services on our behalf, for example care, film application, smart repair or an inspection on a lift
  • Transport companies and drivers for pick-up, delivery and driven delivery
  • Registration offices, inspection organisations, customs authorities and insurers
  • Tax advisers and tax authorities within the scope of statutory obligations

Only the details needed in each case are passed on, such as name, phone number, pick-up or delivery address, date and vehicle data. We do not sell data and do not pass it on for advertising purposes.

6. Our Social Media Profiles

We have our own profiles on YouTube, TikTok and Instagram. On this website we link to these profiles with simple links only. We do not embed content, videos or scripts from the platforms; data is sent to a platform only when you click a link.

When you visit our profiles, the operators process your data (for example IP address, device information, usage behaviour and, if you are logged in, your user account) in accordance with their own privacy policies, including for advertising and possibly in countries outside the EU. If you write to us or comment there, we process this information in order to reply. The legal basis is our legitimate interest in presenting our business and communicating with you (Art. 6 (1) (f) GDPR), and Art. 6 (1) (b) GDPR for enquiries about an order.

Insofar as the operators provide us with aggregated statistics on the use of our profiles, we may be jointly responsible with them (Art. 26 GDPR). We have no access to individual user data. You can exercise your rights with us and with the respective operator; most effectively directly with the operator, as only the operator has access to this data.

7. Storage Period and Your Rights

We store your data for as long as necessary to process your enquiry and perform the contract. Enquiries that do not lead to an order are deleted once they have been dealt with and no further questions are to be expected. Statutory retention periods, in particular under commercial and tax law (usually six to ten years), remain unaffected.

You have the right to:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing based on our legitimate interest (Art. 21 GDPR)
  • Withdraw consent with effect for the future (Art. 7 (3) GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR, see section 3)

An informal message to info@levelabove.pro is sufficient. This privacy policy was last updated in October 2026.