Privacy Policy
The protection of your personal data is an important concern for us. In the following, we provide you with comprehensive information about the nature, scope and purpose of the processing of personal data in connection with the use of our website www.khaibar.de, as well as about the rights to which you are entitled. Personal data is any data that can be related to you personally, e.g. name, address, e-mail addresses and your user behaviour.
1. Controller
The controller within the meaning of the General Data Protection Regulation (DSGVO) and other national data protection laws of the member states as well as further data protection provisions is:
KHAIBAR Trucks
Owner: Dipl.-Ing. Ahmad Maiwand Zoltani
(Sole proprietorship, not entered in the commercial register)
Wilsonstraße 37
22045 Hamburg
Germany
Phone: +49 40 60039282
Mobile / WhatsApp / Telegram / Viber / Signal: +49 176 44546601
Email: mail@khaibar.de
Website: www.khaibar.de
Value added tax identification number pursuant to § 27a Umsatzsteuergesetz: DE345502025
Responsible for the content pursuant to § 5 of the Digital Services Act (DDG) and § 18 Abs. 2 of the Interstate Media Treaty (MStV) is the aforementioned owner.
The controller alone or jointly with others determines the purposes and means of the processing of personal data.
We have not appointed a statutory data protection officer, as the legal requirements for this do not apply. If you have any questions regarding data protection, please contact the controller named above directly.
2. General Information and Basic Principles of Data Processing
As a matter of principle, we process the personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. As a rule, the processing of personal data takes place only with the user's consent, or in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal provisions.
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 Abs. 1 lit. a DSGVO serves as the legal basis. For processing that is necessary for the performance of a contract to which the data subject is a party, Art. 6 Abs. 1 lit. b DSGVO serves as the legal basis; this also applies to processing operations necessary for carrying out pre-contractual measures. Where processing is necessary to fulfil a legal obligation, Art. 6 Abs. 1 lit. c DSGVO serves as the legal basis. Where processing is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 Abs. 1 lit. f DSGVO serves as the legal basis.
A data subject within the meaning of this privacy policy is any identified or identifiable natural person whose personal data is processed by the controller.
The personal data of a data subject is deleted or its processing restricted as soon as the purpose of storage ceases to apply. Storage beyond this may take place if it has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject (e.g. retention periods under commercial and tax law).
3. Hosting and Server Log Files
We host the content of our website with the following provider:
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
The servers are located within the European Union. When you visit our website, the provider or the web server automatically collects information in so-called server log files, which your browser automatically transmits to us. These are in particular:
- the IP address of the accessing device,
- the date and time of access,
- the name and URL of the retrieved file,
- the website from which access is made (referrer URL),
- the browser used and, where applicable, the operating system of your computer as well as the name of your access provider,
- the volume of data transferred and the access status (HTTP status code).
This data is not merged with other data sources. The collection of this data as well as its storage in log files is necessary for the operation of the website in order to ensure functionality, stability and security (detection of and defence against attacks).
Purpose: Ensuring a smooth connection setup, convenient use of the website, evaluation of system security and stability, as well as for administrative purposes.
Legal basis: Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest follows from the purposes of data collection listed above. Insofar as the use of Hetzner serves to fulfil contractual obligations, the legal basis is additionally Art. 6 Abs. 1 lit. b DSGVO.
Storage period: The log file data is stored for a period of, as a rule, a maximum of 7 days and then deleted, unless it must be retained longer for evidentiary reasons in the case of security-relevant incidents until final clarification.
We have concluded a data processing agreement (AVV) with the hosting provider pursuant to Art. 28 DSGVO, which ensures that the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the DSGVO.
4. SSL and TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the operator, this website uses SSL or TLS encryption. The certificate used for this is issued via Let's Encrypt. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
5. Cookies
Our web pages partly use so-called cookies. Cookies are small text files that are stored on your device and cause no harm. They serve to make our offering more user-friendly, effective and secure. Cookies can either be "session cookies", which are automatically deleted after the end of your visit, or "permanent cookies", which remain stored on your device until you delete them yourself or automatic deletion is carried out by your web browser.
A basic distinction is made between two categories:
Technically necessary cookies: These are required in order to provide certain functions of the website (e.g. establishing the connection, storing your language selection, displaying the content, or security functions). Without these cookies, certain functions would not work properly. The legal basis for the use of technically necessary cookies is Art. 6 Abs. 1 lit. f DSGVO; the website operator has a legitimate interest in the technically error-free and optimised provision of its services. The storage of such cookies or access to information on the device is permitted without consent pursuant to § 25 Abs. 2 TDDDG (Telecommunications Digital Services Data Protection Act), as they are strictly necessary for the provision of the expressly requested service.
Cookies and services requiring consent: If cookies or comparable technologies are used that are not technically necessary (e.g. in connection with the integration of services such as Google Maps or YouTube), their storage or activation takes place only on the basis of your express consent pursuant to § 25 Abs. 1 TDDDG in conjunction with Art. 6 Abs. 1 lit. a DSGVO. This consent is voluntary and can be revoked at any time with effect for the future.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.
6. Contacting Us (Contact Form, Email, Telephone)
Contact form: On our website, we offer you the possibility to contact us via a contact form. When using the contact form, the data you enter in the input mask (in particular name, email address, telephone number where applicable, and your message) is transmitted to us. This data is stored in a database and additionally forwarded by email to our mailbox for the processing of your inquiry.
Email and telephone: If you contact us by email or telephone, your inquiry including all resulting personal data (name, inquiry, contact details) is stored and processed by us for the purpose of handling your request.
Purpose: The processing of the data serves solely to handle and respond to your contact inquiry as well as the associated communication.
Legal basis: If your contact is aimed at concluding or performing a contract (e.g. inquiries about a vehicle, purchase processing, trade-in), the legal basis for the processing is Art. 6 Abs. 1 lit. b DSGVO (performance of a contract or pre-contractual measures). In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6 Abs. 1 lit. f DSGVO). Insofar as consent is requested separately in the contact form, Art. 6 Abs. 1 lit. a DSGVO is additionally the legal basis.
Storage period: The data you transmit via the contact form or by email/telephone remains with us until you request us to delete it, revoke any consent to storage, or the purpose for storing the data ceases to apply (e.g. after your inquiry has been fully processed). Mandatory statutory provisions – in particular retention periods under commercial and tax law (as a rule 6 or 10 years) – remain unaffected.
7. Contacting Us via Messenger Services (WhatsApp, Telegram, Viber, Signal)
On our website, we offer you the possibility to contact us via various messenger services, in particular via WhatsApp, Telegram, Viber and Signal. For this purpose, we provide corresponding contact buttons or our mobile number. If you click on a messenger button or contact us via one of these services, you will be forwarded to the respective application, and data (in particular your telephone number, your profile name and the message content) is transmitted to the respective provider and processed by it.
Purpose: The processing serves the communication with you and the handling of your request via the channel you have chosen.
Legal basis: The legal basis for the processing is the consent you grant through actively contacting us (Art. 6 Abs. 1 lit. a DSGVO) as well as – in the case of contract-related requests – Art. 6 Abs. 1 lit. b DSGVO or our legitimate interest in efficient communication (Art. 6 Abs. 1 lit. f DSGVO). The use of the messenger services is voluntary; you can also reach us at any time by conventional means (email, telephone, contact form).
Note on third-party processing and third-country transfer: Please note that we have no influence on the data processing by the operators of the messenger services. They process the data in accordance with their own data protection provisions and in some cases for their own purposes. WhatsApp is operated by Meta Platforms Ireland Ltd. (parent company Meta Platforms, Inc., USA). When using WhatsApp and possibly other services, personal data may be transferred to the USA or to third countries outside the European Union. Such a data transfer is – insofar as an adequacy decision of the EU Commission (e.g. the EU-U.S. Data Privacy Framework) exists for the respective provider – based on Art. 45 DSGVO; otherwise it takes place on the basis of standard contractual clauses (Art. 46 DSGVO) or your express consent pursuant to Art. 49 Abs. 1 lit. a DSGVO. In the case of data transfer to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without any effective legal remedies being available to you against this.
You can find further information in the data protection notices of the respective provider:
- WhatsApp / Meta: https://www.whatsapp.com/legal/privacy-policy-eea
- Telegram: https://telegram.org/privacy
- Viber: https://www.viber.com/de/terms/viber-privacy-policy/
- Signal: https://signal.org/legal/
8. Google Maps
To display an interactive map and to show our location or directions, this website uses the map service Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address and transmit it to Google. This data is generally transferred to a Google server and stored there. The provider of this site has no influence on this data transfer. The transmission takes place regardless of whether Google provides a user account through which you are logged in, or whether no user account exists.
Purpose: Appealing presentation of our online offerings and easy findability of the locations we have specified (directions).
Legal basis: The use of Google Maps takes place only with your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO in conjunction with § 25 Abs. 1 TDDDG. The map is therefore only loaded after you have given your consent; your consent can be revoked at any time with effect for the future.
Third-country note: The data transfer to the USA is based on the EU-U.S. Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 DSGVO) and, additionally, on the standard contractual clauses of the EU Commission (Art. 46 DSGVO). It cannot be ruled out that US authorities may access the transmitted data.
Further information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy
9. YouTube Videos on the Vehicle Detail Pages
On our vehicle detail pages, we sometimes embed videos from the YouTube platform in order to present the vehicles on offer. The operator of the platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use YouTube in extended data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about the visitors to this website before they watch the video. Only when you start a video is data transmitted to YouTube. When a YouTube video is started, the provider uses cookies or comparable recognition technologies in order to collect information about the website visitors. In doing so, a connection to the Google DoubleClick network may, among other things, be established and your IP address transmitted to YouTube. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
Purpose: Appealing and informative presentation of our vehicle offerings.
Legal basis: The embedding and loading of the YouTube content takes place exclusively on the basis of your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO in conjunction with § 25 Abs. 1 TDDDG. The video content is only loaded after your consent. Your consent can be revoked at any time with effect for the future.
Third-country note: Here too, personal data may be transferred to the USA. The transfer is based on the EU-U.S. Data Privacy Framework (Art. 45 DSGVO) as well as on the standard contractual clauses of the EU Commission (Art. 46 DSGVO).
Further information on data protection at YouTube can be found in Google's privacy policy: https://policies.google.com/privacy
10. Rights of the Data Subject
As a data subject, you have the following rights vis-à-vis the controller with regard to the personal data concerning you:
- Right of access (Art. 15 DSGVO): You have the right to request confirmation as to whether personal data concerning you is being processed, as well as to obtain information about this data and further information (e.g. purposes of processing, categories, recipients, storage period).
- Right to rectification (Art. 16 DSGVO): You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.
- Right to erasure (Art. 17 DSGVO): You have the right to request that personal data concerning you be deleted without delay, provided that the legal requirements are met and no statutory retention obligations conflict with this.
- Right to restriction of processing (Art. 18 DSGVO): You have the right to request the restriction of the processing of your personal data under the statutory conditions.
- Right to data portability (Art. 20 DSGVO): You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit this data to another controller or have it transmitted, insofar as this is technically feasible.
- Right to object (Art. 21 DSGVO): You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO (see the section "Right to object" below for more details).
- Right to withdraw consent (Art. 7 Abs. 3 DSGVO): Insofar as the processing is based on consent, you have the right to withdraw your consent at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the withdrawal is not affected by this.
To exercise your rights, an informal notification to the contact details of the controller specified under point 1 is sufficient.
Right to object (Art. 21 DSGVO)
If the processing of your personal data is carried out on the basis of legitimate interests pursuant to Art. 6 Abs. 1 lit. f DSGVO, you have the right, for reasons arising from your particular situation, to object at any time to this processing; this also applies to profiling based on this provision. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
11. Right to Lodge a Complaint with the Competent Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority in the event of infringements of the DSGVO, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement (Art. 77 DSGVO).
The supervisory authority competent for the controller is:
The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany
Phone: +49 40 428540
Email: mailbox@datenschutz-hamburg.de
Website: https://datenschutz-hamburg.de
12. Objection to Advertising Emails
The use of contact data published within the framework of the provider identification obligation for the purpose of sending unsolicited advertising and information materials is hereby expressly objected to. The controller expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam emails.
13. Consumer Dispute Resolution (§ 36 VSBG)
The controller is neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.
14. Currency and Amendment of This Privacy Policy
This privacy policy is dated July 2026. Due to the further development of our website and offerings, or as a result of changed legal or official requirements, it may become necessary to amend this privacy policy. The currently valid privacy policy can be accessed and printed out by you at any time on this website at www.khaibar.de.