Privacy Policy

CarMedialab GmbH

We are very pleased about your interest in our company. The protection of your privacy and your personal data is very important to us as CarMedialab GmbH.
The CarMedialab GmbH website can generally be used without providing any personal data. However, if you wish to take advantage of special services offered by our company via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we will generally obtain your consent.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the CarMedialab GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

As the controller, the CarMedialab GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.


The party responsible for this website (the “controller”) for purposes of data protection law is CarMedialab GmbH.

Contact Details:

CarMedialab GmbH
Werner-von-Siemens-Str. 2-6
76646 Bruchsal

Telephone: +49(0)7251-72400

You may, at any time, contact our Data Protection Officer directly
with all questions and suggestions concerning data protection.

Our Data Protection Officer’s contact details are the following:

Olaf Bühler
Alter Unteröwisheimer Weg 11
76646 Bruchsal

Telephone: 07251 9234071


Scope of Application
This Data Privacy Statement applies to all
of CarMedialab’s websites, applications and online services
that refer to it.


‘Personal data’ are any information relating to an identified or identifiable natural person; these are normally names, postal addresses, e-mail addresses, telephone numbers, IP addresses, order details, advertising and contract details, and information about the use of media we offer, e.g. access time on our website or our newsletters and other comparable categories of data. Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there. Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not. Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Automate Data
(Server Log Files)

Whenever you use the internet, your browser automatically transfers certain information, which we collect and store in server log files (hereinafter also referred to as “log files”). The information stored in the server log files includes, but is not limited to:

  • Your IP address
  • Your browser version and type
  • Your operating system
  • Your referrer URL
  • The hostname of your accessing computer
  • Your time of query on our server
  • Your internet service provider


Such data is not combined with data from other sources. Thus the anonymous data of the server log files are stored separately from all personal data provided by a person concerned. The basis of data processing is Art. 6(1)(b) GDPR, which permits data to be processed for the purposes of performance of a contract or to take steps prior to entering into a contract. The system needs to store your IP address temporarily to be able to display the website on your computer. For this to happen, your IP address must be stored for the duration of the session. The data stored in the log files are used to ensure the functionality of the website. In addition, the data help us to optimize our website and to maintain the security of our IT systems. These anonymously collected data and information are therefore evaluated by CarMedialab GmbH both statistically and with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data processed by us. We delete personal data as soon as they are no longer needed for the purposes for which they were collected. Data that is stored in log files will be deleted within 30 days or less. It is possible that data will be stored and combined with other data for analysis and optimization purposes, and to improve the offer of information on our website. In this case, the user’s IP address will be deleted or altered so that it can no longer relate to the accessing client. The collection of data for provisioning the website and storing of data in log files is carried out for the purposes of error analysis. It is absolutely necessary for the operation and the ongoing enhancement of our website. As a result, you, as the user, have no means of objecting to this.

General Collection of Data

Our website continues to collect and store data in an anonymous form for marketing and optimization purposes. This visitor data is saved under a pseudonymous user ID and can be used to generate a usage profile. Cookies may be used for this. These are, however, collected and stored only in pseudonymized form. The data collected are not used to personally identify website visitors and are not combined with the personal data of the person to whom the pseudonym refers. You will find more information on the use of cookies in the section below “Use of Cookies”.

Some of the data are collected to ensure that the website functions properly. Other data are collected for the purposes of analyzing user behaviour.

In addition, personal data are only collected, processed or used if you disclose them to us voluntarily while visiting our website, for example, during a download or while placing an order, while booking a training course, when requesting information or offers from us, when reporting defective software or hardware, when providing us with feedback, subscribing to our newsletter or when applying for a job online. The legal basis for this processing and for sending you our newsletter is that we have received your consent as user (Art. 6 (1) (a) GDPR). You will find more information on subscribing to our newsletter in the section “Newsletter”.

If you order goods or services from us, we will only collect and use your personal data insofar as this is necessary for the establishment, implementation or termination of the contract. The legal basis of this kind of data processing is Art. 6 (1) (b) GDPR, which permits data to be processed for the performance of a contract or to take steps prior to entering into a contract. No further collection or processing can take place without your express consent. The customer information collected will be deleted after the order has been completed or when the business relationship ends. Legal record keeping requirements remain unaffected.

Furthermore, your personal data will only be processed if you, as user, have so consented (Art. 6 (1) (a) GDPR).

Transfer of Personal Data

Your personal data will only be transferred to a third party insofar as this is necessary for the establishment, implementation or termination of a contract with you or for the delivery of goods or services. This applies particularly to the transfer of your data to a shipping company, credit institution or other service company used for performing a contract.

The legal basis of data processing is Art. 6 (1) (b) GDPR, which permits data to be processed for the purposes of performance of a contract or in order to take steps prior to entering into a contract, a legitimate interest on our part in the transfer of personal data, Art. 6 (1) (f) GDPR or your explicit consent.

Personal data may be transferred to recipients located outside the EEA in third countries only insofar as there is an appropriate level of data protection at the recipient’s location or where you have given your consent to the transfer. If you would like a summary of the recipients in third countries and information about the rules in place to ensure that there is an appropriate level of data protection, please use the information provided in the section headed “Contact”.

Use of Cookies

We use cookies to make our website more user-friendly and effective. Cookies are small text files, which are placed on your computer and then stored by your browser. The cookies used by us are session cookies or permanent cookies. While session cookies will be automatically deleted from your hard drive at the end of your browser session, permanent cookies will remain on your computer after a session and enable us to recognize you the next time that you visit our website. Cookies, which are required for electronic communications or to make certain functions which you wish to use available, are stored either based on our legitimate interest in providing you with error-free, optimized services (Art. 6 (1) (f) GDPR), or on the basis of your explicit consent. Insofar as we use other cookies (e.g. cookies to analyze your surfing behaviour), these will be dealt with separately in this Privacy Policy statement below. In particular, the content and services of other providers may be integrated into our website and these may in turn use cookies or active components. For more information on how we use cookies, please refer to the cookie settings in the page footer to select which cookies will be stored on your computer when you use our website. You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support. Note: If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Use of Google

Online Presence on Social Media

Social Media Links via Graphics

We also integrate the following social media sites into our website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on our own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network. Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States. Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly. The following social networks are integrated into our site by linked graphics:

Online Applications / Publications of Job Advertisements

We offer you the opportunity to apply for jobs with our company via our website. In the case of these digital applications, we collect your application data electronically in order to process your application.
The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.
If you are hired as a result of the application process, we will store the data you provide during the application process in your personnel file for the purpose of the usual organizational and administrative process, naturally in compliance with further legal obligations.
The legal basis for this processing is §26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.
If we do not hire you, we will automatically delete the data submitted to us two months after the final decision is made. We will not delete the data, however, if we must store the data for legal reasons such as evidence of equal treatment of applicants, until any legal action is concluded, or four months.
In this case, the legal basis is Art. 6 Para. 1 lit. f) GDPR and §24 Para. 1 No. 2 BDSG. Our legitimate interest lies in any legal defense we may have to mount.
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect per Art. 7 Para. 3 GDPR with future effect.

Contact, Feedback and Order Forms

By clicking on the “Send” button on the contact, feedback and order forms and the transfer of your information, you give your consent to our processing and storing of the information which is in the contact form, and in particular of your personal data, for the purposes for which you wish to have it transferred. We will erase such data as soon as it is no longer needed for its intended purpose. The data you supply on the contact, feedback and order forms is thus only processed on the basis of the consent (Art. 6(1)(a) GDPR) given to us when you send the form. You may, at any time, revoke your consent with future effect. All that you need to do is send us an e-mail with an informal notice revoking your consent ( This revocation has no effect on the legality of data processing activities carried out prior to the revocation.


How to subscribe/unsubscribe

As a visitor to our website, you will be offered the option of subscribing to our company newsletter. By looking at the entry form used to subscribe to the newsletter, you can see which personal data will be sent to the processor. At the same time, the IP address of the Internet connection from which you access our website as well as the date and time of your registration are stored.

At CarMedialab GmbH, we use our newsletter to inform our customers, business partners and potential customers at regular intervals about our company’s offerings. You will essentially only be able to receive our newsletter if you have a valid e-mail address and have subscribed to the newsletter. For legal reasons, a confirmation e-mail will first be sent to the e-mail address that you used to subscribe to the newsletter (double opt-in). The purpose of this confirmation e-mail is to verify that you have authorized the use of your e-mail address for the receipt of the newsletter.

Data that you provide us with for receiving our newsletter will only be used for that purpose.

Should you later decide that you no longer wish to receive our newsletter, you may, at any time, stop receiving it by revoking your consent with future effect.

Each newsletter contains a link for revoking your consent. By clicking on the “Unsubscribe” link, you can unsubscribe from the newsletter. Alternatively, you can, at any time, unsubscribe from the newsletter simply by going directly to our website ( or by writing to us (see more on this in the section “Contact”).

Your consent as user provides the legal basis for processing your personal data and sending our newsletter to you (Art. 6(1)(a) GDPR).

Data Protection Rights

You are entitled as a data subject to the data protection rights described below.
If you wish to assert these rights, please use the information provided in the section “Contact”. Please ensure that you can be clearly identified.

Right to Access, Rectification or Erasure
You are entitled by law to access, at any time, personal data stored about you, its source, recipients and the purpose for which it is stored (Art. 15 GDPR). In addition, you have the right to demand that your data be rectified (Art. 16 GDPR) or erased (Art. 17 GDPR).

Right to Restrict Processing
Where the statutory requirements are met, you may demand that processing be restricted (Art. 18 GDPR).

Right to Data Portability
Furthermore, where the requirements specified in Art. 20 GDPR are met, you have the right to receive the data which you provided to us in a structured, commonly used and machine-readable format.

Right to Object to Processing of Data in an Individual Case
You have the right to object, on grounds relating to your particular situation, at any time, to the processing of personal data concerning you if the processing is not based on a legitimate interest or a weighing of interests on our part (Art. 21 GDPR). We will cease processing your data unless we are able to demonstrate compelling legitimate grounds for continuing to do so.

Right to Object to Processing of Data for Direct Advertising Purposes
In addition, you may, at any time, object to the processing of your personal data for advertising purposes (Art. 21 GDPR). Where you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.

Right to Revoke Consent
Insofar as the processing of your personal data is based on your consent, you may, at any time, revoke your consent to such processing with future effect. We will delete your data unless there is a statutory storage and retention period. In such case, your data will be blocked unless a legal basis for processing exists.

Right to Lodge a Complaint with the Competent Authority
If you believe that your data is being processed in breach of the GDPR, you may lodge a complaint with the supervisory authority (Art. 77 GDPR). In addition, you may contact the supervisory authority which is competent for your place of residence / state in which you reside or which is competent for us. The latter is:

The State Commissioner for Data Protection and Freedom of Information of the Federal State of Baden-Württemberg.


If you would like to contact us, please use the information provided in the section “Controller”. If you wish to exercise your data protection rights, lodge a complaint or if you have any questions about this Data Privacy Statement or on how we handle personal data, please write to our Data Protection Officer, preferably, send an e-mail to:

Links to Third-Party Websites

It is possible that our websites contain links to third-party websites. If you follow the links, you will leave CarMedialab’s websites and the scope of application of this Privacy Policy. CarMedialab GmbH cannot accept any responsibility for the data protection methods or content of such websites

General Notice

We reserve the right to amend this Privacy Policy in the future. Accordingly, you should check the Privacy Policy regularly when visiting our website.

Let's Talk

Questions? Feel free.

Our experts will be happy to help you.

Get in touch