Privacy Policy

Effective Date: January 1, 2026 | Last Reviewed: February 2026 | Compliant with EU GDPR (Regulation 2016/679) & Swiss FADP

1. Data Controller Information

This Privacy Policy applies to all services, market aggregations, and concierge brokerage portals provided by Finderpixelcabinet Automotive Intelligence Ltd. ("Finderpixelcabinet", "we", "our", or "us"), registered at Maximilianstraße 35, 80539 München, Germany (Commercial Register No. HRB-289410-MUC).

For any inquiries regarding data protection, telemetry handling, or to exercise your statutory rights, our Data Protection Officer (DPO) can be reached directly at: [email protected].

2. Categories of Data Collected

We process personal data strictly in accordance with Article 6 of the General Data Protection Regulation (GDPR). The categories of processed data include:

Direct Communications & Inquiry Telemetry: Full name, corporate entity, valid email address, phone contact, desired vehicle VIN or specifications, and budget parameters submitted via our Concierge contact forms.
Technical Network Logs: Internet Protocol (IP) address, approximate geographic location (country and city level for tax conversion presets), browser user agent, device screen resolution, and operating system attributes.
Search Telemetry & Preferences: Filter criteria (e.g. Porsche vs. Ferrari, VAT preference, manual vs. PDK gearbox, EU destination country) to dynamically deliver relevant inventory.
B2B VIES Validation Logs: Corporate VAT identification numbers submitted by institutional buyers for intra-community VAT exemption checks against the European Commission VIES database.

3. Purpose and Legal Basis for Processing

We process your personal information under the following legal bases:

Performance of a Contract (Art. 6(1)(b) GDPR): Processing necessary to fulfill brokerage inquiries, vehicle verification requests, pre-purchase inspection logistics, and escrow coordination.
Legitimate Interests (Art. 6(1)(f) GDPR): Maintaining network security, preventing fraud in high-value automotive transactions, preventing malicious data scraping of our vehicle matrix, and optimizing aggregator search latency.
Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Fulfilling statutory anti-money laundering (AML) protocols, German Commercial Code (HGB) book-keeping requirements, and European fiscal documentation for cross-border export.

4. Third-Party Data Processors & Sub-Contractors

We do not sell, rent, or trade your personal information. Data is disclosed only to verified technical sub-processors under strict Data Processing Agreements (DPAs):

Cloud Infrastructure: High-security ISO-27001 certified server infrastructure located strictly within the European Union (Frankfurt & Amsterdam zones).
Automotive Verification Partners: Accredited master technicians and certified franchise dealerships conducting requested Pre-Purchase Inspections (PPI) on specific vehicle chassis numbers.
Secure Escrow & Banking Networks: Regulated European payment institutions and SEPA Instant banking gateways for title transfers.

5. International Data Transfers

Where data is transferred outside the European Economic Area (for example, when coordinating vehicle acquisition with non-EU dealerships in Switzerland, the United Kingdom, or Monaco), transfers occur strictly pursuant to European Commission Adequacy Decisions or Standard Contractual Clauses (SCCs).

6. Data Retention Period

General inquiry logs are retained for twelve (12) months following the completion of an inquiry. Invoices, export certificates (Gelangensbestätigungen), and commercial correspondence related to completed vehicle transactions are preserved for ten (10) years in accordance with § 147 of the German Fiscal Code (Abgabenordnung).

7. Your Statutory Rights Under the GDPR

As a data subject within the EU/EEA, you maintain full statutory rights:

Right of Access (Art. 15 GDPR): The right to request copies of your stored personal data.
Right to Rectification (Art. 16 GDPR): The right to correct inaccurate or incomplete telemetry.
Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request deletion of your records where retention is no longer legally mandated.
Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, machine-readable format.
Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests.

To exercise these rights, submit a written notification with proof of identity to [email protected].