Privacy Policy. As of: September 2026

1. Introduction and Overview

The protection of your personal data is our highest priority. This website, lkw-abschleppdienst-magdeburg.de, is part of the network for truck towing services, TruckNetz.DE. In the following, we inform you about how we collect, process, and store your personal data when you use our online services.

2. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) as well as other national data protection laws is:

GEARS Digital UG (haftungsbeschränkt)

Neue Straße 28

97711 Maßbach

Deutschland

Commercial Register: HRB 10186, Amtsgericht Schweinfurt

Phone: +49 3221 2243834

E-Mail: info@trucknetz.de

You may direct any questions regarding data protection at any time to the following email address: datenschutz@trucknetz.de

Data Protection Officer

We are not legally obliged to appoint a data protection officer (Art. 37 GDPR). For all questions regarding data protection, you can reach us at datenschutz@trucknetz.de.

3. Legal Basis for Data Processing

We process personal data based on the following legal norms:

  • Art. 6 (1) (a) GDPR: If you have given us express consent.
  • Art. 6 (1) (b) GDPR: For the performance of a contract (e.g., commissioning a truck tow) or pre-contractual measures.
  • Art. 6 (1) (c) GDPR: To fulfill legal obligations.
  • Art. 6 (1) (f) GDPR: To safeguard our legitimate interests (optimization of website stability and security).

4. Data Transfer to Third Countries

Our company headquarters as well as our hosting infrastructure are located in Germany; the processing of your data generally takes place within the European Union. Individual service providers used by us (e.g., Cloudflare, Google as well as messenger services) may transfer personal data to third countries – in particular to the USA. For these transfers, insofar as no adequacy decision of the European Commission exists, we rely on appropriate safeguards pursuant to Art. 46 GDPR, in particular the EU Standard Contractual Clauses (SCC) pursuant to Decision (EU) 2021/914, on certification under the EU-US Data Privacy Framework, or on your express consent pursuant to Art. 49 (1) (a) GDPR. Further details on the individual services can be found in the following sections.

5. Hosting and Infrastructure

  • This website is hosted by the service provider Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), https://www.hetzner.com/, in a data center in Nuremberg (Germany). The personal data collected on this website is stored on the host's servers in Germany. We have entered into a data processing agreement (DPA) pursuant to Art. 28 GDPR with our hosting provider to ensure that your data is processed only on our instructions and in accordance with the GDPR.
  • We use Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) http://cloudflare.com/ as a Content Delivery Network (CDN) and security service (WAF). Your data traffic is routed through Cloudflare's infrastructure to protect our website from attacks (e.g., DDoS). Data transfers to the USA are based on the EU-US Data Privacy Framework and the Standard Contractual Clauses (SCC). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the security and availability of the website). Cloudflare's privacy policy.

Further services to ensure website functionality and security:

  • Google Fonts (Local Use) from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): To ensure a consistent display of fonts, we use Google Web Fonts. For data protection reasons, these are hosted locally on our server. No connection is established to Google servers, and your IP address is not transmitted to Google. Information on data protection at Google Fonts can be found at: https://policies.google.com/privacy

6. Communication, Contacts and Processing of Contact Information

If you send us an enquiry by telephone, messenger (Viber, WhatsApp, Telegram, etc.), contact form or email (e.g. in the event of a truck breakdown), your details, including the contact data you provide, will be stored by us for the purpose of processing your enquiry and in the event of follow-up questions. We do not pass on this data without your consent; excepted is the disclosure to the partner companies commissioned to carry out the order, insofar as this is necessary to fulfil your enquiry. We delete this data as soon as it is no longer required for the purposes for which it was collected, at the latest, however, upon expiry of any statutory retention periods.

Communication via WhatsApp, Telegram and Viber We offer you the possibility of contacting us via instant messaging services. When using these services, personal data is collected and processed by the respective messenger provider.

6.1. WhatsApp

  • Provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (subsidiary of Meta Platforms, Inc.).
  • Data processed: Mobile phone number, profile name, IP address and metadata (time of message, device data). Message content is protected by end-to-end encryption, however WhatsApp collects metadata to analyse user behaviour.
  • Legal basis: Art. 6(1)(b) GDPR (initiation/performance of contract) and Art. 6(1)(f) GDPR (our legitimate interest in rapid communication).
  • Third-country transfer: Data may be transferred to servers of Meta Platforms, Inc. in the USA. The transfer is made on the basis of EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
  • Privacy policy:https://www.whatsapp.com/legal/privacy-policy-eea.

6.2. Telegram

  • Provider: Telegram Messenger Inc., 71-75 Shelton Street, Covent Garden, London, UK / Telegram FZ-LLC, Dubai, UAE.
  • Data processed: Mobile phone number, profile name, IP address, message content (cloud storage for standard chats).
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in platform-independent communication).
  • Third-country transfer: Transfer to third countries (including UAE) is possible. For this transfer to third countries without an adequacy decision we rely, insofar as you communicate with us via Telegram, on your explicit consent pursuant to Art. 49(1)(a) GDPR.
  • Privacy policy:https://telegram.org/privacy.

6.3. Viber

  • Provider: Viber Media S.à r.l., 2, rue Edward Steichen, L-2540 Luxembourg.
  • Data processed: Mobile phone number, device identifier, IP address, metadata. Messages are end-to-end encrypted by default.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in modern customer communication).
  • Third-country transfer: Data may be processed worldwide. Viber uses standard contractual clauses as a safeguard.
  • Privacy policy:https://www.viber.com/en/terms/viber-privacy-policy/.

7. Cookies, Consent Management and Analysis Tools

Our website uses cookies. These are small text files that are stored on your device. 

7.1. Necessary Cookies: These are technically required for the operation of the website.

7.2. Optional Cookies (Marketing/Analytics)
We only use these if you give us your explicit consent via our consent banner. You can revoke or change your settings at any time.

7.3. Google Forms 
We use Google Forms from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to collect structured enquiries (e.g. partner registrations or specific service requests). When you fill in a form, the data you enter is transmitted to Google's servers. The use is based on your consent (Art. 6(1)(a) GDPR) or for the initiation of a partner agreement (Art. 6(1)(b) GDPR). Information on data protection at Google Forms can be found at: https://policies.google.com/privacy. 

7.4. Consent Management Tool Klaro
We use the open-source consent management tool Klaro to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in a data-protection-compliant manner. 

  • Software: Klaro is open-source software (originally developed by KIProtect GmbH, Bismarckstr. 10-12, 10625 Berlin, Germany) and is self-hosted by us. No data is transmitted to KIProtect.
  • How it works: Klaro stores your decision (consent or refusal) locally in your browser so that it can be taken into account on a return visit.
  • Legal basis: The storage of your consent decision is technically necessary in order to implement the choice you have made (Section 25(2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR).
  • Privacy policy of Klaro: https://klaro.org/de/ressourcen/datenschutz. 

Klaro is configured to fully support Google Consent Mode v2 and to transmit the corresponding consent signals to Google.

The following consent parameters are transmitted:

  • analytics_storage – for Google Analytics
  • ad_storage – for Google Ads / advertising cookies
  • ad_user_data – use of user data for advertising purposes
  • ad_personalization – personalised advertising / remarketing

Without your consent, no advertising or analytics cookies will be set and no personal data will be transmitted to Google. In this case, Google can only use anonymised modelling data (Modeling) to estimate conversions and traffic.

The current configuration of Klaro and the transmission of the consent signals is regularly reviewed and meets the requirements of the GDPR as well as Google's requirements for the European Economic Area.

7.5. Google Analytics 4 (GA4) 
We use Google Analytics 4 from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to evaluate the use of our website statistically and pseudonymously. The integration is carried out via Google Tag Manager and is only activated after your consent via our consent banner (Klaro). IP addresses are processed in truncated form only and are not stored permanently.

  • Protective measures: We have concluded a data processing agreement. Data is not shared with other Google services. The transfer to the USA is made on the basis of the EU-US Data Privacy Framework.
  • Legal basis: Art. 6 (1) (a) GDPR (consent via Klaro).
  • Privacy policy: https://policies.google.com/privacy.

7.6. Google Ads (Conversion Tracking & Remarketing) 
We use Google Ads from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to place advertisements.

  • Data processed: Within the framework of conversion tracking and remarketing, personal data (e.g. cookie or device identifiers) is processed. The transfer to the USA is made within the framework of the EU-US Data Privacy Framework as well as the EU Standard Contractual Clauses.
  • Legal basis: Art. 6 (1) (a) GDPR (consent via Klaro).
  • Privacy policy: https://policies.google.com/privacy.

8. Data Collection when Visiting the Website (Server Log Files)

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is stored in so-called server log files:

  • Browser type and version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Hostname of the accessing computer (IP address)
  • Time of the server request

This data is technically necessary to display the website correctly and to ensure the security of our IT systems. This data is not merged with other data sources.

The server log files are deleted after 30 days at the latest, unless statutory retention obligations apply. Legal basis: Art. 6 (1) (f) GDPR (security and stability).

9. Data Security (SSL/TLS Encryption)

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL/TLS) via HTTPS. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

10. Map Services 

To show you locations and areas of operation, we use the open-source library Leaflet https://leafletjs.com/. Leaflet itself does not collect any personal data. However, when loading map data (tiles) from third-party providers (e.g., OpenStreetMap), your IP address is transmitted to their servers for technical reasons. This is based on our legitimate interest in a visual representation of our services (Art. 6 (1) (f) GDPR).

11. Security and Quality Assurance

  • Call Tracking: To measure the quality of our brokerage service, we collect metadata of calls (time, duration). Conversations are not recorded without separate consent.

12. Your Rights as a Data Subject

Within the framework of the applicable legal provisions, you have the right at any time to:

  • Access (Art. 15 GDPR): About your data stored by us.
  • Rectification (Art. 16 GDPR): Correction of incorrect data.
  • Erasure (Art. 17 GDPR): "Right to be forgotten."
  • Restriction of processing (Art. 18 GDPR).
  • Data portability (Art. 20 GDPR).
  • Objection (Art. 21 GDPR): Against processing based on a legitimate interest.
  • Withdrawal of consent (Art. 7 (3) GDPR): Insofar as the processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.

To exercise these rights, please contact us using the contact details provided above (datenschutz@trucknetz.de).

13. Supervisory Authorities (Right of Complaint)

According to Art. 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.

Competent supervisory authority for the German market: Landesbeauftragter für den Datenschutz Sachsen-Anhalt, Leiterstraße 9, 39104 Magdeburg, https://datenschutz.sachsen-anhalt.de/. The authority responsible for your place of residence is decisive.

14. Information for Partner Companies and Complaints

GEARS Digital UG (haftungsbeschränkt) acts purely as an information technology intermediary.

  • For complaints regarding the technical platform, please contact us.
  • For complaints regarding the physical execution (e.g. damage during towing, quality of repair or tyre service by our network partners), the respective partner is your direct point of contact. If necessary, you may contact the specialist authorities responsible at the operating location of the executing partner: the competent Chamber of Industry and Commerce (IHK), https://www.dihk.de/, and the competent Chamber of Skilled Crafts (HWK), https://www.kammerfinder.de/.

15. Consumer Dispute Resolution 

Our email address can be found above in paragraph 2. We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

16. Registration and Data Processing for Partner Companies (B2B)

Should you register or apply on our website as a service partner (e.g. towing service, workshop), we collect additional company-related data. This is necessary in order to include you in the TruckNetz.DE network, page https://lkw-abschleppdienst-magdeburg.de/, and to be able to broker orders to you. This data includes:

  • Name of the company and legal form
  • Location(s) and service radius
  • Business contact details (phone, e-mail, website)
  • Information on the fleet and services offered
  • VAT identification number (USt-IdNr.) or tax number

Legal basis: Processing is based on Art. 6 (1) (b) GDPR (initiation and fulfillment of a partner contract) as well as Art. 6 (1) (f) GDPR (our legitimate interest in quality assurance and brokerage of specialist companies).

17. Publication of Partner Data and Order Brokerage

As part of the TruckNetz.DE network, this website serves to broker orders.

  • Public Profiles: By being accepted as a partner, you agree that your business contact details (company name, address, phone number, services offered) will be publicly displayed on our website so that drivers seeking help can contact you directly.
  • Disclosure to Customers: In the event of a specific brokerage, your data will be transmitted to the customer (driver/forwarding agent). In return, you will receive the customer data necessary for order processing (location, vehicle data, driver contact).

18. Duration of Storage of Partner Data

Data of partner companies is stored for the duration of the active cooperation. After termination of the partnership, the data will be deleted unless there are statutory retention obligations (e.g., from tax law, 10 years for invoices).

19. Mobile App "LKW Abschleppdienst: Truck-Netz"

In addition to our website, we offer the mobile app "LKW Abschleppdienst: Truck-Netz". Below we inform you about what data the app collects and how it is processed.

19.1. What data the app collects

Contact form data (with your consent):

  • Name, phone number, description of the situation — when submitting a request via the form in the app.
  • Legal basis: Art. 6(1)(b) GDPR (performance of contract).

Geolocation (with your permission):

  • GPS coordinates — only when the location button in the cost calculator is pressed.
  • The data is not stored on the server and is used solely for distance calculation.
  • Legal basis: Art. 6(1)(a) GDPR (consent).

Technical data (automatic):

  • Anonymous device identifier (UUID) — to prevent API abuse.
  • Interface language, app version.
  • Stored in the device's encrypted storage (Keystore / Keychain).
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest — security).

Usage events:

  • Taps on the call button, messenger interactions, form submissions — in anonymised or pseudonymised form. We process these events on our own server (api.trucknetz.de). If you consent in the app's consent dialog, these events are additionally analysed via Google Analytics for Firebase (see 19.6).
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest — service improvement) or Art. 6(1)(a) GDPR (consent), insofar as an evaluation by Google is carried out.

19.2. Map service

19.3. Local data storage

  • Settings (language, selected city) are stored locally on the device.
  • Cache data for offline access is stored locally.
  • Data is not synchronised with cloud services.

19.4. What data is not collected

  • Advertising identifiers (GAID / IDFA)
  • Contacts, photos, files
  • Browsing history
  • Data from other apps

19.5. Crash and error diagnostics (Firebase Crashlytics)

To detect, analyse and fix program errors, we use Firebase Crashlytics, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). If the app crashes or a serious error occurs, technical diagnostic data is automatically collected and transmitted to Google, in particular: type and time of the error, the program state at the time of the error (so-called stack trace), device model and operating-system version, language setting and app version, and a randomly generated installation identifier (Firebase Installation ID). This data contains no form or contact data entered by you and is used solely to improve the stability and security of the app. Transmission to and storage on Google servers, including in the USA, may occur; for this we rely on the EU Standard Contractual Clauses or Google's certification under the EU-US Data Privacy Framework. Legal basis is our legitimate interest in stable, error-free operation of the app pursuant to Art. 6(1)(f) GDPR. Further information: https://firebase.google.com/support/privacy

19.6. Usage analysis (Google Analytics for Firebase)

If you consent in the app's consent dialog, we use Google Analytics for Firebase, an analytics service of Google Ireland Limited, to evaluate app usage statistically and pseudonymously (e.g. screens viewed, button interactions, frequency and duration of use). For this purpose, a pseudonymous app-instance identifier is processed. Advertising identifiers (IDFA on iOS, GAID on Android) are not used. We use Google Consent Mode v2: without your consent, no analytics data is transmitted to Google. Data may be transmitted to Google servers, including in the USA (EU Standard Contractual Clauses or EU-US Data Privacy Framework). Your consent is voluntary and can be withdrawn at any time with effect for the future in the app's privacy settings. Legal basis: Art. 6(1)(a) GDPR (consent).

19.7. Provision via app stores

The app is obtained and installed via the respective app store, i.e. the Apple App Store (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) or Google Play (Google Ireland Limited). When downloading, certain data — such as your user identifier, email address, the time of download and a device- or account-related identifier — is processed by the respective store operator under its own data-protection responsibility. We have no influence on the type and scope of this processing. In this respect, only the privacy policy of the respective provider (Apple or Google) applies.

19.8. Storage period of app data

Contact data submitted via the app form is stored for the duration of processing your request and any follow-up questions and is then deleted, unless statutory retention obligations apply. Crash and usage data (sections 19.5 and 19.6) are processed in accordance with Google's retention periods. Data stored locally on the device remains there until you uninstall the app or delete the data in the app settings.