Privacy Policy
We keep data collection to the minimum this website needs. The German version of this policy is authoritative.
Last updated: August 2026
1. Overview and controller
This policy describes what personal data is processed when you visit this website, for what purposes and on what legal basis. It is deliberately short, because this website deliberately does very little: it embeds no third-party content, uses no analytics, tracking or advertising services, and runs no database. The enquiry form is submitted to our own server; no third-party form service is involved.
The German version of this policy is the legally binding one; this English text is a courtesy translation of the same sections.
Controller within the meaning of the GDPR: Speedy Trading GmbH, Neefestraße 40, 09119 Chemnitz, Germany. Amtsgericht Chemnitz, HRB 37148. VAT ID: DE454204980.
Telephone: +49 151 22637207, e-mail: contact@speedy-trading.com
We have not appointed a data protection officer, as the statutory conditions for doing so are not met. Please use the contact details above for any data protection matter.
2. No third-party content, no cookie banner
When you open this website your browser connects to our own domain and nothing else. No content is loaded from any external server. Specifically:
All fonts are stored on our own server. There is no connection to Google Fonts or any other font service, so your IP address is not transmitted to anyone for this purpose.
No map is embedded, and no map picture is shown in the contact section at present. Loading this page contacts no tile server and no map server, neither OpenStreetMap nor anyone else. No data about you is transmitted in the process. What you find there is our address and ordinary links you may choose to click. Only when you click one do you leave this website, at which point the privacy policy of that provider applies.
No analytics, statistics, tracking, advertising or social media services are used, no tag manager, no tracking pixel and no chat widget.
Because nothing requiring consent is loaded, this website needs no cookie banner and asks for no consent. There is nothing for you to accept or decline.
3. Hosting and server log files
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA ("Vercel"), served through their European infrastructure in the Frankfurt am Main region (fra1). When you visit the site, Vercel automatically processes technically necessary server log data on our behalf, in particular your device IP address, the date and time of access, the page requested, browser type, operating system and referrer URL.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient delivery of this website and the prevention of attacks. Where data is transferred to the USA, the transfer relies on the EU Commission standard contractual clauses; Vercel is also certified under the EU-US Data Privacy Framework. Log data is retained only briefly for operational and security purposes and is not combined with other data.
4. Vehicle data and photos (mobile.de)
The vehicle data and photos shown here come from our own listings on the mobile.de marketplace (mobile.de GmbH, Albert-Einstein-Ring 26, 14532 Kleinmachnow, Germany).
That data is retrieved server-side only: our server fetches it from mobile.de in our own name and caches it. The vehicle photos are likewise delivered by our own server and are not loaded from mobile.de by your browser. Visiting this website therefore transmits no personal data of yours to mobile.de; mobile.de learns neither your IP address nor that or when you visited this site.
The legal basis for the server-side processing is Art. 6(1)(f) GDPR; our legitimate interest is an accurate, up-to-date presentation of our stock.
5. Getting in touch: the enquiry form and the other routes
This website offers you two routes. First, the enquiry form: when you submit it, your entries are transmitted to our own server (the /api/enquiry endpoint). We process your name, your e-mail address and, where you provide them, your telephone number and country, together with the content of your message. No third-party form service is involved; the submission goes to us alone. Every submission is recorded so that no enquiry can be lost; the text of your message is deliberately NOT written into that record, only its length and a checksum.
Second, the WhatsApp or mail route: there the input fields send nothing to us and merely prepare a ready-made message in your own application. Whether and when you send it is entirely your decision, and until you do we receive nothing.
If you do send us a message by e-mail, WhatsApp or telephone, we process the data you provide in order to answer your enquiry and, where applicable, to take pre-contractual steps. Typically that is your name, your contact details and the content of your message.
The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in handling enquiries efficiently.
Retention: enquiries that do not lead to a contract are deleted no later than six months after the last contact on that matter. If your enquiry does lead to a contract, the resulting records are subject to the statutory commercial and tax retention periods of six and eight years respectively (Section 257 HGB, Section 147 AO), after which they are deleted. You may object to storage or request erasure at any time, unless a retention obligation prevents it.
6. E-mail mailbox and outgoing mail
Our mailbox for contact@speedy-trading.com is operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Deutschland. The e-mails triggered by the enquiry form are dispatched through the sending service Resend (Resend, Inc., San Francisco, USA).
When you submit the enquiry form we send two e-mails: a notification to our own mailbox containing what you entered, and an automatic acknowledgement to the address you gave. The acknowledgement contains no advertising. It confirms receipt, quotes your reference number and carries our company's statutory particulars; it does not repeat the text of your message.
IONOS is therefore a recipient of your data within the meaning of Art. 13(1)(e) GDPR: in delivering your enquiry and storing it in the mailbox, IONOS processes the personal data it contains, including your e-mail address and the content of your message. IONOS acts solely for us and on our instructions, and is not a third party to whom we pass your data on. Under the IONOS contract terms, that processing takes place in a member state of the European Union or a contracting state of the European Economic Area.
In dispatching these e-mails, Resend processes the data they contain, in particular your e-mail address and the content of your enquiry, solely on our behalf and on our instructions. As Resend is based in the USA, this may involve a transfer to the USA; it is safeguarded by the EU Commission standard contractual clauses.
The legal basis is Art. 6(1)(b) GDPR where your enquiry is directed at entering into or performing a contract; the automatic acknowledgement forms part of the pre-contractual steps you asked for. Otherwise the basis is Art. 6(1)(f) GDPR, our legitimate interest being the proper, traceable and complete handling of enquiries and confirming receipt to you. Retention is as described in the previous section.
7. WhatsApp
This website contains links that open a conversation with us in WhatsApp. They are ordinary links: no WhatsApp script or content is embedded in this website, and no data whatsoever is transmitted to WhatsApp before you click.
If you use WhatsApp, WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland processes, under its own responsibility, in particular your telephone number, your message content and metadata such as the time of communication; this may involve transfers to servers in the USA. We have no influence over that processing. If you would rather avoid it, e-mail and telephone reach us just as well.
The legal basis for communicating over this channel is Art. 6(1)(b) or Art. 6(1)(f) GDPR. Retention is as described in the previous section.
8. Cookies and local storage
This website sets no tracking, analytics or advertising cookies. Only strictly necessary storage is used, which is exempt from consent under Section 25(2)(2) TDDDG; the legal basis for the associated processing is Art. 6(1)(f) GDPR:
Cookie "NEXT_LOCALE": stores your language choice (English, German, French or Arabic) so the site appears in that language.
Local storage entry "speedy-theme": stores your choice between the light and dark design.
Cookie "st_form": holds a signed timestamp of your page visit. It exists solely as spam protection for the enquiry form, letting us tell whether a form was filled in over a human amount of time. It is httpOnly, contains no personal data and is renewed after at most three hours.
None of these three entries allows you to be identified as a person, and none is transmitted to anyone. The first two hold nothing but your own display preference; the third holds a signed timestamp with no personal reference. You can delete them at any time in your browser settings.
9. TLS encryption
This website uses TLS encryption for security. You can recognise an encrypted connection by the https prefix and the padlock symbol in your browser address bar. While encryption is active, the data you send us cannot readily be read by third parties.
10. Your rights
You have the right at any time to obtain information about the data stored about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).
Where we process data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is the Saxon Commissioner for Data Protection and Transparency, Devrientstraße 5, 01067 Dresden, Germany. You may equally complain to any other supervisory authority, in particular in the country of your residence or workplace.
An informal message to contact@speedy-trading.com is enough to exercise any of these rights.
11. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
12. Changes to this policy
We update this policy whenever the actual data processing on this website changes, for example because a new service is introduced. The version published here is the one that applies.