How we process your data, how long we store it, and which rights you have under the General Data Protection Regulation (GDPR, DSGVO).
The protection of your personal data is important to us. This privacy policy explains how we handle your data when you use our website.
The controller responsible for data processing within the meaning of the GDPR is:
Kfz Sachverständigenbüro CleverCrash®
Owner: Maximilian Fromm
Schillerstraße 67a
91054 Erlangen
Germany
Phone: +49 9131 91 66 143
Email: info@clevercrash.de
You may visit our website for information only. This means you do not register and do not send us other information. In this case, your browser automatically sends certain data to our server (so-called "server log files"). This includes the page visited, the date and time of access, the amount of data transferred, the referrer URL, the browser type, the operating system and the IP address. The start and end of the session are also recorded for the duration of the session. We process this data based on our legitimate interest under Art. 6(1)(f) GDPR in the technical stability and security of our website.
Our website is hosted on the Webflow platform (Webflow Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA). When you visit our website, Webflow records various log files, including your IP address. Webflow stores cookies or other recognition technologies. These are needed to display the page, to provide certain website functions and to ensure security (strictly necessary cookies).
We have concluded a data processing agreement under Art. 28 GDPR with Webflow. We use Webflow based on Art. 6(1)(f) GDPR (legitimate interest in displaying our website as reliably as possible). If we asked for your consent, the processing is based only on Art. 6(1)(a) GDPR and § 25(1) of the Telecommunications Digital Services Data Protection Act (TDDDG). This applies when the consent covers the storage of cookies or access to information on your device, for example device fingerprinting. You can withdraw your consent at any time.
For possible data transfers to the USA, appropriate safeguards are in place. These are in particular the EU-US Data Privacy Framework and the standard contractual clauses of the European Commission. You can find more information in the privacy policy of Webflow: Privacy policy of Webflow
Our website operator Webflow provides the function Webflow Optimize (formerly Intellimize, provider: Webflow Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA). It allows us to show page content in different variants and to compare their effect. When you open our pages, a script is loaded from the provider's servers. This transfers your IP address. In addition, information can be stored in the local storage of your browser so that you can be assigned to a variant.
We have turned off the collection of usage data in this function. We do not analyze your behavior beyond individual page views. The legal basis is our legitimate interest in a clear design of our website under Art. 6(1)(f) GDPR. For storage on your device, the legal basis is Art. 6(1)(a) GDPR in connection with § 25(1) TDDDG. For data transfers to the USA, the safeguards described above for Webflow apply.
We use SSL or TLS encryption to protect the transfer of confidential content. You can recognize an encrypted connection by the address bar of your browser ("https://") and by the lock symbol.
Our website uses cookies to enable certain functions and to improve your experience. These can be session cookies (deleted after your visit) or persistent cookies (stored for a certain period). The legal basis depends on the purpose. It is either Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest).
You can refuse or delete cookies in your browser settings. Please note that our website may not work fully if you turn off cookies.
We also use the consent tool Cookiebot (provider: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark). It lets you accept or refuse individual categories and change your choice at any time. Cookiebot processes your shortened IP address and your consent choice. It stores them as proof under Art. 7(1) GDPR. The legal basis is our legal obligation to obtain and document consent under Art. 6(1)(c) GDPR.
If you contact us by email, by phone or on WhatsApp, we use the personal data that you send us only to process your request. We process the data under Art. 6(1)(f) GDPR. If your request is about making a contract with us, Art. 6(1)(b) GDPR also applies. We delete your data as soon as it is no longer needed for the purpose of processing. The exception is where statutory retention obligations prevent this.
You can reach us on WhatsApp. The service is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of the Meta group. We use the business version of the service.
If you write to us about a specific damage case or an order, we process your mobile phone number, the name saved in your WhatsApp account and the content of your message. The legal basis is Art. 6(1)(b) GDPR, because the processing serves to prepare and carry out the order. For general questions about our services, we rely on our legitimate interest in a quick answer under Art. 6(1)(f) GDPR. We use your details only to process your request. We do not disclose them to third parties.
WhatsApp Business technically accesses the address book of the device on which the account is set up. It sends the phone numbers stored there to Meta. We have turned off access to the address book in the system settings of the device. For this reason, no contact data from our address book is sent to Meta.
Data can be transferred to servers of Meta Platforms Inc. in the United States. The provider is certified under the EU-US Data Privacy Framework. On July 10, 2023, the European Commission issued an adequacy decision under Art. 45 GDPR for this framework. The WhatsApp Business Data Processing Terms apply to processing on our behalf. However, access by US authorities to transferred data cannot be fully excluded. If you want to avoid this, you can also reach us by phone or by email. This will not cause you any disadvantage.
You can find more information here: Privacy policy of WhatsApp
You can report your accident damage to us through the damage notification form on our website. We need your phone number so that we can reach you to arrange an appointment. Your name and photos of the damaged vehicle are optional.
We process this information to assess your request, to arrange an inspection appointment and to prepare the order. The legal basis is Art. 6(1)(b) GDPR. Without your phone number, we cannot process the request. Without photos, the only thing we cannot do is give you a free initial assessment in advance.
Photos from the accident scene often also show other vehicles, their license plates or, in some cases, people. We use these photos only to assess the damage to your vehicle. We remove or black out image content that is not needed for this. We do not publish the photos.
The form is provided by our website operator Webflow. Your entries and the uploaded files are stored there temporarily before we start working on them.
We use Google Tag Manager (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage marketing tags on our website in one place. The service itself does not process any personal data. Data is transferred to Google only if services are activated.
To improve our website, we use Hotjar (provider: Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, a company of the Contentsquare group). Hotjar records interactions with our website, such as clicks, mouse movements and scrolling behavior. It also records technical details about your device and browser. From this data, we create summarized reports. We use them to improve the structure and usability of our pages.
The processing is based only on your consent under Art. 6(1)(a) GDPR in connection with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future in our cookie settings. Data can also be processed outside the European Union. The provider bases such transfers on the standard contractual clauses of the European Commission under Art. 46(2)(c) GDPR. You can find more information here: Privacy information of Hotjar
To measure the success of our ads, we use Google Ads conversion tracking (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you click an ad, a cookie is set. It allows the analysis of user interactions. We also use the Conversion Linker. It stores click information in cookies on our domain, so that the click can be linked across several page views.
The processing is based only on your consent under Art. 6(1)(a) GDPR in connection with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future in our cookie settings. You can find more information here: Privacy policy of Google
On our home page, we embed a map from the service Google Maps (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the map loads, a connection to Google servers is made and your IP address is transferred. Google can store or read information on your device.
The map is embedded based on your consent under Art. 6(1)(a) GDPR in connection with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future in our cookie settings. Google also processes data in the United States. The provider is certified under the EU-US Data Privacy Framework. You can find more information here: Privacy policy of Google
To show customer reviews, we use widgets from the provider Elfsight Group LTD (Cyprus). When you open the pages concerned, a script is loaded from the provider's servers. This transfers your IP address. The legal basis is your consent under Art. 6(1)(a) GDPR in connection with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future in our cookie settings.
To carry out the order for the report, we disclose your data to the following categories of recipients, where this is necessary in the individual case:
The legal basis for the disclosure is the performance of our contract with you under Art. 6(1)(b) GDPR. For legal obligations, it is Art. 6(1)(c) GDPR. We have data processing agreements under Art. 28 GDPR with service providers who work for us and are bound by our instructions. We do not disclose data to other parties, unless you expressly consent or we are legally obliged to do so.
You have the right of access to your stored data (Art. 15 GDPR). You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), notification (Art. 19 GDPR) and the right to object (Art. 21 GDPR). You can also withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach.
If we process your data based on legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to this processing at any time, for reasons arising from your particular situation. We then no longer process your data. There are two exceptions. We may continue if we can show compelling legitimate grounds that outweigh your interests, rights and freedoms. We may also continue if the processing serves to establish, exercise or defend legal claims.
To object, a message to info@clevercrash.de is enough.
In principle, we process your data only as long as it is needed for the respective purpose. In detail:
For processing based on consent, we store the data until you withdraw your consent. After the respective period ends, we delete the data, unless another retention obligation applies.
Last updated: August 13, 2026
Kfz-Sachverständigenbüro Fromm
Schillerstr. 67a
91054 Erlangen
We work across the Nuremberg Metropolitan Region: in Nuremberg, Fürth, Erlangen and Bamberg, and also in Schwabach