Privacy policy

The legally binding version of this page is the German one: Datenschutzerklärung (German). This English version is a courtesy translation.

Last updated: October 2026

1. Data protection at a glance

General information

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?
Data on this website is processed by the website operator. You will find the operator’s contact details in the section “Controller” of this privacy policy.

How do we collect your data?
Some data is collected when you provide it to us, for example data you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g. browser, operating system or time of the page request). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse how you use the website. If contracts can be concluded or initiated via the website, the data transmitted is also processed for offers, orders or other service requests.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you can withdraw it at any time with effect for the future. Under certain circumstances you also have the right to request the restriction of processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about this and any other questions on data protection.

2. Hosting

We host the content of our website with the following provider:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (“IONOS”). When you visit our website, IONOS records various log files including your IP address. For details, see the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

IONOS is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. If consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting). Consent can be withdrawn at any time.

Data processing agreement

We have concluded a data processing agreement with IONOS under Art. 28 GDPR. IONOS processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Various personal data is collected when you use this website. This privacy policy explains what data we collect, what we use it for, and how and for what purpose this happens.

Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Zulassungsservice Express
Ludwig-Richter-Straße 29
80687 Munich, Germany

Phone: +49 155 67846202
Email: info@zse-muenchen.de

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses).

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies. If you make a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in that case it is deleted once these reasons no longer apply.

Legal bases for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. If you have expressly consented to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g. via device fingerprinting), processing is additionally based on § 25(1) TDDDG. Consent can be withdrawn at any time. If your data is required to perform a contract or to take pre-contractual steps, we process it on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation (Art. 6(1)(c) GDPR). Processing may further be based on our legitimate interest under Art. 6(1)(f) GDPR. The relevant legal basis in each case is stated in the following sections of this privacy policy.

Recipients of personal data

In the course of our business we work with various external parties, which sometimes requires the transfer of personal data to them. We only pass on personal data to external parties if this is necessary to perform a contract, if we are legally obliged to do so (e.g. disclosure to tax authorities), if we have a legitimate interest under Art. 6(1)(f) GDPR, or if another legal basis permits it. When using processors, we only pass on our customers’ personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint controller agreement is concluded.

Withdrawal of your consent

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to object in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING OPERATION IS STATED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged breach. This right exists without prejudice to other administrative or judicial remedies.

The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or to perform a contract handed over to you or to a third party in a common, machine-readable format. If you request direct transfer to another controller, this is done only where technically feasible.

Access, rectification and erasure

Within the scope of the applicable law, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, a right to rectification or erasure of this data. You can contact us at any time about this and other questions regarding personal data.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data. You can contact us about this at any time. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check, you have the right to request restriction of processing.
If your personal data was or is processed unlawfully, you can request restriction of processing instead of erasure.
If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request restriction of processing instead of erasure.
If you have lodged an objection under Art. 21(1) GDPR, your interests and ours must be weighed. As long as it has not been determined whose interests prevail, you have the right to request restriction of processing.

If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent, to assert, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL/TLS encryption

This website uses TLS encryption (“https://” and the lock icon in your browser), so data you send us cannot be read by third parties.

4. Data collection on this website

Cookies

Our website uses so-called “cookies”. Cookies are small data packets that do not harm your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically at the end of your visit. Permanent cookies remain on your device until you delete them or your browser deletes them automatically.

Cookies can come from us (first-party cookies) or from third parties (third-party cookies). Third-party cookies allow certain services of third-party companies to be integrated into websites (e.g. cookies for handling payment services).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. a shopping cart or the display of videos). Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies that are required to carry out the electronic communication, to provide certain functions you have requested or to optimise the website (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is based exclusively on this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent can be withdrawn at any time.

You can set your browser to inform you when cookies are set and allow cookies only in individual cases, exclude cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Any further cookies and services used on this website are described in this privacy policy.

Consent via our cookie banner

This website does not set any cookies unless you consent. On your first visit, a banner asks whether we may use Google Analytics (“Statistics”) and Google Ads conversion tracking (“Marketing”). Google’s scripts are only loaded and cookies only set after you consent. We store your choice in your browser’s local storage (entry “zse-consent”) for 12 months; this is technically necessary (§ 25(2) no. 2 TDDDG) and transmits no data to us or third parties.

You can change or withdraw your consent at any time with effect for the future via “Cookie settings” in the footer of every page or the button at the end of this policy. When you withdraw consent, we delete the cookies set by Google as far as technically possible.

We use Google Consent Mode v2: without your consent, no data is sent to Google – not even anonymised signals.

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:

browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this, the server log files must be recorded.

Contact form

If you send us enquiries via the contact form, your details from the form, including the contact details you provide, are stored by us to handle the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be withdrawn at any time.

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing it no longer applies (e.g. after your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.

To prevent automated submissions, our server stores a pseudonymised hash of your IP address when you submit the form, so that no more than five enquiries per hour are accepted. The hash is created with a random key that is generated anew every day. Hashes older than one hour and keys from previous days are deleted automatically by the server with the next form submission; without the key, the hash can no longer be traced back to your IP address. Please do not send ID or vehicle documents through the form.

Enquiries by email, phone or fax

If you contact us by email, phone or fax, your enquiry including all resulting personal data (name, enquiry) is stored and processed by us to handle your request. We do not pass on this data without your consent.

The data you send us remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing it no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Communication via WhatsApp

Our website contains a link and a QR code that open WhatsApp with our number. The link itself does not transmit any data to WhatsApp. Only when you message us does WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), a Meta Platforms company, process your data – in particular your phone number and communication metadata – under its own terms, including on servers in the USA. Message content is end-to-end encrypted. See whatsapp.com/legal/privacy-policy-eea.

Legal basis: Art. 6(1)(b) and (f) GDPR. Using WhatsApp is voluntary – you can always reach us by phone or email instead.

Photos of ID and vehicle documents

When you commission us, we ask you to send us photos of your ID, the registration certificate part I and part II and other documents in advance by WhatsApp or email. We process these photos to check that your documents are complete and to handle your registration order. The legal basis is Art. 6(1)(b) GDPR. We delete the photos once the order is completed, unless a statutory retention obligation applies.

Please note: emails are usually transmitted unencrypted. If you do not want this, you can send us the documents by WhatsApp or bring the originals to our office. Please do not send any documents through the contact form.

5. Analytics and advertising

Google Analytics 4

Only with your consent do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (including “_ga” and “_ga_*”, lifetime 2 years) and similar technologies to record how visitors use our site: pages viewed, time on site, approximate location, device and browser. Google truncates the IP address before storing it; full IP addresses are not stored in Google Analytics 4.

Purpose: analysing usage to improve our website. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition. We have concluded a data processing agreement with Google. Event data is deleted by Google after 14 months. More information: Google privacy policy and Safeguarding your data in Google Analytics.

Google Ads conversion tracking

Only with your consent do we use Google Ads conversion tracking (Google Ireland Limited, address as above). If you reach our site via a Google ad, Google sets cookies (including “_gcl_au”, lifetime 90 days, and a conversion cookie, lifetime 30 days). This lets us and Google recognise whether you performed a specific action after clicking the ad – such as sending the contact form or clicking our phone number or WhatsApp link. We do not learn who you are, only the total number of users who clicked an ad and performed the action.

Purpose: measuring the effectiveness of our advertising. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Transfers to the USA are covered as described for Google Analytics. More information: Google – advertising and privacy.

6. Plugins and tools

Google Fonts (hosted locally)

This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. No connection to Google servers takes place.

For more information on Google Fonts, see https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy.

7. External links

The “Open in Google Maps” link on the contact page leads to Google Maps; no map is embedded in our site. You only leave our site when you click the link, and the privacy policy of the respective provider then applies. The same goes for the WhatsApp link (see “Communication via WhatsApp”).

Change cookie settings

Source of the German original: https://www.e-recht24.de