Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Compass Omnibushandel
Owner: Obaidullah Karimi
Werner-Siemens-Straße 100
22113 Hamburg
Germany

Phone: +49 40 78 07 32 84
Email: info@compass-omnibushandel.de

We are not legally required to appoint a data protection officer and have not done so. If you have any questions about data protection, please contact us directly using the details above.

2. Key points at a glance

• We use no cookies, no analytics or tracking services and no advertising networks.
• Fonts, images and videos are hosted on our own server. Visiting the site does not transfer any data to Google, YouTube or similar services.
• We only process personal data if you contact us or offer us a vehicle – and only to handle your enquiry.
• We do not sell your data and do not share it for advertising purposes.

3. Hosting and server log files

This website is hosted by the following provider in Germany:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

When you visit the website, your browser automatically sends information to the server, which is stored in so-called server log files. This includes:

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• whether the request was successful
• browser type and version, operating system
• referrer URL (the previously visited page)

This data is technically necessary to deliver the website, ensure its stability and security and detect misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are automatically deleted or anonymised by the host after a short period.

We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR. The host processes the data solely in accordance with our instructions.

4. Encrypted transmission

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock icon and “https://” in your browser’s address bar. This means that data you send via the form cannot be read by third parties.

5. Cookies and local storage

This website does not set any cookies.

On your first visit we show a short intro animation. To prevent it from playing again every time you change pages, your browser stores the entry compass-intro with the value “1” in its so-called session storage. This entry contains no personal data, is not transmitted to us and is deleted automatically when you close the browser window.

This storage is necessary to display the website you have requested as intended (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). If “reduce motion” is enabled on your device, the animation is not shown.

6. “Offer your vehicle” form

If you offer us a vehicle for purchase via the form, we process the data you enter:

• vehicle details: make, model, year, mileage, equipment, asking price
• photos you upload
• contact details: name, phone number and – optionally – email address

After you submit the form, the details are sent via our server as an email to our mailbox info@compass-omnibushandel.de. The form data and photos are not stored permanently on the web server itself. Large photos are reduced in size in your browser before they are transmitted.

Please note: photos may contain information that allows conclusions to be drawn about individuals, such as licence plates, recognisable people or location data stored in the image file. We use the photos exclusively to assess your vehicle offer.

Purpose and legal basis: We process the data in order to review your offer, contact you and, where applicable, prepare a purchase contract. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). By ticking the box in the form, you confirm that you agree to this processing.

Spam protection: To prevent automated spam submissions, the form contains a field that is invisible to humans and checks how quickly it was submitted. No additional data about you is collected and no external services are used. The legal basis is Art. 6(1)(f) GDPR.

Providing the make, your name and your phone number is required so that we can process your offer. All other information is optional.

7. Contact by email and phone

If you contact us by email or phone, we process your details (e.g. name, phone number, email address and the content of your enquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or its initiation, otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

Our email mailboxes are also operated by ALL-INKL.COM in Germany (see section 3).

8. Contact via WhatsApp

Our website contains links that allow you to message us via WhatsApp. These are simple links – merely visiting our site does not transfer any data to WhatsApp. Only when you click a WhatsApp link does the WhatsApp app or website open.

WhatsApp is a service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of the Meta group. If you message us via WhatsApp, WhatsApp or Meta receive information about this communication (e.g. your phone number, the time and metadata of the message). According to WhatsApp, message content is end-to-end encrypted. A transfer of data to the USA cannot be ruled out; Meta is certified under the EU-US Data Privacy Framework.

Using WhatsApp is voluntary. The legal basis is Art. 6(1)(b) or (f) GDPR. If you prefer not to use WhatsApp, you can reach us at any time by phone, email or via the form. Further information can be found in WhatsApp’s privacy policy: whatsapp.com/legal/privacy-policy-eea.

9. Links to mobile.de, Google Maps and social media

Our vehicles are also listed on the mobile.de platform. The “View vehicle” and “More vehicles” buttons link to our dealer profile on mobile.de. Here too, these are simple links – no data is transferred to mobile.de when you visit our website.

If you click such a link, the privacy policy of mobile.de GmbH, Albert-Einstein-Ring 26, 14532 Kleinmachnow, Germany, applies on mobile.de: mobile.de/service/privacyPolicy.

Route planning: The map in the contact section is an image hosted on our own server – no map service is embedded. The map data comes from OpenStreetMap (© OpenStreetMap contributors). Google Maps only opens when you click the map or “Get directions”. The privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, then applies: policies.google.com/privacy.

Instagram and TikTok: In the contact section and the footer we link to our Instagram profile and to the TikTok profile of Obaidullah Karimi. These are also simple links – no content, feeds or plugins of these services are embedded, and no data is transferred to Instagram or TikTok when you visit our website. Only when you click a link do the privacy policies of the respective providers apply: Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland): privacycenter.instagram.com/policy and TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland): tiktok.com/legal/privacy-policy-eea.

10. Fonts, images and videos

The fonts used on this website (Barlow and Barlow Condensed) and all images and videos are loaded directly from our own server. No connection is made to servers of Google, YouTube or other third-party providers.

11. Disclosure of data

We do not sell your personal data and do not share it for advertising purposes. Data is only disclosed to third parties in the following cases:

• Performance of a contract (Art. 6(1)(b) GDPR): where necessary for the purchase or sale of a vehicle and the services you have requested – for example to delivery drivers or transport companies, vehicle registration offices and inspection bodies (TÜV), customs authorities and customs agents in the case of export, or financing partners if you wish to finance a vehicle.
• Legal obligation (Art. 6(1)(c) GDPR): where we are legally required to do so, for example towards tax and customs authorities or our tax advisers in connection with statutory accounting and retention obligations.
• Legal claims (Art. 6(1)(f) GDPR): where necessary to establish, exercise or defend legal claims, for example towards lawyers or courts.
• Consent (Art. 6(1)(a) GDPR): where you have expressly agreed to the disclosure.

We also use service providers who process data exclusively on our behalf and in accordance with our instructions (Art. 28 GDPR) – in particular our hosting and email provider (see section 3).

Countries outside the EU: Data is only transferred to third countries where this is necessary for a transaction you have requested – for example when exporting a vehicle to a country outside the EU (Art. 49(1)(b) GDPR) – or if you contact us via WhatsApp (see section 8).

12. Data security

We protect your data against loss, manipulation and unauthorised access by means of appropriate technical and organisational measures (Art. 32 GDPR). These include in particular:

• encrypted transmission of all pages and form data (see section 4),
• hosting on servers in Germany,
• form data and photos are not stored on the web server but sent directly to our mailbox,
• password-protected mailboxes and accounts that only authorised persons can access,
• a lean website without a content management system, plugins or third-party scripts, which offers little attack surface.

We continuously adapt our security measures to the state of the art. Please note that, depending on the provider, emails may not be encrypted throughout their transmission. For confidential documents, please ask us about a secure way of sending them.

13. Storage period

We only store personal data for as long as is necessary for the respective purpose:

• Enquiries that do not lead to a contract (e.g. a vehicle offer we do not purchase) are deleted once the enquiry has been fully processed – after 12 months at the latest.
• If a contract is concluded, we keep the related documents for as long as required by statutory retention periods (usually 6 or 10 years under German commercial and tax law).
• Server log files are deleted automatically by the host after a short period.

14. Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data, unless there is a statutory retention obligation (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw any consent you have given with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

For all requests, an informal message to info@compass-omnibushandel.de or to our postal address is sufficient.

15. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Straße 22, 7th floor
20459 Hamburg, Germany
datenschutz-hamburg.de

16. Status of this privacy policy

This privacy policy was last updated in October 2026. We will update it if our website or the legal requirements change.