Privacy Policy

We process your personal information to provide, improve, and administer our services, communicate with you, ensure security, and comply with the law.

• To facilitate account creation and authentication
• To enable you to create and manage vehicle listings
• To enable buyer–seller communication through our messaging system
• To respond to your inquiries and support requests
• To send administrative information such as policy updates
• To protect our services against fraud and abuse
• To identify usage trends and improve the platform
• To comply with our legal obligations

We only process your personal information when we have a valid legal basis under applicable law. For users in the EU, UK, and EEA, we rely on the following legal bases under the GDPR:

• Consent — where you have given us explicit permission for a specific purpose.
• Performance of a contract — where processing is necessary to provide our services to you.
• Legitimate interests — such as improving our platform, diagnosing problems, and preventing fraud, where these interests are not overridden by your rights.
• Legal obligations — where processing is required to comply with applicable law.
• Vital interests — where processing is necessary to protect someone's life or safety.

We may share your personal information with third-party service providers who perform services on our behalf. We have contracts in place with these providers designed to protect your data. The third parties we work with include:

• Amazon Web Services (AWS) — cloud hosting and infrastructure
• Cloudflare — DNS management and network optimisation
• Amazon SES — transactional email delivery

We may also share information in the event of a business transfer (merger, acquisition, or sale of assets). We have not sold or shared any personal data to third parties for commercial purposes.

Auto-Find does not use tracking cookies or third-party analytics services. We use browser localStorage and sessionStorage solely for essential functionality — such as keeping you logged in and deduplicating listing view counts. These are necessary for the platform to function and do not require your consent under GDPR.

Our primary servers are located in Germany (EU). Some third-party service providers, including AWS, may process data in the United States or other countries. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including the European Commission's Standard Contractual Clauses. These clauses require all recipients to protect personal data in accordance with European data protection standards.

We retain your personal information only for as long as necessary for the purpose it was collected. Specific retention periods are as follows:

• Account data — retained while your account is active. Deleted within 30 days of account closure.
• Listing data — retained while the listing is active and for up to 12 months after deactivation for analytical purposes.
• Messages — retained while your account is active. Anonymised or deleted within 30 days of account closure.
• Billing and invoicing records — retained for 7 years in accordance with applicable accounting and tax law.
• Server logs and technical data — retained for a maximum of 90 days for security purposes.

If deletion is not immediately possible (e.g. data stored in backup archives), we will securely isolate it until deletion is feasible.

We have implemented appropriate technical and organisational security measures designed to protect your personal information. These include encrypted data transmission (HTTPS), secure token-based authentication, and access controls. No electronic transmission over the internet or information storage technology can be guaranteed 100% secure. You should always access our services via a secure environment.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, in accordance with our obligations under GDPR Articles 33 and 34.

We do not knowingly collect data from or market to children under 18 years of age. By using our services, you represent that you are at least 18 years old. If we learn that we have collected personal information from a minor, we will promptly deactivate the account and delete the data. If you become aware of any such data, please contact us at info@auto-find.eu.

Depending on your location, you may have the following rights under applicable data protection law:

• Right to access — request a copy of the personal information we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal information
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@auto-find.eu or via our contact form. We will respond within 30 days. If you believe your rights are not being respected, you have the right to lodge a complaint with the supervisory authority in your country of residence. The Belgian supervisory authority is the Gegevensbeschermingsautoriteit (GBA): Drukpersstraat 35, 1000 Brussels — www.gegevensbeschermingsautoriteit.be.

Most web browsers include a Do-Not-Track ("DNT") setting. Because Auto-Find does not use third-party tracking technologies, DNT signals have no effect on our data practices. If this changes in the future, we will update this notice accordingly.

We may update this Privacy Notice from time to time to stay compliant with applicable laws or to reflect changes in our practices. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this notice periodically.

If you have questions or concerns about this Privacy Notice, you can reach us at:

Based on the applicable laws of your country, you may have the right to request access to, correction of, or deletion of the personal information we hold about you. You may also have the right to withdraw consent to our processing. To submit a request, please contact us via our