Privacy policy
Information about your data, our services and your choices.
Draft for the test website – dated 15 October 2026. This version has not yet been approved for use on the main domain. Outstanding information and operational processes must be confirmed before launch.
1. Controller and scope
The controller responsible for data processing on this test website is:
Mario Janßen · Janssen-Drive Driving School
Sulinger Straße 101, 27751 Delmenhorst
Telephone: 04221 – 30923
Email: info@janssen-drive.de
This policy describes the new WordPress test website at janssen-drive.de. It may only be used for janssen-drive.de after adaptation to the actual hosting and technical setup. Whether a data protection officer has been appointed and their contact details remain to be confirmed.
2. The data we process
Personal data includes, for example, your name, contact details and IP address. We process data where necessary to operate the website, answer your enquiry or arrange and provide training. You can also contact us by telephone or email.
3. Hosting, connection data and security
When you visit, technically necessary access data is processed, including IP address, time, requested page or file, request status, browser and operating system information and, where applicable, the previously visited page. This supports delivery, troubleshooting and prevention of misuse. IP addresses may be personal data.
The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure, functional operation. Article 6(1)(b) GDPR may also apply to contractual enquiries. The website uses HTTPS.
The hosting provider is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. Further information about data processing and processing on our behalf is available in STRATO's privacy policy and the STRATO data processing agreement.
Before launch, the data processing agreement applicable to the hosting package, specific access-log retention periods, any additional CDN/proxy services and their processing locations must be fully documented.
4. Your choices for external content
Google Calendar, the location map and the MAXI registration assistant load only after you give permission in the privacy settings. TikTok videos only start when you press the relevant video button. You receive information about the service before enabling it. Our other content and contact options remain available without permission.
Consent for these external integrations is based on Article 6(1)(a) GDPR and, where information is stored on or read from your device, section 25(1) TDDDG. Consent is voluntary and can be changed or withdrawn for future processing at any time using “Privacy settings” in the footer. Withdrawal does not affect the lawfulness of processing before withdrawal.
Your decision, including its timestamp and version, is stored under jd_privacy_choices_v1 in this browser's local storage for up to 180 days. This necessary storage is used solely to manage your choices (section 25(2)(2) TDDDG; Article 6(1)(c) or (f) GDPR). Once it expires, the relevant functions ask again. You can also delete browser data yourself. If local storage is unavailable, your choices are not saved permanently.
5. Contact and price enquiry forms
When you contact us, we process the details you enter, such as name, email address, telephone number, branch, preferred training and message. Required fields are marked; other information is voluntary. The purpose is to handle your enquiry and necessary follow-up questions. Article 6(1)(b) GDPR applies to pre-contractual and contractual enquiries; Article 6(1)(f) GDPR applies to other enquiries, based on our legitimate interest in responding.
The forms use Contact Form 7. Enquiries are stored in the WordPress database using Flamingo and are accessible to authorised staff. Depending on the form, technical submission data such as time, sender IP address, browser identifier and source page may be stored.
Enquiries are also emailed to info@janssen-drive.de. Messages are sent through STRATO using an encrypted SMTP connection and the sending account anmeldung@janssen-drive.de. They are processed in our business email accounts to handle the enquiry. The business deletion policy and provider agreements must be checked before launch. Enquiries are deleted when fully dealt with and no retention obligations or other legal grounds require continued storage. A specific regular deletion period must be defined by the business.
Please do not send medical reports, assessments or other sensitive health data through general forms. For information needed in connection with accessible driving training or MPU support, we discuss an appropriate transmission method and the necessary legal basis separately.
6. Online registration and MAXI
Our online registration buttons take you to Fahrschul-Manager only when you actively use them. The additional MAXI assistant loads only after separate permission. The provider is TECVIA GmbH, Aschauer Straße 30, 81549 Munich. Loading may transmit data including your IP address, browser details and the page visited to TECVIA and technical service providers.
According to our contractual documents, we use Fahrschul-Manager or Fahrschul-Manager Cloud to administer driving tuition. TECVIA acts on instructions and may access data processed in the system during remote maintenance. The documents name Microsoft Ireland Operations Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, for cloud storage and processing.
Data entered during registration is used to process registration and administer training and contracts (Article 6(1)(b) GDPR and, where necessary, Article 6(1)(c) or (f)). Permission for the optional assistant is covered by section 4. Details of fields and contractual arrangements are shown during registration. Further information: TECVIA privacy policy. The scope of processing on our behalf and the subprocessors used must be checked against current contractual documents before launch.
6a. Training billing through DATAPART
According to our contractual documents, the relevant training contracts are billed through DATAPART Factoring GmbH, Schwieberdinger Straße 60, 71636 Ludwigsburg. The driving school assigns the relevant claims to DATAPART. Contract, contact, service and payment data required for billing and enforcing claims is transmitted. A non-binding website enquiry alone does not automatically result in transmission to DATAPART.
DATAPART processes the data as an independent controller, particularly for invoicing, payment processing and receivables management. Transmission and processing are governed by Article 6(1)(b), (c) or (f) GDPR, depending on the purpose, and the applicable legal requirements. DATAPART provides specific information and data subject rights in its transparency information under Articles 13 and 14 GDPR . General information: DATAPART privacy policy. A data protection officer named there is responsible for DATAPART and is not presented here as the driving school's data protection officer.
7. Google theory calendar
The calendar page uses Google Calendar from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is embedded in month view after you give permission. If consent is saved, it loads automatically on later visits. Without consent, you can open the calendar directly in Google using a normal link.
Embedding shares technical access data with Google, including your IP address and browser information. If you are signed in to Google, Google may associate the visit with your account. Cookies or similar technologies may be used; processing by Google LLC in the USA and other affiliated companies is possible. Further information: Google privacy policy.
8. Location map: OpenStreetMap and jsDelivr
The interactive location map loads after you give permission. It retrieves map data from OpenStreetMap and the Leaflet library through jsDelivr. Technically necessary data, including IP address, browser information and requested content, is transmitted to their servers. Our map does not request device location permission or GPS tracking.
Provider information: OpenStreetMap Foundation, United Kingdom and jsDelivr. Branch addresses and links to location pages remain available without the embedded map.
9. TikTok videos
TikTok videos are prepared on relevant topic pages. A connection to the TikTok player is established only when you press the clearly labelled load button. Data processed may include your IP address, device and browser details, the page visited and information about video use. If you are signed in, TikTok may associate data with your account. According to the provider, cookies, other identifiers and international transfers are possible.
Providers for users in the European Economic Area are TikTok Technology Limited, Ireland, and TikTok Information Technologies UK Limited, United Kingdom. Details and recipients: TikTok privacy policy. Videos are optional; other page content remains usable without loading them.
10. WhatsApp, social networks and review links
Our WhatsApp, Facebook, Instagram, TikTok and Google review links are normal external links. Merely displaying them does not embed content from those services through these links. Only using a link opens the relevant service, whose privacy information then applies.
If you send us a WhatsApp message, we process the message and your contact details to handle your request. The legal basis is Article 6(1)(b) GDPR for contractual enquiries and Article 6(1)(f) for others. WhatsApp is provided by WhatsApp Ireland Limited; information is available in the WhatsApp privacy policy. You can also contact us by telephone or email without WhatsApp. Google's rules and privacy information apply to public Google reviews. Our QR codes are served as our own image files; Google is only contacted when the link they contain is opened.
11. Fonts, analytics and advertising
The design uses system fonts available on your device. Automatic loading of Google Fonts through Elementor has been disabled for this test website. No integration of Google Analytics or Google Ads conversion tracking was identified during review of the current test site. Corresponding older wording is therefore not presented as a claim about this website. This policy and technical consent controls must be adapted before any later activation.
12. Recipients, third countries and retention
Access is limited to people authorised to handle the matter and necessary technical service providers. Where processing on our behalf takes place, it must be covered contractually under Article 28 GDPR. Data is shared with authorities where legally required.
Enabled third-party services may process data outside the EU or EEA. The additional requirements of Articles 44 et seq. GDPR must be met, for example an applicable adequacy decision or suitable safeguards. General permission does not replace these requirements. The operator must document the specific safeguards, recipients and contractual documents before launch; we do not claim unverified certification of any provider.
Data is retained only as long as its purpose and legal obligations require. Contract, accounting and training records may be subject to separate retention duties. Backups must be protected against unauthorised access and managed under a defined backup and deletion policy. Deletion periods and the inclusion of backups remain to be specified bindingly.
13. Your rights
Subject to legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You may withdraw consent for future processing (Article 7(3)).
Right to object: Where we process data under Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation (Article 21). You may object to processing for direct marketing at any time without giving reasons.
For this, contact info@janssen-drive.de or the address above. We respond to data subject requests in accordance with legal requirements. We do not use this website to make exclusively automated decisions with legal or similarly significant effects within the meaning of Article 22 GDPR.
14. Right to complain
Under Article 77 GDPR, you may complain to a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. In Lower Saxony, contact the State Commissioner for Data Protection, Prinzenstraße 5, 30159 Hannover, telephone 0511 120-4500. Information and complaint form: www.lfd.niedersachsen.de.
15. Changes
We adapt this policy when services, technical processes or legal requirements change. Before moving the domain, hosting, form delivery, specific retention periods and outstanding operator details must be checked conclusively.