Privacy

The controller for data processing on this website within the meaning of the GDPR is:

Fahrschule YouniQ
Owner: Younes Channouf
Zeppelinstraße 7, 40231 Düsseldorf
Telephone: +49 211 2106 1988
Email: info@fahrschule-youniq.com

When you visit our website, our hosting provider automatically processes technical data transmitted by your browser: IP address, date and time of access, the page requested, the volume of data transferred, the referrer URL, and details of your browser and operating system.

This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable operation of the website and in defending against attacks. The data is deleted automatically after a short period.

If you fill in our online pre-registration or our contact form, or contact us by email or telephone, we process the details you give us.

For the pre-registration these are:

• Licence class
• Previous experience
• Scheduling wishes: theory start, preferred start date and your preference
• First name and last name
• Email address and telephone number
• Date of birth
• Your previous driving school, if any
• A note to us, if any

Required are licence class, first name, last name, email address and telephone number. Without them we cannot process your pre-registration (Art. 13(2)(e) GDPR). Everything else is voluntary.

For the contact form these are:

• Name
• Contact details: email address, telephone number if given
• Subject
• Message

Required are name, email address and message. Without them we cannot reply to you.

The legal basis is Art. 6(1)(b) GDPR, since the processing serves the initiation or performance of a training contract. Where your enquiry does not lead to a contract, we base the processing on Art. 6(1)(f) GDPR (answering your enquiry).

After a pre-registration you receive a confirmation by email. Our office receives a notification by email.

With every submission we also store:

• a salted, non-reversible hash of your IP address (spam and abuse protection)
• your browser identifier (user agent)
• the page you came from (referrer)
• campaign parameters (utm), if present

The legal basis for this is Art. 6(1)(f) GDPR. Our legitimate interest lies in protection against spam and abuse, and in seeing how you found out about us.

To stop forms from being sent in bulk, we limit the number of submissions. For this we use only the hash of your IP address. That entry is deleted after one day.

We keep your enquiry data until the purpose no longer applies. If a training contract is concluded, the statutory retention periods apply, in particular those under the German Commercial Code (HGB) and Fiscal Code (AO).

To block automated spam submissions we use technical checks that work without cookies and without passing anything to third parties.

Our website and our forms run on service providers that process data on our behalf:

• HostingVercel Inc.
  440 N Barranca Ave #4133, Covina, CA 91723, USA
• DatabaseSupabase Inc.
  970 Toa Payoh North #07-04, Singapore 318992
• Email deliveryResend (Plus Five Five, Inc.)
  2261 Market Street #5039, San Francisco, CA 94114, USA

We have data processing agreements under Art. 28 GDPR in place with all of these providers.

Where data is transferred to third countries such as the USA in the process, this is done on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR) where the provider is certified, and otherwise on the basis of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Our website does not set any cookies.

While you fill in the pre-registration, your browser keeps your choices in its session storage (sessionStorage) – never personal details. It is deleted automatically as soon as you close the tab. This storage is technically necessary for the form to work (§ 25(2) no. 2 TDDDG).

Nothing is stored on your device for our reach measurement.

We built our reach measurement ourselves. It runs on our own server, without any third-party service, and does not build a profile across several days. It records:

• the page visited – the path only, without URL parameters apart from campaign parameters (utm)
• the website you came from – the domain only
• the language
• clicks on buttons, phone numbers and external links
• how far you got in the pre-registration
• a hash of your IP address with a salt that changes daily and is then discarded

Because the salt changes every day and is discarded, we cannot recognise you on another day.

The data is stored in our database (Supabase). We delete it after 14 months at the latest.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in designing our website to meet our visitors’ needs.

Should we ever use analytics or marketing services from third parties, they will be loaded only after your explicit consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw consent you have given at any time with effect for the future.

All fonts are served from our own server. No connection is made to third-party servers and no IP address is transmitted to third parties.

We do not embed maps directly: the directions link opens Google Maps only once you actively click it. Only then do Google’s privacy terms apply.

In some places we link to pages of public authorities and test centres, for example the appointment booking of the Düsseldorf Road Traffic Authority (Straßenverkehrsamt, termine.duesseldorf.de) and the TÜV Rheinland test centre in Garath (tuv.com). These are ordinary links: nothing from these providers is loaded when you open our pages, and no data is sent to them. Only when you click such a link does the provider’s page open in a new tab, and from then on its privacy terms apply. We do not pass on which of our pages you came from. You can recognise links that leave our website by the arrow ↗ next to the text.

The links to our Instagram and TikTok profiles are ordinary links. No content from those networks is loaded on our website and no data is transmitted to them before you click the link.

This website shows photos of learner drivers after they have passed their test. These are published solely on the basis of consent given in advance (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time, informally – just write to info@fahrschule-youniq.com. We will then remove the photo immediately.

Under the GDPR you have the following rights:

• Access to the data stored about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure of your data, where no retention obligations prevent it (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Withdrawal of consent you have given, with effect for the future (Art. 7(3))

No automated decision-making or profiling takes place (Art. 22 GDPR).

Right to object: Where we process data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, an informal message to info@fahrschule-youniq.com is enough.

You have the right to lodge a complaint with a data protection supervisory authority. For North Rhine-Westphalia the competent authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4
40213 Düsseldorf

We update this privacy policy when the legal position or the services used on our website change.