Data protection

Privacy Policy

1. Controller

OAM Online Auto Market GmbH, Gießerallee 23, 47877 Willich, Germany. Managing Director: Kristina Danieliene. Email: info@onlineautomarket.de. Telephone: +49 176 23985588.

2. Data processed

When you submit a parts request, we process the information you provide, including your name, company, email address, WhatsApp number, delivery country and postcode, vehicle and VIN information, OEM or part number, requested part, notes and uploaded photographs. We also process technical connection and security data necessary to operate the website.

3. Purposes and legal bases

  • Processing and answering your request, checking availability and preparing an offer: Article 6(1)(b) GDPR.
  • Security, abuse prevention and reliable operation of the service: Article 6(1)(f) GDPR.
  • Compliance with tax, commercial and other statutory duties where applicable: Article 6(1)(c) GDPR.

4. Recipients and international transfers

When all 17 VIN characters have been entered, the VIN is sent to Deutsche Automobil Treuhand GmbH (DAT) to identify and verify the vehicle make, model and model year. If DAT cannot be reached or does not return a result, the U.S. National Highway Traffic Safety Administration (NHTSA) vehicle database is used as a fallback. No name, email address, telephone number, postcode, notes or photograph is sent with this lookup.

We share only the information required to identify and source the requested part with our selected partner or supplier in South Korea. Customer contact details are not required for the Korean supplier search. We also use WhatsApp Business services from Meta to transmit and receive operational request information. Technical hosting, storage and communication providers may process data on our behalf under data-processing agreements.

Where personal data is transferred outside the European Economic Area, we rely on an applicable adequacy decision or appropriate safeguards under Chapter V GDPR.

Card and PayPal payments

If you choose card or PayPal payment, the payment interface is loaded from PayPal. We send the order reference, amount and currency to PayPal and retain payment identifiers and payment status for order processing and reconciliation. Card numbers and security codes are entered directly into PayPal-hosted fields and are not stored by AUTIKOR. PayPal also processes the connection and payment information needed to provide its service. See PayPal’s privacy statement.

5. Storage period

Request data is retained for as long as necessary to process the enquiry and normally for no longer than three years after the end of the year in which the request was completed. Contract, invoice and accounting records are retained for the statutory periods. Data is deleted sooner where it is no longer required and no legal obligation or overriding legitimate interest applies.

6. Your rights

You may request access, rectification, erasure, restriction of processing, data portability and object to processing based on legitimate interests. You may also lodge a complaint with a competent data protection supervisory authority. Send requests to info@onlineautomarket.de.

7. Cookies and automated decisions

The hosting platform may process technically necessary connection data to deliver and protect the service. The website stores your cookie preferences in your browser so that we can respect your choice. Necessary functions do not require consent.

With your separate consent for analytics, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand website usage and measure parts requests and contact actions. With your separate marketing consent, Google may measure advertising performance and use advertising-related storage and signals. The legal basis is Article 6(1)(a) GDPR.

Google technologies are not loaded before you consent to at least one optional category. If you consent, information about pages viewed and interactions such as a submitted request, WhatsApp click or email click may be sent to Google. We do not send the form contents, VIN, name, email address or telephone number to Google Analytics. Google may process data outside the EEA using applicable transfer safeguards.

TechnologyPurposeTypical duration
autikor-cookie-consent-v2 (local storage)Records the categories you accepted or rejected180 days
_ga / _ga_*Google Analytics visitor and session measurement, only after analytics consentUp to 2 years
_gcl_au and Google advertising signalsAdvertising and conversion measurement, only after marketing consentUp to 90 days

With marketing consent, the OpenAI Ads Measurement Pixel measures page views and successfully submitted parts requests to attribute conversions to ChatGPT ads. The SDK is loaded only after marketing consent and measurement stops when consent is withdrawn. The pixel uses the first-party cookies __oppref (30 days) and __obref (365 days). OpenAI may use automatic advanced matching when enabled for this pixel; we do not explicitly pass form contents to the pixel.

You may accept all optional categories, reject them or make a category-specific choice. You can withdraw or change consent at any time using the “Cookie settings” button on the website. Your selection expires after 180 days and will then be requested again. Withdrawal does not affect processing performed before withdrawal. We do not use automated decision-making to decide whether an offer will be made.

Last updated: 31 August 2026