01
Controller
Panagiotis Valatsadakos, trading as Panos Trans e.K.
Trading name: PV Autotransporte
Konrad-Dreher-Straße 13
80689 Munich
Email: service@pv-autotransporte.de
Telephone: +49 172 812 71 34
Legal · Personal data
Information about the processing of personal data when you visit our website or contact us.
01
Panagiotis Valatsadakos, trading as Panos Trans e.K.
Trading name: PV Autotransporte
Konrad-Dreher-Straße 13
80689 Munich
Email: service@pv-autotransporte.de
Telephone: +49 172 812 71 34
02
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When it is accessed, Netlify processes technically necessary connection data, in particular the IP address, date and time, requested file, referrer, and browser and operating-system information. Our legitimate interest under Art. 6(1)(f) GDPR is the secure, stable and abuse-resistant provision of the website.
Netlify processes data as a processor on the basis of its data processing terms. According to Netlify, transfers to the United States are based on the EU-US Data Privacy Framework; the agreed Standard Contractual Clauses may also apply. Information about these safeguards and how to obtain the relevant documents can be found in Netlify's privacy policy and in the Data Processing Agreement linked there.
Server and security logs are processed only for as long as necessary for operation, error analysis and prevention of abuse. The specific period depends on the type of log, the security purpose and the retention settings applicable to the Netlify plan in use.
03
If you contact us by telephone, email or through the contact form, we process your information to handle the enquiry and, where applicable, to take steps prior to entering into a contract under Art. 6(1)(b) GDPR. Where statutory retention obligations apply, further processing is carried out under Art. 6(1)(c) GDPR.
The information marked as required is necessary for us to respond to your enquiry. Without this information, we may not be able to process your request.
Some of our Google ads offer an enquiry form hosted directly by Google. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you voluntarily submit this form, your name, telephone number and any email address you provide voluntarily are shared with us. Details from your Google account may be pre-filled; you can review them before submitting. We use these contact details solely to handle your transport enquiry and discuss the route, vehicle and timing with you personally. Our processing and pre-contractual contact are based on Art. 6(1)(b) GDPR. The information is not sold or used for unrelated advertising without a separate legal basis.
Enquiries can be retrieved through our access-protected Google Ads account. For prompt handling, Google sends the contact details listed above, technical enquiry, form and campaign identifiers, and timestamps to our existing hosting provider Netlify through a key-protected interface. Enquiries are stored separately from the website contact form and delivered by email exclusively to service@pv-autotransporte.de. Hashed technical enquiry identifiers prevent duplicate processing; these control records contain no contact details and are deleted after 180 days during the next weekly cleanup. These Google enquiries are not forwarded to OpenAI or an additional CRM. Our further processing follows the Netlify information, enquiry retention rules and email communication information below. Google's own processing, possible transfers outside the EU/EEA, and storage and deletion rules are described in the Google Privacy Policy and the notices displayed in the form. Google provides information on lead retrieval and storage in its lead forms help page. Alternatively, you can contact us directly by telephone, email or the contact form on our website. Your data protection rights listed below also apply to these enquiries.
04
The contact form is processed through Netlify Forms. The information entered is transmitted to Netlify and stored in the controller's Netlify account. Required fields are necessary to process the enquiry; further information is voluntary. The data is deleted as soon as it is no longer required for processing and statutory retention obligations.
Enquiries that do not result in a contract are generally deleted no later than six months after final processing, unless outstanding questions, legal claims or statutory obligations require longer retention. If a contractual relationship is established, documents relevant to the contract and billing are retained in accordance with statutory commercial and tax retention periods.
To troubleshoot successfully submitted website enquiries, we keep brief diagnostic logs at Netlify. They contain a random identifier for the individual enquiry, the technical time, form and version information, and the status of measurement consent, script loading and event handover. The identifier is included with the enquiry; the remaining diagnostic details are not included in the customer email. The diagnostics add no names, contact details, message contents, IP addresses, device identifiers or advertising click identifiers, and are not forwarded to Google or OpenAI. No additional cookies or persistent visitor identifiers are created for this purpose. Processing serves our legitimate interest in reliable form functionality and respecting your measurement choice (Art. 6(1)(f) GDPR). Diagnostic entries are available only in the access-protected Netlify function log, with its current 24-hour retention period; no additional diagnostic data store is created. General technical hosting logs are unaffected. Advertising measurement remains blocked without valid consent.
05
For business email communication via service@pv-autotransporte.de we use Microsoft 365 or Exchange Online. Licensing and administrative provision are handled by GoDaddy.com, LLC; the technical Microsoft 365 infrastructure is provided by Microsoft. Microsoft's contact entity in Europe is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. If you email us, in particular your email address, name, message content, attached files and technical communication and delivery information are processed.
Processing is carried out to handle your enquiry and to take steps prior to entering into a contract or to perform a contract under Art. 6(1)(b) GDPR. For general business enquiries that are not directed towards a contract, processing is based on our legitimate interest in reliable and traceable communication under Art. 6(1)(f) GDPR. Retention required by law is carried out under Art. 6(1)(c) GDPR.
GoDaddy and Microsoft process data within the scope of the agreed privacy and product terms. The specific storage and processing location depends on the Microsoft 365 environment provided by GoDaddy, the tenant and product settings, and the functions used. Processing exclusively in Germany is therefore not guaranteed. Limited access or processing may also take place outside the EU or EEA. For such transfers, the providers provide in particular applicable adequacy decisions and contractual data-protection safeguards, including Standard Contractual Clauses. Further information is available in the GoDaddy Privacy Policy, the Microsoft Privacy Statement and the information about the EU Data Boundary.
Emails that do not result in a contract are generally deleted no later than six months after final processing, unless outstanding questions, legal claims or statutory obligations require longer retention. Messages relevant to a contract or billing are retained in accordance with statutory commercial and tax retention periods.
06
On individual pages we offer voluntary contact through WhatsApp, in particular to send a location, vehicle problem, images or further information relating to an enquiry. For users in the European Economic Area, the service is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
If you use WhatsApp, we process the data you transmit. This may include in particular your telephone number, profile name and — depending on your settings — profile picture, as well as messages, images, documents, voice messages, location information and other content you provide voluntarily. We do not synchronise contacts from our address book with WhatsApp for this communication channel. Please share location data, registration numbers, vehicle documents or images only to the extent required to process your enquiry.
Processing is carried out to handle your enquiry, to take steps prior to entering into a contract or to perform a contract under Art. 6(1)(b) GDPR. For other business messages, it is based on our legitimate interest in fast and user-friendly communication under Art. 6(1)(f) GDPR. Use of WhatsApp is voluntary. You can alternatively contact us by telephone, email or through the contact form.
Simply visiting our website does not transmit data to WhatsApp. A connection to WhatsApp is established only when you click a WhatsApp link or open the service yourself. WhatsApp processes its own usage, device, connection and communication metadata under its own data-protection responsibility. According to WhatsApp, messages and calls are end-to-end encrypted. WhatsApp, associated Meta companies and service providers may also process data in the United States and other countries outside the EU or EEA. WhatsApp identifies in particular adequacy decisions, where applicable, and Standard Contractual Clauses as transfer mechanisms. Details are available in the WhatsApp Privacy Policy for the European Region.
WhatsApp communication that does not result in a contract is generally deleted by us no later than six months after final processing, unless outstanding questions, legal claims or statutory obligations require longer retention. Messages relevant to a contract or billing are retained in accordance with statutory retention periods. We have no control over WhatsApp's own retention periods.
07
This website provides the Manrope typeface as a local file from our own server. No connection to an external font provider is established when the page loads.
08
With your express consent, we use the Google tag provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We measure telephone and WhatsApp clicks and successful form enquiries. A click is not proof of a conversation or an order. Form measurement takes place only after the enquiry has been confirmed as accepted.
After a successful contact enquiry, with your consent we also use your voluntarily provided email address for enhanced conversions. Your browser normalises the address and converts it into a SHA-256 hash. This value is sent to Google to help match enquiries to advertising interactions more accurately. The hash is not anonymous. This specifically configured transfer does not include names, telephone numbers or message content. Without an email address, this additional email matching does not take place. The form can be used without consenting to advertising measurement.
Google may process in particular online identifiers, information about the advertisement click, device and browser data, the page accessed and the interaction events mentioned. The Google tag is loaded only after you consent through the consent dialog. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.
Google may process data outside the EU or EEA. For such transfers, the Google Ads Data Processing Terms provide in particular for Standard Contractual Clauses. Information about processing, retention, deletion options and safeguards is available in the Google Privacy Policy and the Google Ads Data Processing Terms. Retention periods within Google Ads are governed by the product and retention settings described there.
With your express consent, our hosting provider Netlify sends OpenAI a server-side event after a transport enquiry has been successfully accepted. Under the OpenAI Ad Tools Data Processing Addendum, OpenAI Ireland Limited processes EEA data. We use the event to measure and attribute our ChatGPT advertising. The transfer is limited to the enquiry event, its time, a random technical event ID, a fixed page address without query parameters and, when available after your consent and still valid, the ad-click reference “oppref”. This reference is pseudonymous, not anonymous. This server integration does not send names, email addresses, telephone numbers, messages, vehicle/route details, visitor IP addresses or browser information to OpenAI. Without a click reference, ad attribution may be unavailable.
The legal basis is your consent under Art. 6(1)(a) GDPR; Section 25(1) TDDDG applies to storing or accessing your consent choice and the consent-dependent ad-click reference. Earlier consent covering Google only is not extended to OpenAI. The form works if you reject measurement. You can withdraw consent below at any time for future transfers. Withdrawal does not automatically delete data already sent; contact us with access or erasure requests.
OpenAI processes the data under its advertising and measurement terms; processing outside the EU/EEA is possible. The OpenAI Ad Tools Data Processing Addendum describes responsibilities and transfer mechanisms. See the OpenAI Privacy Policy and Conversion Terms for purposes, retention and rights. We also send the technical opt-out for future user-level personalisation. Consent and event records held with our Netlify form follow the enquiry retention rules described above.
09
With your express consent, we temporarily store an available ChatGPT ad-click reference (oppref), its capture time and the consent version in the current browser tab's Session Storage. This allows the original reference to be sent unchanged to OpenAI after a transport enquiry has been successfully accepted, even after navigation to another page. The reference is used for matching for no more than 30 minutes after capture. Expired entries are removed on the next access; withdrawal or rejection removes the entry. Without consent, this storage does not take place. The form remains usable when storage is blocked. No OpenAI browser pixel is loaded.
Your decision regarding Google Ads and OpenAI advertising measurement is stored locally in your browser (Local Storage), together with the version of the consent dialog and the time of your decision, so that the website respects your consent choice. Our form script does not store the hash used for explicit Google email matching in Local Storage or Session Storage. An old consent is not automatically carried over to a changed consent version. Your choice remains stored until you change it using the button above, delete the website data in your browser or the storage is technically reset.
10
On the homepage we display a limited selection of publicly visible reviews from the Google Business Profile. This may reproduce the publicly used display name, review text, star rating and publication period. The source is the publicly accessible Google Business Profile of PV Autotransporte.
Processing is based on Article 6(1)(f) GDPR and our legitimate interest in presenting authentic customer experiences and providing prospective customers with objective guidance. Data subjects may object to this presentation on grounds relating to their particular situation by contacting the email address stated above. A review will be removed or updated if it is no longer publicly available, inaccurate or no longer necessary for the stated purpose.
11
Links to Instagram, Facebook, Kleinanzeigen and other external services are opened only when you click them. From that point onward, the respective provider processes data under its own responsibility. The privacy information of the relevant service applies. For WhatsApp, please also note the separate section above.
12
Recipients of personal data may include Netlify as our hosting and form service provider, GoDaddy as the licensing and administration provider for our Microsoft 365 environment, Microsoft as the provider of our business email infrastructure, WhatsApp when you choose to communicate via WhatsApp, Google and OpenAI where consent has been given, and carefully selected contractual, IT, tax and legal service providers. Data is disclosed only to the extent necessary for technical operation, communication, initiating or performing a contract, legal defence or compliance with statutory obligations.
13
In particular, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection (Article 21 GDPR). You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal. Please contact service@pv-autotransporte.de.
14
You may lodge a complaint with a data protection supervisory authority. For non-public bodies in Bavaria, the competent authority is generally the Bavarian State Office for Data Protection Supervision .
15
This privacy policy was last updated on 29 October 2026.