The protection and confidentiality of your data is particularly important to us. The collection and processing of your data is carried out exclusively within the framework of the legal provisions of the applicable data protection law. This privacy policy informs you about the data we collect when you use the website www.analyse-systems.com, www.autopriceprofessionals.com, www.app-vin-decoder.com, www.photo2price.com, www.auto-bargain-finder.com (hereinafter collectively referred to as "Websites" and individually as "Website") and the apps "Auto Price Professionals", "Photo2Price", "AUTO Bargain Finder" and "VIN Decoder APP" (hereinafter collectively referred to as "Apps" and individually as "App") and for what purpose the data is used.

1. Name and address of the controller

The controller within the meaning of data protection law is

Analyse Systems Inc.
25 Christopher Columbus Ave.
STE 5012
Jersey City
07302 New Jersey
USA

2. Visit of our Websites

Every time you visit one of our Websites, data about you or information about your computer system is collected. When you visit our respective Website, we log the following data that your browser transfers:

IP-address,
Date and time of the request,
Time zone difference from Greenwich Mean Time (GMT),
Content of the request (concrete page),
Access status/HTTP status code,
the amount of data transferred in each case,
Internet browser.

We process the data in order to be able to deliver and optimise the content of our respective Website, to ensure the permanent functionality of our information technology systems and the technology of our respective Website, as well as to provide the information necessary for prosecution to the law enforcement authorities in the event of a cyber attack.

The processing of this data is based on our legitimate interest (Art. 6 (1)(f) GDPR). Our legitimate interest lies in the provision of a functional and user-friendly Website.

This data is collected with the help of cookies and similar tracking technologies (for more information, see the section on Cookies).

3. Download of the apps

When you download our apps, certain data is transferred to the App Store, in particular user name, email address and customer number of your account, time of download, payment information and the individual device identification number. In addition, the App Store still independently collects various data and provides you with analysis results. We have no influence on this data processing and are not responsible for it. We only process the data insofar as it is necessary for downloading the respective mobile app to your mobile device.

4. Use of the apps

If you want to use our mobile apps, we process the following data:

IP-address,
Date and time of the request,
Time zone difference from Greenwich Mean Time (GMT),
Content of the request (page visited),
access status/HTTP status code,
amount of data transferred in each case,
previously visited page,
browser,
operating system,
language and version of the browser software.

The processing of the data is technically necessary to provide you with the functions of our mobile apps and to ensure stability and security. The processing of the data is based on our legitimate interest (Art. 6 (1)(f) GDPR) to provide you with functional and user-friendly apps.

5. Our services

5.1 Market price analysis (market price)

We offer you the possibility to determine the average market price as well as the optimal market price of your car. This requires that you provide us with details about your car. The more detailed your information is, the more targeted and accurate the market price can be determined. We need at least the following data for the market price analysis:

Car brand,
Rough model,
VIN number.

We receive the following data via your VIN number, which you can also specify individually instead of the VIN number:

Body type,
Doors,
Fuel,
Engine power,
Gearbox.

In addition, you can specify other data relevant to market value, such as

Age,
Details of special equipment,
Colour,
Region.

The processing of the data is necessary to carry out the market price analysis for the average market price and the optimal market price. The processing of the data is based on our legitimate interest (Art. 6 (1)(f) GDPR) to answer your request for the market price analysis. If certain information is only taken into account for the market price analysis in connection with an in-app purchase (such as information on special equipment), we process the data for the performance of the contract concluded with you (Art. 6 (1)(b) GDPR).

5.2 Trade-In Price/Auction Bidding analysis

We offer you the possibility, as a dealer, to determine the optimum dealer trade-in price and/or optimum/maximum auction bidding. This requires you to provide us with details of the car whose trade-in price/auction bidding you wish to determine. The same data can be processed as for the market price analysis (see section 5.1).

The processing of the data is necessary to carry out the purchase/auction price analysis. The processing of the data is based on our legitimate interest (Art. 6 (1)(f) GDPR) to answer your request for the purchase/auction price analysis. If certain information is only taken into account for the purchase/auction price analysis in connection with an in-app purchase (such as information on special equipment), we process the data for the performance of the contract concluded with you (Art. 6 (1)(b) GDPR).

5.3 Bargain Finder

With our Bargain Finder you have the possibility to search for suitable offers for a car on the market. The details of your search must contain at least the following data:

Language,
Market,
Details of the desired car (i.e. make, rough model, body type, sub-body type if applicable, doors, fuel, drive, gearbox).

In addition, you can add the following details to your search and make it more precise:

Detailed information on the desired car such as engine power, age, mileage, colour or special equipment,
Postcode and search radius,
Dealer segment,
Special equipment,
Saleability.

Your search details are processed in order to show you suitable offers on the market. The processing is based on our legitimate interest (Art. 6 (1)(f) GDPR) to serve your search request. If certain search details are only taken into account in connection with an in-app purchase for the Bargain Finder (such as details of special equipment), we process the data to perform the contract concluded with you (Art. 6 (1)(b) GDPR).

5.4 Photo2Price

With the Photo2Price function you have the possibility to scan cars advertised on the internet to determine the average market price of the advertised car. You then have the option of determining the development of the average market price given certain factors, such as certain special equipment, colour of the car and region.

Your search details (i.e. the scanned data and selected factors) are then processed to show you the average market price for the advertised car. The processing is based on our legitimate interest (Art. 6 (1)(f) GDPR) to serve your search request. If certain information is only taken into account for the market price analysis in connection with an in-app purchase (such as information on special equipment), we process the data to perform the contract concluded with you (Art. 6 (1)(b) GDPR).

5.5 VIN Decoder

With the VIN Decoder you have the possibility to determine the market presence for the car you are looking for. The VIN number and optionally the make and the rough model are processed. We receive the following data via your VIN number, which you can also enter individually instead of the VIN number:

Body type,
doors,
fuel,
engine power,
Gearbox.

If you subsequently want to use the functions of the average and optimum market price (see section 5.1) as well as the optimum dealer purchase price and auction price (see section 5.2), it is necessary to enter the age and mileage of your car.

The processing of the data is necessary to carry out the purchase/auction price analysis. The processing of the data is based on our legitimate interest (Art. 6 (1)(f) GDPR) to answer your request.

5.6 In-App Purchases

If you use and/or purchase certain (free) services via our apps, we process the ID of your mobile phone (i.e. the IMEI number). We process the information to check your eligibility for limited free services or to provide you with the requested service that you have purchased via an in-app purchase. In the case of an in-app purchase, we do not process any payment information about you. The processing of your data in the context of in-app purchases is necessary for the performance of the contract concluded with you (Art. 6 (1)(b) GDPR). Otherwise, the processing of your data is based on our legitimate interest (Art. 6 (1)(f) GDPR) to be able to check your eligibility for limited free services.

5.7 Forwarding to other apps

If you are redirected from one of our apps to another app, only your specific search query will be transferred.

6. User account

6.1 Login to user account

If you have a user account for our website www.analyse-systems.com and/or our app Auto Price Professionals with us, you can log in to the user account via the website or our apps. As part of the use of the account, we process your username and password. The processing of your data in the context of the use of the user account is necessary for the performance of the contract with you (Art. 6 (1)(b) GDPR). If you create a user account on behalf of a company, the processing of the data is based on our legitimate interest (Art. 6 (1)(f) GDPR). Our legitimate interest lies in the fulfilment of the contract with the company.

As part of the use of the login area, we store your IP address and the time of the respective login. The processing of this data is based on our legitimate interest (Art. 6 (1)(f) GDPR). Our legitimate interest lies in the protection against misuse and other unauthorized use of the user account. The collected IP addresses are anonymized or deleted after 7 days at the latest.

6.2 Password change

On our website, you have the option of resetting your password for your user account and requesting a new password. For this purpose, we process your user name, the reset code that we send to you by e-mail, and the new password you have chosen. The processing of your data in the context of the use of the user account is necessary for the performance of the contract with you (Art. 6 (1)(b) GDPR). If you create a new password on behalf of a company, the processing of the data is based on our legitimate interest (Art. 6 (1)(f) GDPR). Our legitimate interest lies in the fulfilment of the contract with the company.

7. Contact

You have the option of contacting us via e-mail. When you contact us via e-mail, we process your name, e-mail address and the content of your message. We process your data for the purpose of handling your contact request or registration request.

If your request relates to the implementation of pre-contractual measures or a contract concluded with us, the processing of your data is necessary for the performance of the contract with you (Art. 6 (1)(b) GDPR). If you make a contract-related inquiry on behalf of a company, the processing of the data is based on our legitimate interest. Our legitimate interest lies in the fulfillment of the contract with the company (Art. 6 (1)(f) GDPR). In all other cases, the processing is based on our legitimate interest (Art. 6 (1)(f) GDPR), which lies in the processing of your contact request.

8. Cookies on our Website

We use cookies. A "cookie" is a piece of text information that the visited website places on the website visitor's computer via the internet browser, where it can later be read again by the internet browser. Information can be stored in cookies about details you enter when visiting the website - for example, your choice of language, entries in form fields, etc. Cookies can also contain a unique identifier. Cookies can also store a unique identifier that makes your browser recognisable to the website. Cookies that are technically necessary for the operation of the website can be stored on your end device. We require your consent for cookies that are not necessary.

We only use technically necessary cookies. These are cookies that are absolutely necessary to support the performance of the website and to provide you with the requested service. These include, for example, basic functions such as page navigation and enabling access to secure areas of the website. The website cannot function properly without these cookies.

The setting of technically necessary cookies takes place on the basis of § 25 (2) No. 2 TTDSG.

You can revoke or object to the setting of cookies by our website at any time. In addition, you can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. As a user, you therefore have full control over the use of cookies. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programmes. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser used, it may not be possible to use all the functions of our website to their full extent.

9. App-Tracking

9.1 Firebase Analytics

We use Google Analytics for Firebase or Firebase Analytics. This is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use the service to enable the analysis of your user interactions in the respective Apps and to improve our offer through the statistics and reports obtained and to make it more interesting for you as a user.

The application uses identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS) and cookie-like technologies to run the Firebase Analytics service. The following data will be transferred to Google in the USA and processed there: Number of users and sessions, session duration, operating system used, IP address, device model, region, first start, App executions, App updates, in-app purchases, the unique device identifier for advertising (Google Advertising ID or IDFA, for example) and the App instance ID.

We process the data based on your consent (Art. 6 (1)(a) GDPR). The withdrawal of your consent is possible at any time without affecting the permissibility of the processing until the withdrawal. In Apps, you can reset the advertising ID under the Android or iOS settings.

For more information on how Google processes your data, please refer to Google's privacy policy: https://policies.google.com/privacy

9.2 Firebase Crashlytics

We use Firebase Crashlytics. This is a service provided by Google Inc. ((1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use the Firebase Crashlytics service to improve the stability and reliability of our Apps.

In the event of a crash of the respective App, the following data will be transferred to Google in the USA and processed there: Timestamp, state of the App at the time of the crash, installation UUID, crash trace, manufacturer and operating system and last log messages.

The data processing is based on your consent (Art. 6 (1)(a) GDPR). The withdrawal of your consent is possible at any time without affecting the permissibility of the processing until the withdrawal.

For more information on how Google processes your data, please refer to Google's privacy policy.: https://policies.google.com/privacy

10. Job applications

If you send us an unsolicited application or apply for a job with us, we collect the following personal data: Name, address, e-mail address, telephone number, curriculum vitae, academic records and references, references, cover letter and references as well as other information that you provide voluntarily as part of your application (e.g. information on hobbies). If necessary, suitable applications will be forwarded internally to the department heads in the company for the respective open position. In principle, only those persons in the company have access to your data who need this for the proper conduct of the application process. If you are invited to an interview, we will collect further data about you, such as interview notes on the content of the interview. We process your data for the purpose of assessing your application and your personal suitability for the job for which you have applied.

We process the data for the purpose of deciding whether to establish an employment relationship.

If your application is successful, the data will be transferred from the applicant data system to our personnel information system. We store your data for as long as is necessary to establish, implement or terminate the employment relationship.

In the event of an unsuccessful application procedure, we will generally store your data for a maximum of six months after completion of the application procedure. This storage is based on our legitimate interest (Art. 6 (1)(f) GDPR). Our legitimate interest lies in the assertion or defence of claims.

11. Your rights

The following data protection rights are available to you:

Right of access (Art. 15 GDPR): You can obtain confirmation as to whether or not we are processing your data and, if so, full information about the data concerning you and the circumstances of the processing.
Right to rectification (Art. 16 GDPR): You can request that incorrect or incomplete data stored by us be corrected or completed.
Right to erasure (Art. 17 GDPR): In principle, you can request the deletion of your data if it is no longer necessary for legal reasons or may no longer be processed.
Right to restriction of processing (Art. 18 GDPR): In principle, you can obtain the restriction of the processing of your data, e.g. if your data cannot yet be deleted due to conflicting retention obligations.
Notification obligation (Art. 19 GDPR): We are obliged to inform all recipients to whom your data has been disclosed about a correction or deletion of your data or a restriction of processing. This only does not apply if the information is impossible for us or involves a disproportionate effort.
Right to data portability (Art. 20 GDPR): You can receive the data concerning you from us in a common, machine-readable format or have it transferred to another controller.
Right to object (Art. 21 GDPR): If the processing of your data is based on the performance of a task carried out in the public interest or in the exercise of official authority vested in us (Article 6(1)(e) GDPR) or on the basis of legitimate interests pursued by us or a third party (Article 6(1)(f) GDPR), you may object to such processing.
Right not to be subject to automated decision-making (Art. 22 GDPR): You have the right not to be subject to a decision based solely on automated processing - including profiling - where it produces legal effects concerning you or similarly affects you.
Right of withdrawal (Art. 7 GDPR): If the processing of your data is based on your consent (Article 6(1)(a) GDPR or Article 9(2)(a) GDPR), you may withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
Right to complain to a supervisory authority (Art. 77 GDPR): Finally, you have the right to complain to a supervisory authority about our collection and use of your personal data. For more information, please contact a competent data protection authority. The contact details of the data protection authorities in the European Economic Area, Switzerland and certain non-European countries (including the USA and Canada) can be found here. An overview of the competent data protection authorities in Germany can be found here.

12. Transfer of your data to third parties

We transfer your data to the following categories of recipients:

to our service providers who process certain data on our behalf,
to a competent law enforcement agency, regulatory authority, governmental authority, court or other third party if we believe disclosure is necessary: (i) under applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or the interests of another person; and
to other third parties, provided you have given your consent to do so.

13. International data transfer

If we transfer personal data to recipients in third countries (outside the EEA), this is done on the basis of corresponding adequacy decisions of the EU Commission (Art. 45 GDPR) or appropriate safeguards within the meaning of Art. 46 GDPR are provided for the protection of your data in accordance with the legal requirements (usually EU standard contractual clauses). Where necessary, additional security measures have been implemented to protect the data.

14. Deletion of your data

As a general rule, we will only retain the data we collect from you for as long as is necessary for the purposes for which the data was collected and/or if we have an ongoing legitimate business interest in doing so (e.g. to provide you with a service you have requested). However, in certain cases we may be required to retain data beyond this in order to comply with applicable legal requirements (e.g. statutory tax or accounting requirements). When the retention of your data is no longer necessary for the purpose for which it was processed, there is no continuing legitimate business interest for processing your personal data and there is no additional legal obligation to retain the data, we will either delete or anonymise it or, if this is not possible (e.g. because your personal data has been stored in backup archives), we will store your data securely and separate it from any further processing until deletion is possible.

15. Data security

We have implemented appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

16. Provision of the data

In cases where data processing is required to establish a contract (e.g. registration for a user account), the provision of your data is necessary for the conclusion of the contract. In this case, the contract cannot be concluded if the data is not provided.

17. No automated decision making

In the course of using our services, you will not be subject to any decision based solely on automated processing - including profiling - which produces legal effects vis-à-vis you or similarly significantly affects you.