Privacy Notice

This English translation is provided for convenience. The German version is authoritative.

Last updated: 18 October 2026

1. Controller

Niko Gerken
General agency of Württembergische Versicherung
Bahnhofstraße 14
27389 Lauenbrück
Germany
Telephone: +49 4267 94141
Email: niko.gerken@wuerttembergische.de

2. Accessing the website and hosting

When this website is accessed, technically necessary data is processed. This may include the IP address, date and time of access, page requested, referrer URL, browser and operating system information, as well as status and error data. Processing is necessary to deliver the website, ensure its stability and security and prevent misuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of the website.

The website is provided through OpenAI Sites. Cloudflare is used for technical delivery and security functions, among other services. Connection and log data may be processed by these technical service providers. Where these providers process data outside the European Union or European Economic Area, transfer takes place only in accordance with Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards.

3. Technically necessary cookies

Only technically necessary cookies or comparable storage technologies may be used in the operation of this website, in particular for security and bot-protection functions. They are not used for audience measurement or personalised advertising. Processing is based on section 25(2), no. 2 of the German Telecommunications-Digital Services Data Protection Act (TDDDG) and Article 6(1)(f) GDPR. Analytics or marketing services requiring consent are not currently integrated into this website.

4. Contact by telephone and email

If you contact us by telephone or email, we process the information you provide in order to deal with your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR where the communication concerns the initiation or performance of a contract; otherwise Article 6(1)(f) GDPR applies. The legitimate interest lies in responding to your enquiry and communicating with you.

Emails are sent through your own email provider. Unencrypted emails may be read by third parties during transmission. Please do not send particularly confidential documents or health data by this route unless a suitable secure method of transmission has been agreed.

4a. Callback request for an insurance review

The switching review currently uses direct email and WhatsApp links with a prepared message. The previous callback form is no longer displayed. The following information applies to existing enquiries from that form. The form collected your name/company, phone number, vehicle/model, estimated vehicle value, preferred switching date and your explicit callback request. Where present in the page URL, the source category (Google search advert, Meta advert or website) is saved with the enquiry. No analytics cookies or advertising pixels are used for this purpose. Details are transmitted over an encrypted connection and stored in the agency’s protected enquiry inbox on the existing hosting infrastructure. Only the authorised agency account may retrieve enquiries. The purpose is to handle the requested insurance review and callback under Article 6(1)(b) GDPR. This does not constitute consent to general advertising. Enquiries are removed from this inbox on the next retrieval or submission after 90 days; any necessary advisory or contractual records are retained separately as required. The form does not request policy documents or health data.

5. Contact through WhatsApp

The WhatsApp buttons open the service only after you click them. The provider for users in the European Region is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Data is transmitted to WhatsApp when the link is opened. The nature and scope of further processing are governed by WhatsApp's privacy notice. Use of WhatsApp is voluntary; you may alternatively contact us by telephone or email.

If you write to us through WhatsApp, we process your telephone number, profile and communication data in order to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Article 6(1)(f) GDPR. Further information is available in WhatsApp's privacy policy.

6. External links and social networks

The website contains simple links to external services, including Württembergische, Google Maps and Google business profiles, Instagram, Facebook, YouTube and the 400+ Owners Club website. No content from these providers is embedded directly into the website. Data is transmitted to the relevant provider only when you open such a link. From that point, the provider's privacy policy applies. Processing in third countries, in particular the United States, cannot be ruled out for some providers.

7. Recipients and processors

Personal data is received only by parties that require it for the stated purposes. These may include hosting, IT, communication and security service providers. Data is disclosed to other recipients only where necessary to deal with your enquiry or perform a contract, where a legal obligation applies or where you have given consent.

8. Retention period

Personal data is stored only for as long as necessary for the relevant purpose. It is then deleted unless statutory retention obligations or legitimate reasons require further storage. Communication data relating to enquiries is generally deleted after processing is complete; where this results in contractual or advisory documentation, the applicable statutory retention periods apply. Technical log data is deleted or anonymised as soon as it is no longer needed for operation and security.

9. Your rights

Subject to the statutory requirements, you have in particular the right to:

• access your processed personal data (Article 15 GDPR),
• rectification of inaccurate data (Article 16 GDPR),
• erasure (Article 17 GDPR),
• restriction of processing (Article 18 GDPR),
• data portability (Article 20 GDPR),
• object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR), and
• withdraw consent with effect for the future (Article 7(3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. In particular, the authority in the German federal state in which the controller is established is competent.

10. No automated decision-making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place through this website.

11. Updates to this notice

This privacy notice will be updated if the website, the services used or the legal requirements change.