Under Regulation (EU) 2016/679 (GDPR), Art. 13–14, this policy describes how we handle the personal data you provide on the website www.caradvance.cz, as well as by phone, e-mail and WhatsApp.
1. Controller and commercial agent in the Czech Republic
Controller
- Name
- Caradvance GmbH
- Registered office
- Bgm-Graf-Ring 21, 82538 Geretsried, Germany
- Commercial register
- Amtsgericht München, HRB 151009
- Managing directors
- Peter van den Berg, Dr. Alexander Röther
- Contact
- info@caradvance.de · +49 89 1894141-0
Caradvance GmbH is the seller and lessor of the cars offered on the website, and the controller of the data relating to requests for offers, contracts and vehicle transactions.
Commercial agent in the Czech Republic
- Name
- Mr. Job SK s.r.o.
- Registered office
- Cesta na Senec 2/A, 821 04 Bratislava – Ružinov
- Contact point
- Cesta na Senec 2/A, 821 04 Bratislava – Ružinov
- Company registration number, tax number
- IČO 52 005 445 · DIČ SK2120860148
- Contact
- info@caradvance.cz · +421 915 410 555
On behalf of Caradvance GmbH, Mr. Job SK s.r.o. manages the website, receives requests for offers and keeps in contact with customers on the instructions of Caradvance GmbH as a processor. Data needed for its own services — administration, help with registration and putting into service, and its own invoicing — it processes as an independent controller.
For data protection matters or to exercise your rights you can use any of the contacts above — we reply in Czech, Slovak, English or German at info@caradvance.cz. If necessary, we will forward your request to the competent company.
2. Principles and applicable legislation
We only ask for as much data as is necessary to fulfil your request, and we only keep it for as long as we have a lawful reason to do so. The processing is governed in particular by the following legislation:
- General Data Protection Regulation (EU) 2016/679 (GDPR);
- the German Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG) — regarding cookies; in the Czech Republic § 89(3) of Act No. 127/2005 Coll.;
- Act No. 18/2018 Coll. on the protection of personal data, Act No. 40/1964 Coll. Civil Code and Act No. 431/2002 Coll. on accounting — as regards data processing by Mr. Job SK s.r.o.
3. What data we process, for what purpose and for how long
| Purpose | Controller | Data processed | Legal basis | Retention |
|---|---|---|---|---|
| Offer requests, contact (rental, cars for sale, custom orders, import, car search, financing) | Caradvance GmbH (Mr. Job SK s.r.o. as intermediary) | name, e-mail, phone number, the car and configuration searched for/selected, term, mileage allowance, budget, comments; for business customers: company name, tax number, EU VAT number, registered office, contact person | GDPR Article 6(1)(b) — steps taken at your request prior to entering into a contract | 1 years from the last contact if no contract is concluded |
| Conclusion and performance of the contract (rental, purchase) | Caradvance GmbH | identification and address data, driving licence and document data, billing data, vehicle data, deposit and payment data | GDPR Article 6(1)(b); for the enforcement of claims, Article 6(1)(f) | 3 years from the termination of the contract (Section 195 BGB), or, in the event of a claim being enforced, until it is concluded |
| Administration, help with registration and putting into service | Mr. Job SK s.r.o. | name, address, document data, vehicle data and documents, data required for official procedures | GDPR Article 6(1)(b) and (c) — official procedures | until the limitation period expires (3 years under § 101 of the Civil Code, 4 years under § 397 of the Commercial Code) |
| Invoicing, accounting | the company issuing the invoice | data shown on the invoice | GDPR Art. 6(1)(c) — Caradvance GmbH: HGB § 257, AO § 147; Mr. Job SK s.r.o.: Act No. 431/2002 Coll. on accounting, § 35 | 8–10 years, in accordance with the applicable regulations |
| Contact by phone, e-mail and WhatsApp | Caradvance GmbH (Mr. Job SK s.r.o. as intermediary) | name, phone number, e-mail, content of messages | GDPR Article 6(1)(b) and (f) — responding to enquiries | 1 year from the closure of the matter |
| Chat assistant on the website | Caradvance GmbH (Mr. Job SK s.r.o. as intermediary) | messages entered; if you send an enquiry: name, e-mail, phone | GDPR Article 6(1)(b) and (f) | up to 1 years |
| Website operation, security | Caradvance GmbH (Mr. Job SK s.r.o. as intermediary) | IP address, browser type, time, technical logs | GDPR Article 6(1)(f) — secure operation, prevention of abuse | up to 30 days |
| Statistics and ad measurement (cookies) | Caradvance GmbH (Mr. Job SK s.r.o. as intermediary) | cookie identifiers, pages visited, device data, campaign identifiers; with consent, encrypted (hashed) e-mail address and phone number sent to Meta | GDPR Article 6(1)(a) — consent; Section 25 TDDDG | as set out in the cookie table, or until consent is withdrawn |
Providing your data is voluntary, but without it we cannot make you an offer or conclude a contract. We do not knowingly process the data of persons under 16 years of age; we only conclude contracts with adults.
4. Forms and offer requests
Data sent via the forms on the website (rental, custom car order, car search, car sale, chat enquiry) is received by Mr. Job SK s.r.o. via a secure connection, passed on to colleagues by internal e-mail, recorded in the customer register and shared with Caradvance GmbH to prepare the offer. After you submit the form, we send you a confirmation by e-mail.
By ticking the checkbox at the bottom of the forms, you confirm that you have read this notice and the General Terms and Conditions. An offer request is non-binding and does not constitute the conclusion of a contract.
5. Cookies
A cookie is a small data file stored by your browser. Apart from cookies necessary for the site to function, we use statistics and marketing cookies only with your consent (Google Consent Mode v2: without consent, these services do not store cookies). You can change your decision at any time:
| Name | Service provider | Category | Purpose | Expiry |
|---|---|---|---|---|
| ca_consent_v1 (local storage) | CarAdvance | Necessary | remembering your cookie choice | 6 months |
| __cf_bm, cf_clearance | Cloudflare | Necessary | security, filtering out bots | 30 minutes – 1 year |
| _ga, _ga_* | Google Analytics 4 | Statistics | visitor statistics | 2 years |
| _gcl_au, _gcl_aw | Google Ads | Marketing | measuring ad conversions | 90 days |
| _fbp, _fbc | Meta (Facebook) Pixel | Marketing | ad measurement and targeting | 90 days |
When an embedded YouTube video is played, YouTube (Google) may set its own cookies; where possible, we use the cookie-free mode (youtube-nocookie.com). You can delete or block cookies at any time in your browser settings; for necessary cookies, this may limit certain functions of the site.
6. Processors and recipients
The following service providers process data on our behalf and according to our instructions (processors):
| Service provider | Task | Location |
|---|---|---|
| Mr. Job SK s.r.o. — Cesta na Senec 2/A, 821 04 Bratislava – Ružinov | operating the website, receiving offer requests, customer relations (on behalf of Caradvance GmbH) | Slovakia |
| Cloudflare, Inc. — 101 Townsend St., San Francisco, CA 94107, USA | hosting, form handling, running the chat assistant, security filtering | EU / USA |
| Google Ireland Ltd. — Gordon House, Barrow Street, Dublin 4, Ireland | e-mail and document management (Google Workspace), Google Analytics, Google Ads | EU / USA |
| Microsoft Ireland Operations Ltd. — One Microsoft Place, Leopardstown, Dublin 18, Ireland | e-mail (Outlook / Microsoft 365) | EU / USA |
| Notion Labs, Inc. — 2300 Harrison St., San Francisco, CA 94110, USA | customer database (lead management) | USA |
| Resend (resend.com) | sending notification and confirmation e-mails | USA |
| Meta Platforms Ireland Ltd. — Merrion Road, Dublin 4, D04 X2K5, Ireland | Meta Pixel and Conversions API (only with consent), WhatsApp messages | EU / USA |
| Provider of the language model used for the chat assistant | answering questions entered in the chat | EU / USA |
Recipients who receive data as independent controllers (only to the extent necessary): the financing or leasing company you choose, insurers, freight forwarders, and the authorities and service providers involved in registration (honosítás) and putting the vehicle on the road. We may also transfer data to authorities and courts where required by law. We do not sell your data and do not pass it on to third parties for marketing purposes.
7. Data transfers outside the EU
Some of our service providers (Cloudflare, Google, Microsoft, Notion, Resend, Meta) may also process data in the United States of America. Such transfers are based on the adequacy decision under the EU–US Data Privacy Framework or, in its absence, on the European Commission’s standard contractual clauses (GDPR Article 46).
8. Data security
We receive data over an encrypted (HTTPS) connection, restrict access to the staff who need it for their work, and require appropriate technical and organisational measures from our service providers as well. In the event of a personal data breach, we act in accordance with Articles 33–34 of the GDPR.
9. Your rights
- Access (Article 15): you may request information about what data we process about you and request a copy of it.
- Rectification (Article 16): you may request the correction of inaccurate data.
- Erasure (Article 17): you may request the erasure of your data if there is no other legal basis for processing it.
- Restriction (Article 18): you may request that we temporarily only store your data.
- Data portability (Article 20): you may request your data in a machine-readable format.
- Objection (Article 21): you may object to processing based on legitimate interest.
- Withdrawal of consent: you may withdraw your consent to cookies at any time in the ; this does not affect the lawfulness of processing carried out before the withdrawal.
You can send your request to info@caradvance.cz or info@caradvance.de. We will reply within one month at the latest (Art. 12 GDPR); in justified cases this period may be extended by a further two months, of which we will inform you.
10. Complaints and legal remedies
If you feel that your data has been processed unlawfully, please write to us first — we will try to resolve the issue quickly. You may lodge a complaint with the supervisory authority of your place of residence or of the controller’s registered office (GDPR Article 77):
- Czech Republic
- Office for Personal Data Protection — Pplk. Sochora 27, 170 00 Prague 7; +420 234 665 111; posta@uoou.gov.cz; uoou.gov.cz
- Germany (supervisory authority of Caradvance GmbH)
- Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) — Promenade 18, 91522 Ansbach; www.lda.bayern.de
- Slovakia (supervisory authority of Mr. Job SK s.r.o.)
- Office for Personal Data Protection of the Slovak Republic — Hraničná 12, 820 07 Bratislava; dataprotection.gov.sk
If your rights are infringed, you may also go to court; you may also bring proceedings before the court of your place of residence (GDPR Article 79).
11. Amendments to this notice
We update this notice whenever our services or the law change; the current version is always available on this page. Effective from 1 October 2026.