1. Information on the processing of personal data

The protection and confidentiality of your data is particularly important to us, Repair Rebels GmbH, c/o TechHub.K67, Kasernenstrasse 67, 40213 Düsseldorf, Germany (hereinafter referred to as "Repair Rebels" or "we"). The collection and use of your personal data is carried out exclusively within the framework of the legal provisions of the applicable data protection law. With this data protection declaration, we inform you, which personal data we collect during your use of the website www.repair-rebels.com and authorised Repair Rebels partner portals, including co-branding subdomains (hereinafter collectively referred to as "website") and for what purpose the data is used.
You can use our website as a browser-based online service. In the following, we provide information on the type, scope and purpose of the processing of personal data when using our website, including all sub-pages. You can access this information at any time on our website via the "Privacy Policy" link in the footer. Personal data is all data that can be related to you personally, for example name, e-mail address, year of birth, usage data. Usage data is data, that is required to use our website, such as information about the beginning, end and extent of the use of our website, login data and payment data.
The responsible party pursuant to Art. 4 (7) EU General Data Protection Regulation (DS-GVO) is:

Repair Rebels GmbH, c/o TechHub.K67, Kasernenstrasse 67, 40213 Düsseldorf, Germany.

E-mail: datenschutz@repair-rebels.com
Repair Rebels is not legally required to appoint a Data Protection Officer under Art. 37 GDPR. Data protection enquiries should go to datenschutz@repair-rebels.com.
When you contact us by post, by e-mail, via the website using our contact form, your e-mail address and, if provided by you, your name, telephone number and other data provided by you will be stored by us in order to answer your questions. If you contact us via WhatsApp, we store your telephone number and other data provided by you to contact you and answer your questions. We delete the data accruing in this context after the storage is no longer necessary or - in the case of statutory retention obligations - restrict the processing.
Occasionally, we rely on contractually affiliated third-party companies and external service providers for the provision of services, for example in the areas of contract performance by our craftsmen, logistic services, IT services as well as customer service and the sending of advertising measures (only if you have explicitly consented to this in advance). In such cases, information is passed on to these companies or individuals in order to enable them to carry out further processing. These external service providers are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us. The service providers are also contractually obliged by us to keep your data secret and to treat your data exclusively in accordance with this data protection declaration and the German data protection laws. This also applies accordingly if, in exceptional cases, we transfer your data to third countries outside the European Union. In these cases, we ensure that your data is protected in accordance with EU data protection and safeguard this through the EU standard contractual clauses, unless the countries offer an adequate level of data protection in accordance with the adequacy decisions of the European Commission (including under the EU-US Data Privacy Framework).

2. Your rights

You have the following rights with respect to us regarding personal data relating to you:

right to information,
right to rectification or deletion,
right to restriction of processing,
right to object to processing,
right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data in our company. The address of the data protection supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia, P.O. Box 200444, 40102 Düsseldorf, Germany, e-mail: poststelle@ldi.nrw.de.

We will respond to data subject requests within one month of receipt in accordance with Art. 12(3) DS-GVO.

3. Processing of personal data when using our website

We collect the following information for the use of the website:

e-mail address
first name, last name
your address
time of start and end of use
scope of use

In order to use the website, we collect the following information when you create an account with us and log in to us via your account:

e-mail address
first name
surname
your address
telephone Number
time of start and end of use
extent of use
password
customer number

The processing of the aforementioned data is carried out

to be able to identify you as a user of Repair Rebels
to correspond with you
to issue invoices
to process and execute payments and orders
to process any liability claims and to assert any claims against you.

The data processing is carried out for the aforementioned purposes, for the implementation of pre-contractual measures as well as the fulfilment of the contract with you (legal basis is Art. 6 para. 1 p. 1 lit. b DS-GVO). In addition, our legitimate interests lie in achieving the aforementioned purposes (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO).

You can use our website browser-based directly on your PC, tablet or smartphone.
When you visit or use the website, including all subpages, we collect the personal data described below to enable you to use the functions conveniently. If you wish to use our website, we collect the following data, which is technically necessary for us to offer you the functions of our website and to ensure the stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

IP address
date and time of the request
time zone difference to Greenwich Mean Time (GMT)
content of the request (specific page)
access status/HTTP status code
amount of data transferred in each case
website from which the request came
browser
operating system and its interface
language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our platform. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (here: us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website as a whole more user-friendly and effective.

a) Use of cookies:

This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies (for this purpose b)

Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

e) Furthermore, we use HTML5 storage objects that are stored on your terminal device. These objects store the required data independently of the browser you are using and have no automatic expiry date. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually. In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored in the device memory of your end device and assigned to the website you are using. Cookies enable the party setting the cookie (in this case: us) to obtain certain information. Cookies cannot execute programs or transmit viruses to your mobile device. They serve to make the website as a whole more user-friendly and effective.

f) Consent Management Platform (CookiePro/OneTrust): We use the CookiePro consent management platform provided by OneTrust LLC to manage your cookie preferences and to obtain, document and manage your consent for the use of non-essential cookies and similar technologies in accordance with § 25 TDDDG. When you visit our website, CookiePro sets a technically necessary cookie to store your consent choices. You may change your cookie preferences at any time via the cookie settings accessible from the footer of our website. The legal basis for the use of the CookiePro cookie itself is Art. 6 para. 1 p. 1 lit. f DS-GVO (legitimate interest in lawful consent management). Further information: www.cookiepro.com/privacy.
Unless expressly stated otherwise within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes and it is required in accordance with Art. 18 DS-GVO, its processing will be restricted.

4. Disclosure of data

In principle, your personal data will only be passed on without your express prior consent in the following cases:

If it serves to clarify an illegal website use or is necessary for legal prosecution, personal data will be forwarded to the law enforcement authorities and, if applicable, to injured third parties. However, this only happens if there are concrete indications of illegal or abusive behavior.
A transfer may also take place if this serves to enforce terms of use or other agreements.
Repair Rebels is also legally obliged to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offences subject to fines and the tax authorities.

5. Use of our webshop

If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory data required for the processing of contracts are marked separately, other data are voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO.
You can voluntarily create an account with us so that we can store your data for future purchases. If you create a new customer account with us under "Profile", the data you have provided will be stored revocably. You can delete the data in your account and the account at any time.
We may also process the data you have provided in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information.
We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years.

6. Objection or revocation of the processing of your data

If you have given your consent to the processing of your data, you may revoke this consent at any time. Such revocation will affect the permissibility of processing your personal data after you have expressed it to us.
Where we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the fulfilment of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data at any time. You can inform us of your objection using the following contact details:

By post: Repair Rebels GmbH, c/o TechHub.K67, Kasernenstrasse 67, 40213 Düsseldorf, Germany.
By e-mail: datenschutz@repair-rebels.com

7. Payment service provider

As part of your order, you have the option to pay for our repair service via PayPal or Stripe. If you choose to pay via PayPal or Stripe, PayPal or Stripe will collect the data necessary for the payment process from you. This includes your name and email address. You can also find more information on data collection in the privacy policy of Paypal and Stripe:

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg. For more information, see PayPal's privacy policy at: https://www.paypal.com/de/legalhub/paypal/privacy-full. PayPal is currently not certified under the EU-US Data Privacy Framework (DPF). Personal data may be transferred to the parent company PayPal, Inc. in the USA. The data transfer to the USA is based on the EU standard contractual clauses of the European Commission.
Stripe Technology Company, Limited (STC), One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland. You can find the provider's data protection declaration and further information on data processing at: https://stripe.com/privacy. Stripe is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023). In addition, Stripe has submitted to the EU standard contractual clauses.
The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO, as the transfer is made for the purpose of fulfilling the contractual obligation.

8. WhatsApp

With your express consent via opt-in, you can communicate with us via WhatsApp through our website. We use WhatsApp to be able to communicate with you quickly and to answer your questions quickly.
WhatsApp is a software that allows us to communicate directly with you and answer your questions. When you communicate with us via WhatsApp, we may process your personal data.
When communicating with WhatsApp, your telephone number and, if provided by you, your e-mail address, your name and other data provided by you will be stored and processed by us. The legal basis for this is your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a DS-GVO.
The service provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
WhatsApp also transfers your data to third countries. In doing so, WhatsApp ensures that the third countries are those that offer an adequate level of data protection according to the adequacy decisions of the European Commission (including under the EU-US Data Privacy Framework). Alternatively, WhatsApp has submitted to the EU standard contractual clauses.
Information on the data protection of the service provider can be found at: https://www.whatsapp.com/legal/privacy-policy-eea

9. Use of Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023). In addition, Google has submitted to the EU standard contractual clauses.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. You may also withdraw your consent at any time via the cookie settings accessible from the footer of our website.
Google Analytics stores user-level and event-level data for a period of 14 months. After expiry of this retention period, the data is automatically deleted on a monthly basis. This retention period also applies to data associated with cookies, user identifiers and advertising identifiers. Aggregated data in standard reports is not affected by this retention period.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. We use Google Analytics only with your prior consent. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. a DS-GVO (consent) in conjunction with § 25 para. 1 TDDDG.
Information from the third-party provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data privacy declaration: https://policies.google.com/privacy.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your use in your customer account under settings.

10. Use of links to social media websites

Our website currently contains a link to the following social media websites: Instagram, Facebook, TikTok and Linkedin. When you visit our site, in principle no personal data is passed on to the operator of the social media website. You can recognize the link to the social media website by the mark on the box above its initial letter or logo. We open up the possibility for you to go directly to our corresponding social media website via this link. We recommend that you log out regularly after using a social network, but especially before activating the link, as this will help you to avoid an assignment to your profile with the social media website.
If you visit one of the linked social media websites, we have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the collected data by the social media provider.
Linkedin also transfers and processes your data in the USA. LinkedIn is certified under the EU-US Data Privacy Framework. In addition, Linkedin has subjected itself to the EU standard contractual clauses. For further information on the purpose and scope of data collection and its processing by the social media provider, please refer to the privacy policy of this provider, which is communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy. The address of the social media provider is as follows: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The data protection declaration and further information on the processing of your data in the USA can be found at de.linkedin.com/legal/privacy-policy and at www.linkedin.com/help/linkedin/answer/62533.
The address of the social media provider is as follows: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. TikTok uses your data to operate, provide, develop and improve its services. TikTok also transfers your data to third countries. In doing so, TikTok ensures that the third countries are those that provide an adequate level of data protection in accordance with the adequacy decisions of the European Commission. Alternatively, TikTok has submitted to the EU standard contractual clauses. The data protection declaration as well as further information on the processing of your data can be found at www.tiktok.com/legal/privacy-policy-eea?lang=de#share-info.
Facebook's provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland https://www.facebook.com/privacy/policy/; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other#applications and www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook and Instagram also transfer your data to third countries. Meta is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023). In addition, they have submitted to the EU standard contractual clauses.
Instagram is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The privacy policy is available at https://privacycenter.instagram.com/policy/.

Meta is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023). In addition, they have submitted to the EU standard contractual clauses.

11. Facebook Pixel

We use Facebook Pixel in advanced data matching on our website. This is a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Facebook Pixel enables us to analyze and evaluate user behavior after a click on our adverts that we place on Facebook. With the help of this continuous analysis, we can better tailor our advertisements to the interests of our users. We only use Facebook Pixel with your express consent. The legal basis for the use of Facebook Pixel is Art. 6 para. 1 p. 1 lit. a DS-GVO.
Meta is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023). In addition, Meta has submitted to the EU standard contractual clauses. You can find further information on the service provider's data protection at: https://www.facebook.com/privacy/policy/; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other#applications and www.facebook.com/about/privacy/your-info#everyoneinfo.

12. Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current, interesting offers.
We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within seven days, your information will be blocked and automatically deleted. In addition, we store your IP addresses used, times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
Only your e-mail address is required for sending the newsletter. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail. As soon as you revoke your consent or unsubscribe from the newsletter, your personal data will be deleted.

13. Use of Intuit Mailchimp for sending newsletters

The newsletter is sent using "Intuit Mailchimp", a newsletter sending platform of the Intuit Ireland Software Limited, 112-114 St Stephen’s Green, Suite 416, Dublin 2, D02 TD28 Ireland.
The email addresses of the newsletter recipients as well as the other data provided by the data subjects in the context of the newsletter dispatch are stored on the servers of Intuit Mailchimp in the USA. Intuit Mailchimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, Intuit Mailchimp may use this data to optimize or improve its own services, for example for the technical optimization of the dispatch and the presentation of the newsletters or for economic purposes to determine from which countries the recipients come. However, Intuit Mailchimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
Intuit Mailchimp is certified under the EU-US Data Privacy Framework. In addition, Intuit Mailchimp has submitted to the EU standard contractual clauses. The data protection provisions of Intuit Mailchimp can be found at: mailchimp.com/legal/privacy.
The newsletters contain a so-called "web beacon". This is a pixel-sized file that is retrieved from the Intuit Mailchimp server when the newsletter is opened. Within the scope of this retrieval, information on the browser and the system as well as the IP address and the location or time of the retrieval are collected. This information is used for the technical improvement of the services.
Statistical surveys also include determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. The evaluations serve to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

14. Amazon Web Services

We use Amazon Web Services (AWS), operated by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, to host and process data. Our data is stored exclusively in the AWS data center located in Frankfurt am Main, Germany (EU Region eu-central-1). This ensures that all personal data remains within the European Union and is subject to the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR).
The processing is carried out on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in a secure, reliable, and scalable infrastructure for the operation of our services. The relationship with AWS is governed by the AWS GDPR Data Processing Addendum (https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf), which regulates the processing of personal data in accordance with Art. 28 GDPR and obligates AWS to maintain appropriate technical and organizational measures to protect the data. Further information on AWS's data protection practices can be found at https://aws.amazon.com/privacy/.

15. Use of Hotjar

We use Hotjar web analytics software provided by Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta to help us better understand the needs of our users and to optimize what we offer on this website. Hotjar's technology gives us a better understanding of our users' experiences (for example how much time users spend on which pages, which links they click on, what they like and dislike etc.) and this helps us to tailor our offering to our users' feedback.
Hotjar uses cookies and other technologies to collect information about our users' behavior and their devices (in particular, device IP address (collected and stored anonymously only), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for viewing our website).
Hotjar stores this information in a pseudonymized user profile. The information is neither used by Hotjar nor by us to identify individual users nor is it combined with other data about individual users. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. Further information can be found in the data protection declaration: www.hotjar.com/legal/policies/privacy
You can object to the storage of a user profile and information about your visit to our website by Hotjar as well as the setting of Hotjar tracking cookies on other websites via this link: www.hotjar.com/legal/compliance/opt-out

16. B2B Partner Portals

If you access our services through an authorised Repair Rebels partner portal, we additionally process the following data:

Voucher code usage data: Linking the redeemed voucher code with your order for the purpose of fulfilling the partner agreement.

The processing of voucher usage data is based on Art. 6 para. 1 p. 1 lit. b DS-GVO (performance of a contract).

The respective B2B partner and Repair Rebels GmbH may act as joint controllers for the data processed in connection with the partner portal. Details are governed by the respective joint controller agreement pursuant to Art. 26 DS-GVO.

Status: March 2026

Privacy Policy