This English translation is provided for your convenience. The German version is legally binding.
1. Controller
Autopartz LTD, 128 City Road, London, EC1V 2NX, United Kingdom
Represented by its director: Muhammad Abid Javed
Email: info@navisdkarten.de · Phone: +44 7491 931676
2. General
We only process personal data to the extent necessary to provide this website, to process your orders or on the basis of your consent. The legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligations, e.g. retention duties) and (f) (legitimate interests). Access to your device is additionally governed by § 25 of the German TDDDG. The United Kingdom, where we are based, is covered by an adequacy decision of the European Commission.
3. Hosting and server log files
This website is hosted by Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus) on servers in Frankfurt am Main. When you visit the website, the server automatically processes the IP address, date and time, page visited, referrer URL, browser and operating system. This is necessary for secure and stable operation (Art. 6(1)(f) GDPR). Log files are deleted as soon as they are no longer needed for these purposes. Our cooperation with the host is based on a data processing agreement under Art. 28 GDPR.
4. Orders and customer account
For your order we process your name, address, email address, phone number (if provided), the products ordered and payment information (Art. 6(1)(b) GDPR). For delivery we pass your name and address to the shipping company. If you create a customer account, we store your data until the account is deleted. We keep order and invoice data for up to 10 years because of commercial and tax law obligations (Art. 6(1)(c) GDPR). For map updates with activation code we additionally process your vehicle identification number (VIN), because the code is created only for that vehicle. We pass the VIN to the provider who creates the code and do not use it for any other purpose (Art. 6(1)(b) GDPR). We store your consent to the immediate start of delivery with date and time in your order so that we can prove it, and keep it as long as the order data (Art. 6(1)(c) and (f) GDPR).
5. Payment processing via Stripe
All payments (credit and debit card, Klarna, Amazon Pay, Apple Pay, Google Pay, EPS) are processed by the payment service provider Stripe (Stripe Payments Europe Ltd., Dublin, Ireland, or Stripe Payments UK Ltd., London, United Kingdom). For this we transmit the order amount, name, email address and billing address to Stripe. You enter your card and account details directly with Stripe or the respective payment service; we do not receive them. Stripe sets technically necessary cookies to prevent fraud. Legal basis: Art. 6(1)(b) and (f) GDPR. Depending on the payment method, Klarna Bank AB (Stockholm), Amazon Payments Europe S.C.A. (Luxembourg), Apple Distribution International Ltd. (Cork) or Google Ireland Ltd. (Dublin) also process your data under their own privacy policies. Klarna may carry out a credit check for invoice and instalment purchases. Stripe privacy policy: https://stripe.com/privacy
For card payments (including Apple Pay and Google Pay), Stripe keeps your card for up to 2 hours so that you can optionally add express shipping with one click after your order; it is then deleted automatically. Nothing further is charged without your express confirmation (Art. 6(1)(b) GDPR).
6. Contact by email, contact form and WhatsApp
If you contact us by email, via the contact form or by WhatsApp, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed and no retention obligations apply. If you use WhatsApp, WhatsApp Ireland Ltd. also processes your data; a transfer to the USA may occur. If you do not want this, please use email or phone.
To protect the contact form against spam, we use Google reCAPTCHA (Google Ireland Limited). reCAPTCHA analyses your behaviour on the page and technical data (including IP address and browser information) and transmits them to Google; a transfer to the USA is possible. The legal basis is our legitimate interest in protection against misuse (Art. 6(1)(f) GDPR).
7. Cookies and consent management (CookieYes)
We use the consent tool CookieYes (plugin operated locally on our server). It stores your choice in the cookie “cookieyes-consent” (lifetime 1 year). We set technically necessary cookies (shopping cart, session, payment processing, your cookie choice) without consent (§ 25(2) TDDDG, Art. 6(1)(b) and (f) GDPR). All other cookies and services are only loaded with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie icon at the bottom left of the website.
8. Google Ads (conversion tracking and remarketing)
If you consent to the “Advertising” category, we load the Google tag of Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It lets us measure whether an order came from a Google ad (conversion tracking) and show you ads for our products on other websites (remarketing). Cookies are set and data such as IP address, pages visited, order value and order number are transmitted to Google; a transfer to the USA is possible. Google is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG.
We use Google Consent Mode in advanced mode: without your consent, the Google tag is loaded but sets no cookies and sends only limited signals without a cookie identifier (e.g. that an order took place), from which Google estimates advertising success statistically; no remarketing takes place. Legal basis for this: Art. 6(1)(f) GDPR (legitimate interest in measuring the success of our advertising). Google privacy policy: https://policies.google.com/privacy
9. Google Merchant Center
We transmit our product data (no personal data) to Google Merchant Center so that our products can appear in Google Shopping.
10. Sending emails
We send order confirmations and service emails via an email service provider that processes your email address and the content of the message solely on our behalf. Legal basis: Art. 6(1)(b) GDPR.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the authority where you live. For all requests, contact info@navisdkarten.de.
12. Data security
This website uses SSL/TLS encryption, recognisable by “https://” in the address bar.
Last updated: October 2026