Privacy
Last updated: April 20, 2026
This Privacy Policy explains how Config and the operators of the platform ("Config", "we", "our", or "us") collect, use, store, disclose, and otherwise process personal data when you access or use the website, applications, feeds, profile features, submissions, moderation tools, or related services made available through the platform (collectively, the "Services").
This Policy is intended to be read together with our Terms. If local law grants you stronger rights than those described here, those rights apply to the extent required by law.
Config is the controller of personal data processed through the Services unless stated otherwise. Privacy inquiries, access requests, deletion requests not handled in product, and rights complaints may be sent to privacy@globalautos.de.
Contract, legal, and content-rights notices may be sent to legal@globalautos.de. You should ensure these inboxes are monitored before public launch.
Depending on how you use the Services, we may collect the following categories of data:
We collect personal data directly from you, automatically from your use of the Services, and from third parties such as:
We use personal data as reasonably necessary to operate, maintain, improve, secure, and commercialize the Services, including to:
Where permitted by law, we may also use aggregated, de-identified, or appropriately transformed datasets for analytics, benchmarking, research, product planning, abuse prevention, and business improvement.
If the GDPR or similar laws apply, we generally rely on one or more of the following legal bases:
When we rely on legitimate interests, those interests generally include service operations, platform reliability, moderation, fraud prevention, analytics, product development, commercial administration, and protection of our users and rights.
Profiles, handles, post titles, post content, imported configuration details, images, comments, votes, and other community interactions may be publicly visible or reasonably inferable from public areas of the Services. Search engines, third parties, and other users may copy, capture, reference, or archive public content.
You should not submit confidential information, personal data of others without a valid basis, or content you are not comfortable making public. We may preserve copies of removed content where necessary for legal, security, moderation, evidentiary, or backup reasons.
We may share personal data with:
Our infrastructure and feature providers may include companies such as authentication, database, storage, hosting, and observability vendors. The providers used at launch may include Clerk, Vercel, Neon, and related subprocessors selected by those vendors.
Your data may be processed in countries outside your country of residence, including outside the EEA/UK/Switzerland where our providers or infrastructure operate. Where required by law, we rely on appropriate safeguards for such transfers, which may include adequacy decisions, standard contractual clauses, or equivalent transfer mechanisms.
We retain personal data for as long as reasonably necessary for the purposes described in this Policy, including to operate accounts, preserve public posts, resolve disputes, enforce agreements, investigate abuse, maintain backups, comply with law, and protect the Services.
Depending on where you live, you may have the right to request access, correction, deletion, restriction, portability, objection, and withdrawal of consent, as well as the right to lodge a complaint with a supervisory authority.
Some requests can be completed directly through your account settings, including account deletion. We may ask you to verify your identity before acting on a request and may deny or limit requests where an exemption or overriding legal basis applies.
We and our providers may use cookies, local storage, session tokens, security identifiers, and similar technologies to authenticate users, keep sessions active, remember settings, measure usage, secure the Services, and improve product performance.
If additional analytics, advertising, or measurement technologies are introduced later, we may provide additional notice or choices where required by law.
We use administrative, technical, and organizational measures designed to protect personal data. No system is perfectly secure, and we do not guarantee that unauthorized access, loss, or misuse will never occur. You are responsible for maintaining the security of your device and account credentials.
The Services are not directed to children, and you may not use the Services if you are under the age required by applicable law to form a binding agreement in your jurisdiction. If we learn that we collected personal data from a child in violation of applicable law, we may delete the data and restrict the account.
We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the Services or by other reasonable means. The "Last updated" date indicates when this version became effective.