Data protection

Privacy statement

It is important to us that you are fully informed about the personal data that we collect when you use our online offers and services, and are familiar with how we use them.
Wherever DEKRA processes personal data, such processing is carried out for the purposes defined in this data privacy statement.
Processing of personal data

Responsible Authority

Handwerkstr. 15
70565 Stuttgart

Visiting our website

We record and save your computer's IP address in order to send the contents of our website visited by you to your computer (e.g. texts, pictures, and files provided for downloading, etc.) (cf. Art. 6 (1) lit. b GDPR). We also process these data to identify and pursue any misuse. Legal basis in this case is Art. 6 (1) lit. f GDPR. In this context, our legitimate interest in data processing is to ensure the due functioning of our website and the business transacted via the Website.

Other purposes

We also process personal data that you provide voluntarily. The data processed by us in this context include the data of customers, employees, and suppliers to the extent necessary for the purposes specified within the scope of this data privacy statement.
In as far as we process your data as described above for the purpose of accepting and processing your inquiry, appointment, or (newsletter) order, you are contractually bound to make these data available to us. We are unable to process your request without the data.
Where you have given your consent to the processing of personal data (cf. Art. 6 (1) lit. a GDPR), you can withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent up to the time of withdrawal of consent.

Contact via forms

As part of the contact with DERA (e.g. via forms or a-mail) personal data is collected. On our website we provide forms for various requests, such as contact with DEKRA, forms for commissioning, forms for bookings, forms for the creation of offers, forms for newsletter subscriptions and others (e.g. to order information material).
Which data is collected within each form, is evident in the respective form. This data is only saved and used for the purpose of answering your request as well as for the contact and therefore technical administration of the data. Legal basis for the processing of this data is our legitimate interest on the answering of your request according to Art. 6 para. 1 lit. f GDPR. If your contact aims the completion of a contract, Art. 6 para. 1 lit. b GDPR also applies for the processing of the data. Your data will be deleted after completion of processing of your request. The process is completed as soon as the matter concerned is finally clarified and if there are no legal retention requirements opposed.

Transfer to third parties

We generally transfer your data to the relevant DEKRA company where it is processed to deliver the service and support you requested.
This means that information may also be processed by other legal entities of the DEKRA Group. However, such processing is limited to the extent required for the purposes defined in this data privacy statement or to which the other legal entity acting as a service provider / processor has to follow the instructions given by the controller.
These service providers / processors are bound by instructions. Given this, they are subject to our requirements, which include processing of your data exclusively in line with our instructions and in compliance with the applicable Data Protection Act. In particular, they are contractually bound to treat your data with strict confidentiality, and are not permitted to process data for other purposes than the ones agreed.
Data transfer to the data processor is effected on the basis of Art. 28 (1) GDPR.
We will not sell your data to third parties or otherwise share them for commercial purposes.
Through the integration of external content (YouTube, Vimeo, Google, Facebook), data such as IP address, browser and Javascript content can be forwarded to the named third party providers when a page is loaded. If you do not want a third party provider to obtain information about you, do not consent to the processing of Marketing & Social Media cookies. As a result, you will not be able to use these functions on our website.
Beyond the above, we will transfer your personal data to prosecution authorities and, if applicable, damaged third parties without your explicit consent where this is necessary for clarifying illegal use of our services or for legal prosecution. However, such a transfer will only take place if there is concrete evidence of illegal conduct or misuse. Transfer of your data may also take place where this contributes to enforcing the conditions of use or other agreements. We are also under legal obligation to provide information to certain public bodies on request. These comprise prosecution authorities, authorities prosecuting offences punishable by a fine, and financial authorities.
The transfer of these data is based on our legitimate interest in fighting misuse, prosecuting criminal acts, and securing, asserting, and enforcing claims unless our interests are overridden by your rights and interests in the protection of your personal data, Art. 6 (1) lit. f GDPR.

Intended data transfer to third countries

At present, data transfer to third countries is not planned. Otherwise we will establish the required legal conditions. In particular, you will be informed of the respective recipients or categories of recipients of the personal data in line with the legal requirements.


DEKRA takes appropriate technical and organizational measures to protect any personal data you provide to DEKRA from accidental or intentional manipulation, loss, destruction, or access by unauthorized parties. This also applies to any external services purchased. We verify the effectiveness of our data protection measures and continuously improve them in line with technological development. Any personal data entered are encrypted during transfer using a secure encryption process.

Web Analysis Using Matomo

This website uses Matomo ( www​.matomo​.org ) for web analysis. This is a service offered by the provider InnoCraft Ltd., 150 Willis St., 6011 Wellington, New Zealand. Matomo uses small text files called “cookies”, which are saved on your computer and make the analysis of your use of the website possible. For this purpose, the usage information stored in the cookie (including the IP address in abbreviated form) is transmitted to our servers and saved for use analysis purposes.
Matomo does not transmit the data to any server which is outside our control. You can prevent the use of cookies by changing your browser settings accordingly. We would like to point out, however, that doing so may prevent you from enjoying the full functionality of this website.
The legal basis for the use of Matomo is point (f) of Art. 6 (1) of the GDPR. The data is then processed in order to analyze user behavior and to evaluate the use of the individual components of the website. The purpose is the constant optimization of the website and its user-friendliness. These purposes constitute the legitimate interest in the sense of point (f) of Art. 6 (1) of the GDPR. The user’s interest in protecting their personal data is safeguarded by the anonymization of the IP address. The data is not used at any point to personally identify the user and it is not merged with any other data.
The data is erased once it is no longer required for our purpose.
Right to object
If you do not agree to the saving and analysis of your data regarding your visit as described above, you have the right to object to it.
You can save an opt-out cookie by clicking below. This cookie is valid for two years. Please note that you will need to repeat the opt-out procedure again if you delete your cookies, delete the opt-out cookie, or if you change your computer or web browser. Save Matomo Opt-Out Cookie

Web Analysis Using Google Analytics

To the extent that you have given your consent, this website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”). This use includes the “Universal Analytics” operating mode. This mode enables connecting data, sessions, and interactions to a pseudonymized User ID across different devices, making it possible to analyze a user’s activities regardless of the device they use.
Google Analytics uses small text files called “cookies”, which are saved on your computer and make the analysis of your use of the website possible. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and saved there. If IP anonymization is active on this website, your IP address will first be anonymized by Google within the Member States of the European Union or another state party to the Agreement on the European Economic Area. Please note this website uses Google Analytics with the IP anonymization extension to ensure an anonymized recording of IP addresses (also called IP masking). The IP address transmitted by your browser in the context of Google Analytics is not merged with any other data of Google. More information on the terms of service and data protection is available at https://www​.google​.com/analytics/terms/us​.html and/or https://policies​.google​.com/?hl=en
The legal basis for the use of Google Analytics is your declaration of consent according to point (a) of Art. 6 (1) of the GDPR. Google, on behalf of the operator of this website, will use this information in order to analyze your use of the website, to compile reports on your activities on the website, and to provide further services relating to the website use and internet use for the website operator.
The data sent by us and the data connected to cookies, user recognition (e.g. User-ID), or advertising ID are erased automatically after 26 months.
Right to withdrawal
You have the right to withdraw your consent at any time with effect for the future. You can do this by changing your browser settings to prevent the saving of cookies. We would like to point out, however, that doing so may prevent you from enjoying the full functionality of this website.
You can also prevent the collection of the data generated by the cookie and relating to your use of the website (incl. your IP address) and its transmission to Google as well as the processing of this data by Google by downloading and installing the browser add-on .
Opt-out cookies also prevent the future collection of your data when you visit this website. To prevent the collection of data across various devices by Universal Analytics, you will need to opt out on all the devices you use. Click here to get the opt-out cookie: Save Google Analytics Opt-Out Cookie
In addition, you also have the possibility to determine which kinds of cookies you wish to accept or reject from our website by changing the Cookie Settings .


We use Hotjar Ltd's ("Hotjar") analytics software, Hotjar, to better understand our users' interests and tailor our online offerings accordingly. We use this analytics tool based on your consent (in accordance with Article 6(1)(1)(a) of the GDPR), which we requested from you when you visited our website.
Hotjar uses cookies and other technologies to collect information about our users' behaviour and their terminal devices (in particular, device IP address (collected and stored only in anonymised form), screen size, device type (unique device identifiers), information about the browser used, location (country only), language in which our online offerings are preferably viewed, mouse events (movement, position and clicks), key presses, but not specific text). Hotjar stores this information in a pseudonym in the user profile. This information is not used to identify individual users and is not combined with other information about individual users.
The service allows us to create so-called heat maps of the use of our website. These maps record scrolling, cursor movements and clicks/touches and use them to create a graphical representation of the use of our website by all users. Heavily used areas are displayed in a different colour to less used areas. This tool also allows you to create so-called visitor records. These streamable recordings immortalise user activity.
- HTML changes (our website and usage)
- Cursor and scrolling movement
- Browser screen changes (size)
It is also possible to make these recordings on multiple sites. The recording then starts on the first site where Hotjar is embedded. The texts you enter are not recorded by us. We will prevent these texts from being saved.
For certain technical data analysis and data processing and/or storage functions, Hotjar works with a limited number of trusted external service providers. These service providers are carefully selected by Hotjar and meet high standards of data protection and security. To the extent that these service providers process personal data in a third country, Hotjar will enter into standard EU contractual clauses on our behalf and, where necessary, agree additional contractual mechanisms with these service providers. Information will be shared with service providers only to the extent necessary to provide the services offered, and Hotjar is contractually obligated to keep confidential any information disclosed by Hotjar and to use personal information only in accordance with Hotjar's instructions. For more information, please see Hotjar's Privacy Policy here.
The cookies used by Hotjar have different "lifetimes"; some are valid for up to 365 days, and some are only valid for the duration of the current visit.
Right of withdrawal
You can withdraw your consent at any time, with future effect, by blocking the storage of cookies through the relevant settings in your browser software. However, we would like to point out that in this case you may not be able to fully use all the functions of the website. For more information, please visit

Google Ads conversion and remarketing

We use Google Ads Conversion to draw attention to personal offers with the help of advertising material (Google Ads) on external websites. Based on data from the advertising campaigns, we can determine how successful the individual advertisements are. We are interested in showing you advertisements that are relevant to you, to make our website more interesting for you and to be able to provide a more personalized experience.
These advertising media are provided by Google via so-called "ad servers". For this we use ad server cookies, which allow us to measure certain parameters for measuring success, such as the reach of advertisements or clicks by the user. If you visit our website via a Google ad, Google Ads stores a cookie on your device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The analysis values ​​for this cookie are usually the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marking that the user does not want this anymore addressed).
These cookies allow Google to recognize your internet browser. If a user visits Ads-affiliated websites and the cookie stored on their computer has not yet expired, Google and the advertiser can see that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads-affiliate. Therefore, cookies cannot be tracked through the websites of Ads-affiliates. We do not collect or process any personal data ourselves in the above process. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the ad formats used are particularly effective. We do not receive any further data about the use of the advertising material; in particular, we cannot identify the users based on this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool. By integrating Ads Conversion, Google receives the signal that you have opened or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your profile. Even if you are not registered with Google or are not logged in, it is possible that the provider will find out and store your IP address.
DEKRA uses the remarketing function within the Google Ads service. The remarketing function allows us to show users of our website advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube or on other websites). The interaction of the users on our website is analysed, for example which offers the user was interested in, in order to be able to show the users targeted advertisements on other pages even after visiting our website. For this purpose, Google stores cookies on the devices of users who visit certain Google services or websites in the Google Display Network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific device and not to identify an individual.
Type of cookie
The type of cookie used falls into the "Marketing" category. More information can be found on the Cookie settings page
. You can also visit the Network Advertising Initiative (NAI) website at http://www​​.networkadvertising​​.org
You can prevent participation in this tracking process in several ways:
a) by properly setting up your browser software. In particular, by suppressing third-party cookies, you will not receive advertisements from third-party providers;
b) by installing the Google plug-in under the following link: https://www​​.google​​.com/settings/ads/plugin
c) by deactivating the interest-based advertising of providers at http://www​​.aboutads​​.info/choices
. This setting is removed when you delete your cookies;
d) using the appropriate cookie setting. We point out that in this case you may not be able to fully use all functions of this offer.
Legal basis: Article 6 (1) a GDPR (consent)
Embedding of social media plugins
Deletion of data
Rights concerning the processing of personal data
Amendment of this data privacy statement
Data Protection Officer