Privacy Policy & GDPR Compliance

LAST UPDATED: JANUARY 2026 | DOCUMENT REF: FPC-PRIV-2026-V3

1. Overview and Data Controller

Finderpixel Cabinet Intelligence Ltd. ("Finderpixelcabinet", "we", "us", or "our"), operating the quantitative European automotive intelligence website at finderpixelcabinet.online, is committed to safeguarding your personal information in strict accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK Data Protection Act 2018, and relevant international data privacy laws.

Data Controller:
Finderpixel Cabinet Intelligence Ltd.
Attn: Data Protection Officer (DPO)
Königsallee 92A, 40212 Düsseldorf, Germany
Official Email: [email protected]

2. Categories of Data Collected

In providing European supercar deal feeds, Deal Score calculations, and dealer inquiry routing, we process the following categories of data:

Direct Communications Data: Name, professional email address, telephone number, geographic jurisdiction, and specific acquisition parameters submitted via our dealer inquiry and contact forms.
Automotive Watchlist Preferences: Selected vehicle makes (Porsche, Ferrari, Lamborghini, McLaren, Aston Martin), target budget ranges, VAT deductibility preferences, and saved search filters stored locally or server-side.
Technical & Telemetry Data: IP addresses (anonymized at subnet level), browser type and version, referrer headers, access timestamps, device hardware identifiers, and telemetry interaction metrics.

3. Legal Grounds for Processing (Article 6 GDPR)

We process personal data solely under the following recognized legal bases:

Art. 6(1)(b) GDPR (Contractual Performance): Processing inquiries and providing matchmaking services between prospective buyers and verified European dealerships.
Art. 6(1)(f) GDPR (Legitimate Interests): Monitoring market security, preventing scraping fraud, optimizing search ranking algorithms, and maintaining infrastructure stability.
Art. 6(1)(a) GDPR (Consent): Voluntary opt-in subscriptions to real-time Deal Score alert emails and analytics cookies.

4. Third-Party Data Processors and Cross-Border Transfers

We do not sell, rent, or lease personal user data to commercial data brokers. Data is transferred strictly to vetted technological service providers under Art. 28 GDPR Data Processing Agreements (DPAs):

Hosting Infrastructure: EU-based cloud server facilities (Frankfurt and Amsterdam data centers) with ISO 27001 certification.
Transactional Email Services: Encrypted relay providers adhering to Standard Contractual Clauses (SCCs).
Certified Dealership Partners: Only upon explicit user request when clicking "Request Official Dealer Dossier", relevant contact information is transmitted directly to the authorized holding dealer in Germany, Italy, Switzerland, or the UK.

5. Your Rights as a Data Subject

Under Chapter III of the GDPR, you possess irrevocable rights regarding your data:

Right of Access (Art. 15): Obtain confirmation and copies of your personal data held.
Right to Rectification (Art. 16): Correct inaccurate or incomplete records.
Right to Erasure / "To Be Forgotten" (Art. 17): Request deletion of your personal records where no statutory tax retention obligations apply.
Right to Restriction of Processing (Art. 18): Limit specific processing actions.
Right to Data Portability (Art. 20): Receive your submitted data in a structured, machine-readable format (JSON or CSV).
Right to Lodge a Complaint: File a dispute with the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (LDI NRW) or your local supervisory authority.

6. Data Retention and Security Safeguards

Inquiry records are retained for a maximum duration of 24 months from last user interaction unless active brokerage transactions or commercial contracts necessitate statutory fiscal retention (up to 10 years under the German Commercial Code / HGB). All transmitted data is secured using TLS 1.3 cryptographic protocols with modern cipher suites.