Legal
Information on how we process your personal data, under Art. 13 and Art. 14 DSGVO. This website loads no third-party content of its own accord — the fonts and icons sit on our own server.
This is a translation for convenience. The German version is the legally binding one.Maßgeblich ist die deutsche Fassung.
The controller within the meaning of the DSGVO (the German name for the EU General Data Protection Regulation, GDPR) is:
Fahrschule Erste LigaWe have not appointed a data protection officer, because the conditions of Art. 37 DSGVO in conjunction with § 38 BDSG (the German Federal Data Protection Act) do not apply to us. For any data protection question, reach us at the contact details above.
We process personal data only where this is necessary to provide this website and our services, or where you have consented. We do not sell data. For audience measurement we use a cookie-free method that places no identifier on your device (details in section 3), and we embed no third-party content that would pass on your IP address unasked.
The transfer between your browser and our server is encrypted throughout with TLS (you can recognise it by https:// and the padlock symbol).
This website is hosted by Vercel Inc., based in the United States. It is delivered from the EU region Frankfurt am Main. Vercel processes the data exclusively on our instructions; we have concluded a data processing agreement with Vercel under Art. 28 DSGVO which, for transfers to the USA, incorporates the European Commission's Standard Contractual Clauses (Art. 46 Abs. 2 lit. c DSGVO).
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in providing our online offering securely, stably and with good performance.
Vercel's privacy policy: vercel.com/legal/privacy-policy
When this website is opened, the hosting provider automatically collects data that your browser transmits. These are:
This data is technically necessary in order to deliver the website, to ensure its stability and security and to fend off attacks. It is not merged with other data sources and is not evaluated in order to identify individual people. The logs are deleted automatically by the hosting provider after a short time (as a rule within a few days).
The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in the security and operation of the website).
To understand how our website is used — which pages are opened, which source visitors come from, whether on mobile or on desktop — and to detect technical errors, we use PostHog. PostHog runs cookie-free: no cookies are set and no identifier is stored on or read from your device. This means the consent requirement of § 25 TDDDG (the German Digital Services Data Protection Act) is not triggered, and you see no cookie notice for audience measurement.
To tell visits apart, an irreversible check value is formed server-side from the IP address and the browser identifier; your IP address is not stored in the process. The data is routed through our own domain and transmitted to PostHog in the EU region Frankfurt — so no direct connection from your browser to a third party is established. In addition we record anonymised click and touch positions (so-called heatmaps) in order to improve the layout of our pages; this data is evaluated in aggregate only and cannot be attributed to any person. Session recordings (session replay) and surveys are expressly switched off.
The provider is PostHog Inc. (USA), with hosting in the EU. PostHog acts as a processor under Art. 28 DSGVO on the basis of a data processing agreement; for any third-country element, the European Commission's Standard Contractual Clauses have been agreed.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is the statistical, cookie-free evaluation of our reach as well as the stability and correctness of the website. You may object to this processing at any time under Art. 21 DSGVO; to do so, send us a short message at the contact details given in the Impressum.
We store pre-registrations and contact enquiries in a database operated by Supabase Inc. The database runs in the EU region Frankfurt am Main; your data therefore sits inside the European Union. Because the provider is based outside the EU, access from a third country cannot be ruled out entirely. Supabase acts as a processor under Art. 28 DSGVO on the basis of a data processing agreement; for any third-country transfers, the European Commission's Standard Contractual Clauses have been agreed.
The legal basis is Art. 6 Abs. 1 lit. b DSGVO for contract-related data, and otherwise Art. 6 Abs. 1 lit. f DSGVO.
Supabase's privacy policy: supabase.com/privacy
To send confirmation and notification emails we use Resend, Inc., based in the United States. What is transmitted is your email address and the content of the message in question. Resend is a processor under Art. 28 DSGVO; the transfer to the USA is safeguarded by the European Commission's Standard Contractual Clauses. The legal basis is Art. 6 Abs. 1 lit. b DSGVO, and otherwise Art. 6 Abs. 1 lit. f DSGVO.
Resend's privacy policy: resend.com/legal/privacy-policy
When you send the pre-registration form, we process the data you have entered — in particular first and last name, date of birth, address, email address, telephone number as well as the licence class you want and what you tell us about training you have already had.
Pre-registration is non-binding; it does not create a contract. We need this data in order to handle your pre-registration, to contact you and — if you decide in our favour — to prepare and carry out the training contract, and to keep the training documentation that the Fahrlehrergesetz (the German Driving Instructors Act) requires by law.
The legal basis is Art. 6 Abs. 1 lit. b DSGVO (pre-contractual steps and performance of the training contract). Where we process data in order to meet statutory retention and documentation duties, the legal basis is Art. 6 Abs. 1 lit. c DSGVO.
The recipients are — to the extent necessary for your training — the competent Fahrerlaubnisbehörde (the licensing authority) and the officially recognised testing organisation (TÜV). No transfer beyond that takes place.
If no contract comes about, we delete your pre-registration data no later than six months after the last contact. If a contract does come about, data relevant to the contract and to billing is deleted once the commercial and tax retention periods have expired (as a rule ten years, §§ 147 AO, 257 HGB).
When you reach us through the contact form, by email, by telephone or via WhatsApp, we process what you provide — at minimum your name and your email address or telephone number, plus the content of your message — solely in order to deal with your enquiry.
The legal basis is Art. 6 Abs. 1 lit. b DSGVO where your enquiry is aimed at concluding a contract, and otherwise Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in answering enquiries). Where you have expressly given us your consent, the legal basis is Art. 6 Abs. 1 lit. a DSGVO.
We delete enquiries as soon as they have been dealt with conclusively and no statutory retention duties stand in the way, but at the latest six months after the last contact.
This website sets no cookies for marketing purposes and loads no consent-requiring services unless you expressly agree to it. The cookie-free audience measurement (section 3) is unaffected by this and takes place without consent.
As soon as you make a decision in the cookie banner, we store it in a cookie named liga_consent and mirrored in your browser's local storage. What is stored is only your choice, a version number and the time of the decision — no identifier that identifies you. Without this entry we would have to ask you again on every page view. The storage period is six months; after that we ask again.
Storing it is strictly necessary in order for us to provide you with the service you have requested, and it is therefore exempt from consent under § 25 Abs. 2 Nr. 2 TDDDG. The legal basis for the subsequent processing is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in documenting your decision, also with a view to Art. 7 Abs. 1 DSGVO).
All other processing — currently the Meta Pixel alone (section 9) — takes place only if you actively agree in the banner. Without your agreement the “marketing” category is switched off, and nothing is loaded and nothing is transmitted. The legal basis is § 25 Abs. 1 TDDDG and Art. 6 Abs. 1 lit. a DSGVO.
Only with your consent do we embed the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, and additionally transmit events server-side to Meta via the Conversions API. For as long as you have not agreed, no program code from Meta is loaded and no connection to Meta is established.
The purpose is measuring how successful our adverts are: we want to see whether an advert led to a pre-registration or an enquiry. In the process, in particular your IP address, browser information, the page opened, the Meta cookies _fbp and _fbc as well as — in shortened, cryptographically hashed form — contact details such as your email address or telephone number may be transmitted to Meta.
Meta also processes this data in the United States. For that transfer Meta relies on the European Commission's Standard Contractual Clauses. We point out that in the USA a level of data protection equivalent to European law cannot be guaranteed, and in particular that access by US authorities cannot be ruled out. A further risk is that Meta may go on to process the data for its own purposes and merge it with your user account if you are logged in to Meta. As regards the collection and the transmission we are joint controllers with Meta under Art. 26 DSGVO.
The legal basis is exclusively your consent under Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG. You may withdraw it at any time with effect for the future (section 14).
Meta's privacy policy: facebook.com/privacy/policy
So that we can tell which advert or source a pre-registration came from, we evaluate the URL parameters passed when the page is opened (e.g. utm_source, utm_medium, utm_campaign, utm_term, utm_content, as well as click identifiers such as fbclid). These are stored exclusively first-party and per session in your browser's session storage (deleted when you close the tab), in order to attribute them to your enquiry; they are not transmitted to third parties — with the exception of the consent-requiring Meta event described above.
The per-session storage is necessary in order to process your multi-step enquiry completely and correctly (§ 25 Abs. 2 Nr. 2 TDDDG); the legal basis for the evaluation is our legitimate interest in measuring the success of our advertising (Art. 6 Abs. 1 lit. f DSGVO). You may object to the evaluation at any time under Art. 21 DSGVO.
The typefaces used on this website (Montserrat and Inter) and all icons sit on our own server and are delivered from there.
In concrete terms that means: no connection is made to Google Fonts, to fonts.gstatic.com, to icon services such as Iconify or to content delivery networks such as jsDelivr. Simply opening this website transmits your IP address to no third party. There is no third-party request on this website that would be triggered before your decision in the cookie banner.
Our location page shows a map. Until you explicitly click it, nothing is loaded from Google: you see a graphic we host ourselves, and no connection to Google is made.
Only when you click “Load map” do we embed a section of Google Maps. Your browser then transmits your IP address and device information to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing in the United States by Google LLC cannot be ruled out. Google bases such transfers on the EU Commission's standard contractual clauses and on the EU-US Data Privacy Framework. For this processing Google is an independent controller, not our processor.
The legal basis is solely your consent under Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG, which you give by clicking. Your choice in the cookie banner does not cover this map — it loads on your click alone. Without that click nothing is transmitted. You can open the address in a map app of your choice at any time via “Get directions” instead.
Google privacy policy: policies.google.com/privacy
We link to our profiles on Instagram and TikTok, and to WhatsApp. These are exclusively plain links — not embedded content, not social plugins and not “like” buttons.
For as long as you do not click one of these links, no data is transmitted to the provider in question. Only when you click do you leave our website; from that moment on the provider in question is responsible for the processing. Please read their privacy information.
Your data is transmitted only to the extent described above. We have concluded data processing agreements under Art. 28 DSGVO with every service provider we use. An overview:
At any time, you have the following rights in relation to us:
An informal message to info@fahrschule-ersteliga.de is enough to exercise them.
You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you which is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
You may withdraw consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.
You change your cookie decision right here — which makes withdrawing exactly as easy as consenting (Art. 7 Abs. 3 DSGVO):
Loading …
Alternatively, an informal message to info@fahrschule-ersteliga.de is enough.
If you believe that the processing of your data infringes the DSGVO, you have the right — without prejudice to other remedies — to lodge a complaint with an Aufsichtsbehörde, a data protection supervisory authority (Art. 77 DSGVO). The one responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-WestfalenAutomated decision-making, including profiling, within the meaning of Art. 22 DSGVO does not take place.
We adapt this privacy policy as soon as our processing changes — for instance because a new service is added. If a change requires your consent, we ask you again through the cookie banner. The version published here is the one that applies at any given time.
Our provider details are in the Impressum. No contract comes about through this website: pre-registration is free and non-binding, and we conclude the training contract in person on site.
Last updated: 15 July 2026
