Terms & Privacy Addendum – Fahrzeug-Dossier
As of 2026-10-08
Terms Addendum: Fahrzeug-Dossier
Service description
The Fahrzeug-Dossier is a digital vehicle logbook within Chromjuwelen OS. Users can add vehicles, keep a history of entries (e.g. maintenance, restoration, change of ownership), attach media (photos, documents), and control access to individual entries (public / private / only me). Chromjuwelen provides the technical platform but does not verify the factual accuracy of entries.
User obligations
- Vehicle details (in particular the vehicle identification number / VIN and license plate) must be truthful. The platform automatically checks a VIN (hashed) for duplicates against existing dossiers — a vehicle may not be carried as owned property under multiple accounts at the same time. A detected conflict is rejected; the correct path for a genuine change of ownership is the system's transfer-code mechanism, not creating a new entry.
- Users are themselves responsible for uploaded content (photos, documents, text) — in particular for third-party rights (image rights, personality rights) and the accuracy of the information.
- Access rights a user grants to other people (see below) may only be granted for vehicles the granting user is actually entitled to.
Co-owners, access and third-party sharing
A Fahrzeug-Dossier can be shared with other people:
- Co-owners / workshops can be invited by the owner as collaborators ("co-owner" or "maintainer"), gaining read or write access to the dossier.
- Change of ownership happens via a one-time transfer code that the current owner generates and passes on to the new owner.
- Workshop codes let a workshop confirm a history entry (e.g. a completed service) with a one-time code directly in the dossier, without becoming a collaborator themselves.
- Access requests let third parties (e.g. prospective buyers) ask the owner for access to private details; the owner actively decides on each individual request.
- Company verification: companies (e.g. workshops, dealers) can be marked as verified partners; verification covers only the company's identity, not the quality of any individual service.
Immutability of entries (locking)
A history entry can be edited or deleted by its author at any time — there is no automatic time limit. An entry only becomes permanently unchangeable once its author voluntarily locks it. That decision rests entirely with the author and cannot be undone. An entry's visibility (public/private/only me) can still be changed independently of that, even after locking.
Disclaimer of liability
Chromjuwelen gives no guarantee as to the accuracy, completeness or currency of user- or third-party information in the Fahrzeug-Dossier (including confirmed workshop entries and verified company details). The dossier does not replace official vehicle documents (registration certificate, title) and does not establish any legally binding presumption of ownership.
Account deletion
Deleting a user account deletes the associated Fahrzeug-Dossier data — see the Privacy section below for details.
Privacy Addendum: Fahrzeug-Dossier
The existing privacy policy (currently still an older template from the previous main website) should be extended with a dedicated section for the Fahrzeug-Dossier. The data controller remains as stated in the legal notice (Impressum): Chromjuwelen Agentur für Motorkultur UG (haftungsbeschränkt), Tornquiststraße 50, 20259 Hamburg, Germany.
What data is processed
| Data category | Examples | Visibility |
|---|---|---|
| Profile data | Name, email, profile ID | private (tied to the user) |
| Vehicle master data | Model, year, nickname | configurable per vehicle |
| Private vehicle details | VIN, license plate | always private, never shown publicly |
| VIN hash | SHA-256 of the normalized VIN | internal, duplicate-detection only — the VIN itself is never read back out |
| History entries | Maintenance, restoration, change of ownership, photos/documents | per entry: public / private / only me |
| Collaborators & invitations | who has access to which vehicle (role: co-owner/maintainer) | visible to the owner and collaborators |
| Transfer & workshop codes | one-time, time-limited codes for ownership transfer/maintenance confirmation | only the code holder |
| Access requests | who requested access to private details, the owner's decision | the owner and the requesting person |
| Company data | Company name, memberships, verification status | public (once verified) |
Purpose and legal basis
Processing takes place to provide the service the user actively requested (maintaining a digital vehicle logbook) under Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). VIN-hash duplicate checking and security measures (e.g. ALTCHA bot/spam protection at login, without external tracking services such as Google reCAPTCHA) are based on legitimate interests (Art. 6(1)(f) GDPR) — protecting genuine owners from fraudulent duplicate listings and protecting the platform from abuse.
Disclosure to third parties
Within the platform, data is only shared when the user actively initiates it:
- by inviting collaborators (co-owner/maintainer) to a vehicle,
- by generating a transfer or workshop code for a specific recipient,
- by approving a third party's access request for private details.
Data is not disclosed to external third parties (including advertising partners) without separate consent. Login and notification emails are sent via a self-hosted mail server, not through an external email-marketing provider.
Retention period
Fahrzeug-Dossier data is retained for as long as the associated user account exists or a vehicle has not been deleted. One-time codes (transfer, workshop) lose their function once redeemed or expired, but are not deleted immediately, for traceability (who confirmed what, and when).
Data subject rights
Users have the right to access, rectification, erasure and restriction of processing of their data (Art. 15–18 GDPR) as well as data portability (Art. 20 GDPR).
Account deletion
Account deletion happens in two steps: users request deletion from their account area and receive a confirmation email; only clicking the link it contains (valid for 1 hour) triggers the actual, irreversible deletion.
- Vehicles the person owns themselves are deleted in full — including history, media (including files), collaborator entries, codes, access requests and private details.
- Traces on vehicles owned by someone else (e.g. history entries written as a collaborator, or photos uploaded to a vehicle belonging to someone else) are not deleted but anonymized: the link to the deleted person is removed, while the entry itself remains part of that other vehicle's history.
- Pure access rights (collaborator status, the person's own access requests, company membership) are deleted entirely.