This privacy policy explains which personal data we process when you visit classic-id.com and use ClassicID, and what rights you have.
The controller responsible for data processing is:
MBX Berlin UG
Mulackstr. 12
10119 Berlin, Germany
We have not appointed a data protection officer.
When you open our website, our server automatically processes technical data: IP address, date and time, the page requested, browser type, operating system and the page you visited before.
We need this data to deliver the website, find errors and fend off attacks. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in secure and stable operation). Log files are deleted after 7 days, unless they are needed longer to investigate a security incident.
The website and its data are hosted for us by our platform provider on servers in the EU (Amazon Web Services, region eu-north-1, Stockholm, Sweden). The provider acts as our processor under Art. 28 GDPR.
Contact by email. When you write to us, we process your email address, your name and the content of your message to answer your request. The legal basis is Art. 6(1)(b) GDPR where a contract with you is concerned, otherwise Art. 6(1)(f) GDPR. We delete the data once the request is resolved and no statutory retention duty applies.
User account. For a user account we process your name, your email address, your password (in encrypted form only) and the details you provide during onboarding. We need this data to provide your account and the features of ClassicID. The legal basis is Art. 6(1)(b) GDPR.
Vehicle passport. In the passport we store the information you enter or upload about your vehicle, for example vehicle identification number, model, year of manufacture, maintenance and restoration history, documents, photos and ownership chain. This information can relate to a person. You decide what you enter and with whom you share a passport. Ratings such as a completeness value or score relate to the vehicle and the passport, not to you as a person. The legal basis is Art. 6(1)(b) GDPR.
Further features. If you use features such as Private Off Market, the booking of service providers or the community, we process the data needed for them, for example listing, messages and booking details, and pass it on to the recipients you choose where this is necessary to carry out the feature. The legal basis is Art. 6(1)(b) GDPR.
We only use technically necessary cookies and similar storage technologies, for example for login and security. The legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. These cookies do not require consent.
We do not use analytics or marketing tools.
You can delete or block cookies at any time in your browser settings. Login and your account may then stop working.
Recipients. We only pass on data where this is needed to use ClassicID, where you ask us to, or where the law requires it. Recipients are technical service providers (hosting, email delivery) who work for us as processors under Art. 28 GDPR, the recipients you choose (for example when you share a passport) and authorities where we are legally obliged to. We do not pass on data for advertising purposes.
Retention. We keep account data and passport data for as long as your account exists. After you delete your account, we delete the data within 30 days, unless statutory retention duties apply, for example under commercial and tax law.
Third countries. If our service providers process data outside the EU or the EEA, we ensure an adequate level of protection, for example through an adequacy decision of the EU Commission or standard contractual clauses (Art. 44 et seq. GDPR).
Under the GDPR you have the following rights:
We update this privacy policy when our services or the legal situation change. The current version on classic-id.com applies.
Status: 12 October 2026