Skip to content
FR DE EN

Legal information

Privacy

Wehbe Motors SARL, 3 rue du Talus, 67400 Illkirch-Graffenstaden, is the controller of the data collected on this site. This page says what is collected, why, for how long, who else has access, and how to have it deleted.

This site sets no cookies

Looking at a vehicle, browsing the catalogue, viewing the location map or reading this page sets no cookie and sends no request to a third party. There is no analytics, no advertising pixel, no social media button. That is why you see no consent banner: there is nothing to consent to.

This inventory is checked automatically, page by page, by reading the actual network traffic rather than the code. As at 31/08/2026, across the twelve public pages of the site — including the payment page, for as long as you have not clicked: zero cookies, zero third-party domains contacted.

Two concrete consequences of that choice, which you can verify:

  • The fonts are hosted by us. The Inter typeface is served from this site, not from Google Fonts: your IP address is not disclosed to anyone in order to display text.
  • The location map is an image. The map on “The garage” page was produced once from OpenStreetMap data and saved on our servers. It is not an interactive map: no mapping server learns that you looked up where we are.

Audience measurement runs without cookies and without following you

The garage needs to know how many people look at its cars, and which ones. That measurement is done by this site itself, with no outside service: nothing is sent to Google, to Meta or to anyone else, and no cookie is set for it.

A page is only counted once it has actually been displayed: your browser then sends this site, and this site alone, a short signal holding the page address and, for the first page of your visit, the site you came from. A page that was merely preloaded, or read by a robot, is therefore not counted.

What is recorded amounts to four counters, and none of them holds personal data:

  • the number of views per page per day — a number, not a list of visits;
  • the name of the site you came from, when there is one — “google.com”, never the full address, which would contain what you typed;
  • the language set in your browser, cut down to “en”, “de-AT” or “fr” — it is what tells the garage whether more should be translated. The full list your browser sends is not kept: it is sometimes rare enough to single out a person, which is exactly what we avoid. Your country is neither recorded nor guessed: deriving it from an IP address would mean querying an outside service, or shipping a table whose own source states that it cannot be used to locate an address;
  • a technical fingerprint, which lets us count you once a day.

That fingerprint deserves an explanation, because it is the only place where the measurement comes close to you. It is computed by mixing a secret of the site, today's date, your IP address and the name of your browser, then running the whole through a one-way function. Your IP address is written nowhere, the fingerprint cannot recover it, and it changes every night: nobody can follow someone from one day to the next, which is precisely what a cookie does. Fingerprints are erased after 90 days; the counters, which are only numbers, are kept.

What is collected, and only then

Nothing until you fill in a form. When you write to us, we record:

  • your name, your telephone number and, if you give it, your email;
  • your message and the vehicle or part concerned;
  • for a part-exchange enquiry: the vehicle details you describe and the photos you attach;
  • the address of the page you wrote from, and a hash of your IP address — an irreversible calculation, used to filter out automated submissions, from which the original address cannot be recovered.

Your registration number, if you give it for a part exchange, is used only to identify your vehicle for the garage. It is never published, never passed on, and never used for anything else.

Why

  • To answer your enquiry — legal basis: your consent, given via the checkbox on the form.
  • To perform a sale — legal basis: the contract.
  • To meet our accounting and tax obligations — legal basis: a legal obligation.
  • To prevent automated submissions (IP hash) — legal basis: our legitimate interest in not receiving spam.

For how long

Contact and part-exchange enquiries
24 months from the last exchange, then deleted automatically.
Photos attached to a part exchange
Deleted along with the enquiry they belong to.
Orders and invoices
10 years, the statutory accounting retention period.

Who has access

The manager and the garage’s employees, within the limits of what their work requires: each account sees only the screens it needs. No data is sold, rented or transferred for advertising purposes.

Two providers are involved, and a third sees nothing about you:

  • o2switch (Clermont-Ferrand, France) hosts the site and the database, on servers located in France. The server’s technical logs keep connection IP addresses for the statutory period.
  • PayPal (Luxembourg) processes spare-part payments and receives the data strictly necessary for the transaction: your name, your email and the amount. We never see your card details. See the next section: their code loads only when you decide to pay.
  • DeepL (Germany) translates vehicle and part descriptions into German and English. These are texts written by the garage and sent from our server: no data about you is passed on, and your browser never contacts DeepL.

Paying for parts online

Online sale of spare parts is open. It is the only place on the site where a cookie appears, and here is exactly when:

  • a session cookie set by this site holds the contents of your basket. It does not exist until you have added something to the basket: browsing the shop sets none. It expires when you close your browser, it is strictly necessary for the service you asked for, and it therefore does not require your consent;
  • PayPal’s payment code loads only after you click the payment button, never when the page opens. Until you click, PayPal sets nothing and does not learn that you were there. The payment page says so under the button, before you press it.

We neither receive nor keep your card details: they are entered with PayPal, and all we see is the reference of the payment.

Your rights

You may request access to your data, its rectification, its erasure, restriction of its processing, its portability, or object to its use. Simply write to us at the registered office, 3 rue du Talus, 67400 Illkirch-Graffenstaden, or call us on +33 6 19 30 65 37. We reply within one month.

If our answer does not satisfy you, you may refer the matter to the French data protection authority: Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr. As a controller established in France, we come under its supervision.

Last updated: 31/08/2026