Privacy Policy

The controller responsible for the data processed on this website is:

Chrono24 Direct GmbH
Sachsenallee 24
01723 Kesselsdorf
Germany

The company, hereinafter referred to as “Chrono24 Direct”, can be contacted at:

• Email: service@chrono24-direct.com
• Telephone: +49 35204 772106

The company data protection officer of Chrono24 Direct can be contacted at the address stated above, for the attention of the Data Protection Department, or by email at datenschutz@chrono24.com.

In the context of several processes, Chrono24 Direct may use service providers that process personal data on our behalf, known as processors. Chrono24 Direct has concluded corresponding data processing agreements with all processors documented below within the meaning of Article 28 GDPR. Through these agreements, the processors undertake to process the data on our behalf in accordance with the General Data Protection Regulation and to ensure the protection of the rights of the data subject.

If personal data is transferred to a third country, for example the USA, in connection with processing activities carried out by processors, Chrono24 Direct takes appropriate safeguards to ensure an essentially equivalent level of data protection. Chrono24 Direct has concluded Standard Contractual Clauses with all processors that are based in a third country. These clauses have been adopted by the European Commission and constitute an appropriate safeguard pursuant to Article 46(2)(c) GDPR.

3.1. When visiting the website

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a server log file. The following information is collected without any action on your part:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the retrieved file,
• the website from which access takes place, known as the referrer URL,
• the session ID,
• the user agent,
• cookies, and
• the browser used, and, where applicable, the operating system of your computer and the name of your access provider.

We process the data listed above for the following purposes:

• to ensure a smooth connection to the website,
• to ensure convenient use of our website,
• to ensure and evaluate system security and stability, and
• for further internal statistical and administrative purposes.

We base this data processing on our legitimate interests pursuant to Article 6(1)(f) GDPR.

In addition, we use cookies and analytics services when you visit our website. Further explanations can be found under section 5 of this Privacy Policy.

3.2. When using the contact form

We provide you with the option of contacting us via a contact form made available on the website in order to enquire about watches you are looking for or to address other matters to us. The following information is mandatory when using the contact form:

• your first name and last name,
• your email address.

You may also voluntarily provide the following information:

• the watch you are looking for,
• your enquiry,
• your telephone number.

We process the data listed above for the following purposes:

• to identify and contact you,
• to process and respond to your enquiry, and
• to document and follow up on your enquiry.

Incoming enquiries are forwarded to our team via our internal email infrastructure, Microsoft Outlook, and are then stored and processed in the Salesforce CRM solution provided by Salesforce.com, Inc. (415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA).

In addition, service emails with status notifications may be sent to you via Microsoft Outlook to inform you of relevant changes relating to your enquiry.

The data processing is carried out at your request and is necessary for the purposes stated above for the performance of pre-contractual measures pursuant to Article 6(1)(b) GDPR. In addition, we base the processing on our legitimate interests pursuant to Article 6(1)(f) GDPR.

The data collected via the contact form will be deleted after your enquiry has been fully processed, taking into account any statutory retention obligations. If no statutory retention obligation applies, the data will be deleted three years after the end of the respective customer relationship.

If you have provided your email address as part of an existing customer relationship and have not objected to its use, we may send you information about similar products and services from Chrono24 Direct by email. We base the processing of your email address for existing customer advertising on our legitimate interests pursuant to Article 6(1)(f) GDPR. The processing of your email address for direct marketing purposes is considered a legitimate interest recognised by the GDPR. You can unsubscribe at any time, for example via a link at the end of each email or by sending an email to datenschutz@chrono24direct.com.

3.3. When contacting us by telephone

You have the option of contacting us by telephone. For the handling of our customer communication and for further communication purposes, we use the cloud-based telephony solution Aircall provided by our processor Aircall SAS (11-15, rue Saint-Georges, 75009 Paris, France).

The following personal data is processed when you contact us by telephone:

• audio data and
• conversation content.

Customer communication by telephone via Aircall is carried out on the basis of Article 6(1)(b) and Article 6(1)(f) GDPR. Our legitimate interest arises from the need to provide efficient and professional customer support.

If you have given us your express consent pursuant to Article 6(1)(a) GDPR, telephone calls may be recorded and subsequently transcribed using an AI function provided by Aircall. The generated summary of the conversation content is stored in Salesforce to facilitate the processing of your enquiry. The recorded audio data is automatically deleted immediately after the transcript has been created. The conversation content summarised in the transcript is deleted once it is no longer required, and no later than upon expiry of the respective customer relationship. No data transfer to a third country takes place in the context of this processing.

3.4. When scheduling appointments with Microsoft Bookings

Alternatively, you have the option of booking appointments for a telephone call with our agents via the “Microsoft Bookings” service provided by Microsoft Ireland Operations Limited, hereinafter referred to as Microsoft. The following personal data is processed in this context:

• your first name and last name,
• your email address,
• your telephone number,
• data relating to the service and appointment selected by you,
• metadata, such as your IP address.

Optionally, you may also provide your address and send us further information about your enquiry in a free-text field.

We use this data to schedule the appointment and to contact you afterwards. The processing of your personal data described above takes place exclusively after you have given your express consent pursuant to Article 6(1)(a) GDPR.

Data processing by Microsoft generally takes place in European data centres. If personal data is nevertheless processed in a third country, such as the USA, this takes place on the basis of appropriate safeguards to ensure an essentially equivalent level of data protection.

Further information can be found in Microsoft’s privacy statement.

3.5. When electronically signing contracts via DocuSign

As part of its operational business activities, Chrono24 Direct uses the DocuSign solution provided by our processor DocuSign Germany GmbH (Mies-van-der-Rohe-Straße 6, 80807 Munich, Germany) for the electronic signing of contracts. This applies in particular to consignment agreements, sourcing agreements, service and repair contracts, and other civil-law agreements between Chrono24 Direct and third parties, for example customers, suppliers or partners, that are concluded outside the Chrono24 platform. DocuSign is integrated into our Salesforce CRM solution via an API interface.

The following personal data is processed in this context:

• your first name and last name,
• your email address,
• signature data, and
• contract data, including time, content and, where applicable, payment information.

The processing of your personal data is carried out pursuant to Article 6(1)(b) GDPR, as it is necessary for the performance of a contract or for the implementation of pre-contractual measures. In addition, we base the processing on our legitimate interests pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient handling and legally secure documentation of contractual processes. No data transfer to a third country takes place in the context of this processing.

Your data is stored in accordance with statutory retention obligations and subsequently deleted. The tax-law retention periods of 8 or 6 years pursuant to Section 147(1) of the German Fiscal Code (Abgabenordnung — AO) and the commercial-law retention period of 6 years pursuant to Section 257(1) of the German Commercial Code (Handelsgesetzbuch — HGB) apply.

We disclose your personal data to third parties only if:

• you have given your express consent pursuant to Article 6(1)(a) GDPR,
• there is a legal obligation to disclose the data pursuant to Article 6(1)(c) GDPR, or
• the disclosure is necessary pursuant to Article 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.

In addition, our website contains links to the Chrono24 platform, through which all listings displayed on this website are offered. If you follow one of these links, you leave the area of responsibility of Chrono24 Direct. Chrono24 GmbH is responsible for data processing on the linked Chrono24 platform. Further information can be found in the privacy policy of Chrono24 GmbH at www.chrono24.de/info/datenschutz.htm.

5.1. Strictly necessary cookies

We use technically necessary cookies to operate our website. These cookies are strictly necessary for the proper display and functionality of the website. We base the processing of any personal data arising in this context on our legitimate interest pursuant to Article 6(1)(f) GDPR.

5.2. Google Analytics

For the purpose of demand-oriented design and ongoing optimisation of our website, we use Google Analytics, a web analytics service provided by our processor Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). In this context, pseudonymised user profiles are created and cookies are used. The information generated by the cookie about your use of this website is transferred to a Google server and stored there. IP addresses are anonymised so that attribution is not possible (IP masking). These processing operations take place exclusively if you have given your express consent pursuant to Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future using the Consent Manager.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help.

5.3. LinkedIn and Instagram

We use tracking technologies from LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland) and Instagram LLC. (1601 Willow Road, Menlo Park, CA 94025, USA) on our website. These technologies allow us to statistically record the use of our website and to tailor our marketing measures to your actual or presumed interests. These processing operations take place exclusively after you have given your express consent pursuant to Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future using the Consent Manager.

Further information on data protection can be found in LinkedIn’s privacy policy and Instagram’s data policy.

You have the right:

• pursuant to Article 7(3) GDPR, to withdraw any consent you have given to us at any time. As a result, we may no longer continue the data processing based on this consent for the future;
• pursuant to Article 15 GDPR, to request access to your personal data processed by us;
• pursuant to Article 16 GDPR, to request the immediate rectification of inaccurate personal data stored by us or the completion of incomplete personal data stored by us;
• pursuant to Article 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims;
• pursuant to Article 18 GDPR, to request restriction of the processing of your personal data;
• pursuant to Article 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request transmission to another controller; and
• pursuant to Article 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence, your place of work or our company’s registered office.

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, provided that there are grounds relating to your particular situation or the objection is directed against direct marketing.

If you wish to exercise your right to object, an email to service@chrono24-direct.com is sufficient.

We use the TLS procedure (Transport Layer Security) for our website in conjunction with the highest level of encryption supported by your browser. In addition, we use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access by third parties.

In principle, your data will be deleted when the purpose for which it was collected no longer applies, taking into account retention periods under commercial and tax law, unless you have consented to further processing. We reserve the right to retain certain categories of data for a period of three years if the data may be used to prove facts or for the establishment, exercise or defence of legal claims.

This Privacy Policy is currently valid and was last updated in June 2026.

Due to the further development of our website and services, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed on the website at any time.