Data protection information ADAC roadside assistance

1. Overview and scope

The following data protection information applies to ADAC roadside assistance, in particular the acceptance of cases, the provision of roadside assistance and other services in the context of recovery and towing assistance, complaint and claims processing (quality management) and battery and spare parts services.

This data protection information contains the information required under Articles 13 and 14 of the General Data Protection Regulation 2017/679/EU ("GDPR") and explains how your personal data is processed. All content is addressed to and applies to all genders (f/m/d). Where grammatical masculine, feminine, or neutral personal pronouns are used, this is solely for the sake of readability.

General information about the processing of your personal data on adac.de can be found under Data Protection Information Online Platforms. Information on the processing of your personal data in the context of ADAC membership can be found under Data Protection Information ADAC Membership.

Information on the processing of your personal data in connection with breakdown assistance abroad and other related services for Plus and Premium members can be found in the ADAC Versicherung AG data protection information.

2. Name and contact details of the controller

The controller within the meaning of the GDPR is:

Allgemeiner Deutscher Automobil-Club e.V. ("ADAC")
Hansastraße 19
80686 Munich
Phone: (089) 7676-0
Email: adac(at)adac.de

3. Name and contact details of the data protection officer

You can contact the ADAC data protection officer at:

Allgemeiner Deutscher Automobil-Club e.V.
Data Protection Officer (DSB)
Hansastraße 16
80686 Munich
Email: dsb-mail(at)adac.de

4. Processing of your personal data (data categories, data source, purposes, legal basis, storage period)

4.1 Case acceptance and implementation of breakdown assistance

The processing of personal data within the scope of ADAC breakdown assistance can, depending on the user's selection, be carried out either by telephone (service center or digital voice assistant "Voicebot"), the ADAC breakdown assistance online web service or the ADAC breakdown assistance app, as well as downstream central IT systems.

The ADAC breakdown assistance app allows you to electronically transmit a breakdown report to the ADAC for the purpose of requesting assistance after a breakdown or accident in Germany, Europe, or worldwide. After sending a breakdown report ("Request breakdown assistance"), the app keeps you informed about the status of the breakdown assistance and, if technically possible, about the estimated arrival time of the breakdown assistance provider.

In doing so, the ADAC processes the following categories of personal data from you, among others:

Master and case data

• Title – optional;

• First name and last name,

• Membership number,

• Membership rate or customer status,

• Phone number,

• Email address,

• Address,

• Date of birth,

• Information about speech or hearing impairment,

• Reason for breakdown (select from e.g. battery, tire, key, accident, other),

• Vehicle type (car, motorcycle, bicycle, other),

• Vehicle details (make, model, color, license plate number, mileage),

• Breakdown or damage details (e.g., date, time),

• Vehicle diagnostic data (depending on the case, e.g., error codes, measured values),

• Performance data (depending on the case, e.g., breakdown assistance:
  able to continue journey, towing: destination),

• Photographs of the vehicle and/or registration certificate part I
  (in some cases, e.g., proof of motorhome),

• Breakdown and accident report
  (breakdown data, signature of the person involved in the accident),

• Vehicle owner (only for breakdowns outside Germany),

• Number of people in the vehicle (only for breakdowns outside Germany),

• Location data of the damage site (automatic determination, manual selection, or entry),

• Place of transport (for towing, pick-up, and vehicle transport)

• Comments for additional remarks on the breakdown.

The ADAC processes this personal data for system-supported case acceptance, including coverage and claim verification, location determination, the subsequent organization and implementation of breakdown assistance, and any associated downstream services.

In order to provide breakdown assistance, it is necessary for you to be reachable by telephone (e.g., for queries, announcements). We process the telephone number(s) provided to us when reporting a breakdown exclusively in relation to the respective breakdown case. This information is not transferred to your ADAC membership data.

The location of the breakdown is required for the organization and implementation of breakdown assistance. The location of the breakdown can be determined with the aid of a device (breakdown assistance app, breakdown assistance online, Internet browser), provided that you have previously allowed the use of your location data on your device. If you do not want device-assisted location determination, you can search for and select the breakdown location manually or enter a postal address manually. If you do not want automatic location determination and do not want to search for or enter an address manually, we will call you back so that you can tell us the exact location of the damage by phone.

If a breakdown is reported by phone via our service center or via the digital voice assistant (voicebot) and the location of the damage could not be determined, we offer device-supported location determination. To do this, we send an SMS message with the web link to an ADAC website to your device, provided you have previously agreed to the transmission of SMS messages. If you have provided us with an email address when reporting the breakdown, the web link will also be sent to that email address.

The ADAC also uses service providers and cooperation partners on a case-by-case basis to handle business transactions (for more information, see section 5).

Processing of third-party data

If, in the course of providing breakdown assistance, we receive data from third parties such as relatives, companions, or fellow travelers (e.g., telephone number, date of birth, name, address), we will also process this data to the extent that it is necessary for providing effective and organized breakdown assistance.

Sensitive data

• Health data (e.g., information about speech or hearing impairments in the "ADAC Roadside Assistance App" or "ADAC Roadside Assistance Online")

• Sensitive data that you provide to us via the comment function

Under certain circumstances, we may request and/or receive special categories of personal data

("sensitive data") about you. Special categories of personal data are particularly sensitive. According to Art. 9 GDPR, this sensitive data includes health data. In the context of breakdown assistance, this applies in particular to health data in connection with a special rate (severe disability) or the processing of a claim.

In particular, the information about speech or hearing impairments is used to enable us to contact you in writing (by email or text message) if we have any questions. You can revoke your consent for this at any time with future effect. You can revoke your consent by clicking on the "Cancel" or "Change" button on the "Order details" screen. By clicking on "Change," you can reverse your health data entry (speech and hearing impairment). You can also send a revocation to the phone number we use to communicate with you via text message or email regarding the relevant breakdown.

In the app, you can revoke your consent to the processing of information on speech and hearing impairments by moving the switch for this health data in the settings.

Ultimately, locally stored data remains stored on the end device as long as it is not manually changed or deleted or the app is deleted.

Legal basis

• In accordance with Art. 6 (1) (b) GDPR, we process your master and case data for the processing and implementation of "ADAC Roadside Assistance";

• In accordance with Art. 6 (1) (c) GDPR, we process your master and case data as well as, depending on the case, performance-related data for the fulfillment of legal obligations, in particular under tax and commercial law. In this context, the data may also be passed on to the competent authority in accordance with legal regulations.

• In accordance with Art. 6 (1) (a) and Art. 9 (2) (a) GDPR, we also process sensitive data on a case-by-case basis with your consent or, where necessary, to enable you to request breakdown assistance in writing and communicate via text message or email due to speech or hearing impairments.

• In accordance with Art. 6 (1) (b) GDPR, we process data from third parties with their own service claims for the processing and implementation of "ADAC breakdown assistance." If we do not already process data from third parties on the basis of Art. 6 (1) (b) GDPR, we process this data on the basis of our overriding legitimate interest in providing breakdown assistance as emergency assistance.

• During processing, your data may be passed on (see also section 5):
  The legal basis for the transfer of your data to other recipients and for the performance of our business operations is Art. 6 (1) (b) or (f) GDPR;
  the legal basis for the necessary transfer to government agencies or authorities is the fulfillment of a legal obligation pursuant to Art. 6 (1) (c) GDPR;
  Furthermore, we only pass on your personal data to third parties if you have given your express consent in accordance with Art. 6 (1) (a) GDPR, in conjunction with Art. 9 (2) (a) GDPR in the case of sensitive data, where applicable.

• In accordance with Art. 6 (1) (f) GDPR, we may process your master data, case data, and performance-related data on the basis of the overriding legitimate interest of ADAC e.V.:

  • Processing legal or other matters (including potential matters) arising from the contractual relationship, for the purpose of legal prosecution (court dunning procedures and legal proceedings) or for the defense of claims.

  • To facilitate communication in the event of a breakdown or to speed up the processing of the breakdown. This processing is foreseeable for the data subject and in their interest.

  • Direct advertising to fulfill our own economic interests.

  • For market and opinion research with surveys following breakdown assistance. The aim is to increase customer satisfaction and optimize services. The responses of the respondents are not assigned to a specific person. This processing is foreseeable for the data subject.

  • Further development of breakdown assistance services and existing service processes and systems in order to achieve safety, efficiency, and improvements.

4.2 Order processing for recovery and towing assistance

In the case of recovery and towing assistance, the ADAC also processes the following categories of personal data from you for order processing:

• Information on previous damage

• Photographs of the situation and object, e.g., in situations where the vehicle has to be recovered or special technical effort is required

• Confirmation of acknowledgment of the risk of damage due to towing (signature of the person involved in the accident)

• Photographs of the vehicle before and after towing

• Confirmation of inventory recording (no damage or damage) after towing (signature of the person involved in the accident)

The ADAC processes this personal data in order to be able to provide you with towing services as part of the ADAC breakdown assistance.

The processing is carried out on the legal basis of Art. 6 (1) lit. b GDPR.

4.3 Complaint and damage processing

The ADAC also processes the following data for the purpose of handling complaints and claims:

• Copy of the vehicle registration certificate Part I (vehicle registration document) of the vehicle,

• Photographs of the vehicle (including the license plate) and the damage,

• Data from cost estimates, service records, and repair invoices (as applicable)

• Payment details of the claimant or their representative

• Correspondence and communications from the claimant (by post or email)

4.4 Battery and spare parts service

As part of its battery and spare parts service, the ADAC also processes:

• Data from batteries and spare parts, service records, and repair invoices (on a case-by-case basis)

• Payment details of the claimant or their representative

The ADAC processes data on batteries and spare parts, service records, and repair invoices in order to be able to provide the battery and spare parts services required in each case. The ADAC transmits payment data for the purpose of invoice and payment processing when purchasing car batteries and other spare parts.

Processing is carried out on the legal basis of Art. 6 (1) (b) GDPR.

For the purpose of invoice and payment processing for the battery and spare parts service, the ADAC uses the independent partner services epay and PAYONE. Your data is transferred between us and these service providers exclusively for the purpose of payment processing within the meaning of Art. 6 (1) lit. b GDPR. You can find more information about our partners in section 5.

4.5 Obligation to provide data

We require some of the personal data we request in order to fulfill contractual or legal obligations. If you do not wish to provide us with such personal data, this will affect our ability to provide you with our services. We will inform you of this in such a case.

4.6 Change of purpose

If, in addition to the existing purposes, other purposes for data use arise, we will check whether these additional purposes are still covered by and compatible with the original purposes for which the data was collected. If this is not the case, we will inform you of such a change of purpose. If there is no other legal basis for further data use, we will not process the data without your consent.

4.7 Data storage period

The following specific deletion periods apply:

5. Recipients of your personal data

In order to fulfill the purposes described in section 4, the ADAC transfers your personal data to the following recipients:

• Service providers:
  In particular, call centers, IT companies, ADAC mobility partners, service providers of ADAC Versicherung AG, other third-party companies in the context of providing breakdown assistance, partners for market and opinion research (to optimize our services).
  These parties process your personal data on behalf of ADAC as our processors in accordance with Art. 28 GDPR.
  In some cases, we may also process your personal data jointly with other service providers. In these cases, we are jointly responsible for the processing of your data with the other service provider(s) in accordance with Art. 26 of the GDPR. If we process your personal data under joint responsibility, we will point this out to you in this privacy policy and explain the details of the cooperation.

• Independent partners for invoice and payment processing:
  For the purpose of payment processing, ADAC uses the following service providers, which are themselves responsible for the aforementioned processing in accordance with the GDPR:

  • transact Elektronische Zahlungssysteme GmbH ("epay"),
    Fraunhoferstraße 10, 82152 Martinsried,
    as a payment institution and network operator for card payments.

  • PAYONE GmbH ("PAYONE"),
    Lyoner Straße 9, 60528 Frankfurt/Main,
    as acquirer for payments.

The ADAC has concluded a data protection agreement with epay and PAYONE to protect your data. The forwarding to the payment providers and the pseudonymized data transfer are encrypted. Payment is the responsibility of the respective payment providers. We have no influence on data processing. This is because payment providers comply with the laws (KWG, GWG, GDPR, BDSG) and regulatory requirements of BaFin and the industry standards of the German Banking Industry Committee, the PCI-DSS security standard, and the contracts with your bank or credit card provider.

The respective payment providers' data protection regulations apply, for which we are not responsible and over which we have no influence.

You can find epay's data protection information at: www.epay.de/datenschutz-payment

PAYONE's data protection information can be found at: www.payone.com/dsgvo

• Other recipients:
  Authorities (e.g., law enforcement agencies), lawyers, auditors, courts, experts.

6. Duration of data processing

Unless a specific storage period is specified in section 4, your personal data will be deleted as soon as it is no longer required for the purposes stated. In this context, personal data may be stored for the period during which claims can be asserted against the ADAC and/or companies under the "ADAC" brand (statutory limitation period of three to thirty years). In addition, personal data will be stored to the extent and for as long as the ADAC is legally obliged to do so. Corresponding documentation and retention obligations arise from, among other things, the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act. The storage periods are up to 8 years.

7. Transfer to third countries

If data is transferred to a third country outside the EU and the European Economic Area, this will only take place on the basis of an adequacy decision by the European Commission in accordance with Art. 45 (1) GDPR or on the basis of other appropriate safeguards in accordance with Art. 46 GDPR, such as standard data protection clauses of the European Commission, binding internal data protection regulations, approved codes of conduct or certification procedures, or an exemption pursuant to Art. 49 GDPR. Where necessary, this applies including further protective measures such as the encryption of your data. For further details about the existing protective measures or a copy thereof, please contact us.

8. Existence of automated decision-making in individual cases (including profiling)

The ADAC does not use purely automated decision-making procedures in accordance with Article 22 GDPR.

9. Your data protection rights

• Right to information about your personal data stored by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients, the planned storage period, and the origin of your data that was not collected directly from you.

• Right to rectification of inaccurate data or completion of incomplete data in accordance with Art. 16 GDPR;

• Right to erasure of your data stored by us in accordance with Art. 17 GDPR, provided that no statutory or contractual retention periods or other legal obligations or rights to further storage must be observed;

• Right to restriction of processing of your data in accordance with Art. 18 GDPR;

• Right to data portability pursuant to Art. 20 GDPR, i.e. the right to receive data provided by you and stored by us in a commonly used, machine-readable format or to request the transfer of such data to another controller;

• Right to withdraw your consent pursuant to Art. 7 GDPR;

• Right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement (Art. 77 GDPR). The data protection supervisory authority responsible for the ADAC is:
  Bavarian State Office for Data Protection Supervision (BayLDA).

• Right to object pursuant to Art. 21 GDPR with regard to the processing of your personal data on the basis of Art. 6 (1) lit. f GDPR or Art. 6 (1) lit. e GDPR, to object if there are reasons for this arising from your particular situation. If you object, the ADAC will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

You can send us your objection at any time by mail or email.

Address: ADAC e.V., Member Services, Hansastraße 19, 80686 Munich,

Email: datenschutz.ug(at)adac.de – Keyword "Objection to breakdown assistance market and opinion research ".

Your data protection request to exercise your rights can be made informally. To make it easier for you and us to implement your request, please ideally contact us by email at datenschutz.ug(at)adac.de or by post at: ADAC e.V., Member Services, Hansastraße 19, 80686 Munich, Germany, stating your membership or customer number.

As of February 2026