The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
The car dealer, who is providing the car
Contact details can be find on the webpage of the car dealer
Data Protection Officer
The contact details of the data protection officer can be found in the privacy policy on the website of the car dealer, who is providing the car.
In individual cases, we check the location of the rental vehicle using GPS tracking. In this context, we may also process your booking data (e.g. booking of an international trip, rental period) as well as your name, first name and date of birth.
The location determination is carried out in the event of crossing the agreed national borders to investigate or prevent vehicle theft and other criminal offences. A location determination is only carried out if the vehicle crosses the national border without a contractual agreement or in the event of a late return of the vehicle.
If you do not consent to the location of the vehicle in the aforementioned cases, we unfortunately cannot conclude a rental contract with you.
The legal basis for the processing of the data is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
In the event of a criminal offense, we will delete your data after completion of the case. In all other cases, we will delete the data or anonymize it after three months, unless statutory retention obligations exist.
For location tracking, we use the service provider Oscar Autovermietung GmbH, who acts as our contact person for tracking in the aforementioned cases. We have concluded a contract for the processing of orders with the service provider in accordance with Art. 28 para. 3 GDPR.
You have the right to request information about the personal data stored about you at our company free of charge and at any time in accordance with Art. 15 para. 1 GDPR. In addition, you have the right to rectification (Art. 16 GDPR), erasure (Art. GDPR), restriction of processing (Art. 18 GDPR), objection and data transfer (Art. 20 GDPR) of your personal data if the statutory requirements are met.
If the data processing is based on your consent in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, you can withdraw your consent at any time with effect for the future without affecting the legality of the processing carried out up to that point.
Please contact us in writing or by e-mail at the above-mentioned contact details in the cases mentioned above.
You also have the right to file a complaint with a data protection authority. The competent data protection authority is the data protection authority of the federal state in which you live or in which the controller has its registered office.
We do not carry out automated decision-making or profiling (an automated analysis of your personal circumstances).
Due to the development of our website and our offers on it or due to changes in statutory or official requirements, it may be necessary for us to change this privacy policy. The version that is available on our website at any given time is valid.