Data protection information on using the booking and reservation system

Description and scope of data processing

On our website we run a booking portal for hire car reservations.

Your personal data is then collected and processed when you provide this voluntarily, e.g. when booking a hire car. We only transmit your name to local fleet providers for standard bookings. Your data is transmitted securely using SSL encryption.

The data collected when you book is stored as inventory data in a customer account in our customer database and used for services and to manage the customer relationship.

The following data is collected in the course of the booking process:

Mandatory fields:

  • First name and surname of the driver,

  • Address (street, house number, postcode, city, country),

  • Email address

  • Payment method; payment details

  • Telephone number

  • Flight details (flight number)

  • Time of rental and return

  • Booking number and other booking details (travel period, collection and return locations)

  • Date and time of the booking

  • Customer number

  • Mediating agency

Legal basis for data processing

The processing of your data facilitates fulfilment of a contract which you are a party to, or execution of precontractual measures. The legal basis for processing the data is Article 6(1)(b) GDPR.

The transmission of the data into a third country which does not have the level of data protection required for such transmissions is based on Article 49(1)(b) - exceptions for particular cases; i.e. the transmission is necessary for the fulfilment of a contract between the data subject and the controller or for the execution of precontractual measures at the application of the data subject.

Where his or her data is used to send direct advertising, the legal basis is Article 6(1)(f). The departure point for the assessment is recital 47 GDPR, which among other things states: “The processing of personal data for the purpose of direct marketing may be regarded as processing serving a legitimate interest.”

Purpose of data processing

The purpose of processing the data provided by you is the fulfilment of a contract with you or the execution of precontractual measures to reserve you a rental car and provide it at the place of acceptance.

Duration of storage

Existing customer data will be stored for the duration of the contractual relationship. If the personal data is no longer necessary for the purpose for which it was collected, it will be deleted. Even after completion of the contractual relationship it may be necessary to store the contracting partner’s personal data in order to fulfil contractual or legal obligations (e.g. retention and evidence obligations).

Right to object and right to rectification

If the data are required for the fulfilment of a contract or the execution of precontractual measures, the data in the customer account may only be deleted early if no contractual or legal obligations prevent this.

In the time when you are managed as an existing customer, you have the right to have the data deleted if it is not subject to a legal retention period.