Privacy Policy

We are pleased that you are visiting our website and accordingly about your interest in our company and our products. The protection of your personal data is very important for us. The Rental Alliance GmbH (hereinafter “Rental Alliance”, “we” or “us”) attaches great importance to the security of the data of the users and the compliance with provisions under data protection law.

Our websites can contain links to websites of other providers to which this privacy statement does not apply. We have no knowledge of which possible data are collected by the operators of these sites and we have no influence on this either. You can obtain information in the data protection notice of the respective site.

We will inform you in detail below about the handling of your data.

Definitions
The privacy statement is based on the terms of the General Data Protection Regulation (GDPR).

- “Personal data “ is all information, which refers to an identified or identifiable natural person (hereinafter “data subject”) (Art. 4 No. 1 GDPR). Your personal data include information such as your master data (first and last name, address and date of birth), your contact data (phone number, e-mail address), your invoice data (bank detail data) and a lot more.

- “Processing” is each activity carried out with or without the help of automated processes or each such series of activities in connection with personal data such as the collection, entry, organisation, arrangement, storage, adjustment or change, the reading out, request, use, disclosure by transmission, distribution or any other form of provision, the comparison or the linking, the restriction, erasure or destruction.

- “Data subject” is each identified or identifiable natural person, whose personal data are processed by the data controller responsible for the processing.

- “Data controller” is the natural person or legal entity, authority, institution or other body, which makes the decision alone or jointly with others about the purposes and means of the processing of personal data. If the purposes and means of this processing are stipulated by Union law or the law of the member states then the data controller respectively the certain criteria of his appointment can be envisaged according to Union law or the law of the member states.

- “Contract data processor” is a natural person or legal entity, authority, institution or other body that processes personal data by order of the data controller.

- “Recipient” is a natural person or legal entity, authority, institution or other body to which personal data are disclosed, irrespective whether it concerns a third party or not. Authorities, which possibly receive personal data within the scope of a certain investigation order according to Union law or the law of the member states, shall however not be deemed as recipients.

- “Third party” is a natural person or legal entity, authority, institution or other body, apart from the data subject, the data controller, the contract data processor and the persons, who are authorised to process the personal data under the direct responsibility of the data controller or the contract data processor.

- “Consent” is each announcement of intention unmisunderstandably submitted voluntarily by the data subject for the certain case in an informed manner in the form of a declaration or any other clear, confirming act, with which the data subject gives to understand that he or she agrees with the processing of the personal data relating to them.

Collection and processing of personal data
A use of our websites is principally possible without entering any personal data. If you would like to use special services of our company via our website it could however be necessary to process personal data. If it is necessary to process personal data and if there is no statutory basis for such a processing we will generally obtain the consent of the data subject.

Anonymous data collection
You can visit our site without actively providing any details relating to your person. However, we will automatically store access data each time the website is called (server log files) such as e.g. the name of your internet service provider, the used operating system, the website, from which you visit us, the date and the duration of the visit or the name of the requested file, as well as for security reasons, e.g. for the recognition of attacks on our websites, the IP address of the used computer for the duration of 7 days. These data are exclusively evaluated for improving our offer and do not allow any conclusions to be drawn about your person. These data will be not aggregated with other data sources. The legal basis for the processing of the data is Art. 6 Para. 1 GDPR. We process and use the data for the following purposes: 1. Provision of the websites, 2. Improvement of our websites and 3. Prevention and recognition of errors/malfunctions as well as of misuse of the websites. The data processing of this kind is carried out either to fulfil the contract via the use of our websites or we pursue a legitimate interest in ensuring the functionality and the error-free operation of the websites as well as adjusting these websites to the requirements of the users.

IP-Anonymisierung
Wir haben auf dieser Webseite die Funktion IP-Anonymisierung aktiviert. Dadurch wird Ihre IP-Adresse von Google innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum vor der Übermittlung in die USA gekürzt.

Use of Google Ajax search API
The Java-Script Code of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is reloaded on our site (hereinafter: Google). If you have activated Java-Script in your browser and have not installed any Java-Script blocker, your browser will, if applicable, transmit personal data to Google. We are not aware which data Google links with the received data and for which purposes Google uses these data. In order to prevent the execution of Java-Script-Code of Google on the whole you can install a Java-Script blocker for your browser. You can find more detailed information pertaining to conditions of use and data protection under: www.google.de/policies/privacy/.

Use of Google+
Our sites use functions of Google+. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Entry and forwarding of information: By using the Google+-button you can publish information worldwide. Via the Google+-button you and other users receive personalised contents from Google and our partners. Google stores both the information that you have given +1 for a content, as well as information about the site, which you viewed when clicking on +1. Your +1 can be faded in as references together with your profile name and your photo in Google services, such as for example in search results or in your Google profile or at other places on websites and advertisements in the internet. Google records information about your +1-activities in order to improve the Google services for you and others. In order to be able to use the Google+-button you need a public Google profile that is visible worldwide, which must at least contain the name chosen for the profile. This name will be used in all Google services. In some cases this name can also replace another name, which you have used when sharing contents via your Google account. The identity of your Google profile can be displayed to users, who know your e-mail address or have other identifying information about you. Use of the entered information: Besides the intended uses explained above the information made available by you will be used according to the applicable Google data protection provisions. Google publishes possibly summarised statistics about the +1 activities of the users or will forward these to users and partners such as for example Publisher, advertisers or affiliated websites.

You can find further information in this respect in the privacy statement of Google+ under: www.google.de/intl/de/policies/privacy/

E-mail contact
If you send us enquiries by e-mail or information your details (e-mail address, contents of your e-mail, subject of your e-mail and date) including the contact data entered by you there (first name, last name, if applicable phone number, address) will be stored by us for the purpose of processing the enquiry and for the event of follow-up questions. We will not forward these data without your consent. The legal basis for the collection and processing of the data is Art. 6 Para. 1 GDPR.

The user is pointed out that e-mails on the transmission channel may be read or changed without authorisation and unnoticed. Rental Alliance uses software to filter unsolicited e-mails (spam filter). E-mails can be rejected by the spam filter if these have been falsely identified as spam by certain features.

The data entered by you will remain in our company until you request us to erase these, revoke your consent for the storage or the purpose for the data storage ceases to apply (e.g. after the completed processing of your enquiry). Mandatory statutory provisions – in particular storage deadlines – shall remain unaffected.

Internal data transmission
We transmit your data internally to the several speciality departments in order to satisfy our contractual or statutory obligations. A data transmission or disclosure of your data shall only be carried out in the extent that is necessary for this purpose by complying with the relevant data protection regulations.

Transmission group-wide/group-wide
Rental Alliance is a company that operates worldwide and is based in Germany. The data, which you transmit to us, will be stored in our centralised customer database in Germany and forwarded within the group for the purpose of administration. Should an exchange of the data be carried out within the Group, this takes place to fulfil a contract or as a condition of use for the websites. Moreover, there may an interest in forwarding these data for internal, administrative purposes. Should the processing of your data take place outside of Europe, for example in Brazil, Russia, China, Switzerland, Japan, New Zealand, Canada or the USA this transmission will take place by complying will all applicable data protection laws and particularly pursuant to Art. 44 et seq. GDPR.

Duration of the storage
We principally store your data as long as this is necessary to provide our services or if this was envisaged by the European legislator of directives and regulations or another legislator in laws or regulations, which the data controller responsible for the processing is subject to. In all other cases we erase your personal data after settlement of the purpose, with the exception of those data, which we must continue to store in order to fulfil legal obligations (e.g. we are obligated owing to tax and commercial law storage obligations to keep documents in reserve such as e.g. contracts and invoices for a certain period of time).

Technical security
Rental Alliance uses technical and organisational security measures in order to protect your data managed by us against accidental or wilful manipulations, loss, destruction or against the access of unauthorised persons. Our security measures are continuously improved in line with the technological development.

For security reasons and to protect the transfer of confidential contents, such as for example the enquiries, which you send to us as the operator of the sites, this site uses an SSL encryption (Secure Socket Layer) in conjunction with the respective maximum level of encryption that is supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support any 256-bit encryption we use instead 128-bit v3 technology. You can recognise whether an individual page of our internet presence is transferred encrypted by the fact that the address line of the browser shifts from “http://” to “https://” and by the lock symbol in your browser line.

When the SSL encryption is activated the data, which you transmit to us, cannot be read by third parties.

We would like to point out that the data transmission in the internet (e.g. with the communication per e-mail) may feature security gaps. A consistent protection of the data against the access by third parties is not possible.

The legal basis of the processing
Art. 6 I lit. a GDPR serves our company as the legal basis for processing activities, with which we obtain a consent for a certain processing purpose. If the processing of personal data is necessary to fulfil a contract, of which the data subject is a contractual party, as this for example is the case with processing activities, which are necessary for a delivery of goods or the provision of any other service or consideration, then the processing is based on Art. 6 I lit. b GDPR. The same shall apply to those processing activities which are necessary to carry out pre-contractual measures, for example in cases of enquiries for our products or services. If our company is subject to a legal obligation, through which a processing of personal data becomes necessary, such as for example to fulfil tax obligations then the processing is based on Art. 6 I lit. c GDPR. In rare cases the processing of personal data could be necessary in order to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and subsequently his name, his age, his health insurance details or other vital information had to be forwarded to a doctor, a hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR. In the end processing activities could be based on Art. 6 I lit. f GDPR. Processing activities are based on this legal basis, which are not covered by any of the aforementioned legal bases if the processing is necessary to safeguard a legitimate interest of our company or a third party, if the interests, basic rights and basic freedoms of the data subject do not prevail. If the processing of personal data is based on Article 6 I lit. f GDPR our legitimate interest is to carry out our business activity for the benefit of the wellbeing of all of our employees and our customer.

Statutory or contractual regulations for the provision of the personal data; necessity for the conclusion of the contract; obligation of the data subject to make the personal data available; possible consequences of the non-provision
We will inform you that the provision of personal data may partly be stipulated by law (e.g. tax regulations) or also for contractual regulations (e.g. details relating to the contractual partner). Among others it may be necessary for the conclusion of a contract that a data subject makes personal data available to us, which must be subsequently processed by us. The data subject is for example obligated to make personal data available to us if our company concludes a contract with him. A non-provision of the personal data would result in the fact that the contract could not be concluded with the data subject. Before a provision of personal data by the data subject the data subject must contact one of our employees. Our employees will explain to the data subject relating to the individual case whether the provision of the personal data is stipulated by law or by contract or is necessary for the conclusion of the contract, whether an obligation exists to make the personal data available, and which consequences the failure to provide the personal data would have.

Minor reference
This online offer is not aimed at children below the age of 18. Persons, who have not yet reached the age of 18, may, without the consent of the legal guardians, not transmit any personal data to Rental Alliance.

Rights of the data subjects
You have the right to information about the data stored by us, duration of the data, purpose and legal basis of the storage as well as origin and recipients of transmissions. Incorrect data are to be rectified, inadmissibly stored data or no longer required data are to be erased. Moreover the data subject has a right to object to restriction of the processing as well as the right to data portability.

This information will be created at your request. This information is free.

You additionally have the right to lodge a complaint directly at a supervisory authority.

Revocation of your consent to the data processing
Several data processing activities are only possible with your explicit consent. You have the possibility to revoke an already granted consent at all times. For this purpose an informal notification todatenschutz(at)rental-alliance.com per e-mail to us is sufficient. The lawfulness of the data processing carried out until the revocation will remain unaffected by the revocation.

The responsible body and contact data of the external data protection officer

Responsible authority
Rental Alliance GmbH
Achener Weg 56
88316 Isny im Allgäu

Tel.: +49 (0) 7562 91389 290
E-Mail: datenschutz@rental-alliance.com

External commisioner for data protection
Deutsche Datenschutzkanzlei
Stefan Fischerkeller

Tel.: +49 (0) 7542 949 21 00
E-Mail: anfragen@ddsk.de