Privacy at a Glance

This privacy policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering"). Regarding the terminology used, such as "processing" or "controller," we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller

711rent e.K.
Beerenweg 3
22761 Hamburg
datenschutz@711rent.com
Data Protection Officer: Michael Semmler, Senedo GmbH
CEO: Irma Kersten Wendler

Types of Processed Data

  • Inventory data (e.g., names, addresses)
  • Contact data (e.g., email, phone numbers)
  • Content data (e.g., text entries, photographs, videos)
  • Usage data (e.g., visited websites, interest in content, access times)
  • Meta/communication data (e.g., device information, IP addresses)

Purpose of Processing

  • Provision of the online offering, its functions, and content
  • Responding to contact inquiries and communication with users
  • Security measures
  • Reach measurement/marketing

Terminology Used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered identifiable if they can be identified directly or indirectly, particularly by association with an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or one or more specific characteristics that express the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.

"Processing" refers to any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and covers practically any handling of data.

"Controller" refers to the natural or legal person, authority, institution, or other entity that alone or jointly with others determines the purposes and means of processing personal data.

Legal Basis

Pursuant to Article 13 GDPR, we inform you of the legal bases for our data processing. If the legal basis is not stated in this privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR; the legal basis for processing to fulfill our services and carry out contractual measures, as well as responding to inquiries, is Article 6(1)(b) GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR; and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) GDPR. If vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

Security Measures

We ask you to regularly review the content of our privacy policy. We adjust the privacy policy as soon as changes in our data processing activities make this necessary. We will inform you if the changes require an action on your part (e.g., consent) or other individual notification.

Collaboration with Processors and Third Parties

If we disclose data to other persons and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data in the course of our processing, this is done only on the basis of legal permission (e.g., if the transmission of data to third parties, such as payment service providers, is necessary for contract fulfillment according to Article 6(1)(b) GDPR), if you have given consent, if a legal obligation provides for this, or on the basis of our legitimate interests (e.g., in the use of agents, web hosts, etc.).

If we commission third parties with the processing of data based on a so-called "data processing agreement," this is done on the basis of Article 28 GDPR.

Data Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in the context of using third-party services or disclosing or transmitting data to third parties, this is done only if it is necessary to fulfill our (pre)contractual obligations, based on your consent, due to a legal obligation, or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or allow the processing of data in a third country only under the special conditions of Articles 44 et seq. GDPR. This means that processing occurs, for example, based on special guarantees such as an officially recognized level of data protection equivalent to the EU (e.g., for the USA via the "Privacy Shield") or compliance with officially recognized specific contractual obligations (so-called "standard contractual clauses").

Rights of Data Subjects

You have the right to request confirmation as to whether relevant data is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with Article 15 GDPR.

You have the right under Article 16 GDPR to request the completion or correction of inaccurate data concerning you.

You have the right under Article 17 GDPR to request the immediate deletion of relevant data, or alternatively, under Article 18 GDPR, to request a restriction of data processing.

You have the right to receive the data concerning you that you have provided to us under Article 20 GDPR and to request its transmission to other controllers.

You also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 GDPR.

Right of Withdrawal

You have the right to withdraw your consent in accordance with Article 7(3) GDPR with effect for the future.

Right to Object

You can object to the future processing of your data at any time in accordance with Article 21 GDPR. The objection can particularly be made against processing for direct marketing purposes.

General Information Collected When Visiting Our Website

When you access our website, general information is automatically collected via a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, and similar details. This information does not allow any conclusions to be drawn about your person.

This information is technically necessary to correctly deliver website content requested by you and is mandatory when using the internet. In particular, it is processed for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring a seamless use of our website
  • Evaluating system security and stability
  • Other administrative purposes

The processing of your personal data is based on our legitimate interest in data collection for the aforementioned purposes. We do not use your data to draw conclusions about your person. Recipients of the data are only the responsible entity and possibly processors.

Anonymous information of this type may be statistically analyzed by us to optimize our website and its underlying technology.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). Google Analytics uses so-called "cookies," which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purpose of data processing is to analyze website usage and compile reports on website activities. Based on the use of the website and the internet, further related services shall be provided. Processing is based on the legitimate interest of the website operator.

You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that if you do so, you may not be able to use all functions of this website to their full extent. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add-On to disable Google Analytics.

Additionally or alternatively to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device, preventing the collection of data by Google Analytics for this website and this browser in the future, as long as the cookie remains installed in your browser.

Deletion of Data

The data processed by us will be deleted or its processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this privacy policy, the stored data will be deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent deletion. If data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

In Germany, data is retained for 10 years in accordance with Sections 147 (1) AO, 257 (1) No. 1 and 4, (4) HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and for 6 years in accordance with Section 257 (1) No. 2 and 3, (4) HGB (commercial letters).

In Austria, data is retained for 7 years in accordance with Section 132 (1) BAO (accounting documents, vouchers/invoices, accounts, receipts, business papers, statement of income and expenses, etc.), for 22 years in connection with real estate, and for 10 years for documents related to electronically provided services, telecommunications, broadcasting, and television services provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) scheme is used.

Business-Related Processing

Additionally, we process:

  • Contract data (e.g., contract subject, duration, customer category).
  • Payment data (e.g., bank details, payment history).

of our customers, interested parties, and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising, and market research.

Collection of Access Data and Log Files

We, or our hosting provider, collect data on every access to the server on which this service is located (so-called server log files) based on our legitimate interests within the meaning of Article 6 (1) (f) GDPR. The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

Log file information is stored for security reasons (e.g., to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data that must be retained for evidentiary purposes is exempt from deletion until the incident is fully resolved.

Performance of Contractual Services

We process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and service provision in accordance with Article 6 (1) (b) GDPR. The mandatory fields in online forms are necessary for contract conclusion.

As part of the use of our online services, we store the IP address and the time of each user action. Storage is based on our legitimate interests, as well as those of users, in protection against misuse and other unauthorized use. These data will not be disclosed to third parties unless necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) (c) GDPR.

Data deletion follows the expiration of legal warranty and comparable obligations. The necessity of retaining the data is reviewed every three years; in the case of legal archiving obligations, deletion occurs after their expiration.

Administration, Financial Accounting, Office Organization, Contact Management

We process data in the context of administrative tasks and organization of our business, financial accounting, and compliance with legal obligations, such as archiving. In this regard, we process the same data that we process in the context of providing our contractual services. Processing bases are Article 6 (1) (c) GDPR and Article 6 (1) (f) GDPR. Affected persons include customers, interested parties, business partners, and website visitors.

We disclose or transmit data to financial authorities, consultants, such as tax advisors or auditors, as well as other fee agencies and payment service providers.

Contacting Us

When contacting us (e.g., via contact form, email, telephone, or social media), the user's details are processed to handle the contact request and its processing in accordance with Article 6 (1) (b) GDPR.

Online Presences in Social Media

We maintain online presences within social networks and platforms to communicate with customers, interested parties, and users active there and to inform them about our services.

Google Maps

We integrate the maps of the "Google Maps" service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, IP addresses and location data of users.

Changes to Our Privacy Policy

We reserve the right to amend this privacy policy to comply with current legal requirements or to implement changes to our services in the privacy policy.

For questions regarding data protection, please contact:

senedo GmbH, Michael Semmler datenschutz@711rent.com