Source: https://www.auto-ahrens.de/privacy-policy/
Timestamp: 2019-04-23 08:38:37+00:00

Document:
The following information provides a simple outline of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection policy listed under this text.
Data on this website is processed by the website operator. The operator’s contact data can be found in the imprint for this website.
On the one hand, your data is collected when you communicate it to us. This may be e.g. data that you have entered on a contact form.
Other data is collected automatically by our IT systems when you visit the website. These is primarily technical data (e.g. Internet browser, operating system or time the page was visited). This data is collected automatically as soon as you enter our website.
A part of the data is collected to guarantee the error-free provision of the website. Other data may be used to analyze your user behavior.
At any time you have the right to obtain free information about the origin, recipient and purpose of your stored personal data. You also have the right to request correction, blocking or deletion of this data. For this purpose and for further questions about data protection, you may contact us at any time at the address given in the imprint. Furthermore, you have a right to complain to the competent supervisory authority.
When you visit our website your surfing behavior can be statistically assessed. This is done primarily by using cookies and so-called analysis programs. The analysis of your surfing behavior generally takes place anonymously; surfing behavior can not be retraced to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and the data protection declaration.
When you use this website, various personal data is collected. Personal data is all data with which you can be personally identified. This data protection declaration explains which data we collect and what we use it for. It also explains how and for which purpose it is done.
Please note that data transmission over the Internet (for example, when communicating via e-mail) may have security vulnerabilities. Complete protection of the data from access by third parties is not possible.
The data controller is the natural or legal person, who alone or in conjunction with others decides on the purpose and means of personal data processing (e.g. names, e-mail addresses and similar).
A number of data processing procedures are only possible with your express consent. You can revoke your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing up to the revocation remains unaffected by the revocation.
When data processing is based on Article 6 para. 1 letter e or f GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal framework, on which the processing is based, can be found in this data protection declaration. If you object we will no longer process your personal data, unless we can prove compelling, legitimate reasons for processing, which outweigh your interests, rights and freedom or the processing serves to enforce, exercise or defend legal claims (objection in accordance with Article 21 para. 1 GDPR).
If your personal data is processed for direct advertising purposes, you have the right to object to the processing of your personal data for this type of advertising at any time; this also applies to profiling, provided it is connected to this type of direct advertising. If you object, your personal data will then no longer be used for the purpose of direct advertising (objection in accordance with Article 21 para. 2 GDPR).
Right to complain to the responsible supervisory authority.
In the case of infringements of the GDPR, the data subject has the right to complain to the responsible supervisory authority, in particular in the member state of his/her main residence, place of work or the place where the alleged infringement took place. The right of appeal remains regardless of other administrative or judicial remedies.
You have the right to be handed over data that we process on the basis of your consent or in fulfillment of a contract, in itself or to a third party in a standard, machine-readable format. Unless you request direct transfer of the data to another data controller, this will only be done to the extent technically feasible.
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, for example orders or requests that you send us as website operator. You can recognize a encrypted connection from the address line of the browser, it changes from “http://” to “https://” and from the lock symbol in your browser line.
When the SSL or TLS encryption has been activated, the data you transmit to us can not be read by a third party.
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and as applicable a right to correction, blocking or deletion of this data. For further information on personal data you can contact us at any time at the address given in the imprint.
If you dispute the accuracy of your personal data stored with us, we usually need time to examine this. For the duration of the examination you have the right to request the restriction of processing of your personal data.
If the processing of your personal data was / is unlawful, you may request the restriction instead of the deletion of your data processing.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request a restriction on the processing of your personal data instead of deletion.
If you have filed an objection in accordance with Article 21 para. 1 GDPR, a balance must be struck between you and our interests. As long as it has not been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
If you have restricted the processing of your personal data, this data may – depending on its storage – only be processed with your consent or for enforcement, exercising or defense of legal claims or for the protection of rights of another natural or judicial person or for reasons of significant public interest for the European Union or a member state.
The websites sometimes use so-called cookies. Cookies do not damage your computer in any way and do not contain viruses. Cookies serve the purpose of making our offer more user-friendly, effective and secure. Cookies are small text files which are placed on your computer and saved by your browser.
Most of the cookies that we use are so-called “Session Cookies“. They are automatically deleted at the end of your session. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, or exclude the acceptance of cookies for certain cases or exclude them generally and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be restricted.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions requested by you (e.g. shopping basket function) are stored based on Article 6 para. 1 letter f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analysis of surfing behavior) are stored, these will be handled separately in this data protection declaration.
This data is collected on the basis of Article 6 para. 1 letter f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose the server-log files must be recorded.
The processing of the data in the contact form therefore only takes place with your consent (Article 6 para. 1 letter a GDPR). You may revoke this consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The information you provide in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (for example, after your request has been processed). Mandatory legal provisions – in particular, storage periods – remain unaffected.
This site uses so-called web fonts provided by Google to uniformly display fonts. When a page is visited your browser loads the required Web Fonts to your browser cache to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This presents a legitimate interest in the sense of Article 6 para. 1 letter f GDPR.
You can find more information on Google Web Fonts under https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://policies.google.com/privacy?hl=de.
To use the Google Maps functions it is necessary to save your IP address. This information is generally transferred to a Google server in the USA and saved there. The provider of this website does not have an influence on data transfer.
We use Google Maps in the interest of an attractive presentation of our online offers and to help you locate the points stated on our website. This presents a legitimate interest in the sense of Article 6 para. 1 letter f GDPR.
More information on handling user data can be found in Google’s data protection declaration: https://policies.google.com/privacy?hl=de.
The following contains information about the collection of personal data in our company. More details on the topic of data privacy can be found at www.auto-ahrens.de/datenschutz.
The controller within the meaning of Art. 24 GDPR is Mr. Olaf Hebel, c/o Auto-Ahrens owner Waltraud Nagel, Durlacher Allee 61–63, 76131 Karlsruhe, Germany.
Contract data: this includes rental information (vehicle category, pick up and drop off info, additional services booked, etc.), reservation data, rental agreement number, driver’s license data (incl. license picture), and the license plate number of the vehicle rented by you.
Data required in the case of an accident, vehicle damage or similar incidents: Here, we will process information on the course of events and the damage sustained. This information may be provided by the customer themselves, passengers or the damaged party. In such cases, health data, such as information on sustained injuries, driving under the influence of narcotics, and similar details, may also be processed.
Third-party data that was provided to us in the context of your rental agreement (e.g. information relating to dependents, additional drivers, passengers, etc.). Third-party data that was provided to us with respect to an accident (e.g. names, address of the other party involved in the accident, liability insurance of the other party, etc.).
For what purpose do we use the collected data?
the statutory retention periods. The legal basis for data processing in this respect is Art. 6 (1) sentence 1 lit. b, c, f GDPR.
Insofar as the data processing is undertaken based on Art. 6 (1) sentence 1 lit. f GDPR, our legitimate interest lies in avoiding damage to our company and vehicles, ensuring cost certainty, and preventing economic disadvantages.
For the purposes above, we may disclose your data to the following third parties: insurance companies, lawyers, collection agencies, credit agencies, courts, and regulatory authorities.
Processing of accident damage (processing based on information provided by you and third parties, such as the police, subsequent renters, witnesses, etc.).
This also includes the processing of data for the purpose of recovering damages, e.g. vis-àvis insurance companies, asserting and protecting our claims, as well as fulfilling legal obligations (e.g. provision of information to investigating authorities).
If the responsible authorities suspect that you may have committed a crime or an administrative offense with our vehicle, in addition to the data stored by us we will also process data provided to us by the responsible authorities.
We will process your data in order to comply with legal obligations to which we are subject. This includes the processing of data in cases where disclosure obligations exist as well as processing in accordance with fiscal or commercial regulations (e.g. retention obligation for commercial trading books and accounting records in accordance with Section 257 (4) of the German Commercial Code (Handelsgesetzbuch, HGB).
The legal basis for such processing is Art. 6 (1) sentence 1 lit. b, c, f GDPR.
Based on Art. 6 (1) sentence 1 lit. f GDPR, our legitimate interest in processing your personal data for the purpose of recovering damages and asserting our claims against you lies in protecting our company from damage. In addition, we are also obligated to process your data for the purpose of recovering damages due to contractual relations with third parties (e.g. insurance companies).
For the purposes above, we may disclose your data to the following recipients: authorities (investigating authorities, police agencies, courts), collection agencies, experts, lawyers, and insurance companies.
Commission is not available for the third country in question, the passing on of your data to a third country takes place based on appropriate guarantees within the meaning of Art. 46 (2) GDPR. In addition, we can also pass on data to third countries if the conditions under Art. 49 GDPR are met. Third countries are all countries outside of the European Economic Area. The European Economic Area includes all Member States of the European Union and Member Countries of the European Free Trade Area. These are Norway, Iceland, and Liechtenstein.
If you rent a vehicle from us as an accident replacement vehicle, we will process your data for the purpose of settling your damage claims (in particular the cost of renting one of our vehicles) vis-à-vis the other party involved in the accident or their liability insurance provider.
For the purposes above, we may disclose your data to the following recipients: authorities (investigating authorities, regulatory authorities, police agencies, courts), collection agencies, experts, lawyers, and insurance companies.
We store your data for as long as it is needed for the purpose for which it was processed. If we are legally obligated to store your data for a longer period, your data will be stored for the duration of the respective retention obligation.
Please feel free to contact us at any time if you would like to know which personal data related to you we have stored or if you would like to rectify or delete this data. In this case, please contact us at datenschutz@auto-ahrens.de.
You have to right to lodge a complaint with a supervisory authority concerning our processing of your personal data.

References: Art. 24
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 49