Phone
Mon - Sun 8:00 AM - 10:00 PM
No deposit required
Insured
Personal

Privacy Policy

Last updated: June 2026

Controller:
‍
Renty DIP GmbH & Co KG
Klosterwiesgasse 7, Top 1-3
8010 Graz, Austria

Email: office@renty-event.com
‍
Phone: +49 160 98293373
Phone: +43 316 231064
Website: www.renty-event.com

1. General information

Protecting your personal data is a matter of great importance to us. We, Renty DIP GmbH & Co KG (hereinafter "Renty," "we," "us"), process your data exclusively on the basis of legal provisions, in particular the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), the German Federal Data Protection Act (BDSG), and the Telecommunications and Digital Services Data Protection Act (TDDDG). In this privacy policy, we provide comprehensive information about the key aspects of data processing in connection with our website (www.renty-event.com), our online booking platform, our interactive web tools (e.g., the Renty Playlist Generator), and our services as an event technology rental company.

2. Relevant legal grounds

The processing of personal data is based on the following legal grounds under the GDPR:

Art. 6(1)(a) GDPR - Consent: You have given your consent to the processing of your personal data for one or more specific purposes (e.g., for cookies, newsletters, tracking, or use of the Renty Playlist Generator).

Art. 6(1)(b) GDPR - Performance of a contract and pre-contractual inquiries: Processing is necessary for the performance of a rental agreement to which you are a party, or in order to take steps at your request prior to entering into an agreement.

Art. 6(1)(c) GDPR - Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax-related retention requirements).

Art. 6(1)(f) GDPR - Legitimate interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests, fundamental rights, and freedoms.

National data protection regulations: In addition to the GDPR, national data protection regulations apply in Austria (DSG) and Germany (BDSG, TDDDG). These contain specific provisions regarding, among other things, the right to information, rectification, erasure, the processing of special categories of personal data, and consent management for cookies and similar technologies.

3. Collection, processing, and use of personal data

We collect, process, and use your personal data only to the extent necessary to provide our services, fulfill our contractual or legal obligations, pursue our legitimate interests, or if you have provided your consent.

3.1 Categories of processed data

The data we process includes, in particular:

Master data: Name, company, address, email address, and telephone number (for order processing, communication, and customer management).

Booking and rental data: Information regarding rented equipment (e.g., sound systems, microphones, photo booths, projectors, DJ equipment), rental period, delivery address, selected location, and booking confirmations.

Payment and contract data: Payment information, bank details, credit card data (last four digits, card type, expiration date), VAT ID/tax number (for invoicing and contract management).

Communication data: Postal and email addresses, telephone numbers, WhatsApp messages in the context of booking processing and customer support.

Website usage data (usage data, meta, communication, and procedural data): IP address, browser used, operating system, referrer URL (the previously visited page), time of visit, page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features. This data is collected to ensure the functionality and security of our website as well as for web analytics and optimization.

Content data: Textual or visual messages and posts that you submit to us (e.g., via contact forms, reviews, or inquiries).

Log data (log files): Information about events or activities logged in our system (e.g., timestamps, IP addresses, user actions, error messages).

Newsletter data: Email address as well as optional name and date of birth (upon newsletter registration) for personalized offers and birthday promotions.

Spotify data (when using the Renty Playlist Generator): Display name, username, profile picture, country of origin, subscription type, most-listened-to artists and tracks, library content - exclusively temporary and session-based (see Section 18).

Legal basis: Processing is based on Art. 6(1)(a) GDPR (your consent, e.g., for cookies, newsletters, tracking, playlist generator), Art. 6(1)(b) GDPR (for the performance of a contract), Art. 6(1)(c) GDPR (legal obligations), and Art. 6(1)(f) GDPR (our legitimate interest, e.g., in the security of our IT systems, the optimization of our website, and the implementation of marketing measures).

4. Disclosure of Data to Third Parties (Processors and Recipients)

We only share your data with third parties to the extent that it is legally permissible and necessary:

4.1 Franchise and Location Partners (Subcontractors)

To process bookings, customer data is encrypted and forwarded to our franchise and location partners (subcontractors). They are contractually obligated to treat the data confidentially in accordance with GDPR regulations and Renty's internal data protection policies. Customer data is processed exclusively within the Renty ecosystem by both us and our partners and is not shared with external third parties. Upon the termination of a partner's contract, all customer data held by them is deleted.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract), Art. 28 GDPR (data processing).

4.2 Data Processors (Service Providers)

To provide our services, we use carefully selected service providers, particularly for hosting (Webflow), booking and rental processing (Rentware), CRM and customer communication (HighLevel), email marketing (Brevo), payment processing (Stripe), web analytics (Google), cookie consent management (CookieScript), and social media platforms (Meta). These providers are contractually obligated under Art. 28 GDPR to treat your data with strict confidentiality and to process it only according to our instructions.

4.3 Legal Obligations

Where we are legally obligated to do so, we may disclose your data to authorities, courts, or other public bodies.

4.4 Notice Regarding Mobile Information

We do not share your mobile opt-in data and consents with third parties or affiliates for marketing or advertising purposes. This excludes sharing with subcontractors for support services (e.g., customer service).

5. International Data Transfers (Third-Country Transfers)

Some of the service providers we use (e.g., Google, Meta, HighLevel, Webflow, Stripe) are based in the USA or process data there. The transfer of personal data to the USA is based on:

EU-U.S. Data Privacy Framework (DPF): Google, Meta, HighLevel, Webflow, and Stripe are certified under the EU-U.S. Data Privacy Framework. The EU Commission has recognized the level of data protection for certified companies as adequate (adequacy decision of July 10, 2023). List of certified companies: https://www.dataprivacyframework.gov/

Standard Contractual Clauses (SCC): Where no adequacy decision exists, we use the Standard Contractual Clauses approved by the EU Commission (Art. 46 (2) lit. c GDPR). Spotify also uses Standard Contractual Clauses that oblige the recipient to protect data and grant EU rights.

Further information on third-country transfers: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en

6. Security measures

In accordance with legal requirements, and taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures (TOMs) to ensure a level of protection appropriate to the risk.

Measures include, in particular:

Ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access to, input, disclosure, availability, and separation of the data. Procedures for exercising data subject rights, deleting data, and responding to data threats. Data protection through technology design and data-protection-friendly default settings (Privacy by Design and Privacy by Default).

6.1 Securing online connections via TLS/SSL encryption technology (HTTPS)

To protect user data transmitted via our online services from unauthorized access, we use TLS/SSL encryption technology. These technologies encrypt the information transmitted between the website and the user's browser, thereby protecting the data from unauthorized access. When our website is secured by an SSL/TLS certificate, this is indicated by the display of HTTPS in the URL.

7. General information on data storage and deletion

We store your personal data only for as long as is necessary for the purposes for which it was collected. Once the purpose no longer applies (e.g., after the end of a contract or the expiration of a rental period), your data will be deleted, provided there are no statutory retention obligations to the contrary.

Retention periods under Austrian law:

  • 7 years: books, records, vouchers, invoices, annual financial statements, and other business documents relevant to tax assessment (Section 132 BAO, Sections 190-212 UGB)
  • 22 years: certain documents related to real estate (Section 18 (10) UStG), where applicable
  • 3 years: data required for the assertion or defense of claims, within the scope of statutory limitation periods (Sections 1478 et seq. ABGB)

Retention periods under German law (for business activities in Germany):

  • 10 years: commercial books, inventories, opening balance sheets, and annual financial statements (Section 257 HGB, Section 147 AO)
  • 8 years: accounting vouchers and invoices (Section 257 HGB, Section 147 AO, Section 14b UStG; reduced from ten to eight years as of January 1, 2025, by the Fourth Bureaucracy Relief Act)
  • 6 years: received and sent commercial and business correspondence as well as other tax-relevant documents (Section 257 HGB, Section 147 AO)

8. Your rights as a data subject

Under the GDPR, you have the following rights:

Access (Art. 15 GDPR): You may request information about the data we process.

Rectification (Art. 16 GDPR): You may request the correction of inaccurate data.

Erasure (Art. 17 GDPR): You may request the erasure of your data ("right to be forgotten").

Restriction of processing (Art. 18 GDPR): You may request the restriction of processing.

Data portability (Art. 20 GDPR): You may receive your data in a structured, machine-readable format.

Right to object (Art. 21 GDPR): You may object to the processing of your data for reasons arising from your particular situation (especially for processing based on legitimate interests, Art. 6 (1) (f) GDPR). You have a right to object to direct marketing at any time.

Withdrawal of consent (Art. 7 (3) GDPR): You may withdraw any consent you have given at any time. The lawfulness of processing based on consent before its withdrawal remains unaffected.

Complaint to a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with the competent data protection supervisory authority.

Competent supervisory authorities:

Austria (our company headquarters, lead authority): Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, https://dsb.gv.at/

Germany: For private-sector companies, the respective state data protection authority is the point of contact. An overview of the authorities can be found at the Federal Commissioner for Data Protection and Freedom of Information (BfDI), https://www.bfdi.bund.de.

Contact for exercising your rights: Email: office@renty-event.com

9. No automated decision-making

Decisions based solely on automated processing that have legal effects on you or similarly significantly affect you, including profiling as defined in Art. 22 GDPR, do not take place.

10. Provision of online services and web hosting

We process user data to provide our online services. For this purpose, we process the user's IP address, which is necessary to transmit the content and functions of our online services to the user's browser or device.

Types of data processed: Usage data, meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers), as well as log data (e.g., log files).

Purposes of processing: Provision of our online services and user-friendliness, IT infrastructure, and security measures.

10.1 Hosting and Website Builder (Webflow)

Our website is hosted and built using the Webflow platform. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit our website, Webflow processes technical access data (including IP address, browser type, operating system, access time) required for secure and stable provision. A data processing agreement has been concluded with Webflow in accordance with Art. 28 GDPR. The fonts used on our website are served locally; there is no connection to external font providers.

Legal basis: Legitimate interests in secure and stable provision (Art. 6(1)(f) GDPR), and where applicable, performance of a contract (Art. 6(1)(b) GDPR).

Basis for third-country transfer: EU-U.S. Data Privacy Framework (DPF) and standard contractual clauses.

Privacy Policy: https://webflow.com/legal/eu-privacy-policy

10.2 Collection of Access Data and Log Files

Access to our online service is logged in the form of "server log files." Server log files may include the address and name of the accessed web pages and files, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user's operating system, the referrer URL, and generally IP addresses and the requesting provider. These may be used for security purposes, e.g., to prevent server overload (especially during DDoS attacks) and to ensure server utilization and stability. Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further retention is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

11. Use of Cookies

‍

The term "cookies" refers to functions that store information on users' devices and read information from them. Cookies can also be used for various purposes, such as ensuring the functionality, security, and convenience of online services, as well as creating analyses of visitor traffic.

We use cookies in accordance with legal regulations. To this end, we obtain prior consent from users when required. If consent is not necessary, we rely on our legitimate interests. This applies when storing and reading information is essential to provide explicitly requested content and functions. This includes, for example, saving settings and ensuring the functionality and security of our online services. Consent can be revoked at any time.

11.1 Information on Data Protection Legal Bases

Whether we process personal data using cookies depends on consent. If consent is given, it serves as the legal basis. Without consent, we rely on our legitimate interests, which are explained above.

11.2 Storage Duration

Temporary cookies (session cookies): These are deleted at the latest after a user leaves an online service and closes their browser. Permanent cookies: These remain stored even after the browser is closed. This allows, for example, login status to be saved and preferred content to be displayed directly. Unless we provide users with explicit information regarding the storage duration of cookies, they should assume that these are permanent and that the storage duration can be up to two years.

11.3 General Information on Revocation and Objection (Opt-out)

Users can revoke their consent at any time and also object to processing in accordance with legal requirements, including via their browser's privacy settings. You can configure your browser to notify you about the placement of cookies and only allow them on a case-by-case basis. However, disabling cookies may limit the functionality of our website.

11.4 Cookie Consent Management (CookieScript)

We use the consent management platform CookieScript to obtain and document user consent for the use of cookies. The provider is Objectis Ltd. (Cookie Script), Laisves st. 60, LT-05120 Vilnius, Lithuania. Consent declarations are stored to provide proof of consent in accordance with legal requirements. Consent is stored for up to two years. A pseudonymous user identifier is created and stored along with the time of consent, details regarding the scope of consent, and information about the browser, system, and device used.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR), consent (Art. 6(1)(a) GDPR).

‍

12. Contact and inquiry management

When you contact us via our contact form, email, telephone, or WhatsApp, we process the data you provide (name, email address, phone number, address, message) to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual inquiries), Art. 6(1)(f) GDPR (legitimate interest in communication).

Storage period: Until your request has been fully processed, after which it will be deleted, provided there are no statutory retention obligations.

13. Booking and rental processing via Rentware

We use the booking and rental software Rentware to display and book our equipment on our website and to process bookings and rental agreements. The provider is Betterware Software UG, Ernst-Augustin-Straße 12, 12489 Berlin, Germany.

In the course of use, booking data (rented equipment, rental period, selected location), contact details, and data required for payment are processed. Payment processing itself is handled by the payment service providers mentioned in Section 16. Processing takes place on servers within the European Union. A Data Processing Agreement in accordance with Art. 28 GDPR is in place with Rentware.

Purposes: Execution and management of bookings and rental agreements.

Legal bases: Performance of a contract (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).

Privacy Policy: https://rentware.com/datenschutz/

14. CRM system and customer communication via WhatsApp (HighLevel)

We use the CRM and marketing automation platform HighLevel (HighLevel Inc., 400 N Saint Paul St, Suite 920, Dallas, TX 75201, USA) to manage our customer relationships, communication processes, and marketing communication.

14.1 Processed data

Contact details (name, email address, phone number, address), booking reference data, communication data (messages via email, SMS, and WhatsApp Business, e.g., reminders, pickup/return information, support requests), and interaction data (reactions to emails and messages, open rates).

14.2 Purposes of processing

Coordination and communication regarding rental bookings, sending notifications via email, SMS, and WhatsApp, customer support and responding to inquiries, internal coordination with franchise and location partners, as well as marketing communication (only with your express consent).

14.3 WhatsApp Business

We use WhatsApp Business via the HighLevel platform to send you booking-related messages (e.g., pickup and return reminders, technical information regarding rented equipment) and support messages upon your request. Your phone number is stored in our CRM system to facilitate this communication. We do not send promotional messages via WhatsApp without your prior express consent. Communication via WhatsApp is also subject to the privacy policies of WhatsApp/Meta (https://www.whatsapp.com/legal/privacy-policy).

14.4 Data transfer to the USA

HighLevel is certified under the EU-U.S. Data Privacy Framework (DPF). In addition, we rely on Standard Contractual Clauses (SCCs) and a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR.

14.5 Legal basis

Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(a) GDPR (consent, particularly for promotional communication via WhatsApp), Art. 6(1)(f) GDPR (legitimate interest in efficient customer support).

14.6 Storage duration

Your data in the CRM system is stored for the duration of the business relationship and subsequently deleted, provided there are no statutory retention obligations to the contrary. If you withdraw your consent for communication via WhatsApp, the use of your phone number for this purpose will be stopped immediately.

14.7 Further information

HighLevel Privacy Policy: https://www.gohighlevel.com/privacy-policy

15. Newsletter

You have the option to subscribe to our newsletter via our website. For this, we require at least your email address and your declaration that you agree to receive the newsletter. You can optionally provide your name and date of birth. We use your date of birth exclusively to offer you special promotions or discounts, for example, on your birthday.

Registration follows a double opt-in procedure (i.e., after registering, you will receive a confirmation email in which you must confirm your registration again). Your email address will only be added to our distribution list after this confirmation.

We use the service Brevo to send and analyze our newsletters. The provider is Brevo GmbH (formerly Sendinblue GmbH), Köpenicker Str. 126, 10179 Berlin, Germany. The data entered for receiving the newsletter is stored on Brevo's servers within the European Union. A data processing agreement is in place with Brevo in accordance with Art. 28 GDPR. With the help of Brevo, we can analyze our newsletter campaigns, for example, whether a message was opened and which links were clicked.

You can cancel your newsletter subscription at any time via the unsubscribe link in any email or by sending a message to office@renty-event.com.

Legal basis: Your registration is based on your consent in accordance with Art. 6(1)(a) GDPR.

Brevo Privacy Policy: https://www.brevo.com/en/legal/privacypolicy/

16. Payment processing

On our website, we offer you the option to process payments for your bookings securely and conveniently via external payment service providers, including credit card (via Stripe), PayPal, and Apple Pay.

We use the payment service provider Stripe to process card payments. The contractual partner for customers in the European Economic Area is Stripe Payments Europe, Limited (SPEL), Dublin, Ireland; Stripe, Inc. or Stripe, LLC (USA) may also be involved.

16.1 Important information regarding payment processing

When you enter your payment details (e.g., credit card number, bank details, or other payment information), they are forwarded directly to the respective payment service provider. We do not have access to your full payment details at any time and do not store them in our systems. We only have access to transaction data, the payment method, the last four digits of your credit card number, the card type, and the expiration date. Data transmission is carried out exclusively via secure TLS/SSL encryption. Our external payment service providers are contractually obligated to comply with GDPR regulations and to use your data solely for processing payments.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Basis for third-country transfer (Stripe): EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses.

Stripe Privacy Policy: https://stripe.com/privacy

17. Web analysis, monitoring, and optimization

Web analysis is used to evaluate visitor traffic to our online services and may include behavior, interests, or demographic information as pseudonymous values. With the help of reach analysis, we can, for example, identify when our online services are used most frequently or which areas require optimization. We use an IP masking procedure (pseudonymization by shortening the IP address) to protect users. No clear data (such as email addresses or names) is stored; only pseudonyms are used.

17.1 Legal bases

Consent (Art. 6 para. 1 lit. a GDPR), legitimate interests (Art. 6 para. 1 lit. f GDPR).

17.2 Google Analytics

We use Google Analytics to measure and analyze the use of our online services based on a pseudonymous user identification number. Google Analytics does not log or store individual IP addresses for users from the EU.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Legal basis: Consent (Art. 6(1)(a) GDPR) Website: https://marketingplatform.google.com/intl/en/about/analytics/ Privacy Policy: https://policies.google.com/privacy Data Processing Agreement: https://business.safety.google/adsprocessorterms/ Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=en and https://myadcenter.google.com/personalizationoff

17.3 Google Tag Manager

We use Google Tag Manager for the centralized management of website tags. Google Tag Manager itself does not create user profiles, store cookies containing user profiles, or perform independent analyses. When used, the user's IP address is transmitted to Google, which is technically necessary.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Legal basis: Consent (Art. 6(1)(a) GDPR) Privacy Policy: https://policies.google.com/privacy Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses

18. Renty Playlist Generator (Spotify Integration)

18.1 What is the Renty Playlist Generator?

The Renty Playlist Generator is a web tool on our website that creates personalized Spotify playlists for your events based on your music taste. To do this, you temporarily connect your Spotify account to our application. Use of this tool is voluntary and requires your explicit consent.

18.2 What data we retrieve from Spotify

When you sign in via Spotify, we retrieve the following data via the Spotify Web API: your display name and username, your profile picture, your country of origin and subscription type, your most-listened-to artists and tracks (Top Artists & Top Tracks), as well as content from your library. This data is used exclusively by our intelligent systems to create a playlist tailored to your music taste.

Renty acts as an independent data controller regarding the personal data retrieved from Spotify. We comply with the obligations, requirements, and standards of the GDPR regarding Spotify personal data, including the level of protection, the rights of Spotify, and the rights of the data subjects.

18.3 What actions we perform on your behalf

With your explicit consent (Spotify scopes: playlist-modify-public, playlist-modify-private, ugc-image-upload), our application performs the following actions: creating playlists in your Spotify account, adding tracks to these playlists, and uploading a cover image generated by us for the created event playlist. No existing playlists are modified or deleted.

18.4 Data storage and processing

We do not store your Spotify data permanently. All retrieved information (music taste, profile information) is processed only temporarily during your active session and forwarded to our backend systems for analysis to generate the playlist. Afterward, this data is completely discarded. There is no permanent storage of your Spotify data in our databases. The required access tokens are held exclusively in your browser and become invalid once the session ends.

18.5 Disclosure to Third Parties

Spotify data is not transmitted to third parties, particularly not to advertising networks, data brokers, or other advertising-related tools. Transmission to third-party data processors (e.g., server providers) for the purpose of providing the application is only permitted in accordance with our privacy policy and the permissions granted by users. We are responsible for the actions of such third parties. Your data will not be sold or rented for advertising purposes. Communication takes place exclusively between your browser, the Spotify API, and our application.

18.6 Cookies and Tracking

The Renty Playlist Generator does not use tracking cookies for its basic functionality. Only technically necessary data (such as the secure authentication token) is temporarily stored in your browser's local storage/session storage to maintain the connection to Spotify during use.

18.7 Revoking Access

You can revoke our application's access to your Spotify account at any time. Once disconnected, no further personal data will be requested or processed, and any data already retrieved will be deleted. To do this, go to https://www.spotify.com/account/apps/ in your Spotify account and remove the "Renty DJ-AI" app from the list of connected apps. After revocation, we will no longer have any access to your account.

18.8 Legal Basis

Your Spotify data is processed exclusively on the basis of your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, which you grant by authorizing via Spotify. You can revoke your consent at any time (see 18.7).

18.9 Further Information

Spotify Privacy Policy: https://www.spotify.com/legal/privacy-policy/
Spotify Developer Terms: https://developer.spotify.com/terms
Spotify Developer Policy: https://developer.spotify.com/policy

19. Online Marketing (Google Ads, Meta Pixel)

We process personal data for online marketing purposes, which includes, in particular, the placement of advertising and the measurement of its effectiveness. For these purposes, so-called user profiles are created and stored in cookies or similar methods are used. Users' IP addresses are stored, although we use IP masking procedures (pseudonymization) to protect users. In general, no clear data is stored, only pseudonyms.

19.1 Legal Bases

Consent (Art. 6 para. 1 lit. a GDPR), legitimate interests (Art. 6 para. 1 lit. f GDPR).

19.2 Google Ads and Conversion Tracking

Online marketing procedures for the purpose of placing advertisements within the Google advertising network. We measure the conversion of the ads, but we only receive anonymous information and no personal data about individual users.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal bases: Consent (Art. 6 para. 1 lit. a GDPR), legitimate interests (Art. 6 para. 1 lit. f GDPR)
Privacy policy: https://policies.google.com/privacy
Basis for third-country transfers: Data Privacy Framework (DPF)

19.3 Google Ads Remarketing

Users who visit our online service may be added to a pseudonymous remarketing list to receive targeted advertisements on other online platforms.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
Privacy policy: https://policies.google.com/privacy
Basis for third-country transfers: Data Privacy Framework (DPF)

19.4 Meta Pixel (Facebook Pixel)

We use the Meta Pixel on our website. The Meta Pixel is a code snippet that measures the effectiveness of our advertising by tracking actions users take on our website after viewing or clicking on a Meta ad. The Meta Pixel is used to measure the effectiveness of our Meta advertising campaigns (conversion tracking), to create target groups for future advertising campaigns (Custom Audiences, Lookalike Audiences), and to display personalized ads on Meta platforms (Facebook, Instagram) (remarketing).

Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland Legal basis: Consent (Art. 6(1)(a) GDPR) Privacy policy: https://www.facebook.com/privacy/policy/ Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses Opt-out options: https://www.facebook.com/adpreferences/ad_settings and https://www.youronlinechoices.com/

20. Use of Google Maps

Our website uses Google Maps to visually display geographical information (e.g., locations of our franchise partners). When using Google Maps, Google collects data about how visitors use the map features.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Legal basis: Art. 6(1)(a) GDPR (consent) Privacy policy: https://policies.google.com/privacy Basis for third-country transfers: Data Privacy Framework (DPF)

21. Embedding YouTube videos

We embed YouTube videos on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). When you visit a page with an embedded YouTube video, a connection to YouTube's servers is established, during which your IP address, among other things, is transmitted. Where possible, we use YouTube's "privacy-enhanced mode" ("youtube-nocookie"), which only triggers the storage of cookies when a video is played.

Purpose: Attractive presentation of our content. Legal basis: Consent (Art. 6(1)(a) GDPR). Basis for third-country transfers: Data Privacy Framework (DPF). Privacy policy: https://policies.google.com/privacy

22. Social media presence

We maintain a presence on social networks (e.g., Instagram, TikTok, YouTube, Facebook) to communicate with users and provide information about our services. The operators of these networks process your data (e.g., usage behavior, interactions with our posts) for their own purposes (e.g., market research, advertising). Data may also be processed outside the EU in this context. For details on data processing by the operators, please refer to their respective privacy policies.

Regarding the processing of usage and interaction data on our pages, a joint controllership pursuant to Art. 26 GDPR may exist between us and the respective network operator. The essential contents of the corresponding agreements on joint controllership are provided by the network operators.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in public relations and communication).

Note: For information requests and the assertion of data subject rights, please contact the operators of the respective networks directly. You may also contact us if necessary.

23. Links to third-party websites

Our website may contain links to third-party websites and applications. Access to and use of such linked websites are not governed by this privacy policy, but by the privacy policies of those third parties. We assume no responsibility for the data protection practices of such third-party websites.

24. Children and minors

Our services are not directed at individuals under the age of 18, and we do not knowingly collect personal data from children under 18. If we discover that a person under 18 has submitted personal data to us, we will delete this information immediately.

25. Changes and updates to this privacy policy

We reserve the right to update this privacy policy as needed to reflect changes in legal requirements, technical developments, or modifications to our services and the tools we use. The version published on our website at any given time is the one that applies. We will inform you of any significant changes where required by law.

‍

Geschenk

Jetzt 10% Rabatt sichern

Jederzeit abmeldbar. Ausgenommen sind bereits reduzierte Aktionspakete.

Fast geschafft!

Wir haben dir eine Mail geschickt, bitte bestätige sie um den Rabattcode zu erhalten.

Dein Rabattcode