Privacy policy

Introduction

Data is the basis for us to provide an excellent service. However, our most important asset is the trust of our customers. Protecting customer data and only using it in the way that our customers expect from us and that is prescribed by law is a top priority for us. That is why it goes without saying that we comply with the statutory provisions on data protection. It is also important to us that you always know when we store which data and how we use it.

Data collection + web tracking

We only store your personal data via our website if you provide it to us voluntarily, e.g. when you contact us via our web form, submit an online application or enter into a contract. You will be informed in the respective input and contact forms about the purposes of the collection of the data collected there; alternatively, this is done in this privacy policy.

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians.

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to data collection by Google Analytics
Alternatively, you can prevent the collection of data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website: Deactivate Google Analytics.
The opt-out cookie is only valid for this browser and only for this domain. If you delete your cookies in this browser, you must click this link again.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

If you visit our website and use other Google services offered, such as Google Maps, the data protection conditions of the respective provider apply: https: //www.google.com/intl/ALL/policies/privacy/index.html
STARCAR itself has no influence on the use of your data by the respective service provider.

You can also prevent this collection by using other suitable additional programs / script blockers such as Ghostery(https://www.ghostery.com/).

General server log files

We automatically collect and store information that your browser transmits to us in the server log files. These are
 

  • Browser type / version
  • operating system used
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer (IP address)
  • Time of the server request


This data cannot be assigned to specific persons. This data is not merged with other data sources and is deleted at regular intervals. This data is already collected by the web server functions and is only analyzed by us in exceptional cases for reasons of securing our website.

Use of data

The personal data that you provide to us via our website or by e-mail (e.g. your name and address or your e-mail address) will only be processed for correspondence with you and only for the purpose for which you have provided us with the data.

The information collected on this website will be forwarded to the responsible unit within our company. We assure you that we will not pass on your personal data to third parties beyond this, unless we are legally obliged to do so or you have given us your prior consent.

If we use service providers to carry out and handle processing operations, the contractual relationships are regulated in accordance with the provisions of the Federal Data Protection Act.

hCaptcha

On our website, we use the hCaptcha technology of the provider Intuition Machines Inc (350 Alabama St, San Francisco, CA 94110, USA) to protect your data and to secure the transmission of forms. The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest in processing your (personal) data (IP address, browser type, internet service provider, platform type, device type, operating system, date and time stamp of access or mouse movements made) is to protect our website from being overloaded by automated data entry via bots and from SPAM.

This technology is intended to ensure that data is entered on our website (for example in a contact form) by a human and not by an automated program. The data is deleted as soon as it is no longer required for the purposes of processing. Further information can be found in the hCaptcha privacy policy (https://www.hcaptcha.com/privacy). We have no knowledge of the details of this data processing and have no influence on it.

We cannot rule out the possibility of data being passed on to other recipients within the hCaptcha group of companies in countries outside the EU that do not offer an adequate level of data protection (in particular in the USA).

WhatsApp

If you use WhatsApp to contact us, we will process your telephone number, your name and other data provided by you in order to answer your request and reserve vehicles or, if you have expressly agreed, to send you promotional messages.

To send and receive messages via our various communication channels, including WhatsApp, we use the Superchat service of SuperX GmbH, Oranienburger Str. 91, 10178 Berlin ("Superchat"). The data is stored on our behalf on Superchat servers in Germany.

The WhatsApp service is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp"), a group company of Meta Platforms, Inc (formerly Facebook). WhatsApp processes the data in accordance with its privacy policy, which you can access here. The communication content is end-to-end encrypted. WhatsApp may also collect other so-called "metadata", which may contain information about the identity of the sender and recipient, as well as the telephone number, device information and information about the use of WhatsApp (e.g. duration and frequency). WhatsApp also uses this data for its own purposes, such as improving the WhatsApp service. Further information can be found in the WhatsApp privacy policy. We have no knowledge of the details of this data processing and have no influence over it. We cannot rule out the possibility of data being passed on to other recipients within the Meta group of companies in countries outside the EU that do not offer an adequate level of data protection (in particular in the USA).

The legal basis for data processing by us is

  • Art. 6 para. 1 lit. b) GDPR, if the communication serves to initiate or process a contractual relationship;
  • Your consent pursuant to Art. 6 para. 1 lit. a) GDPR if you have registered to receive the newsletter via WhatsApp
  • and in all other cases our legitimate interest pursuant to Art. 6 (1) (f) GDPR in processing your request.


If the processing is based on your consent, the data will be deleted as soon as you withdraw your consent. You can revoke your consent at any time by sending a message with the content "Stop" in the chat or an e-mail to datenschutz@sces-group.de.

Otherwise, we will delete your data as soon as the purpose of the processing no longer applies (e.g. the inquiry has been conclusively answered). If statutory retention periods prevent deletion, the data will be blocked for further use until the retention period has expired.

Telegram

If you use Telegram to contact us, we process your telephone number, your Telegram user name, your name if applicable and other data provided by you in order to answer your request and reserve vehicles or, if you have expressly consented, to send you promotional messages.

To send and receive messages via our various communication channels, including Telegram, we use the Superchat service of SuperX GmbH, Oranienburger Str. 91, 10178 Berlin ("Superchat"). The data is stored on our behalf on Superchat servers in Germany.

The operator of the Telegram service is Telegram Messenger LLP, 71-75 Shelton Street, Covent Garden, London, United Kingdom ("Telegram"). Telegram processes the data in accordance with its privacy policy, which you can access here. Telegram communication is generally not encrypted. We would like to point out that Telegram accesses the address book of the device used and the contact data stored therein. Telegram may also collect other so-called "metadata", which may contain information about the identity of the sender and recipient, as well as the telephone number, device information and information about the use of Telegram (e.g. duration and frequency). Telegram also uses this data for its own purposes, such as improving the Telegram service. Details can be found in the Telegramprivacy policy. The data may be passed on by Telegram to other recipients within the Telegram group of companies (in particular Telegram Group Inc. and Telegram FZ-LLC) and may also be processed on servers in countries outside the EU that do not offer an adequate level of data protection. We have no knowledge of the details of this data processing and have no influence on it.

The legal basis for data processing by us is

  • Art. 6 para. 1 lit. b) GDPR, if the communication serves to initiate or process a contractual relationship;
  • Your consent pursuant to Art. 6 para. 1 lit. a) GDPR if you have registered to receive newsletters via Telegram
  • and in all other cases our legitimate interest pursuant to Art. 6 (1) (f) GDPR in processing your request.


If the processing is based on your consent, the data will be deleted as soon as you withdraw your consent. You can revoke your consent at any time by sending a message with the content "Stop" in the chat or an e-mail to datenschutz@sces-group.de.

Otherwise, we will delete your data as soon as the purpose of the processing no longer applies (e.g. the inquiry has been conclusively answered). If statutory retention periods prevent deletion, the data will be blocked for further use until the retention period has expired.

Facebook Messenger

If you use Facebook Messenger to contact us, we process personal data that is required for contacting, communicating and reserving a vehicle. Facebook grants us access to your "public information", which includes, for example, your name, gender, Facebook ID and your profile and cover pictures. We use this information to respond to your request or, if you have expressly consented, to send you promotional messages.

To send and receive messages via our various communication channels, including Facebook Messenger, we use the Superchat service provided by SuperX GmbH, Oranienburger Str. 91, 10178 Berlin ("Superchat"). The data is stored on our behalf on Superchat servers in Germany.

Facebook is a service of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"), a company of the Meta Group. Facebook processes the data in accordance with its privacy policy, which you can access here. Facebook offers the option of end-to-end encryption of communication, which can be activated in the Messenger settings. We would like to point out that Facebook may collect so-called "metadata", which may contain information about the identity of the sender and recipient, as well as the location, device information and information about the use of Facebook Messenger (e.g. duration and frequency). Facebook also uses this data for its own purposes, such as improving Facebook Messenger. Further information can be found in the Facebook privacy policy. We have no knowledge of the details of this data processing and have no influence on it. We cannot rule out the possibility of data being passed on to other recipients within the Meta group of companies in countries outside the EU that do not offer an adequate level of data protection (particularly in the USA).

The legal basis for data processing by us is

  • Art. 6 para. 1 lit. b) GDPR, if the communication serves to initiate or process a contractual relationship;
  • Your consent pursuant to Art. 6 (1) (a) GDPR if you have registered to receive newsletters via Facebook Messenger
  • and in all other cases our legitimate interest pursuant to Art. 6 (1) (f) GDPR in processing your request.


If the processing is based on your consent, the data will be deleted as soon as you withdraw your consent. You can revoke your consent at any time by sending a message with the content "Stop" in the chat or an e-mail to datenschutz@sces-group.de.

Otherwise, we will delete your data as soon as the purpose of the processing no longer applies (e.g. the inquiry has been conclusively answered). If statutory retention periods prevent deletion, the data will be blocked for further use until the retention period has expired.

Instagram Direct Messenger

If you use Instagram Direct Messenger to contact us, we process personal data that is required for contacting, communicating and reserving a vehicle. Instagram grants us access to the username you have chosen. We use this information to respond to your request or, if you have expressly consented, to send you promotional messages.

To send and receive messages via our various communication channels, including Instagram Direct Messenger, we use the Superchat service provided by SuperX GmbH, Oranienburger Str. 91, 10178 Berlin ("Superchat"). The data is stored on our behalf on Superchat servers in Germany.

Instagram is a service of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, a company of the Meta Group. Instagram processes the data in accordance with its privacy policy, which you can access here. Please note that Instagram collects the content provided by its users, including communication content, as well as other information such as location, device information and information on the use of Instagram (e.g. duration and frequency) in accordance with the information in the Instagram Privacy Policy. Instagram also uses this data for its own purposes, such as improving the Instagram service. Further information can be found in the Instagram privacy policy. We have no knowledge of the details of this data processing and have no influence on it. We cannot rule out the possibility of data being passed on to other recipients within the Meta group of companies (e.g. Facebook) and external third parties (e.g. advertising partners and analysis services) in countries outside the EU that do not offer an adequate level of data protection (in particular in the USA).

The legal basis for data processing by us is

  • Art. 6 para. 1 lit. b) GDPR, if the communication serves to initiate or process a contractual relationship;
  • Your consent pursuant to Art. 6 (1) (a) GDPR if you have registered to receive newsletters via Instagram Messenger
  • and in all other cases our legitimate interest pursuant to Art. 6 (1) (f) GDPR in processing your request.


If the processing is based on your consent, the data will be deleted as soon as you withdraw your consent. You can revoke your consent at any time by sending a message with the content "Stop" in the chat or an e-mail to datenschutz@sces-group.de.

Otherwise, we will delete your data as soon as the purpose of the processing no longer applies (e.g. the inquiry has been conclusively answered). If statutory retention periods prevent deletion, the data will be blocked for further use until the retention period has expired.

Google Business Messages

If you contact us via our company profile on Google or another Google service (e.g. Maps), we process personal data that is required for establishing contact, communication and vehicle reservations. Google grants us access to the user name you have chosen. We use this information to respond to your request or, if you have expressly consented, to send you promotional messages.

To send and receive messages via our various communication channels, including Google Business Messages, we use the Superchat service of SuperX GmbH, Oranienburger Str. 91, 10178 Berlin ("Superchat"). The data is stored on our behalf on Superchat servers in Germany.

Google Business Messages is a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), a company of the Google Group. Google processes the data in accordance with its privacy policy, which you can accesshere. We have no knowledge of the details of this data processing and have no influence on it. We cannot rule out the possibility of data being passed on to other recipients within the Google group of companies in countries outside the EU that do not offer an adequate level of data protection (particularly in the USA).

The legal basis for data processing by us is

  • Art. 6 para. 1 lit. b) GDPR, if the communication serves to initiate or process a contractual relationship;
  • Your consent pursuant to Art. 6 (1) (a) GDPR if you have registered to receive newsletters via Instagram Messenger
  • and in all other cases our legitimate interest pursuant to Art. 6 (1) (f) GDPR in processing your request.


If the processing is based on your consent, the data will be deleted as soon as you withdraw your consent. You can withdraw your consent at any time by sending an email to datenschutz@sces-group.de.

Otherwise, we will delete your data as soon as the purpose of the processing no longer applies (e.g. the inquiry has been conclusively answered). If statutory retention periods prevent deletion, the data will be blocked for further use until the retention period has expired.

Sentry

On our website, we use the Sentry analysis service of the provider Functional Software, Inc. d/b/a Sentry (45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) to monitor and ensure the technical stability of web, mobile and server applications and to detect and analyze program errors. The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest in processing your (personal) data (IP address, operating system/browser, programming language, causes of errors, time of error, server, HTTP headers) is to enable you to use our website and the services offered on it without technical errors.

The data is deleted as soon as it is no longer required for the purposes of processing. further information on the purpose and scope of data collection and its processing by Sentry can be found in Sentry's privacy policy (https://sentry.io/privacy/). Sentry also processes your data in countries outside the EU (in particular in the USA) that do not offer an adequate level of data protection.

Data use in the licensee business

Licensees are legally independent companies that cooperate with STAR CAR GmbH Kraftfahrzeugvermietung. Licensees are marked with the word "Licensee" on this website. The licensees are solely responsible for the further processing of your data by these licensees.

If you make a booking for a licensee, the information collected on this website will be forwarded to the respective licensee. When booking a rental via this website with one of our licensees, you expressly declare your consent to the forwarding of the data relevant to this rental process.

Consent and revocation, right to information

If you have provided us with personal data, you can have it deleted at any time. Data for billing and accounting purposes are not affected by a termination/revocation or deletion.

Personal data provided to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Insofar as retention periods under commercial and tax law must be observed, the storage period for certain data may be up to 10 years.

If you no longer agree to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) if instructed to do so. You have the right to information about the data stored about you, its origin and recipients and the purpose of storage at any time.

Please address your revocation or questions about data protection in our company as well as possible requests for information directly to our external data protection officer: HEGO Informationstechnologie GmbH, Telegrafenstrasse 8 in 42929 Wermelskirchen Phone: 02196 / 88 29 7-55, e-mail: dsb@hego-it.com, Web: https:. Please state in your request that it relates to STARCAR in order to avoid queries.

Rights of the data subjects

You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.

In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR.

You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other controllers.

You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.

Newsletter

If you would like to receive the newsletter offered on the website, we require a valid email address from you. The indication of your name is optional and is only necessary for a correct salutation (but not mandatory!). After entering your e-mail address on our website to register for the newsletter, you will receive an e-mail with an activation link. Only if you click on this activation link will your e-mail address from the registration be activated for the newsletter subscription, so-called double opt-in procedure. If you do not activate it, we will delete your e-mail address from the preliminary stage after 14 days at the latest.

At the end of each newsletter sent, you will find a link to unsubscribe from the newsletter at any time. Your entry will then be deleted automatically. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time.

Contact form / email inquiries

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be transmitted to us and stored for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent. Your details will only be processed and used to respond to your request. Provided that it is not subject to a statutory retention obligation, it will be deleted after your request has been completed. This also applies to inquiries that you send us by email.

Job applications

We occasionally advertise vacancies on our website. You are welcome to apply for these job advertisements. Please note that electronic mail is not secure. In terms of data protection, an e-mail has the protection value of a postcard. If you want to rule out potential misuse during transmission, either use letter post or protect your attachments with a password, which you provide to us separately.
Your personal data will only be used as part of the application process to select suitable candidates. As soon as the position has been filled, your documents will be deleted from our systems after a period for the defense against legal disputes has expired (after 6 months at the latest). They will explicitly not be used for advertising purposes. If we were unable to consider your application, but it could be of interest for future vacancies, we will ask you electronically for your consent to be included in our job pool.

Cookies

Some of our Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used exclusively to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

 

  • zid - Session ID of the application, e.g. to enable a reservation in several steps and to be able to identify the user again here - Expires when the browser is closed
  • voucher_code - Is set if a discount code is available by navigating to a specific page. The discount code is then automatically used in the reservation process and the price is reduced - Expires after 1 day
  • estimatedPrice - Contains details of the reservation such as the estimated rental price - Expires when the browser is closed
  • cookie_note_shown - Saves whether the note "This website uses cookies to provide you with a better browsing experience." has already been seen and confirmed. - Expiration time 365 days
  • _ga - Google Analytics - Registers a unique ID that is used to generate statistical data on how the visitor uses the website - expires after 2 years
  • _gcl_au - Google Ads Conversion Tracking - Registers a unique ID that is used to display the actions of users who visit the website after clicking on an ad - Expires after 3 months
  • _gcl_aw - Google Ads Conversion Tracking - This cookie is set when a user reaches the website by clicking on a Google ad. It contains information about which ad was clicked so that successes achieved can be assigned to the ad - expires after 3 months
  • _gac_UA-# - Google Adwords - This cookie is set when a user accesses the website by clicking on a Google ad. It contains information about which ad was clicked so that successes achieved can be assigned to the ad - expiration time 90 days
  • _fbp - Facebook Pixel - Used by Facebook to display a range of advertising products, for example real-time bids from third-party advertisers - expires after 3 months
  • belboon_tracking_id - Is set if a "belboon" parameter has been set in the URL, e.g. through a link on an external page. The information is transferred to Starcar with a reservation and is used to assign the reservation to an advertising partner - expiry time 90 days


Updating this privacy policy

If we introduce new products or services, change Internet procedures or if Internet and IT security technology develops further, this "Data Protection Declaration" will be updated. We therefore reserve the right to amend or supplement the declaration as required. We will publish the changes here. You should therefore visit this website regularly to find out about the current status of the privacy policy.

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Liability

All information contained on this website has been checked with great care. However, we cannot guarantee that the content of our own websites is correct, complete and up to date at all times.

Data security

The Internet is generally regarded as an insecure medium. Compared to telephone lines, for example, data transmitted via the Internet can be more easily intercepted, recorded or even altered by unauthorized third parties.

Further information

Your trust is important to us. That is why we are always available to answer any questions you may have regarding the processing of your personal data. If you have any questions that are not answered by this data protection declaration or if you would like more detailed information on any point, please contact our data protection officer at any time.

Concluding remarks

We guarantee the confidentiality and security of your personal data by

  • we use your personal data, insofar as you provide it to us via our website or in the context of e-mail communication, only to fulfill your request or concern,
  • our employees are obliged to maintain confidentiality,
  • our security precautions correspond to the current state of the art to an appropriate extent,
  • our systems are regularly checked for security so that we can provide long-term protection against any damage, loss or access to data held by us,
  • and our data protection officer ensures compliance with the "Privacy Policy".
© 2024 STARCAR Car rental