Privacy policy
MietwagenCheck/ Driveboo AG
Status: 18.04.2023 Time: 10:0
We are pleased that you are visiting our website. The protection of your personal data ( in the following also "data") is very important to us, which is why we provide you with all relevant information concerning the collection and processing of your data within the framework of this data protection declaration. The criterion of transparency is of greatest relevance. However, if you have any questions or comments, please feel free to contact us at privacy@driveboo.com.
I. General
Your personal data will be processed in accordance with Swiss and European data protection law and only to the extent necessary.
There is no contractual or legal obligation for you to provide your personal data at any time. However, failure to provide it may result in us not being able to provide parts of our services or not being able to provide them in the same form and quality.
1. Scope of application of the data protection declaration
With this data protection declaration, we inform you about how we process your data when you
- one of our websites, available at https://www.mietwagen-check.de/.at/.ch/.ch/fr/.ch/it/ and https://www.driveboo.co.uk/.com/.fr/.it/.es/.mx/. com.ar/.com/spa/.nl/.be/.be/fr, including all subdomains operated under these domains, or use
- make use of our services and offers via one of our websites or in any other way, e.g. by telephone or chat.
2. The persons responsible for processing
Driveboo AG (Bahnweg 8, CH- 8589 Bottighofen, Switzerland) collects and processes your data as the data controller.
3. The data protection officer
You can contact our data protection officer by post using the contact details listed under 2 (for the attention of the Data Protection Department) or by e-mail at datenschutzbeauftragter@holidaycheck.com.
II. Personal data that we may collect and process
In the course of the services that you can make use of through our website, by telephone or in any other way, various data are collected and processed.
To make this privacy statement easier to understand, we summarize the various data under the following categories:
- Address data: Street- house number, if applicable, address additions such as postal code, city, country
- Contact data: Telephone number(s), e-mail addresses
- Personal master data: Title, title/gender, first name, last name, date of birth
- Usage data: Arises with every interaction between user and service.
- Billing data: Account data, credit card data, Paypal and other payment services
- Booking data: Data on ordered products, prices, payment, and delivery information
- Access data: Data for session identification (session ID), date and time of the request, website from which the access takes place as well as the following information of the accessing computer system:
Internet protocol address used (IP address), browser type and version, device type, operating system, and similar technical information.
III. What we do with your data
For us to provide you with the services you request, we process data about you. In the following, you will find information on the contexts in which your data is processed, as well as for what purpose and on what legal basis this is done.
1. Booking a rental car
If you inquire about booking a rental car through our website, by phone, by e-mail, by chat or in any other way, we process the necessary data to be able to provide you with the appropriate offer.
We collect and process the data of the car rental booking in order to bring about the conclusion of the contract, to carry out you’re booking and to be able to provide you with functioning support afterwards. This also includes the transfer of your data to the respective rental car provider and the other providers of the respective booked service, such as insurance companies.
You can find more details on the transfer of data in chapter IV.
If you wish to redeem a voucher granted by us as part of the booking or are entitled to a refund of part of the travel price for other reasons, we will process the data necessary for this to be able to carry out the subsequent refund.
Should a complaint arise in the context of a booking made by you, the data necessary for this purpose will be processed to handle the complaint and to support the respective local car rental company in clarifying the facts and handling the complaint.
Processed data
In the context of this process, personnel master data, contact data, payment data and booking data are collected and processed. Further data may be processed in individual cases, if necessary, as part of your correspondence with us.
Legal basis
Your personal data will be processed in accordance with Art. 6 para.1 p. 1 lit. b) DS- GVO for the performance of a contract and for the implementation of pre-contractual measures.
2. Quality assurance
Telephone conversations that you have with our hotline as part of a booking or support request may be recorded for training purposes and our internal quality assurance. However, the recording will only be made based on your prior, voluntary and explicit consent. You can revoke your consent at any time during the conversation.
Processed data
During this process, the content of the conversation, in particular personal master data, contact data, address data, payment and booking data are collected and processed.
Legal basis
Your personal data will be processed in accordance with Art. 6 para. 1 p. 1 lit. a) DS- GVO based on the consent you have given.
3. Customer service
In addition to booking, our customer service team also offers other services and is happy to help with inquiries and complaints from customers as well as interested parties.
In this context, your personal data will also be collected and processed to ensure the best possible service.
Should you wish to exercise your right to data information or data deletion, or to make any other inquiry regarding data protection, please feel free to contact us at any time at privacy@driveboo.com.
Processed data
During this process, contact data, address data, personal master data and the content of correspondence are collected and processed.
Legal basis
Your personal data is collected and processed pursuant to Art. 6 (1) p. 1 lit. f) DS- GVO based on our legitimate interest. Our legitimate interest in this respect is the processing of your personal data to ensure a functioning customer service and to be able to answer inquiries, as well as the processing and prevention of complaints and the fulfillment of the rights of the data subjects.
4. In the context of fraud prevention
We process the necessary data to prevent fraud, to resolve suspected fraud and to protect our website/services from misuse.
To prevent misuse of our website and to determine whether there is fraudulent activity, for example through automated bots, the Google- service reCaptcha of Google Inc. is used within the scope of our contact form. (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) is used for our contact form. The program reCaptcha collects data to determine whether a user is a natural person or a bot.
The actual evaluation of this application is done by Google itself, Driveboo AG has no access to the data evaluated by Google.
Processed data
Within the scope of this process, the IP address of the end device used, the date and duration of the visit, the website you visit and the landing page on which our reCaptcha is integrated, Google account if you are logged in via Google, browser, and operating system type as well as the writing task performed by reCaptcha are processed.
Legal basis
Your personal data is collected and processed in accordance with Art. 6 (1) p. 1 lit. f) DS- GVO based on our legitimate interest. The legitimate interest here is the processing of your personal data to ensure the security of our website and to protect against automated (attacks) input, as well as the prevention and investigation of suspected criminal acts.
5. Newsletter delivery
We send newsletters and other notifications with promotional information based on your consent or our legitimate interests.
Excluded from this are messages without promotional information that are sent as part of our contractual or other business relationship with our customers.
Direct advertising
If you use our services, we process the necessary data to send you advertising about our own similar services (direct advertising). Personalization of the advertising content does not take place.
You can object to this use of your data at any time with effect for the future. To do so, simply send an informal e-mail to privacy@driveboo.com. In this case, we will process your data to document your objection in our system.
Processed data
As part of this process, name, title, address data, contact data and unsubscribe date are collected and processed.
Legal basis
Your personal data is collected and processed in accordance with Art. 6 (1) p. 1 lit. f) DS- GVO based on our legitimate interest. The legitimate interest consists in the processing of your personal data to initiate business and increase sales.
6. Use of our website/ tracking
When you access or use our online services at https://www.mietwagen-check.de/.at/.ch/.ch/fr/.ch/it/ and https://www.driveboo.co.uk/.com/.fr/.it/.es/.mx/. com.ar/.com/spa/.nl/.be/.be/fr including all subdomains operated under these domains, so-called cookies and other online tracking technologies are used to process the necessary data.
Cookies are small data files that are placed on your computer by a website to automatically recognize your computer the next time you visit the website. Cookies can be used in a variety of ways: in particular, they help us to ensure and optimize important features and functionalities of our website, to find out how our customers and prospects use our websites, and to adapt our website to the presumed interests of the customer and prospects.
The data collected and processed when you use/call up our website Is not assigned to a natural person; rather, the data is pseudonymized and processed using cookie IDs or other identifiers. A reference to your other data, for example, submitted in the context of a booking, will not be established without your explicit consent.
We pass on the collected data to our partners and tracking service providers, as far as necessary in the context of the respective purposes see IV.2.
Cookies are divided into three categories depending on their purpose: functional cookies, analytical cookies, and marketing cookies.
Necessary – Cookies
These cookies are necessary for the functioning of our and must be enabled for you to use our Services.
Functional cookies are used to create modern and user-friendly websites and apps that automatically adapt to your wishes and needs, so you can easily search and book. This also includes enabling important security and access features.
Optimizing - Cookies
These cookies measure, track and analyze how customers and prospects use our website and how they act, whereas we use this analyzed information to improve our website and services.
We use the following partners and tracking service providers on our website in this context:
- Google Analytics as well as Google Tag Manager, a web analytics service provided by Google Inc. (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
For more information, please visit:
https://policies.google.com/privacy?hl=en-US
- Hotjar Ltd. a European web analytics service (Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta).
For more information, please visit: https://www.hotjar.com/legal/policies/privacy/
- New Relic Inc. a web analytics service (188 Spear Street 1200 San Francisco, CA 94105, USA).
For more information, please visit:
https://newrelic.com/termsandconditions/privacy
Marketing - Cookies
These cookies are used to provide you, as an online travel agency, with offers on the Internet that are tailored to your interests and thus help you find a suitable vacation. Furthermore, we process the necessary data to be able to display target group-oriented and interest-based advertising on our websites and those of other providers.
In this context, we use the following partners on our website:
- Google Doubleclick; Google AdSense; Google Adwords Conversion: Google products for optimizing online - marketing (Google Inc., Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
For more information, please visit:
https://policies.google.com/privacy?hl=en-US
- Ve Interactive DACH GmbH a tool for the optimization of online marketing (Französische Str. 47, 10117 Berlin)
For more information, please visit:
https://www.ve.com/legal/privacy-policy
- Criteo GmbH a European retargeting optimization tool (32 Rue Blanche, 75009 Paris, France)
For more information, please visit:
https://www.criteo.com/de/privacy/
- Awin AG a German affiliate marketing platform (Eichhornstr. 3, 10785 Berlin)
For more information, please visit:
https://www.awin.com/de/datenschutzerklarung
- Bing Ads a product of Microsoft Cor. for the optimization of online marketing
(Redmond Town Center 5, WA 98052-6399, USA)
For more information, please visit:
https://privacy.microsoft.com/de-de/privacystatement
With the marketing cookies, social media are also integrated into our website see chapter III.7.
Processed data
As part of this process, IP address, usage data, function used or activity while using our website are collected and processed.
Legal basis
The processing of your data in connection with the use of tracking technologies is based on different legal bases.
Legal basis contract Art. 6 para. 1 lit. b) DS- GVO
Insofar as data processing takes place to be able to provide a service requested by you, this is based on the necessity for the fulfillment of a contract as set out in Art. 6 (1) (b) DS-GVO.
Legal basis legitimate interest, Art. 6 para. 1 lit. f) DS-GVO
Insofar as data processing is carried out to ensure the functionality of our website, to optimize our services and to determine characteristics about the use of the website, this is based on the legitimate interest set out in Art. 6 para. 1 lit. f) DS- GVO.
The interests pursued are the following:
- To statistically determine characteristic values about the use of our services (range, intensity of use, surfing behavior of users).
- To ensure that our website/services are operated in a manner that is in line with our interests and makes economic sense
- To ensure the functionality of our website
- Profiling and/ or personalization of advertising and other content is based solely on your consent and not within the scope of our legitimate interests.
Legal basis consent Art. 6 para. 1 lit. a) DS-GVO
Insofar as data processing is carried out to be able to display optimized and personalized advertising and content to you, this is based on the consent recorded in Art. 6 (1) a) DS-GVO and given by you in advance.
Your consent
You have the option at any time to consent in whole or in part to the processing for the collection and processing of your data by means of cookies or to revoke any consent you have given in advance. For this purpose, you can object to the processing of your data on our website in the footer under the heading 'Cookies'. By the revocation of consent, the legality of the agreement made based on the consent until the revocation is not affected.
7. Social media
We offer online services on various social media platforms (Facebook, Instagram, Twitter, Pinterest, YouTube) to thereby get in touch with you and provide information for you.
If you use the fan pages of our social media, personal data will be exchanged between Driveboo AG and the respective social network.
When processing the data, Facebook, and Instagram in particular act in conjunction with Driveboo AG as joint controllers pursuant to Art. 26 DS-GVO.
Detailed information about data processing in the data protection area of responsibility of the respective social network, as well as options for objection, privacy settings, and the rights of data subjects, can be found in the corresponding data protection information of the respective platform operator.
Facebook
Under the following link https://www.facebook.com/Driveboo we operate a Facebook fan page of Facebook Inc. (1601 Willow Road, Menlo Park, CA,94025, USA).
For data processing within the scope of this fan page, the agreement is available at https://www.facebook.com/legal/terms/page_controller_addendum as well as the privacy policy at https://www.facebook.com/policy.php.
Instagram
Under the following link https://www.instagram.com/driveboo/ we operate an Instagram fan page of Instagram Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
For data processing within the scope of this fan page, the agreement is available at https://www.facebook.com/legal/terms/page_controller_addendum as well as the data protection declaration at https://www.facebook.com/help/instagram/155833707900388.
Twitter
Under the following link https://twitter.com/driveboo, we operate a Twitter fan page of Twitter Inc. (1355 Market Street, Suite 900, San Francisco CA 94103, USA).
For data processing in the context of this fan page, the data protection declaration is available at https://twitter.com/de/privacy.
Pinterest
Under the following link https://www.pinterest.de/pin/428686458284158609/, we operate a Pinterest online pinboard of Pinterest Inc. (651 Brannan Street, San Francisco 94103, USA).
For data processing in the context of this fan page, the privacy policy is available at https://policy.pinterest.com/en/privacy-policy.
YouTube
Under the following link https://www.youtube.com/channel/UCOQqUzPn4FokuSChXfWW9oA we operate a YouTube channel of YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA).
For data processing in the context of this fan page, the privacy policy is available at https://policies.google.com/privacy?hl=en-US.
Data Processed
In the context of this process, name, e-mail address or similar data necessary to respond to the request and contact are collected and processed.
Legal basis
Your personal data is collected and processed on the legal basis of our legitimate interest as set out in Art. 6 (1) p. 1 lit. f) DS- GVO. The legitimate interest here is the processing of your personal data to ensure the operation of our fan pages as well as to ensure the effective use of an information and communication opportunity.
8. Participation in raffles
If you participate in a sweepstake conducted by us, we process the data required for this purpose to properly conduct the sweepstakes and, if applicable, to be able to hand over the promised prize to you.
Processed data
During this process, personal master data, contact data, address data, data for checking the eligibility to participate are collected and processed.
Legal basis
Your personal data will be processed in accordance with Art. 6 (1) lit. b) DS- GVO for the performance of a contract. The purpose is to carry out the competition and, if applicable, a subsequent prize distribution.
IV. When and how we transfer your data
1. Transmission to external service providers
Insofar as Driveboo AG transfers personal data to external service providers, such as hosting and software service providers, payment service providers or service providers within the scope of car rental bookings or for the provision of technical services for the Driveboo AG websites, to the extent permitted by law or within the scope of the user's consent, these service providers are bound by instructions and strictly adhere to the specified purposes of the processing.
2. Transmission to other responsible parties
When you make a booking with us, it is necessary to pass on the data you have provided to our partner car rental agencies and other providers of the booked services, such as insurance service providers and corresponding intermediaries. These are not service providers but are to be considered as independent data controllers in the sense of Art. 4 No. 7 DS- GVO.
3. Transmission to authorities
If we are obliged to do so based on a law or other regulations or the decision of an authority or court, we will pass on data to authorities or other third parties to the extent necessary.
4. Transmission to third countries
A transfer to third countries only takes place within the scope of and in compliance with the permissibility requirements of Art. 44-49 DS-GVO. Accordingly, a transfer takes place only based on an adequacy decision of the EU Commission or we ensure an adequate level of data protection through the EU standard data protection clauses.
If you book a rental car or other service that has a reference to a provider in a third country, we cannot guarantee an adequate level of data protection in every case. In that case, the transfer of data for the purpose of carrying out the booking is based on Art. 49 (1) b) DS-GVO.
V. Duration of data storage
As a matter of principle, your personal data will only be stored by us for as long as is necessary for the purposes stated in this data protection declaration. In the context of storage, these are primarily such purposes that serve the fulfillment of our legal and contractual obligations. We may also have to store your personal data beyond this period if other relevant legal standards explicitly require longer retention periods and obligations, such as those from the German Commercial Code or Tax Code. Your data will also be stored longer if this is necessary for the assertion, exercise or defense of legal claims.
1. Booking data incl. ratings
Data that we collect and process in the context of booking a rental car, we store for a period of 10 years after return of the rental car. Payment data will be deleted after 72 h at the latest. The data is stored for verification purposes and to fulfill the legal obligations of Driveboo AG.
2. Customer data
Customer data that we collect and process while booking a rental car is stored for 3 months, after which it is anonymized. It is then no longer possible to establish a reference to a natural person.
3. Lottery data
Data that we collect and process in the context of your participation in a competition, we store up to 1 year after the end of the implementation of the competition.
4. Voucher coupons
Data that we collect and process as part of the creation and payment of a voucher, we store for 16 months after the return of the rental car. If the coupon is not redeemed, the data will be stored until the coupon is no longer valid.
VI. Your rights
If the respective conditions are met, you have the following rights as a data subject according to the DS-GVO: right to information about the stored data (Art. 15 DS-GVO), right to correction of inaccurate data (Art. 16 DS-GVO), right to deletion of data (Art. 17 DS-GVO), right to restriction of data processing (Art. 18 DS-GVO), right to object to unreasonable data processing (Art. 21 DS-GVO), right to data portability (Art. 20 DS-GVO).
If you wish to exercise your right, please feel free to contact the contact persons listed above or send an informal mail to privacy@driveboo.com.
VII. Processing of personal data on the basis of the provisions of the DSA
We support the objectives and efforts of the Digital Services Act (Regulation (EU) 2022/2065 of the European Parliament and of the Council of October 19, 2022 on a single market for digital services and amending Directive 2000/31/EC, "DSA"), which is intended to ensure better protection of users in the online sector.
Due to the requirements of the DSA, we are obliged to provide separate reporting and transparency channels. If you contact us in this context or we contact you in this context, the processing of your personal data is mandatory. We would also like to inform you that we are obliged under the provisions of the DSA to remove certain content and, if necessary, to report or cooperate with the competent authorities or out-of-court dispute resolution bodies. If you are affected by such a measure or report such content, the processing of your personal data is also necessary in order to comply with the legal requirements.
1. purpose of data processing and legal basis and, if applicable, legitimate interests, storage period
Data category:
Personal master data, address data, contact data, information in connection with a complaint or report.
Intended purpose:
Processing is carried out for the purpose of providing our separate reporting and transparency channels and for processing any reports and/or complaints. In addition, your personal data is also processed in individual cases for the purpose of communicating and processing the report with the competent authorities or out-of-court dispute resolution bodies.
Legal basis:
Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with Art. 11 et seq. DSA
Storage period:
Personal data will be deleted as soon as their further processing is no longer necessary for the respective purpose and statutory retention obligations do not prevent deletion. Data may be stored beyond the specified period in the event of an (impending) legal dispute with you or other legal proceedings. Legal requirements for the storage and deletion of personal data remain unaffected by the above.
2. recipients of the personal data
- IT service providers
- Authorities and courts
- Out-of-court dispute resolution bodies
- Other users of the service
Translated with DeepL.com (free version)
VIII. Changes to this privacy policy
This privacy notice replaces all previous versions. We are continually working to improve existing services and develop new ones, so regulatory changes to our Privacy Notice may be made from time to time to ensure that you always receive the most up-to-date information regarding your personal information.
If significant changes are made to our privacy policy, we will of course notify you electronically of these changes. We also recommend that you re-open and read our data protection declaration at certain intervals to ensure that you are always up to date.
