Privacy Policy
Draft — contains placeholders and must be reviewed by a lawyer and completed with the operator's details before launch.
1. Controller
The controller for this processing is [company, address, email].
2. What we process
- Account data: email address, name, optional city, profile picture, chosen language.
- Listings: title, description, photos, price, liability amount, pickup address.
- Location: your approximate position to sort nearby offers. Publicly, a listing only shows a position deliberately offset by several hundred metres; the exact address is shared with the renter only after a booking has been accepted.
- Booking and handover data: periods, prices, confirmations and the photos both sides take at handover and return (including timestamps). They serve as evidence in case of damage.
- Reviews and reports you submit.
3. Purposes and legal bases
Processing is based on performance of the user contract (Art. 6(1)(b) GDPR), on legitimate interests in fraud prevention and evidence preservation (Art. 6(1)(f) GDPR) and, where applicable, on legal obligations (Art. 6(1)(c) GDPR).
4. Recipients and processors
- Supabase (database, authentication, file storage), servers in the EU.
- OpenStreetMap/Nominatim and CARTO for geocoding and map tiles.
- [Payment provider, once payments are live]
- [Website hosting provider]
5. Retention
Account data is kept while your account exists. Booking, handover and damage records are kept for the duration of potential claims and statutory retention periods: [periods to be completed].
6. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority. Contact [contact email].
7. Cookies
This website sets no tracking cookies. The app stores only technically necessary information (login session, language and theme choice) locally on your device.