1. Controller

The controller within the meaning of the General Data Protection Regulation and other applicable data protection laws is:

Funkmietwagen Charly’s Citycar®
Owner: Ronald Frei e. K.
Burgstraße 8
56068 Koblenz
Germany

Telephone: +49 (0) 261 / 33 6 33
Telephone: +49 (0) 261 / 18 1 19
Fax: +49 (0) 261 / 30 99 68
Email: info@charlys-citycar.de

2. General Information on Data Processing

We process personal data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation, the German Federal Data Protection Act and the German Telecommunications Digital Services Data Protection Act.

Personal data means any information relating to an identified or identifiable natural person.

We process personal data in particular:

• to provide and securely operate our website,

• to process enquiries,

• to communicate with customers and interested parties,

• to plan and provide transportation services,

• to process advance journey bookings,

• to prepare quotations and process contracts,

• to comply with legal obligations,

• to ensure the security and stability of our technical systems.

Processing is carried out in particular on the following legal bases:

• Article 6(1)(a) GDPR, where you have given us your consent,

• Article 6(1)(b) GDPR, where processing is necessary to take steps prior to entering into a contract or to perform a contract,

• Article 6(1)(c) GDPR, where we are subject to a legal obligation,

• Article 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests or those of a third party and such interests are not overridden by the interests of the data subject.

3. Provision of the Website and Hosting

Our website is operated by a technical hosting service provider. When the website is accessed, the web server automatically processes data required to deliver the website and ensure technical security.

In particular, the following data may be processed:

• IP address of the accessing device,

• date and time of access,

• page or file accessed,

• volume of data transferred,

• referrer URL,

• browser type and browser version,

• operating system,

• host name of the accessing device,

• messages concerning successful or unsuccessful access.

The data is processed for the purposes of technical provision, system security, error analysis and preventing abusive or unlawful access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.

Server log data is deleted as soon as it is no longer required for the purposes stated, unless security-related incidents make longer storage necessary.

Where required, a data processing agreement pursuant to Article 28 GDPR has been concluded with the hosting service provider.

4. Contact by Telephone, Email or Fax

If you contact us by telephone, email or fax, we process the information you provide in order to handle your enquiry.

In particular, the following data may be processed:

• name,

• telephone number,

• email address,

• fax number,

• content and time of the enquiry,

• information concerning the requested journey,

• other information voluntarily provided.

Where your enquiry relates to the initiation or provision of a transportation service, processing is carried out on the basis of Article 6(1)(b) GDPR.

In other cases, processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to customer and prospective customer enquiries.

The data is deleted as soon as it is no longer required to process your enquiry and provided that there are no statutory retention obligations or other legitimate grounds for continued storage.

5. Advance Journey Bookings and Contact Form

You can use our website to book a journey in advance or submit a journey enquiry.

In particular, the following information may be processed:

• requested type of vehicle,

• first name and surname,

• email address,

• telephone number,

• date and time of the requested journey,

• pick-up address,

• destination,

• number of passengers,

• number of items of luggage,

• information regarding the transport of a dog,

• other information required to process the enquiry.

The data is processed to check availability, contact you, plan the journey and take steps prior to entering into a contract or perform a transportation contract.

The legal basis is Article 6(1)(b) GDPR.

Where you voluntarily provide information about a patient transport journey, a medical facility, treatment, mobility impairment or another health-related circumstance, this may reveal special categories of personal data within the meaning of Article 9 GDPR.

Please do not use the form to submit diagnoses, medical reports or other detailed health information that is not required for planning the journey.

Where the processing of health-related information is necessary to organise a patient transport or wheelchair journey expressly requested by you, such processing is carried out on the basis of the information you have expressly provided and, where required, your consent pursuant to Article 9(2)(a) GDPR.

The form data is transmitted to us and processed only by those persons and service providers involved in processing, planning or carrying out the enquiry.

The data is deleted as soon as it is no longer required to process the enquiry and carry out the journey, provided that there are no statutory retention obligations or other legitimate grounds for continued storage.

6. Contact via WhatsApp

You may contact us voluntarily using the WhatsApp messaging service.

The provider for users in the European Economic Area is:

WhatsApp Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

When using WhatsApp, the following data in particular may be processed:

• telephone number,

• profile name and profile picture, where made available by you,

• message content,

• transmitted files,

• communication times,

• technical usage and connection data.

The use of WhatsApp is voluntary. Alternatively, you may contact us at any time by telephone or email.

Where the communication relates to a specific journey enquiry or contract, processing is carried out on the basis of Article 6(1)(b) GDPR. In other cases, processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in fast and customer-friendly communication.

WhatsApp processes data under its own responsibility under data protection law. Data may also be processed outside the European Union or the European Economic Area. We do not have full control over the independent processing of data by WhatsApp.

Further information can be found in WhatsApp’s privacy policy:

https://www.whatsapp.com/legal/privacy-policy-eea

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small files or pieces of information that may be stored on or read from your device.

We distinguish in particular between:

• technically necessary cookies,

• functional cookies,

• statistics and analytics cookies,

• marketing cookies,

• cookies and technologies used by external media providers.

Technically necessary cookies are used where they are required to provide a function expressly requested by you or to ensure the secure operation of the website.

The legal basis for storing or accessing technically necessary information is Section 25(2) TDDDG. Any subsequent processing of personal data is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional provision of our website.

Non-essential cookies and similar technologies are used only after you have given your prior consent.

The legal basis for storing or accessing non-essential information is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

You may withdraw or change your consent at any time with effect for the future using the cookie settings provided on the website.

8. Consent Management with Real Cookie Banner

We use the “Real Cookie Banner” consent management system on our website. The system is used to obtain, manage and document legally required consent for cookies, external media and similar technologies.

In particular, the following information may be processed:

• consent given or refused,

• time of the decision,

• individual consent identifier,

• information concerning the browser and device configuration used,

• IP address in shortened or technically necessary form,

• changes to or withdrawal of consent.

The consent management system is required to store and demonstrate the decision you have made.

The legal basis is Article 6(1)(c) GDPR in conjunction with statutory documentation obligations and Article 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant management and documentation of consent.

Where information is stored on or accessed from your device, this is carried out on the basis of Section 25(2) TDDDG, insofar as this is necessary to store your consent decision.

9. Google Maps

Maps provided by Google Maps may be embedded on our website.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

The map is loaded only after you have given your consent. When Google Maps is loaded, the following data in particular may be transmitted to Google:

• IP address,

• browser and device information,

• page accessed,

• date and time,

• location data, where you have permitted its transmission on your device,

• usage and interaction data.

Google may also link this data to an existing Google account if you are logged in. Data may be processed by Google in the United States and other third countries.

The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time using the cookie settings.

Further information can be found in Google’s privacy policy:

https://policies.google.com/privacy

10. Google Fonts

Fonts from Google Fonts are provided locally on our own server or within our hosting environment.

According to our configuration, accessing the website therefore does not establish a connection to Google’s servers. Your IP address is not transmitted to Google solely as a result of displaying these fonts.

The local integration is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the consistent and technically reliable presentation of our website.

11. Accessibility Tools

Our website provides an operating tool that allows users to adjust, among other things, contrast, font size, animations and the highlighting of headings, links and buttons.

The functions used for this purpose serve to improve the usability and accessibility of the website.

Where settings are stored exclusively locally in your browser or on your device and are required for a function requested by you, such storage is carried out on the basis of Section 25(2) TDDDG.

Any further processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in designing our website to be as accessible and user-friendly as possible.

A displayed provider notice may contain a link to an external website. As a rule, a connection to this external website is established only when you actively click the relevant link.

12. Links to Social Networks and External Platforms

Our website contains links to external services, for example profiles on social networks, app stores or other platforms.

A simple link does not generally result in personal data being transmitted to the relevant external provider merely by accessing our website. Only when you click the link do you leave our website and establish a direct connection to the relevant provider.

From that point onwards, the privacy provisions of the relevant external provider apply. We have no control over the provider’s data processing.

13. Website and Content Management System

Our website is operated using a content management system. This may involve the use of technically necessary cookies or similar information required for the presentation, administration, security and functionality of the website.

The legal basis for technically necessary storage or access is Section 25(2) TDDDG. The subsequent processing of personal data is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and efficient operation of our website.

14. Recipients and Categories of Recipients

Personal data is disclosed only where there is a legal basis for doing so.

Recipients or categories of recipients may in particular include:

• hosting and IT service providers,

• email and telecommunications service providers,

• providers of forms, security and consent management systems,

• employees or contractors involved in dispatching and carrying out journeys,

• payment and billing service providers,

• health insurance providers and other cost bearers, where this is necessary and legally permissible for the billing of a journey,

• tax advisers, legal advisers and other professional advisers subject to confidentiality obligations,

• authorities and public bodies, where there is a legal obligation.

Where service providers process personal data on our behalf, they are engaged on the basis of a data processing agreement pursuant to Article 28 GDPR.

15. Data Transfers to Third Countries

The use of individual services may result in personal data being transferred to recipients outside the European Union or the European Economic Area.

Such transfers take place only where the legal requirements of Articles 44 et seq. GDPR are met. The legal basis may in particular be an adequacy decision of the European Commission, appropriate safeguards such as the European Commission’s Standard Contractual Clauses or a statutory exception.

Where services are loaded only on the basis of your consent, any transfer to a third country is likewise based on that consent.

16. Storage Period

We store personal data only for as long as is necessary for the relevant processing purpose.

The data is subsequently deleted unless statutory retention obligations, the establishment, exercise or defence of legal claims or other legally recognised grounds require continued storage.

Business and tax-related documents may be subject to statutory retention periods.

17. Your Rights

Subject to the applicable statutory requirements, you have in particular the following rights:

• right of access pursuant to Article 15 GDPR,

• right to rectification pursuant to Article 16 GDPR,

• right to erasure pursuant to Article 17 GDPR,

• right to restriction of processing pursuant to Article 18 GDPR,

• right to data portability pursuant to Article 20 GDPR,

• right to object pursuant to Article 21 GDPR,

• right to withdraw consent pursuant to Article 7(3) GDPR,

• right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR.

To exercise your rights, you may contact us at:

info@charlys-citycar.de

18. Withdrawal of Consent

You may withdraw any consent you have given at any time with effect for the future.

The lawfulness of processing carried out on the basis of consent prior to its withdrawal remains unaffected.

You can change or withdraw consent relating to cookies and media using the cookie settings provided on the website.

19. Right to Object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right pursuant to Article 21 GDPR to object at any time, on grounds relating to your particular situation, to the processing.

We will then no longer process the relevant data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

20. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.

The supervisory authority responsible for us is in particular:

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Germany

Website:

https://www.datenschutz.rlp.de

21. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other security risks.

Our website uses SSL or TLS encryption. You can recognise an encrypted connection in particular by the address line of your browser beginning with “https://”.

22. Obligation to Provide Data

As a general rule, the provision of personal data is neither legally nor contractually required.

However, certain information is necessary in order for us to process your enquiry, plan a journey or perform a contract. Without the required information, it may not be possible to process or carry out a journey enquiry.

23. Automated Decision-Making

No solely automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place via this website.

24. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, our website or the services used change.

The version published on this website at the relevant time shall apply.

Last updated: August 2026