Privacy Policy
Privacy Policy
Data protection is of the utmost importance to us. Below, we would therefore like to provide you with detailed information about what data is collected when you visit our various online platforms (website, social media, etc.) and use the services offered there, how we process or use this data, and what accompanying protective measures we have implemented, both technically and organizationally.
In general, you can use our company website without providing any personal data. However, if a data subject wishes to use our company’s services, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the data subject’s consent.
The processing of personal data—such as a data subject’s name, address, email address, or phone number—is always carried out in accordance with the General Data Protection Regulation and in compliance with the other data protection regulations applicable to us. Through this Privacy Policy, we would like to inform you about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Privacy Policy informs data subjects of their rights.
As the data controller, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for the personal data we process. However, internet-based data transmissions, for example, can generally be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, data subjects are free to provide us with personal data through alternative means, such as by telephone.
1. Name and address of the data controller
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions relating to data protection is:
Supana Rent & Go, LLC
17 Holstweg
14163 Berlin, Germany
info@supana.org
www.supana.org
2. Contact person for data protection inquiries
If you have any questions about data protection, please contact:
Supana Rent & Go, LLC
17 Holstweg
14163 Berlin, Germany
info@supana.org
Phone: +49 1525 796 75 94
3. Collection and Use of Usage Data When Visiting the Website
3.1. Cookies
Our website uses cookies. Cookies do not harm your computer and do not contain viruses. Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block cookies in certain cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
Cookies that are necessary for the execution of the electronic communication process or for providing specific functions you have requested (e.g., the login function) are stored pursuant to Article 6(1)(f) of the GDPR. We have a legitimate interest in storing these cookies to ensure the technically flawless and optimal provision of our services. To the extent that other cookies (e.g., cookies used to analyze your browsing behavior) are stored, these are addressed separately in this Privacy Policy. A detailed list of the cookies currently in use can be found in our Cookie Notice. To maintain the most accurate list possible, our website is regularly scanned using our cookie scanning tool.
3.2. Server Log Files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
Browser type and browser version
operating system used
Referrer URL
Hostname of the connecting computer
Time of the server request
IP address
This data is not combined with other data sources. We reserve the right to review this data at a later date if we become aware of specific indications of unlawful use. This data is collected on the basis of Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring the technically flawless and optimal display of our website—to this end, server log files must be collected.
4. Collection and Use of Your Personal Data
If you have provided us with personal data, we use it to respond to your inquiries, to establish, draft, amend, fulfill, invoice, or process contracts, as well as—to the extent permitted by law—for our own advertising purposes.
4.1. Contact Form / Email
When you submit inquiries to us via the contact form or email, we will store the information you provide in the inquiry form or email—including the contact details you provide—for the purpose of processing your inquiry and in case we have any follow-up questions. We will not share this information without your consent.
The processing of data entered into the contact form or submitted via email is based solely on your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time. To do so, simply send us an informal email. The lawfulness of any data processing carried out prior to the withdrawal remains unaffected by the withdrawal.
The data you enter in the contact form or send via email will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., once your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.
4.2. Registration for the Use of Our Services
To use our services, you must register and create a customer account. The personal data transmitted to the data controller during this process is specified in the respective registration form used for registration. We use the data you provide solely for the purpose of using the specific offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For important changes, such as changes to the scope of our services or technically necessary changes, we will use the email address you provided during registration to notify you.
The processing of the data entered during registration is based on Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. To the extent that you provide additional, voluntary information (e.g., when creating a user profile), the legal basis is your consent (Article 6(1)(a) of the GDPR). You may revoke your consent at any time. To do so, simply send us an informal email. The lawfulness of data processing operations that have already taken place remains unaffected by the revocation.
We will store the data collected during registration for as long as you remain registered for the services offered through our website, after which it will be deleted. This does not affect any statutory retention periods.
4.3. Comment Feature on Our Company Website
When you use the comment feature on this page, in addition to your comment, information about the time the comment was posted and the username you selected will be stored and displayed on our website.
Our comment feature stores the email addresses and IP addresses of users who post comments. Since we do not moderate comments on our site before they are published, we need this information so that we can take action against the author in the event of legal violations, such as insults or propaganda.
Comments and the associated data (e.g., IP address) are stored and remain on our website until the content to which the comment refers has been completely deleted.
Comments are stored based on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. To do so, simply send us an informal email. The lawfulness of any data processing that has already taken place remains unaffected by the withdrawal.
4.4. Processing of Customer and Contract Data
We collect, process, and use personal data only to the extent necessary for the establishment, content, or modification of the legal relationship (customer data). This is done in accordance with Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. The customer data collected includes the customer’s last name, first name, mailing address, billing address, age, phone number, and email address. This data is deleted at the end of the calendar year following the expiration of the last credit balance or the termination of the customer or business relationship, but not before the statutory retention periods have expired.
We collect, process, and use personal data regarding the use of our services (traffic data) only to the extent necessary to enable the user to use the service or to bill the user.
Traffic data includes, for example, the number or identifier of the connections involved or the terminal equipment, as well as the customer’s personal authorization identifier. Traffic data is anonymized or deleted once the connection has ended, unless its storage or use is permitted or required by law.
We only disclose personal data to third parties when necessary for the fulfillment of the contract; for example, to companies entrusted with providing the ordered service (venue operators, etc.) or to the financial institution responsible for processing payments. No further disclosure of data will take place, or only if you have expressly consented to such disclosure. Your data will not be disclosed to third parties without your express consent, for example for advertising purposes.
The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or for the implementation of pre-contractual measures.
4.5. Newsletter
4.6. Third-Party Modules and Analysis Tools
4.7. Processing to comply with legal obligations
We also process all personal data mentioned in the preceding sections, to the extent necessary, to comply with legal obligations such as commercial and tax laws (Art. 6(1)(c) GDPR). These obligations include, in particular, compliance with tax-related audit and reporting requirements, as well as the archiving of data for the purposes of data protection and data security, and for audits by tax and other authorities.
In addition, the disclosure of personal data may be required in connection with administrative or judicial proceedings for the purposes of gathering evidence, criminal prosecution, or the enforcement of civil claims.
5. Use of Service Providers and Disclosure to Third Parties
Your data may be shared with technical service providers who assist us (e.g., website hosting, website maintenance, software support, customer relationship managers, quality assurance, advertising agencies, shipping providers, or mailing services) for the purpose of providing this website and for the aforementioned purposes; we have, of course, carefully selected and formally contracted these providers.
These service providers are bound by our instructions and are regularly monitored by us.
Otherwise, your data will only be shared with other third parties if this is expressly stated in this Privacy Policy or if we are legally required to do so.
6. Notice Regarding the Transfer of Data to the United States
Our website incorporates tools from companies based in the United States, among other things. When these tools are active, your personal data may be transferred to the U.S. servers of the respective companies. Please note that the United States is not a safe third country within the meaning of EU data protection law. U.S. companies are required to disclose personal data to law enforcement agencies, and you, as the data subject, would have no legal recourse against this. It cannot therefore be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no influence over these processing activities.
7. Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The specific legal basis on which processing is based can be found in this Privacy Policy.
If you object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes.
The best way to submit an objection is to send us an informal email at:
Supana Rent & Go, LLC
17 Holstweg
14163 Berlin, Germany
Email: info@supana.org
8. Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your consent. We will explicitly request your consent before beginning data processing. You may revoke this consent at any time. To do so, simply send an informal email to: info@supana.org
The lawfulness of data processing operations carried out prior to the withdrawal remains unaffected by the withdrawal.
9. Right of access, rectification, blocking, erasure, and restriction of processing
In accordance with applicable legal provisions, you have the right at any time to request, free of charge, information about your stored personal data, its source and recipients, and the purpose of the data processing, as well as the right to have this data corrected, restricted, blocked, or deleted, if applicable. For this and any other questions regarding personal data, you can contact us at any time at info@supana.org.
10. Right to data portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, either directly or through another controller, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
11. Right to file a complaint with the competent supervisory authority
Please be advised that you have the right to file a complaint with the supervisory authority in the event of a violation of data protection laws. You can find the supervisory authority responsible for data protection matters in your state at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
12. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time in accordance with applicable laws.