As your privacy is important to us, we at roadsurfer GmbH are careful to comply with data protection requirements. Below you will find information about why we collect and use your data and how you can exercise your rights. You may access and print out the Privacy Statement at any time by clicking the “Data Protection” link. We have taken technical and organizational measures to ensure that our computer systems protect your data against unauthorized access, alteration or dissemination and against loss and destruction.
The controller responsible for personal data collection and processing is:
Telephone: +49 (0) 89 21541673
If you have any questions about data protection or data security, please contact our data protection officer:
Mr. Bernd Fuhlert
roadsurfer GmbH Data Protection Officer
Purpose and legal basis of data processing
We store your data to fulfil our contractual performance obligations, such as delivery, payment processing and invoicing. The contract with you is our legal basis for processing your data in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR). We also process your data within the scope required by law to fulfil our archiving and retention obligations under German trade and tax law, in compliance with Article 6(1)(c) GDPR. In addition, we use your data for the purpose of direct advertising – i.e. to send you information about our products, services and promotions pursuant to Article 6(1)(f) GDPR and acquire you as our customer (information pursuant to Article 13(1)(d) GDPR). You are entitled to object at any time to the use of your data for advertising purposes, using the abovementioned contact data. Further recipients of your data may, in the context of implementing the contract by way of the order, include logistics service providers (only address data) or payment service providers (only payment data) or, as part of direct advertising, also service providers for mailing advertising material (only address data). The duration of the data processing is based on the purpose of contractual implementation and of the other, associated statutory requirements regarding retention and furnishing proof. We will continue to use the data for the purpose of direct advertising until you object to such use.
Web analysis with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called cookies, which are text files placed on your computer to help us analyse your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. If you activate the IP anonymization on this website, your IP address will be abbreviated by Google beforehand within member states of the European Union or in other countries that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and be shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide other services relating to the use of the website and the use of the Internet to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by making the appropriate settings in your browser software; please note that in this case you may not be able to use all the functions of this Website to the full extent. You can, however, prevent Google from collecting the information generated by the cookie and related to your use of the website (including your IP address) and from processing this data, by downloading and installing the browser plugin provided via this link: https://tools.google.com/dlpage/gaoptout?%20hl=en-GB. For more information on this topic, please visit https://tools.google.com/dlpage/gaoptout?hl=en-GB or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). Please note that this website has expanded Google Analytics to include the code “gat._anonymizeIp();” to ensure that the collection of IP addresses is anonymized (“IP masking”).
Our shop utilizes the functions of Google Analytics, a web analytics service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses “cookies”. These are text files placed on your computer to help us analyse your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. The Google Analytics cookie is stored (legal basis: Article 6(1)(f) GDPR) based on our legitimate interest in analysing user behaviour in order to optimize our Internet offerings and our advertising. In doing so, we receive support from Google as the processor. Google uses this information to evaluate users’ use of the website, to compile reports regarding website activities and to provide the website operator with further services associated with the use of the website and the use of the Internet. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. IP anonymization. The IP anonymization function is activated on our website. Before it is transmitted to the United States, your IP address is shortened by Google within the European Union or in a country that is party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and be shortened there. Our legal basis for transmitting personal data is the EU-US Privacy Shield agreement.
If you have any enquiries or requests, please do not hesitate to contact us. The information you provide will be processed to enable us to respond to your enquiries about products or services (Article 6(1)(b and f) GDPR). For us to process and respond to your request, it is necessary that you provide the address and telecommunication data marked as mandatory. By voluntarily providing further data, you will make it easier for us to process your enquiry. After responding to your enquiry, we generally store the information you provide for six years if it constitutes a commercial or business letter (Section 257(4) of the German Commercial Code (Handelsgesetzbuch, HGB), Section 6(1)(c) GDPR).
We use session cookies on our website to make it easier for you to use our web pages. These are small text files that are stored on your hard drive while you visit our website and are then deleted when your browser is closed, depending on your browser programme settings. You can turn off or disable cookie storage in your browser settings. Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your hard drive even after you close your browser.
The following cookies are used: session cookies, cdmmCatalog, LB persistent cookies (30-day storage), cdmmCatalog_region, cookieconsent_dismissed
This website uses an online booking system provided by PHCOM, owned by Philipp Stäbler. PHCOM can be contacted at www.phcom.de, also the domains avs.rent and autovermietung-software.com (hereinafter referred to as “PHCOM”). This website also uses “cookies”, which are text files stored on your computer that make it easier for you to use the online booking system. The information generated by the cookies about your use of this website (including your IP address) is transmitted to one of PHCOM’s servers in Germany and stored there. PHCOM uses this information to make it easier for you to use the online booking system when you return to our website, by storing your search queries and parameters. PHCOM may also transfer such information to third parties where required to do so by law or insofar as such third parties process the information on PHCOM’s behalf. You can prevent cookies from being installed in your browser by selecting the appropriate setting; please note, however, that in this case you will not be able to make full use of all the functions of this website. By using this website, you consent to the processing of your data collected by PHCOM in the manner described above and for the purposes specified above.
Data processing for advertising purposes
We use your data only for our own advertising purposes. We wish to inform you of new products, the services we offer and also interesting events. We thus also use your data to be able to recommend products, services or events that might be of interest besides the items you purchase. Users’ purchase history is evaluated, and the respective advertisements are sent to existing customers by post or email, only with regard to roadsurfer GmbH products and services, with due respect for your legitimate interests. The emails are sent only with your consent, which you may withdraw at any time, with effect for the future. You will be sent newsletters only if you have granted your express consent. For more information about your rights, please click the heading “Rights of the data subject”.
Recipients of the personal data
In accordance with our statutory powers, we will disclose your personal data to the following companies, within the EU:
– Postal service providers, freight forwarders, mailing providers, file/data carrier disposal service providers
– IT service providers for hardware and software maintenance
– Service providers for credit assessment, debt collection and dialogue marketing
– Google Inc. (www.google.de/settings/ads/onweb)
Duration of data storage
We store your data until no longer required to do so for the respective purpose. The appropriate data erasure concepts are in place and are continuously being adapted to the legal requirements and as circumstances require.
Insofar as there is a fiscal retention period for certain data processed in connection with the implementation of purchase contracts (invoice data), the retention period is six or ten years. Data processing will be limited during this period. The obligation of retention begins at the end of the calendar year in which the offer is submitted or the contract is implemented.
Data subject’s rights
Roadsurfer GmbH comprehensively guarantees your rights as a data subject.
Objection to advertising
You may object to the use of your data for advertising purposes without incurring any costs other than those of sending your notice of objection at the basic rates. The following contacts are available for this purpose.
Withdrawal of consent
You may withdraw your consent to the processing of personal data at any time, with effect for the future. Please note, however, that it may then be necessary for you to re-enter your data before you can make a new purchase.
Right of objection
You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation, on the basis of the following provisions:
– Processing is necessary for carrying out a task that is in the public interest or is carried out in the exercise of official authority vested in the controller, or
– Processing is necessary in order to safeguard the legitimate interests of the controller or of a third party, unless the data subject’s interests or fundamental rights and freedoms, which require personal data protection, override those of the controller or of a third party, in particular where the data subject is a child.
If you object to such processing, we will then no longer process your personal data unless we can prove compelling, legitimate reasons for the processing that override your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
You are entitled to the following rights vis-à-vis the controller regarding the storage of your personal data:
– Erasure or restriction of data processing
– Objection to data processing
– Data portability
– Lodging a complaint with supervisory authorities.
Contacts: How can I exercise the above rights?
To exercise your rights, you can contact the data protection officer (see above) or the controller (see above). We will process your enquiries in accordance with the legal requirements, without delay and free of charge, and inform you of the measures we have taken.
Applicant data protection
We collect and process applicants’ personal data for the purposes of implementing the application process. Processing may also be performed digitally. This is always the case if an applicant sends us application documents digitally, for example by email or via a web form that is available on our website. If we conclude an employment contract with the applicant, the data provided will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If no employment contract is concluded with the applicant, the application documents will automatically be deleted four months after the notification of rejection is issued, provided that there are no other legitimate interests on our part that would prevent deletion, such as a burden of proof in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).
We do not currently make use of automatic decision-making or profiling.
Data processing when renting a vehicle
If there is a rental agreement between the customer and roadsurfer, we process data in relation to the vehicle that you rented. This involves the following data:
- The position data of the vehicle (including its speed);
- Opening or locking of vehicles by remote control;
- Data on border crossings;
We are not responsible for any data left behind in the vehicle as a result of your use. We cannot ensure the privacy or confidentiality of such information and you must delete the data before returning the vehicle.
In the European Union, our vehicles must be equipped with eCall technology. It is activated if you are involved in an accident. eCall automatically calls emergency services and provides information on the accident. We may also utilize, disclose and access this information.
Telematics data is released to emergency services and other parties who provide assistance in the event of an accident, as well as to telematics service providers or parties to whom we are legally or contractually obligated to provide such data.
In general, data will not be transferred to third parties.
We may, however, be required to release this data in individual cases in response to requests from public authorities or private service providers (e.g. car park operators, tolls).
The processing of the data is intended to protect our fleet of vehicles or to clear up property offences (also at the expense of third parties), if you do not return the vehicle within the agreed rental period or do not use it in accordance with the agreement (which also includes processing fees or towing bills charged by third parties). It also serves to process administrative and criminal offences, where applicable. The processing, however, is not intended to create a user profile about you as a person. All data will be deleted after the rental agreement has been implemented, provided it is not necessary to continue processing them in order to assert legal claims.
The legal basis of the processing is Art. 6 (1) sentence 1 (f) of the GDPR. The legitimate interest is described in the aforementioned purposes and is justified in the protection of our contractual and statutory rights as well as in the protection of the rights of third parties.
Privacy Statement (part credit assessment)
If you request a campervan subscription in our online shop, we will perform a credit check with Schufa before granting payments. We do this in order to reduce our risk of payment defaults. We then receive a score (a certain scale value) from Schufa, which we will examine together with your last pay slips. Our employees will then decide on site whether we can offer you the subscription. This is a forecast decision made by our employees on site.
The legal basis for these transmissions is Article 6 (1) sentence 1 (b) and Article 6 (1) sentence 1 (f) of the EU General Data Protection Regulation (GDPR). The legitimate interest of roadsurfer GmbH is to be in a position, before granting a subscription, to assess as good as possible all payments, which involve a credit risk, whether you will meet the payment obligations you have entered into and whether you will be unable to meet your payment obligations.
The transmission of the data required for the creditworthiness and address check as well as for controlling payment methods is carried out via a secure interface. Your personal interests worthy of protection will of course be taken into consideration in accordance with the statutory provisions.
Your personal data will be deleted after 3 years at the latest.
In accordance with Art. 21 (1) of the GDPR, you have the right to object, at any time, on grounds arising from your particular situation, to the processing of your data for the above purposes with effect for the future. Please note, however, that in this case roadsurfer GmbH cannot offer you a campervan subscription.
Identification procedure for vehicle rentals
Renting a vehicle through the roadsurfer website requires an identification procedure in order to validate and authenticate your identity. In order to do this, you need to send us a copy of your driving licence and an identification document (identity card or passport) via a secure connection. In order to detect identity fraud, we store these images for a maximum of 30 days after validation and then deleted in accordance with data protection regulations. The information that you have a driving licence will be stored for a maximum of 6 years and checked regularly so that we can fulfil our legal documentation obligation that you have a valid driving licence. We store the identity card or passport number in order to protect ourselves against property offences or to recover our property in the event of misappropriation. The aforementioned data processing operations are intended to prepare and implement the agreement. We are required by law to check whether you have a driving licence.
Legal basis of the aforementioned processing operations:
The legal basis for the aforementioned processing operations can be found in Article 6 (1) sentence 1 (b), Article 6 (1) sentence 1 (c) and Article 6 (1) sentence 1 (f) of the GDPR.
Updates and changes
The Privacy Statement must be adapted from time to time to reflect the actual circumstances and the legal situation. Please always check the Privacy Statement before you make use of our offerings and ensure you are up to date in respect of possible changes or updates.