Data protection notice

Data protection
Data protection
  • Data protection and security

    We take the protection of your personal data and your privacy very seriously. We therefore would like to explain how we protect your data and what it means for you when you use our services. In order to achieve transparency and to guarantee comprehensive protection of your privacy, it goes without saying that we comply with all legal regulations on data protection.

  • Controller and data protection officer.

    Controller and service provider is Sixt Mobility Consulting GmbH, Zugspitzstraße 1, DE 82049 Pullach ("Sixt Mobility"). You can also contact Sixt Mobility’s data protection officer at any time by sending an email to dataprotection@mobility-consulting.com You can also contac Sixt Mobility's data protection officer at any time by sending an email to dataprotection@mobility-consulting.com .

  • What is personal data?

    Personal data are defined as information through which you can be identified e. g. by your name or information that makes you identifiable, like your address, telephone number or IP address.

  • Processing of personal data by Sixt Mobility.

    General Information

    Personal data is only collected and processed by us if this is necessary to provide a functional and comfortable operated website as well as to provide you with our contents and services. For various services it is also necessary that you provide us with certain personal data of your own (e.g. when using the contact form, sending e-mails or when sending vehicle enquiries).

    We process your data only and insofar as this is permitted by national and European legal regulations.

    Your data will be stored until the purpose of storage no longer applies. This can e.g. happen through time lapse but also if you exercise your data subject rights (see below). In some cases, European or national regulations, laws, or other regulations or contracts to which we are subject prescribe a longer storage period. The data will then be deleted at the end of this period.

    If we use external service providers at your request for the execution of the contract (e.g. by calling our hotline to arrange an appointment), this will be done for the processing of your request to them. These external service providers act as controller in these cases. With regard to the processing of your data within our contractual relationship, please also observe the data protection information attached to the respective contractual documents.

    If you would like to know more about the processing of your data, the legal basis of the processing, the purposes of processing, the storage period or deletion period as well as your data subject rights, please read the following information.

    Contact-Forms and Requests

    If you have any questions about our services and products or certain situations, you can contact us via our website. In these cases, you enter certain data in an input mask provided for this purpose, via which your data is transmitted to us and stored. We use this data to get in contact with you and to be able to assign and process your request as quickly as possible.

    This includes the following contact enquiries and the entry of the following data for the following purposes:

    Service

    Purpose

    Processed data

    Legal basis

    Contact form

    You can send us a question on various topics using our contact form. Your data will be processed to answer these requests.

    -  I have questions about*(category)

    - Salutation* (man or woman)

    - Company

    - First name

    - Surname*

    - Address*

    - E-mail*

    - Phone*

    - Mobile phone

    - Your questions, your concerns

    - Please enter the character string*.

     

    We process your contact data in order to answer your request. In this respect, there is a legitimate interest in the processing of your data pursuant to Art. 6 para. 1 f) GDPR. If you have any questions relating to your contract or would like to conclude a contract with us, the processing is based on Art. 6 para. 1 lit. b DSGVO.

    Damage Notification

    By entering your data in this input mask you have the opportunity to report a claim to us, which we can then settle.

    - Contract number

    - registration number of the motor vehicle

    Art. 6 para. 1 lit. b GDPR.

    With regard to this contract, the processing of your data is connected with the fulfilment of contractual obligations.

    Search for Garage

    By entering your data we can offer you an overview of the nearest partner workshops.             

    - Contract number

    - registration number of the motor vehicle

    Art. 6 para. 1 lit. b GDPR.

    With regard to this contract, the processing of your data is connected with the fulfilment of contractual obligations.

    Get in Touch (sixt-global-reporting.com)

    You can send us a message via our Global Reporting website by filling in the input mask

    - Company

    - Name

    - Telephone Number

    - email Address

    - Message

    We process your contact data in order to answer your request. In this respect, there is a legitimate interest in the processing of your data pursuant to Art. 6 para. 1 f) GDPR.

    With regard to a contact, the processing of your data is connected with the fulfilment of contractual obligations Art. 6 para. 1 lit. b GDPR.

     

    We process personal data from the input mask exclusively for the treatment of the establishment of contact. The data will not be passed on to third parties in this respect.

    We delete your data as soon as it is no longer necessary to achieve the purpose for which it was collected. This case occurs, with regards to personal data inserted into the entry mask when the respective correspondence with you is terminated. Correspondence is terminated when it is obvious that the questions/reasons for sending the message have been finally clarified. Please note that we may be required by law to keep your data for longer than this period.

    The processing of other data (e.g. connection data) during the sending process should prevent a misuse of the contact form and guarantee the security of our information technology systems. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest). Personal data additionally collected during the sending process will be deleted after a period of 10 days at the latest.

    You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

    Logfiles

    Every time you visit our website, our system automatically collects data and information from your computer system and stores it in so called logfiles on the webserver (not in our system). The following data is processed:

    • IP-Address
    • Date and time of access

    The aforementioned data is not stored together with other personal data, thus no allocation of the requesting connection is possible.

    It is necessary that our system temporarily stores the users’ IP address so that the website can be delivered to your computer. The legal ground for the temporary storage of data and log files is Article 6 para. 1 lit. f GDPR. The legitimate interest lies in the fact that we can improve the functionality and optimization of the website as well as secure our IT systems. The data will not be used for marketing purposes in this context.

    The data is stored as long as it is necessary to achieve the purpose for its collection. If data is required for the functionality of the website, this data will be deleted after the respective session has ended. If the data is stored in log files, this is the case after 10 days at the latest.

    Product recommendations by e-mail

    As a Sixt Mobility customer, you will regularly receive product recommendations from us by e-mail. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In this way, we want to provide you with information about products from our range that may be of interest to you based on your recent purchases from us. In doing so, we strictly comply with legal requirements.

    We will process your e-mail address, company, name and telephone number. The processing is carried out in accordance with Art. 6 para 1 lit. f GDPR (legitimate interest) in conjunction with recital 47 GDPR and Art. 7 para. 3 German competition law (UWG). Our legitimate interest are based on the advertising messages are in connection with contractual relationships (self-promotion for existing customers) and we would therefore like to inform you about our products and/or services.

    The information is stored as long as you receive product recommendations. After a cancellation or objection, we store the data purely statistically and anonymously.

    You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

    Login

    You can log into the Global Reports Portal on our gr-client.sixt.com and gr-supplier.sixt.com websites by entering your user ID and password if you have previously registered. The processing of your data is based here on Art. 6 Para. 1 b) GDPR, since the successful registration entitles you to log into the portal. We need the data to successfully authenticate you and grant you access.

    The data will be stored for as long as necessary to achieve the purpose for which they were collected. This is basically given for the duration for which you are registered with us. We would like to point out that we may be legally obliged to comply with longer retention obligations.

    You can find information about your data subject rights in Section 6: "Your rights regarding the processing of personal data".

    Third Party Websites

    Our websites may contain links to and from partner websites. Please note that if you click on the link to a third party website, our privacy notice is not valid for these services, so we are not responsible or liable for their policy. Please refer to the certain Privacy Notice from the third party in this regard.

  • Cookies

    General information on the use of cookies

    When you visit our websites it may be that information created by us will be stored on your computer in the form of a "cookie". Cookies are small text files that are copied from a web server to your hard drive. Cookies contain information that can later be read by a web server in the domain within which the cookie was issued to you. Cookies cannot run programs or deliver viruses to your computer. The cookies we use do not contain any personal information and will not be merged with any personal information held about you. The information collected through the use of cookies will only be used to analyze the function and use of websites, doing so by creating anonymous evaluations and charts on the number of visits, number of pages viewed per user etc. The analyses are used exclusively for the purposes of our own market research as well as for the optimization and demand-oriented design of the website.

    We use the following types of cookies:

    Technically required cookies

    Most of the cookies we use are so-called technically-required cookies, which are necessary to keep your visit consistent, i.e. to ensure that e.g. saved search queries are retained during the web session. In addition, we need these cookies to ensure that a specific offer that you have clicked on is assigned to your request (e.g. in the case of promotional offers). These session cookies are automatically deleted at the end of the session.

    Furthermore, we use cookies to recognize whether you are particularly interested in certain offers when you visit the website at a later date, which enables us to display such offers on the website in a targeted manner.

    The legal basis for the use of technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legitimate interest is that the availability of the website as well as a large number of services could not be realized without the setting of these cookies.

    Cookies with a lifetime of no longer than one year are used to store search queries via the notepad function and to carry out user tests and user surveys, which are then automatically deleted.

    Finally, in order to bill our advertising partners, we need cookies that record the page or campaign from which a customer was referred. These data are also only collected in an abstract way, i.e. they cannot be related to a person. Such a cookie has a lifetime of 31 days.

    Technically necessary cookies cannot be manually deactivated by you via our website. However, you have the option of using your browser settings to specify that cookies should generally be rejected. Please note that in this case some functions of the website cannot be used.

  • Your rights regarding the processing of personal data.

    In this chapter, we want to inform you about your data subject rights. If you have any questions concerning your data subject rights or if you want to exercise one or several of these rights, please send us an e-mail to dataprotection@sixt-leasing.com or by post to the "Data Protection Officer at Sixt Mobility SE, Zugspitzstraße 1, DE 82049 Pullach/Germany".

    Right to withdraw your Consent (Art. 7 para. 3 GDPR).

    In case that the processing of your data by us is based on your explicit consent, you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on consent before its withdrawal. You will be informed about this right before you give your consent.

    Right to information (Art. 15 GDPR).

    You have the right to obtain information from us as to whether we process personal data concerning you. If this is the case, you have a right to access these data and to a list of information. When personal data is transferred to a third country or an international organization, you have the right to be informed about appropriate safeguards to ensure that the recipients are also in compliance with the provisions of the GDPR.

    Right to rectification (Art. 16 GDPR).

    You can request us to correct any incorrect data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

    Right to erasure or “right to be forgotten” (Art. 17 GDPR).

    You have the right to request the immediate deletion of your data if one of the following reasons applies:

    • data is no longer necessary for the purposes for which they were collected or otherwise processed,
    • you withdrew your consent on which the processing was based and there is no other legal basis for the processing,
    • you oppose to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation and there are no overriding legitimate grounds for processing,
    • you oppose to the processing for direct marketing in accordance with Article 21 para. 2 GDPR,
    • the data have been processed unlawfully,
    • the deletion of data is necessary to fulfil a legal obligation under European or German law,
    • the data were collected in relation to an offer of information society services directly to a child provided in accordance with Article 8 para. 1 GDPR.

    We will comply with the request for deletion, unless we are legally obliged or entitled to continue storing and processing your data. In particular, legal retention periods are considered as legal obligations. Furthermore, we are entitled to continued storage if we are unable to assert, exercise or defend legal claims without your data.

    Right to restriction of processing (Art. 18 GDPR).

    In accordance with Article 18 GDPR, we may only process data to a limited extent in the following cases:

    • you dispute the accuracy of your data until we are able to verify its accuracy,
    • the processing is unlawful and you oppose to the erasure of your data and instead request that the use of your personal data should be restricted instead,
    • we no longer need the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
    • you object to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation, as long as it is not yet clear whether the legitimate reasons for the processing by us outweigh your interests.

    If processing has been restricted, we may only store this data. Any further processing in such case is only permissible with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the European Union or a Member State. You can withdraw your consent given in this connection at any time. You will be notified by us before the restriction is lifted.

    Notification Obligation (Art. 19 GDPR).

    We are obliged to inform all recipients to whom your data have been disclosed about a correction or deletion of your data or a restriction of the processing. This shall not apply if it is impossible or involves a disproportionate effort. We will inform you about these recipients if you have any questions in this regard.

    Right to data transferability (Art. 20 GDPR).

    You have the right to receive the data concerning you in a structured, common and machine-readable format. You also have the right to instruct us with the transmission of your data to a third party. However, this right shall not impair the rights and freedoms of other persons, including our company. If this is the case, we are entitled to refuse the surrender or transfer of your data.

    Right to object (Art. 21 GDPR).

    If we process your data on the basis of a legitimate interest (Article 6 para. 1 lit. f GDPR), you have the right to object to this if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions.

    In this case, we will no longer process your data unless we can prove compelling reasons worthy of protection for the processing. This must outweigh your interests, rights and freedoms, or processing serves to assert, exercise or defend legal claims.

    If we process your data for direct marketing purposes, you may object to the processing of your data. This also applies to profiling insofar as it is connected with such direct advertising.

    After your objection, your data will no longer be processed for these purposes.

    Right to Appeal to a Supervisory Authority (Art. 77 GDPR).

    You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the GDPR-provision. Other administrative or judicial remedies that you may be entitled to remain unaffected.

  • Security, SSL technology

    Sixt Mobility has taken technical and organizational measures to protect your personal data, in particular against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. These security measures are continuously adapted in line with technological developments. The transmission of personal data between your computer and our server is always encrypted (SSL procedure, Secure Socket Layer).

  • Updates to our Privacy Notice

    We reserve the right to update this privacy notice regularly if the legal, technical or economic conditions change. When we update our privacy notice, we undertake appropriate measures to inform you as required about the importance of the changes we have made. We will obtain your consent to all important changes to the privacy notice if and to the extent to which this is required under applicable data privacy laws.