Privacy Policy

RENTABOX24 Privacy Policy

I. Name and Address of the Controller

We, Alphabet Storage Solutions GmbH, are the data controller within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other relevant data protection laws for our website and related data processing. Comprehensive company details can be found in the imprint.

Alphabet Storage Solutions GmbH
Friedrich-Bergius-Straße 9
65203 Wiesbaden
Email: contact@rentabox24.com

---

II. Website Provision and Log Files

1. Description and Scope of Data Processing

Every time you visit our website, our system (web server) automatically collects information from the accessing device:

• Date and time of access
• IP address of your computer
• Browser type and version
• Operating system used
• Name of your Internet service provider
• Name and URL of accessed files
• Referrer URL (website you visited before ours)

2. Legal Basis

The legal basis for temporarily storing this data and log files is Art. 6(1)(f) GDPR (legitimate interest of the website operator).

3. Recipients of Data

The website is hosted by KeyWeb AG (Neuwerkstraße 45/46, 99084 Erfurt), who act as a processor. A data processing agreement (DPA) has been concluded with KeyWeb AG.

4. Purpose of Data Processing

The temporary storage of IP addresses ensures website delivery to the user’s device. Log file storage serves to ensure functionality, security, and optimization of our website. No data analysis for marketing purposes occurs.

5. Data Retention

Data is deleted once it is no longer required:

• For website provision: End of the session.
• For log files: After seven days. Longer storage may occur, but IP addresses are anonymized to remove personal identification.

---

III. Intra-Group Data Sharing

1. Description and Scope

To simplify internal management, inquiries may be forwarded to the relevant RENTABOX24 location. Each location acts independently as a data controller under GDPR.

2. Legal Basis

Legal basis is Art. 6(1)(f) GDPR (legitimate interest), specifically Recital 48 of the GDPR.

3. Right to Object

Users can object to data processing by emailing: datenschutz@rentabox24.com.

---

IV. Contact via Email, Phone, or Contact Form

1. Description and Scope

If you contact us via email, phone, fax, or the contact form, we store your submitted data for processing. Our website uses SSL/TLS encryption to protect submitted data.

2. Legal Basis

Legal basis:

• Art. 6(1)(f) GDPR (legitimate interest for communication).
• If contract-related: Art. 6(1)(b) GDPR.

3. Purpose

The data is processed solely to respond to inquiries.

4. Retention Period

Data is deleted once the conversation is completed and no further clarification is needed.

5. Right to Object

Users can object to processing via datenschutz@rentabox24.com, after which all related data will be deleted.

---

V. Email Newsletter

1. Description and Scope

Users can subscribe to our email newsletter. Only the email address is required.

2. Legal Basis

Processing is based on Art. 6(1)(a) GDPR (consent).

3. Purpose

Providing users with regular newsletters.

4. Retention Period

Data is stored until the user unsubscribes, after which it will be deleted.

5. Right to Withdraw

Users can unsubscribe by clicking the “unsubscribe” link in newsletters or emailing datenschutz@rentabox24.com.

---

VI. Social Media

We use small icons as hyperlinks to our social media profiles (Facebook, Instagram, Twitter, YouTube). No data is transferred until users click the icons.

1. Legal Basis

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in ensuring an online presence).

2. Joint Responsibility

If users visit our profiles, we and the platform operators share responsibility for data processing.

---

VII. Cookies

We use session cookies (e.g., “sid”) for website functionality. Cookies can be managed or disabled via browser settings.

Google Analytics and Tag Manager

We use Google Analytics to analyze user behavior. IP addresses are anonymized.

• Legal basis: Art. 6(1)(a) GDPR (consent).
• Data retention: 12 months.

Users can disable Google Analytics via the browser add-on: https://tools.google.com/dlpage/gaoptout.

Hotjar

We use Hotjar to understand user behavior and improve user experience. Hotjar collects anonymized data, including IP address, device information, and browsing patterns.

JivoChat

We use JivoChat for live customer support. JivoChat collects anonymized data for web analysis and user recognition.

---

VIII. Applicant Data

Applicant data submitted for job opportunities is processed for recruitment purposes and stored for up to 6 months unless consent for longer retention is provided.

---

IX. Rights of Data Subjects

1. Right to Access: Information about stored personal data.
2. Right to Rectification: Correct inaccurate data.
3. Right to Restrict Processing: Under certain conditions.
4. Right to Deletion: Request deletion of personal data.
5. Right to Data Portability: Transfer data to another controller.
6. Right to Object: Object to processing under Art. 6(1)(f) GDPR.
7. Right to Withdraw Consent: Withdraw previously given consent.
8. Right to Lodge a Complaint: Submit complaints to a data protection authority.

A list of supervisory authorities is available here:
https://www.bfdi.bund.de.

---

Current version and last update of this privacy policy: July 24, 2024.