Data protection (GDPR)
In order to protect personal rights, personal data are processed within the framework of the applicable General Data Protection Regulation GDPR , Regulation EU 2016/679, protected. The principles (GDPR Art. 5) legality, data minimization, earmarking, correctness, storage limitation, transparency, integrity and confidentiality are in the foreground.
The responsible operator of TROPICAL-CAR and its webmaster is named in the imprint of this website. Ms. Tanja Agel is responsible for data protection and is the contact person.
Purpose of the business
The purpose of the company is to rent a car. Data is used solely for the car rental of TROPICAL-CAR and its branches.
Purpose of data processing
The purpose of the data processing is the operational purpose
Pre-contractual booking inquiries via the website are made with the contact details name, telephone number and email address. These booking requests will be deleted if no rental agreement is concluded.
For the contractually binding booking, name, telephone number, email address, date of birth, passport, driver's license, place of residence, telephone, mobile phone and flight details (arrival) are recorded. These data are part of the rental contract without which the rental is not possible.
The pre-contractual and contractual data collection has GDPR Art. 6 Paragraph 1 lit. b as the legal basis.
All data are subject to data protection and will not be passed on to third parties.
E-mail contact form
Personal contact details voluntarily submitted via the e-mail contact form, such as name, e-mail address and telephone number, are only used to contact you. This data is not recorded and processed outside of the e-mail application. E-mails that are no longer required for the car rental will be deleted. The pre-contractual data collection has GDPR Art. 6 Paragraph 1 lit. b as the legal basis.
Booking data is securely stored and managed by a web host in TROPICAL-CAR SL applications without the possibility of access by third parties.
Backup data are saved by the webmaster of the responsible operator of TROPICAL-CAR and by the web host. In addition, data on booking forms is stored in a safe place.
The web host saves general access data and information such as access time, IP address, browser and operating system in the log files on the web server, which are usually required for the secure operation of the server (e.g. defense against cyber attacks and unlawful use). These data are neither recorded nor used in the applications of TROPICAL-CAR. The legal basis for the temporary storage of the data and the log files is Art. 6 Para. 1 lit.f GDPR.
Booking data is stored for a maximum of 5 years within the statutory retention period, for claims processing and operational purposes.
After that, booking data will be deleted or anonymized.Address and contact details of the bookings will be deleted if no booking has been made for 5 years.
Data protection (GDPR) continued
Duty to provide information and your rights (GDPR Art. 13)
Tenants are informed about data protection law in the rental agreement and are advised of the following rights:
Right to deletion of data (GDPR para. 17), right to information about data (GDPR para. 15), right to correction of data (GDPR para. 16), right to restrict the processing of data (GDPR para. 18), right to data portability (GDPR para. 20), right to withdraw consent (GDPR para. 21), right to complain (GDPR para. 77).
These rights are listed in the data protection information of the rental agreement and in the data protection information for the mail contact.
The TROPICAL-CAR website only uses technically necessary temporary session cookies (expiration after the end of the session) with the legal basis of Art. 6 Paragraph 1 lit. f GDPR.
The use takes place according to Art. 6 Para. 1 lit. a GDPR after information with your consent.
Google Analytics uses permanent cookies. This service is disabled.
The setting of cookies can be prevented at any time by means of a corresponding setting in the Internet browser used and thus the setting of cookies can be permanently contradicted. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. Website access data (deactivated).
The data that are recorded, processed and stored are treated securely and confidentially. They are used exclusively to provide and protect the Google Analytics service and to carry out important system processes, in rare cases also for legal purposes. There is no data release for third parties or for other purposes due to the setting for this website. User ID's are not activated.
Recorded data on website access are always anonymous (IP anonymization) and are used exclusively to optimize our website and statistics. There is a legitimate interest in this according to Art. 6 Para. 1 lit.f GDPR. The collection, storage and evaluation of this anonymous data is carried out by Google Analytics with cookies. There is also an agreement on data processing with Google. The data protection declaration of Google Analytics applies. Google Analytics can be deactivated: Deactivation of Google Analytics.