Privacy Policy

1. General Information

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data on our website and within our software platform. We take the protection of your data very seriously and treat it confidentially in accordance with applicable data protection laws, in particular the GDPR.

2. Controller

The controller responsible for data processing on this website is:

David Murad
Altenessenerstr. 399
45326 Essen
Germany

Email: info@rent4pro.app
Phone: +49 1514 7441245

3. Collection and Storage of Personal Data

a) When visiting the website

When you access our website, the server automatically collects information transmitted by your browser:

• IP address
• Date and time of access
• Name and URL of the file accessed
• Website from which access occurred (referrer URL)
• Browser and operating system used

This data is processed solely to ensure a smooth connection and to improve the use of our website. It is not merged with other data sources.

b) When using our SaaS platform

In the course of using Rent4Pro, we collect and process the following personal data:

• Name and email address upon registration
• Optional information at registration on how you found Rent4Pro (e.g. search engine, recommendation, social network). We use it to understand which channels bring us customers. The legal basis is the information you provide voluntarily (Art. 6(1)(a) GDPR); you can register just the same without it.
• Company and billing data
• Rental, customer, and vehicle data you enter
• Your customers' driver data (name, contact details, date of birth, driving license and ID number with validity; no photos of the documents), encrypted at rest by the hosting provider
• Usage and log data for platform improvement, in particular time of last use, device model, operating system and app version, and browser (no hardware identifiers, no location)

Contract data is processed for the performance of the contractual relationship (Art. 6(1)(b) GDPR); usage data for operation, security, support and further development on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Reading driving licenses and ID documents with the camera takes place exclusively on the device; the photo is not transmitted to us for this.

c) Public booking page of car rental companies

Car rental companies can operate a booking page for their renters through Rent4Pro. When a booking is made, name, email address, phone number, vehicle, rental period, amount and payment status are processed. The respective rental company is the controller for this; we process the data on its behalf. Payment data (e.g. card number) is entered by the renter directly at Stripe; we do not receive it. To protect against misuse we use bot protection and store, for a few hours, a non-reversible hash of the IP address to limit the number of booking attempts.

d) Contact form and email contact

If you contact us via contact form or email, your information including the contact details you provide will be stored to process your inquiry. We do not share this data without your consent.

e) Information emails about Rent4Pro

We use the email address you provide at registration and in the course of our service to inform you by email about news and similar services from Rent4Pro (Section 7(3) German Unfair Competition Act, Art. 6(1)(f) GDPR). You can object to this use at any time without incurring costs other than the transmission costs at basic rates: via the unsubscribe link in each such email or by email to info@rent4pro.app. Messages that are necessary for performing the contract (e.g. about your account, contracts, invoices and changes to the terms) will reach you regardless.

4. Data Storage and Security

All data is stored exclusively on servers within the European Union. We implement appropriate technical and organizational security measures to protect your data against manipulation, loss, or unauthorized access. Data transmission is encrypted via HTTPS/TLS. Each company receives strict data separation (multi-tenancy) — no other users can see your data.

5. Disclosure of Data

Your personal data is only transferred to third parties if:

• you have given your express consent,
• processing is necessary for the performance of a contract with you,
• processing is necessary to fulfill a legal obligation.

We use the following data processors:

• Google LLC (Firebase – database, authentication, storage; EU data centers, regions eur3 and europe-west1 within the EU),
• Vercel Inc. (hosting and delivery of this website and bot / abuse protection “BotID”; the website functions run in Frankfurt am Main, static content is additionally served through a global delivery network; provider based in the USA). Only with your consent also cookieless analytics “Vercel Analytics” and load-time measurement “Vercel Speed Insights” (see section 6),
• Resend (sending emails, e.g. registration, contract and booking confirmations; sent and processed via the EU region in Ireland, provider based in the USA),
• Stripe Payments Europe, Ltd. (processing of the subscription and, at the rental company's request, of its renters' payments; for the latter Stripe is the rental company's contractual partner),
• Sentry (error tracking, without IP disclosure, IP anonymization active).

The website functions run in Frankfurt and Resend sends via the EU region. As both providers are based in the USA, access from there, for example for support or maintenance, cannot be ruled out. Where personal data is transferred to the USA, this is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission) and, additionally, the EU Commission’s Standard Contractual Clauses (SCC). Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.

6. Cookies

Our website uses technically necessary cookies required for the operation of the website. You can prevent cookies from being set in your browser settings, which may however restrict functionality. We do not use marketing or tracking cookies.

Reach and load-time measurement (Vercel Analytics and Speed Insights, without cookies) only runs with your consent. On your first visit we ask for it; without it, nothing is loaded. You can change or withdraw your choice at any time via “Datenschutz-Einstellungen” in the footer.

7. Your Rights

You have the right to:

• Access information about your stored personal data (Art. 15 GDPR),
• Request correction of inaccurate data (Art. 16 GDPR),
• Request deletion of your data (Art. 17 GDPR),
• Request restriction of processing (Art. 18 GDPR),
• Receive your data in a common format – data portability (Art. 20 GDPR),
• Object to the processing of your data (Art. 21 GDPR).

To exercise your rights, please contact: info@rent4pro.app

8. Data Deletion After Termination

After termination of the usage contract, we provide a data export on request. No later than 90 days after the end of the contract, all data (contracts, customer profiles, vehicle data, damage reports) will be completely and irreversibly deleted from our servers, unless statutory retention obligations apply. Technical backup copies are automatically deleted within a further 90 days thereafter.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

10. Updates to This Policy

This Privacy Policy is currently valid and may be updated at any time due to new legal or technical changes. We will inform you of material changes by email.