Akko Autovermietung
TermsPrivacyImprint Cookie settings
EN · €

AS OF: OCTOBER 2026

Privacy policy

Protecting your personal data is important to us. We process your data exclusively on the basis of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Here you can find out what data we collect, what we use it for and what rights you have.

1. Controller

Akko GmbH
Budapester Straße 26a, 10787 Berlin
Phone: 030 499 29798
Email: info@akkoautovermietung.de

We have not appointed a data protection officer, as the requirements of § 38 BDSG are not met. For data protection questions, please contact info@akkoautovermietung.de.

2. Overview: what data we process

  • Master data: name, address, date of birth
  • Contact data: email address, phone number
  • Contract data: booking details, vehicle, rental period, booked extras, flight number for the shuttle
  • Driving licence and ID data: number, date and country of issue, to verify the right to drive
  • Payment data: payment method, transaction number, last four digits of the card – we do not store full card details
  • Vehicle data of the rental: mileage, fuel level, damage, handover reports
  • Technical data: IP address, browser, time of access

3. Website and server logs

When you visit our website, our hosting provider Netlify, Inc. (San Francisco, USA) automatically processes technical data (IP address, date and time, page visited, browser, operating system). This is necessary to provide the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Log data is deleted after 14 days at the latest. A data processing agreement under Art. 28 GDPR is in place with the provider.

Transfers to the USA are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Bookings, customer data and our admin system are stored with Supabase, Inc. on servers in Frankfurt am Main (Germany). A data processing agreement is in place; the data stays in the EU. Access from third countries is only possible in exceptional cases (e.g. technical support) on the basis of the EU Standard Contractual Clauses.

Fonts are loaded locally from our server; no data is transferred to third parties.

4. Cookies and consent

We use technically necessary storage (booking flow, language, staff login to the admin area and saving your cookie choice in your browser) without consent (§ 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f) GDPR).

All other services are loaded only after you have consented via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Until then no connection to Google is made. Consent is voluntary; you can change or withdraw it at any time with effect for the future via the “Cookie settings” link at the bottom of the page. Your choice is stored in your browser's local storage.

Google Ads conversion tracking (category “Marketing”)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you reach us via a Google ad, Google sets a cookie that lets us see whether a booking was made (booking number and amount, without your name or contact details). This is how we measure the success of our advertising. Google may also use this data for its own purposes and personalised advertising. Cookie lifetime up to 90 days.

Google Analytics 4 (category “Statistics”)

Provider: Google Ireland Limited. Google Analytics analyses how our website is used (e.g. pages viewed, device type, approximate location) so we can improve it. IP addresses are truncated in the EU. Cookie lifetime up to 14 months.

We use Google Consent Mode: Google receives your choice and processes data only within the scope of your consent. Transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR), and standard contractual clauses also apply. More information: policies.google.com/privacy and business.safety.google/privacy.

5. Booking and rental agreement

We process the data from the booking form to carry out your reservation, conclude and fulfil the rental agreement, hand over the vehicle and invoice it. The legal basis is Art. 6(1)(b) GDPR (contract). Checking your driving licence, age and ID fulfils legal obligations – a vehicle keeper may only hand over a vehicle to persons with a valid driving licence (§ 21 StVG) – and is based on Art. 6(1)(c) GDPR.

Without this information we cannot conclude a rental agreement. There is no automated decision-making or profiling.

6. Payment via Stripe

We process online payments via Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your card details directly with Stripe; they are not stored on our servers. Stripe processes the data for payment processing and fraud prevention, partly also as an independent controller. Data may be transferred to Stripe, Inc. in the USA; Stripe is certified under the EU-U.S. Data Privacy Framework, and EU standard contractual clauses also apply. The legal basis is Art. 6(1)(b) GDPR. More information: stripe.com/privacy.

7. Emails

We send booking confirmations, changes and invoices by email via the email service Resend, Inc. (San Francisco, USA) – transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) – as a processor (Art. 6(1)(b) GDPR). You only receive marketing emails if you have expressly agreed (Art. 6(1)(a) GDPR, § 7 UWG). You can unsubscribe at any time via the link in every email.

8. Contact by phone, email and WhatsApp

If you contact us, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). If you use WhatsApp, data is also processed by WhatsApp Ireland Ltd. (Meta), possibly with transfer to the USA. Please do not send ID or payment data via WhatsApp. You can always reach us by phone or email instead.

9. Fines and requests from authorities

If traffic offences are committed during the rental period, we as the vehicle keeper are obliged to give the authorities the driver's name and address on request. The legal bases are Art. 6(1)(c) and (f) GDPR. Fines and processing fees may be offset against the deposit.

10. Recipients and transfers to third countries

Your data is only received by those who need it to fulfil the contract: our employees, processors (hosting, email delivery, booking software), Stripe, Google with your consent (see section 4), in the event of damage insurers, assessors and workshops, and authorities within legal obligations. Data is only transferred to countries outside the EU if there is an adequacy decision (e.g. Data Privacy Framework) or appropriate safeguards (EU standard contractual clauses).

11. Storage period

  • Booking, contract and invoice data: 6 or 10 years under commercial and tax law (§ 257 HGB, § 147 AO)
  • Driving licence and ID data: until the rental is completed and open claims are settled, at most 6 months after return
  • Data on damage and fines: until fully settled and limitation periods have expired
  • Contact requests without booking: 6 months after the request is closed

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Simply write to us at info@akkoautovermietung.de.

13. Right to complain to the supervisory authority

You can complain to a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

14. Data security

Our website is fully TLS-encrypted. Only authorised employees with personal login have access to customer data in the admin system. We update this privacy policy when our processing or the legal situation changes. In case of doubt, the German version applies.