Controller and contact
The controller responsible for processing your personal data is FMM-Parking, proprietor Emanuel Snouno, Bgm.-Merk-Str. 5, 87752 Holzgünz, Germany. For privacy questions or to exercise your rights, contact info@fmm-parking.de or call +49 151 742 374 22.
Hosting and server log files
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit, IONOS processes the connection and access data needed to deliver it. This may include IP address, date and time, requested page or file, HTTP status, amount of data transferred, referrer, browser and operating system information.
Purpose: delivering the website, detecting errors and preventing misuse. Legal basis: Article 6(1)(f) GDPR; our legitimate interest is secure, reliable operation.
Connection data is processed for website delivery. Retention of access logs depends on the hosting plan and security purpose. Logs relevant to a specific security incident may be secured until investigation and necessary legal proceedings are complete.
Further information: IONOS: data processing for web hosting.
Contact by email, telephone and WhatsApp
When you contact us, we process your contact details, message and any booking details necessary to answer it. Purpose: responding to your enquiry. Legal basis: Article 6(1)(b) GDPR for contractual or pre-contractual enquiries, otherwise Article 6(1)(f), based on our legitimate interest in answering incoming communication. Retention: until resolved and thereafter only for statutory retention or defence against specific claims.
WhatsApp is an optional external contact channel. WhatsApp Ireland Limited, Ireland, provides the service to users in the European Region. Clicking the link and using WhatsApp may disclose your telephone number, messages and connection data to WhatsApp. Processing in third countries, particularly the USA, is possible. Its own purposes, legal bases, transfer mechanisms and retention periods are explained in the WhatsApp privacy policy. You can contact us by email or telephone instead.
Bookings and contract performance
To process a booking enquiry and perform a parking and shuttle contract, we need the necessary contact, vehicle, travel, passenger and booking details. Purpose: reservation, allocating parking, planning transfers, customer communication and invoicing. Legal basis: Article 6(1)(b) GDPR. Further storage required by tax or commercial law relies on Article 6(1)(c).
Retention: during contract performance and subsequently for statutory retention periods or as necessary to establish, exercise or defend legal claims. Records retained by law are restricted from other uses and deleted when the period expires.
Payment processing through Stripe
All payments are processed through Stripe. The provider is Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland. For regulated payment services, Stripe Technology Europe, Limited at the same address may also be responsible. We offer the following payment methods through Stripe: Credit card, Google Pay, Apple Pay, PayPal, Klarna, Amazon Pay.
Retention by the payment processor: Stripe retains data to provide its services and afterwards where required for legal obligations, fraud prevention or resolving claims. The period depends on the data and purpose; Stripe does not specify one universal deletion period. Details of processing, recipients and retention: Stripe privacy policy.
Purpose: completing your payment, confirming payment, issuing refunds and resolving payment disputes. This involves necessary contact and billing details, amount, currency, booking reference, payment and transaction data. Legal basis for contract performance: Article 6(1)(b) GDPR. Statutory retention relies on Article 6(1)(c). Where required to prevent misuse, processing relies on Article 6(1)(f); our legitimate interest is payment security.
Depending on the selected payment method, card networks, banks or the providers of Google Pay, Apple Pay, PayPal, Klarna or Amazon Pay also take part in processing. They may process data as independent controllers under their own privacy notices. Depending on the Klarna product selected, additional payment or creditworthiness checks may apply. Selecting a payment method does not constitute consent to advertising or other tracking on our website.
Stripe may process data internationally, including in the USA. The applicable transfer mechanisms and safeguards are described in the Stripe Privacy Center. We retain our own payment records for processing and then for the applicable statutory retention periods.
Google links and review display
Google Maps is offered only through external location and directions links; no map is embedded. The displayed aggregate rating and review count are fixed values stored locally. Merely displaying these links and review figures does not send data to Google.
Purpose: providing information about our location and the stored rating. Legal basis: Article 6(1)(f) GDPR; our legitimate interest is presenting our service clearly and helping you find us. No additional visitor data is retained for this display.
Only clicking a Google link opens the external service. Processing there, including retention, is governed by the Google privacy policy.
Data security and encryption
We use HTTPS with TLS encryption to transmit data. Technical and organisational safeguards protect personal data against unauthorised access, loss and alteration. Payments are processed through Stripe; the associated processing is described in the payments section.
These safeguards protect the security and confidentiality of the processing described in this policy. They do not create an additional processing purpose or a separate longer retention period.
Your data protection rights
Subject to the applicable legal conditions, you have the following rights:
- Access to your personal data and information about processing (Article 15 GDPR).
- Rectification of inaccurate data and completion of incomplete data (Article 16 GDPR).
- Erasure where no legal grounds prevent it (Article 17 GDPR).
- Restriction of processing (Article 18 GDPR).
- Data portability where the legal requirements are met (Article 20 GDPR).
- Objection, on grounds relating to your particular situation, to processing based on legitimate interests; you may object to direct marketing at any time (Article 21 GDPR).
- Withdrawal of consent with future effect. This does not affect the lawfulness of processing before withdrawal (Article 7(3) GDPR).
- Protection against solely automated decisions, including profiling, with legal or similarly significant effects where Article 22 GDPR applies.
Send requests to info@fmm-parking.de. We process necessary details to handle the request and, where required, verify identity under Article 6(1)(c) GDPR. These details are retained for handling the request and afterwards only where required for statutory evidence or defence against specific claims.