Privacy policy

1. Controller and contact

The operator identity is not yet completely configured in PRESTIVEX settings. The current status is shown transparently in the legal notice. Privacy enquiries can be sent to info@prestivex.de.

2. Categories of data

Depending on the function used, PRESTIVEX processes contact and master data, requested vehicle and rental period, route and mileage, driver and licence information, correspondence, booking and offer status, uploaded damage evidence, payment status and technical access data. Only fields needed for the selected process are mandatory.

3. Purposes and legal bases

Enquiries, offers, reservations and rentals are processed to take steps at your request and to perform a contract under Article 6(1)(b) GDPR. Security, abuse prevention and privacy-minimised internal operating statistics rely on legitimate interests under Article 6(1)(f) GDPR. Statutory retention duties rely on Article 6(1)(c) GDPR. Optional analytics and external media are used only with consent under Article 6(1)(a) GDPR; consent may be withdrawn at any time for the future.

4. Hosting, server logs and security

When the website is accessed, the hosting provider may process IP address, date and time, requested URL, referrer, browser and device data for secure delivery, troubleshooting and defence against misuse. PRESTIVEX also uses short-lived technical limits to protect public forms and interfaces from automated attacks.

5. Enquiries, offers, documents and damage reports

Data submitted through rental, long-term and contact forms is used to answer the request, check availability, prepare an individual offer and, where requested, conclude or perform a rental agreement. A protected offer link can be used to accept, decline or submit corrections. Identity or licence information and uploaded evidence are processed only where required for the rental, verification or a reported incident. Data is not sold.

6. Email and payment

Transactional messages are sent through the configured mail infrastructure. If online payment is activated for a booking, Stripe Payments Europe, Ltd. receives the payment and technical transaction data required for checkout; card details are entered on Stripe systems and are not stored in full by PRESTIVEX. The payment service is not currently displayed unless it has been configured for the booking.

7. Internal measurement and Google Analytics 4

PRESTIVEX records a small set of internal operating events, such as a vehicle view, availability check or submitted enquiry. These internal counters do not store names, email addresses, message text, full IP addresses or advertising identifiers. Google Analytics 4 is loaded only after consent to statistics. The service is provided by Google Ireland Limited; advertising signals and personalisation are disabled in the PRESTIVEX configuration. Consent can be changed through “Privacy settings”. Further information is available in the Google privacy policy.

8. AI concierge

The concierge is activated only through user interaction. The submitted message, selected language and the technical context required for the reply may be transmitted to the configured provider, currently Groq, Inc. Processing may take place in the United States. Do not enter card details, passwords or complete identity-document data in chat. Damage reports and evidence are transmitted only after active submission. Details are available in the Groq privacy policy.

9. Weather, maps and external media

The local PRESTIVEX weather display requests Munich weather server-side from Open-Meteo using fixed Munich coordinates; it does not send the visitor’s location to that service. The concierge may use an approximate location only when a local-weather request requires it. OpenStreetMap content is embedded only after consent to external media; opening the map establishes a direct connection to the OpenStreetMap Foundation. See the OpenStreetMap privacy policy.

10. Recipients and international processing

Data is disclosed only where required to hosting, email, payment, IT-security, insurance or claims-handling providers and to authorities where legally required. Google, Groq and other explicitly named services may process data outside the European Economic Area. Their published privacy information and the applicable contractual safeguards govern that processing.

11. Retention

Unsuccessful enquiries are deleted or anonymised when they are no longer needed for follow-up, security or the defence of claims. Booking and contract records are retained for the applicable commercial and tax-law periods. Uploaded incident evidence is retained only for handling and documenting the incident and related claims. Technical security data is kept only for the period needed for protection and troubleshooting.

12. Your rights

Subject to the legal requirements, you may request access, correction, deletion, restriction, data portability or object to processing. Consent may be withdrawn for the future. You may also lodge a complaint with a competent data-protection authority.

13. Cookies and local storage

The essential preference “prestivex_consent_v2” stores the selected privacy settings for up to six months in a cookie and local storage. Forms and the concierge may use necessary browser storage for language, entries and session state. Analytics storage remains denied until statistics consent is granted. External media remains blocked until the corresponding consent is granted.