Privacy policy
Data controller
Eazy Performance GmbH, Arabellastraße 7, 81925 Munich, Germany. Email: anfrage@eazyrent.de. Telephone: +49 1512 4912569. Managing Director: Faraz Livani. Commercial Register: HRB 228192, Munich.
Website and hosting
Our website is hosted by STRATO. Visits involve processing connection data needed to deliver and protect the website, including your IP address, date and time, requested URL, browser and device information, and technical status messages. This helps us detect errors and attacks. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in secure, reliable operation. Technical service providers receive data only as required for their respective tasks. Data is transmitted over HTTPS.
Rental enquiries, bookings and contact
When you contact us through the enquiry form, by email or by telephone, we process the information you provide to handle your request. This may include your name, contact details, address, chosen vehicle and rental package, collection and return dates, and your message. Your selected language is stored so that confirmations and replies can be sent in the appropriate language. Enquiries are stored in our booking system and made available to the responsible staff by email. The legal basis is Article 6(1)(b) GDPR for pre-contractual steps and contract performance. For other enquiries, it is our legitimate interest in responding under Article 6(1)(f) GDPR. Required fields are identified in the form; we cannot process an enquiry without the necessary information. An enquiry is not yet a binding confirmation of availability.
Retention
We retain personal data for as long as needed to handle enquiries, perform rentals, preserve evidence or meet legal duties. Unsuccessful enquiries must be deleted once their purpose no longer applies, unless another retention ground exists. The period for booking and contract records depends on the document: in particular, generally eight years for accounting vouchers and six years for business correspondence subject to retention requirements; other tax records may be subject to different periods. The start, suspension and extension of a period follow the applicable law. Records needed to establish or defend claims may be retained until the matter is resolved. The standard civil limitation period is generally three years, subject to rules on commencement and statutory exceptions. A dispute may require longer retention. Personal data must be deleted or anonymised when the purpose no longer applies and the relevant periods have expired. Archiving does not authorise indefinite retention. The system does not currently delete all contract and archive data automatically after a single fixed period; EAZY RENT must review retention periods and erasure requests. Separate periods apply to Analytics and browser preferences as stated in this notice.
Cookies and consent
Complianz manages your cookie choices. Necessary settings record whether you have made a choice and which categories you have accepted. This storage supports the website and consent management you request under section 25(2) TDDDG; related personal-data processing is based on Article 6(1)(f) GDPR. Optional analytics technologies are activated only after your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You can change or withdraw your choice at any time through Cookie settings in the footer. Refusing analytics does not prevent vehicle selection or use of the enquiry form. Our cookie policy provides further details.
Google Analytics 4
After you consent to statistics, we use Google Analytics 4 to understand website use. The provider for users in the European Economic Area is Google Ireland Limited. Data may include page views, interactions, approximate region, and browser and device information. Cookie identifiers allow related visits to be associated. Names, email addresses and enquiry-form contents are not included as Analytics parameters. Google states that GA4 does not log or store individual IP addresses; an IP address may initially be used to derive an approximate region. Google may also process data outside the European Economic Area, particularly in the United States. For information about recipients, transfers and safeguards, see https://policies.google.com/privacy and https://business.safety.google/privacy/. The configured retention period is 2 months for event data and 14 months for user data. The user retention period resets with new activity. These settings apply to the relevant detailed data; aggregated standard reports may remain available for longer. Analytics cookies normally last up to 2 years and may be renewed with activity; browsers may impose shorter limits. Processing is based on your consent. The Analytics tag is blocked before consent and blocked again if you withdraw consent. Withdrawal does not affect the lawfulness of earlier processing. Google also offers a browser opt-out add-on at https://tools.google.com/dlpage/gaoptout.
Videos, fonts and external links
Our explainer videos, vehicle images and website fonts are served locally. Videos are not embedded through YouTube or Vimeo players. Google Maps, Instagram and WhatsApp are accessible through external links. Merely displaying these links does not load a map or social-media embed on our website. When you open a link, the relevant service’s privacy rules also apply. If you choose to enquire through WhatsApp, WhatsApp opens with the details intended for your message. Please review it before sending. This is optional; you can instead use our form, email or telephone. No separate Google Ads conversion tag or newsletter subscription form is currently embedded on this website.
Your rights and contact
Under the GDPR, you have rights including access, rectification, erasure, restriction of processing and data portability, subject to the applicable conditions. You can withdraw consent at any time with effect for the future. Where processing is based on legitimate interests, you can object on grounds relating to your particular situation. You may object to direct marketing at any time. Please contact anfrage@eazyrent.de or write to the address above. You may complain to a data protection supervisory authority, particularly where you live or work or where you believe an infringement occurred. The authority responsible for private businesses in Bavaria is the Bavarian State Office for Data Protection Supervision: https://www.lda.bayern.de/.
Customer records, rental agreements and document archive
We maintain access-restricted customer and booking records to arrange and perform rentals. In addition to contact, vehicle and rental details, records may include date of birth, identity-document or passport number, driving-licence number and class, first issue date, country of residence and licence, payment method, rental price, deposit and agreed extras. These details support identity and licence checks, contract performance and documentation. The system does not collect complete credit-card details or make automated creditworthiness decisions. Information required by law or necessary for the rental is needed to conclude and perform the agreement. Rental agreements, collection and return reports and expressly archived PDF versions are linked to the relevant booking or customer record. Saved versions include a version identifier, date and, where applicable, staff identifier and a checksum to help detect changes. This supports traceable contract and damage handling. The legal bases are Article 6(1)(b) GDPR, Article 6(1)(c) for statutory retention obligations and Article 6(1)(f) for establishing or defending legitimate claims. Customer records are not automatically used for advertising.
Personal customer link and electronic signature
A staff member can provide a personal link to a prepared rental agreement. You can review and complete the details and sign on screen. We store the submitted information, your signature as an image, the accepted contract version and the submission time. This feature does not identify you biometrically or analyse your handwriting movements. The simple on-screen signature is not offered as a qualified electronic signature. Processing is based on Article 6(1)(b) GDPR; retaining evidence is additionally based on our legitimate interest under Article 6(1)(f). Access is protected by a random personal token, stored on the server as a verification hash. A customer link is normally valid for 24 hours and is used up after successful submission; issuing a replacement invalidates the earlier link. Link expiry is separate from retention of the submitted agreement. Do not share the link with unauthorised people. To limit abusive requests, this feature briefly uses a protected verification value derived from the IP address. Technical server logs are covered by the hosting information.
Vehicle condition, pre-existing damage and repair history
At collection and return, we may record mileage, fuel level, accessories, vehicle condition, damage type, description and position on the vehicle. Known damage is carried forward to later handovers and labelled as pre-existing. Damage may also be entered manually without being attributed to a customer; its source and changes are identified. Repair records include the time, staff member and explanation. Repaired damage is no longer shown as active pre-existing damage; earlier reports remain as historical document versions. The history supports proper handover, distinguishing damage and assessing claims. A marker does not automatically attribute fault or a payment obligation to a customer. Processing is based on Article 6(1)(b) and (f) GDPR. Availability and plausibility checks assist staff; binding approvals and assessment of claims are handled by people. No decision with legal or similarly significant effects is made solely by automated processing within the meaning of Article 22 GDPR.
Authorised access and recipients
Customer records, signatures and documents are accessible only to authorised staff and, where necessary, technical service providers bound to confidentiality within their assigned tasks. The booking role does not give general access to the rest of the website administration. These records are stored within our website management system hosted by STRATO; these features do not add an external CRM or signature service. Where applicable, contract and report copies are sent to you by email. The email services used process the recipient address, message and relevant PDF for this purpose. Please check the email address you provide. Data is disclosed to insurers, assessors, legal advisers or authorities only where needed to handle a rental or damage matter, establish or defend legitimate claims, or meet a legal obligation. Technical support does not receive blanket independent rights to use customer data.
Last updated
24 October 2026. Updated to cover customer records, contract signing, vehicle condition and the document archive.
