Skip to content

Data protection

Privacy policy

Data protection is of particular importance for us. In the following, we would like to inform you in detail about which data is collected when you visit our various websites (website, social media, etc.), use the offers and how we process or use them, as well as which accompanying protective measures we take including from a technical and organisational point of view.
Our company website can generally be used without providing any personal data. If a virtual visitor wishes to make use of specific services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the Data Subject.
The processing of personal data, for example the name, address, email address or telephone number of a user, always takes place in accordance with the General Data Protection Regulation and in accordance with the other data protection provisions applicable to us. Within the scope of this privacy policy, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, Data Subjects are informed about their rights via this privacy policy.
As the Data Controller, we have implemented numerous technical and organisational measures to ensure the most complete protection of the personal data we process. Nevertheless, web-based data transmissions can have security gaps and, as a result, full protection cannot be guaranteed. For this reason, every Data Subject is free to send personal data to us by alternative means, for example by telephone.

  1. The name and address of the Data Controller
    The Data Controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions with a data protection character is:
    Supana Rent & Go GmbH in Gründung
    Holstweg 17
    14163 Berlin, Germany
    info@supana.org
    www.supana.org
  2. Contact for data protection questions
    If you have any questions about data protection, please contact:
    Supana Rent & Go GmbH in Gründung
    Holstweg 17
    14163 Berlin, Germany
    info@supana.org
    Tel: +49
  3. Collection and use of usage data when you visit the Website
    1. Cookies
      Our Internet pages use cookies. Cookies do not damage your computer and do not contain viruses. Cookies help to make our website more user-friendly, efficient and secure. Cookies are small text files which are stored on your computer and saved by your browser.

      You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, and exclude the acceptance of cookies in certain cases or in general and activate the automatic deactivation of cookies when you close your browser. Deactivating cookies may restrict the functionality of this website.

      Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies enable us to recognise your browser the next time you visit.

      Cookies which are required to carry out the electronic communication process or to provide certain functions you require (e.g. login function) are stored on the basis of art. 6 para. 1 lit. f GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimal provision of our services. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this Privacy Policy. A detailed list of the cookies currently used can be found in our cookies notice. In order to keep a list which is as accurate as possible, our website is regularly scanned with our cookie scanning tool.
    2. Server Log Files
      The Website Provider automatically collects and stores information in so-called server log files, which are automatically sent to us by your browser. These are:
      Browser type and version
      Operating system used
      Referrer URL
      Host name of the accessing computer
      Time of the server request
      IP address

      These data is not merged with other data sources. We reserve the right to examine these data retrospectively if there is concrete evidence of illegal activity. These data is collected on the basis of art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the technically error-free and optimal presentation of our website – the server log files must be recorded for this.
    3. Collection and use of your personal data
      If you have made personal data available to us, we will use it to answer your inquiries, to justify, structure the content, change, fulfilment, billing or to process contracts, and – within the framework of what is legally permissible – for our own advertising purposes.
    4. Contact form/email
      If you send us inquiries using the contact form or by email, your details from the inquiry form or your email, including the salutation you provided there, will be stored by us for the purpose of processing the request and in the event of follow-up questions. We do not pass on these data without your consent.

      The processing of the data entered in the contact form or the data sent by email takes place exclusively on the basis of your consent (art. 6 para. 1lit. a GDPR). You may revoke your consent at any time. An informal message sent to us by email is sufficient to do this. The legality of the data processing operations carried out up to the point of revocation remains unaffected by the revocation.

      The data you enter in the contact form or the data transmitted by email will remain with us until you request it to be deleted, revoke your consent to storage or the purpose for the data storage is no longer applicable (e.g. after your request has been processed). Any mandatory statutory provisions – especially those regarding mandatory data retention periods – remain unaffected by this provision.
    5. Registration for the use of our services

      To use our services, it is necessary to register and create a customer account. The personal data to be sent to the Data Controller is taken from the respective input screen used for registration. The data entered will only be used for the purposes of using the website or service for which you have registered. The mandatory information requested during the registration must be provided in full. Otherwise, we will reject your registration.

      For important changes, for example in the scope of the offer or for technically necessary changes, we use the email address given during registration to contact you.

      The processing of the data entered during registration is based on art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfil contractual obligations or to undertake measures leading to such a contract. If you provide additional, voluntary information (e.g. when creating a user profile), the legal basis is your consent (art. 6 para. 1 lit. a GDPR). You may revoke your consent at any time with future effect. An informal message sent to us by email is sufficient to do so. The legality of the data processing operations already carried out remains unaffected by the revocation.

      The data collected during registration will be stored by us as long as you are registered for the services offered via our website and will then be deleted. Statutory retention periods remain unaffected.
    6. Comment function on our company website

      For the comment function on this page, in addition to your comment, information about the time the comment was created and the username you selected are saved and displayed on our website.

      Our comment function saves the email and IP addresses of the users who post comments. Since we do not check comments on our website before they are posted, we need these data in order to be able to take action against the author in the event of legal violations such as libel or propaganda.

      The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted.

      The comments are saved on the basis of your consent (art. 6 para. 1 lit. a GDPR). You may revoke your consent at any time with future effect. An informal message sent to us by email is sufficient to do this. The legality of the data processing operations already carried out remains unaffected by the revocation.
    7. Processing of customer and contract data

      We collect, process and use personal data only insofar as they are necessary for the establishment, the content or the modification of the contractual relationship (inventory data). This occurs on the basis of art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfil contractual obligations or to undertake measures leading to such a contract. The customer data collected includes the customer’s surname, first name, address, billing address, age, telephone number and email address. These are deleted at the end of the calendar year following the end of the term of the last credit or the end of the customer or business relationship, but not before the expiry of the statutory retention periods.

      We only collect, process and use personal data relevant to the use of our services (traffic data) as far as this is necessary to enable the user to use the service or billing issues.

      Traffic data are, for example, the number or ID of the connections or terminal equipment involved and the customer’s personal authorisation ID. The traffic data are anonymised or deleted after the connection is terminated, provided that their storage or use is not permitted or required by law.

      We only transmit personal data to third parties if this is necessary in the context of contract processing; for example, to the company entrusted with the implementation of the ordered service (location operator or similar) or the credit institution commissioned with the payment processing. Your data will not be transmitted for any other purpose, or only if you have given your express permission to do so. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes.

      The basis for data processing is art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfil contractual obligations or to undertake measures leading to such a contract.
    8. Newsletter
    9. Third-party modules and analytic tools
    10. Processing to fulfil legal obligations
      If necessary, we also process all of the personal data mentioned in the previous points to fulfil legal obligations such as commercial and tax laws (art. 6 para. 1 c GDPR). These obligations are in particular the fulfilment of tax control and reporting obligations as well as the archiving of data for the purposes of data protection and data security as well as auditing by tax and other authorities.In addition, the disclosure of personal data may become necessary in the context of official/judicial measures for the purposes of gathering evidence, prosecuting or enforcing civil claims.
    11. Involvement of service providers and transfer to third parties
      Your data will be passed on to technical service providers (e.g. website hosting, support, software support, customer relationship manager, quality assurance, advertising agency, shipping service provider or mailing service) which we use for the provision of this website and for the aforementioned purposes.
      These service providers are bound by our instructions and are regularly checked by us.
      Your data will only be passed on to other third parties if this is expressly stated in this privacy policy or if we are legally obliged to do so.
    12. Note on data transfer to the USA
      Our website includes tools from companies based in the USA. When these tools are active, your personal data can be passed on to the US servers of the respective companies. We would like to point out that the USA is not a secure “third country” under EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. As such, it cannot be ruled out that US authorities (for example, intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
    13. Right to object to the collection of data in special cases as well as to direct advertising (art. 21 GDPR)
      If the data processing is based on art. 6 para. 1 lit. e or f GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy.
      If you object, we will no longer process your personal data concerned, unless we can prove compelling reasons for the processing which take precedence over your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
      If your personal data is processed in order to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object, your personal data will then no longer be used for direct marketing purposes.
      If you object, please send an informal email to:
      Supana Rent & Go GmbH in Gründung
      Holstweg 17
      14163 Berlin, Germany
      Email: info@supana.org
    14. Revocation of your consent to data processing
      Many data processing operations are only possible with your consent. We will obtain this before the start of the data processing. You may revoke your consent at any time. An informal message by email to: info@supana.org is sufficient for this purpose.The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.
    15. Information, correction, blocking, deletion, restriction of the processing
      As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data which is stored, as well as their origin, the recipient and the purpose for which it has been used. You also have the right to have these data corrected, restricted, blocked or deleted. You can contact us at any time at info@supana.org if you have any further questions on the subject of personal data.
    16. Right to data transfer
      You have the right to have data which we process on the basis of your consent or for the fulfilment of a contract automatically delivered to you or to a third party in a standard, machine-readable format. If you request the direct transfer of data to another data controller, this will only occur if it is technically feasible.
    17. Right of appeal to the competent supervisory authority
      In the case of violations of data protection legislation, you have the right to appeal to the competent supervisory authority. The supervisory authority responsible for data protection issues in your federal state can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
    18. Changes to this privacy policy
      We reserve the right to change this privacy policy at any time in compliance with legal requirements.