Privacy Policy
Last updated: 10 August 2026 · Version 2026-08-10.1 · EU GDPR, BDSG, DDG and TDDDG
Translation notice
This translation is provided solely as a reading aid. The German privacy policy, version 2026-08-10.1, is the authoritative version. If wording differs, the German version prevails.
Table of contents
1. Controller
Parken Solution VS GmbH, Auf der Roos 3, 65795 Hattersheim am Main, Germany, email: datenschutz@parkesicher.de, telephone: +49 151 17898215. Managing directors: Serhad Marasli and Valon Sinanaj.
2. Purposes, data and legal bases
When you visit our website, we process technically necessary connection and security data. When you search and book, we process in particular the travel period, provider and offer, name, email address, telephone number, number plate, vehicle, passenger and flight data, voluntary notes, and booking, payment and cancellation data.
The legal bases are principally Article 6(1)(b) GDPR for steps prior to entering into a contract and performance of a contract, Article 6(1)(c) GDPR for legal obligations, Article 6(1)(f) GDPR for security, protection against misuse and legitimate operational interests, and Article 6(1)(a) GDPR for voluntary consent.
3. Providers and booking systems
The parking or transfer provider identified during checkout receives the booking data required to perform the service. Depending on the offer, data is also transmitted to connected booking and integration systems such as Parkstar through the ParkeSicher/Wix interface or ParkingPro.
Depending on the specific processing, the parties act as independent controllers or processors. Any mandatory supplementary agreements are concluded before the relevant processing begins.
4. Technical and contractual service providers
We use Supabase for the database, authentication and server-side functions, Vercel for hosting and delivery, Stripe for online payments, and Twilio SendGrid for transactional email. Payment-instrument data such as the full card number, expiry date and CVC is processed directly by Stripe and is not stored in our booking database.
Other services may include Google Maps for maps and distances, DeepL for translations and Aviationstack for flight information.
6. AI chatbot
The optional chatbot uses the OpenAI API. After explicit activation, the message entered by the user, a limited message history and the context of the current page are transmitted to OpenAI. The message may contain personal data if the user enters it. Users should therefore not enter sensitive data or complete payment information. The legal basis is consent under Article 6(1)(a) GDPR.
7. WhatsApp support and external partner offers
WhatsApp support opens only when the user actively selects the WhatsApp link. WhatsApp Ireland Limited or an affiliated Meta company then processes the telephone number, communication and device data under its own terms. Telephone and email remain alternative contact channels.
External partner offers, such as Discover Cars, are loaded only when actively opened. Externally embedded media or widgets are provided subject to consent unless they are technically necessary.
9. Recipients in third countries
For providers established outside the European Economic Area or using subcontractors there, we base transfers on an adequacy decision, in particular the EU-US Data Privacy Framework, appropriate safeguards such as EU Standard Contractual Clauses, or another legally permissible basis. Details can be requested at datenschutz@parkesicher.de.
10. Retention periods
Invoices, payment records and tax-relevant booking documents are stored in accordance with statutory retention duties. Operational travel data such as number plates, flight numbers, vehicle details, telephone numbers and free-text notes is deleted or access-restricted after the trip and after complaint and reasonable evidence periods have ended, unless a specific legal duty or outstanding claim requires longer storage.
Checkout drafts remain only briefly in the browser session. Server and security logs are generally retained only for a short period unless a security incident requires evidence to be preserved for longer. A detailed deletion concept is implemented by data category.
11. Your rights
Subject to the statutory requirements, data subjects have rights of access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent for the future. Complaints may be submitted to the competent data protection supervisory authority. Requests should be sent to datenschutz@parkesicher.de.
12. Security and updates
We use technical and organisational measures appropriate to the risk, including access restrictions, encryption, logging and regular reviews. This policy is updated when services or data flows change. The version shown during checkout is stored with a booking as evidence.
Questions about data protection?
If you have questions about how we process your personal data or want to exercise your data-subject rights, please contact us.
datenschutz@parkesicher.de