Skip to content Skip to footer
Rent now

Datenschutz­hinweise

Data protection information in accordance with Art. 13 GDPR

The protection of your personal data is important to us and a particular concern. We therefore want to provide you with all the relevant information in this data protection notice so that you feel secure when visiting our website www.orcarrental.at. We strictly observe the statutory provisions when processing your personal data and would like to inform you here about the most important aspects of data processing within the scope of our website. This data protection notice only applies to www.orcarrental.at and the associated subpages, but not to websites that are controlled and operated by third parties. The privacy policy explains which of your data is collected on our website and which of this data we process and use in which way and who you can contact with your concerns.

Name and address of the person responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

Orcar rental e.U.

Kurz Gasse 3
A- 2490 Ebenfurth

E-Mail: f.hauser@orcarrental.at

Tel: +43 676 901 7171

General information on data processing

Legal basis for the processing of personal data

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not specified in the data protection notice, the following applies:

The legal basis for obtaining consent is Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR. The legal basis for the processing for the fulfilment of our services and implementation of contractual measures, as well as answering enquiries is Art. 6 para. 1 lit. b GDPR. The legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c DSGVO. If the processing of your data is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.

Data erasure and storage duration

We adhere to the principles of data minimisation in accordance with Art. 5 para. 1 lit. c GDPR and storage limitation according to Art. 5 para. 1 lit. e DSGVO. We only store your personal data for as long as is necessary to fulfil the purposes stated here or for as long as the retention periods stipulated by law require. After the respective purpose has ceased to apply or after these retention periods have expired, the corresponding data will be deleted as quickly as possible.

Note on data transfer to third countries

Tools from companies based in third countries (including the USA) are also integrated on our website. If these tools are active, your personal data may be transmitted to the servers of the respective companies. The level of data protection in third countries generally does not correspond to EU data protection law. There is therefore a risk that your data will be passed on to authorities in these countries. We have no influence on these processing activities.

External links

This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to one of the websites outside our responsibility, please note that these websites have their own data protection information. We assume no responsibility or liability for these external websites and their data protection notices. Therefore, before using these websites, please check whether you agree with the data protection declarations there.

Your cursor shows you external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. In particular, the operator of the other website receives your IP address, the time at which you clicked on the link, the page on which you clicked on the link and other information that you can find in the data protection information of the respective provider.

Please also note that individual links may lead to data transfer outside the European Economic Area. This could give foreign authorities access to your data. You may not be entitled to any legal remedies against this data access. If you do not want your personal data to be transferred to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.

Rights of the data subject

As a data subject within the meaning of the GDPR, you have the opportunity to assert various rights. The rights of data subjects arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right of cancellation:
Some data processing can only take place with your express consent. You have the option to revoke your consent at any time. However, this does not affect the lawfulness of data processing up to the time of cancellation.

Right of objection:
Is the processing based on Art. 6 para. 1 lit. e or f GDPR, you as the data subject can object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Art. 4 (4) GDPR. If we cannot demonstrate a legitimate interest in the processing that outweighs your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims, we will refrain from processing your data after the objection has been made.

If the processing of personal data serves the purpose of direct marketing, you also have the right to object to this at any time. The same applies to profiling in connection with direct advertising. Here too, we will no longer process personal data as soon as you object.

Right to lodge a complaint with a supervisory authority:
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

Right to data portability:
If your data is processed automatically on the basis of consent or fulfilment of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format.

You also have the right to request the transfer and provision of the data to another controller, insofar as this is technically feasible.

Right of access, rectification and erasure::
You have the right to obtain information about your processed personal data with regard to the purpose of the data processing, the categories, the recipients and the duration of storage. If you have any questions on this topic or other topics relating to personal data, you can of course contact us using the contact details provided in the legal notice.

Right to restriction of processing:
You can request the restriction of the processing of your personal data at any time.

You must fulfil one of the following requirements:

  • You dispute the accuracy of the personal data. You have the right to demand a restriction of processing for the duration of the verification of accuracy.
  • If the processing is unlawful, you can request the restriction of the use of the data as an alternative to erasure.
  • If we no longer need your personal data for the purposes of processing, but you need the data for the assertion, exercise or defence of legal claims, you can request the restriction of processing as an alternative to erasure.
  • You object to the processing pursuant to Art. 21 para. 1 GDPR, a balance will be struck between your interests and ours. Until this assessment has been made, you have the right to request the restriction of processing.

Restriction of processing means that, with the exception of storage, personal data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Use of cookies

Our website uses ‘cookies’. Cookies are information that a web server (server that provides web content) stores on your end device in order to be able to identify this end device. They are either stored temporarily for the duration of a session (session cookies) and deleted at the end of your visit to a website or permanently (permanent cookies) on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may also be stored on your device by third-party companies when you visit our website (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to utilise certain third-party services installed on this website. Examples of this are cookies for processing payment services or cookies for displaying videos.

Cookies have a wide range of uses. They can improve the functionality of a website, control shopping basket functions, increase the security and convenience of website use and carry out analyses of visitor flows and behaviour. Depending on the individual functions, cookies must be categorised according to data protection law. They are necessary for the operation of the website and are intended to provide certain functions (shopping basket function) or serve to optimise the website (e.g. cookies to measure visitor behaviour), in which case they are used on the basis of Art. 6 (1) (f) GDPR. 1 lit. f GDPR. As the website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of our services. In all other cases, cookies will only be stored with your express consent (Art. 6 para. 1 lit. a GDPR).

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this data protection notice. Your required consent will be requested and can be revoked at any time.

Your browser can be set so that cookies are only created with your consent or are generally rejected. However, we would like to point out that the functionality of our website may be restricted if cookies are deactivated.

You have the option of controlling and, if necessary, preventing the use of ‘cookies’ by configuring your browser as follows:

For common third-party providers such as Google, Facebook and many more. the ‘Digital Advertising Alliance EU (EDAA)’ offers the possibility of a collective opt-out for all DAA companies.

You can find more information about online advertising and opt-out in connection with interest-based advertising via the respective links for the following organisations.

Content Management system

A content management system enables the creation, editing, organisation and presentation of digital content. We use a content management system to create content for our website. This enables us to design a more appealing website.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest lies in the technically error-free presentation and optimisation of the website.

Elementor

We use the Elementor service on our website. The provider of the service is Elementor Ltd, Tuval st. 40, Ramat Gan, 5126112, Israel.

As this service is hosted locally on the web server, there is no data transfer to third parties.

The service stores the following data in the browser’s local or session storage:

Name Storage duration Type Purpose
elementor Permanent 1st-Party Local Storage Is used to save actions performed on the website.

WordPress

We use the WordPress service on our website. The provider of the service is Automattic Inc, 60 29th Street #343, 94110 San Francisco (CA), USA.

By using the service, data may be transferred to a third country (USA). The provider is in accordance with EU-U.S.

Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider’s data protection information at the following URL: https://automattic.com/privacy/.

Der Dienst speichert die folgenden Daten im lokalen oder Sitzungsspeicher des Browsers:

Name Storage duration Type Purpose
wpEmojiSettingsSupports Session 1st-Party Local Storage Is saved by WordPress on the local end device

Contact form

You have the option of contacting us via a contact form on our website. In particular, your contact details are required to contact you via this form.

The legal basis for this is the processing for the purpose of contract fulfilment or pre-contractual measures in accordance with GDPR. Art. 6 para. 1 lit. b GDPR is referred to. We may also have a legitimate interest in maintaining business relationships or responding to your enquiry for other reasons.

The legal basis for the processing of your data in this case would be Art. 6 para. 1 lit. f GDPR.

The data will be deleted when we have finally answered your enquiry and there are no other retention obligations to the contrary.

Contact form

In accordance with legal requirements, we have provided a telephone number and e-mail address on our website. The data transmitted via these channels is automatically stored by us in order to process corresponding enquiries or to be able to contact the person making the enquiry. We will not pass this data on to third parties without your consent.

If contact is made by telephone or via our e-mail address for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6 para. 1 lit. a GDPR. 1 lit. b GDPR. For all other contacts on your part, the processing of personal data by us is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR.

© 2025 orcar car rental