1. Controller
The protection of your personal data is important to us. In this Privacy Policy, we inform you about the nature, scope and purpose of the processing of personal data within our online offering at novaro-rent.de and the related services.
Controller within the meaning of the General Data Protection Regulation (GDPR):
Kath & Acar GbR
Hauptstraße 40a
38547 Calberlah
Germany
Office:
August-Horch-Straße 2
38518 Gifhorn
Germany
Email: info@monaco-rental.com
Authorised partners: Louis Kath & Murat Acar
2. Legal Bases for Data Processing
We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Processing is carried out on the basis of the following legal grounds:
Art. 6(1)(b) GDPR: performance of a contract or steps taken prior to entering into a contract
Art. 6(1)(c) GDPR: compliance with a legal obligation
Art. 6(1)(f) GDPR: legitimate interests, for example operation, security and optimisation of the website as well as direct marketing
Art. 6(1)(a) GDPR: consent, for example for cookies, newsletters or tracking tools
3. Collection of Access Data
When you access our website, the web server automatically collects and stores information in so-called server log files. The following data may be collected:
• IP address, shortened or anonymised where applicable
• date and time of access
• page or file accessed
• amount of data transferred
• referrer URL
• browser type, browser version and operating system
This data is used exclusively to ensure the smooth operation of the website, to maintain system security and to improve our services. No personal evaluation of this data takes place.
4. Cookies and Tracking
Our website uses cookies. Some cookies are technically necessary to ensure the proper operation of the website, while others are used for statistical or marketing purposes.
When you first visit our website, a cookie banner appears through which you can decide which cookies you wish to allow. You can change or withdraw your selection at any time.
For statistical and marketing purposes, tools such as Google Analytics, Meta Pixel or TikTok Pixel may be used. In this context, data may be transferred to third countries, for example the United States. In such cases, we use EU Standard Contractual Clauses or other appropriate safeguards to ensure an adequate level of data protection.
5. Contact
If you contact us via contact form, email, telephone or WhatsApp, we process the data you provide, such as your name, email address, telephone number and message, exclusively for the purpose of handling your enquiry and any follow-up questions.
The legal basis is Art. 6(1)(b) GDPR, where the contact relates to pre-contractual measures, and Art. 6(1)(f) GDPR, based on our legitimate interest in efficient communication.
6. Rental Enquiries, Brokerage and Contract Processing
For the processing of rental enquiries and the execution of brokerage or rental-related contracts, we process personal data such as:
• name, company and address
• email address and telephone number
• rental objects, delivery addresses and construction site information
• payment and billing data
Processing is carried out for the performance of a contract pursuant to Art. 6(1)(b) GDPR.
Data may be passed on to third parties where this is necessary for contract performance, for example to rental partners, transport companies or payment service providers.
7. Disclosure to Third Parties and Processors
We only disclose personal data if this is necessary for contract performance or if we are legally obliged to do so.
For technical and business processing, we use service providers, for example for hosting, CRM systems, payment processing, accounting, IT and support services. Where required, we conclude data processing agreements with these service providers in accordance with Art. 28 GDPR.
Examples of service providers used may include:
• Shopify for hosting and shop system infrastructure
• payment service providers such as Stripe or PayPal
• IT and support service providers
• accounting and administrative service providers
8. Data Transfers to Third Countries
Where personal data is transferred to a country outside the European Union or the European Economic Area, this only takes place if an adequacy decision by the European Commission exists, appropriate safeguards such as EU Standard Contractual Clauses are in place, or you have expressly consented to the transfer pursuant to Art. 49(1)(a) GDPR.
9. Storage Period
Personal data is stored only for as long as necessary for the respective purpose or for as long as statutory retention periods apply.
This may include retention periods under tax and commercial law, generally ranging from 6 to 10 years. After expiry of the relevant periods, the data will be deleted or anonymised.
10. Your Rights
You have the following rights at any time:
• right of access to stored personal data pursuant to Art. 15 GDPR
• right to rectification of inaccurate data pursuant to Art. 16 GDPR
• right to erasure, also known as the “right to be forgotten”, pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to object to processing pursuant to Art. 21 GDPR
• right to data portability pursuant to Art. 20 GDPR
To exercise your rights, a simple informal message is sufficient. Please contact:
You also have the right to lodge a complaint with a data protection supervisory authority, for example:
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany
11. Social Media and Platforms
We maintain profiles on platforms such as Instagram, Facebook, LinkedIn, TikTok, X and YouTube.
Data that you provide on these platforms, for example comments, messages or likes, is processed by the respective platform operator. The privacy policies of the respective providers apply to such processing.
Where we are jointly responsible with the platform operator, for example in connection with Facebook Insights, the agreements pursuant to Art. 26 GDPR apply.
12. Business Partners and Rental Partners
As part of cooperation and partner relationships, we process contact details, company information, bank details and contractual data.
The purpose of this processing is the implementation and management of the cooperation and the fulfilment of contractual obligations.
The legal basis is Art. 6(1)(b) GDPR. Data is stored in accordance with statutory retention periods.
13. Data Security
We use technical and organisational security measures to protect your data against manipulation, loss, destruction and unauthorised access.
These measures include SSL encryption, access restrictions, regular security reviews and secure data transmission. Our security measures are continuously improved in line with technological developments where appropriate.
14. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where necessary in order to ensure that it complies with current legal requirements or reflects changes to our services.
The version published on our website at the time of your visit shall apply.
Last updated: October 2025