privacy Policy

This Privacy Policy explains which personal data we process when you visit our website, book a parking space or use a customer account, for what purposes and on what legal basis. Information on video surveillance and automatic number plate recognition in the car park is available at parkhausplatzhirsch.de/datenschutz/videoueberwachung.

1. Data Controller

Platzhirsch (Parking) GmbH
Am Südpark 7-11
65451 Kelsterbach
Phone: +49 6107 4059765
Email: info@parkhausplatzhirsch.de

2. Data Protection Officer

We have appointed a Data Protection Officer. You can contact the Data Protection Officer at datenschutz@parkhausplatzhirsch.de or by post at the address above, marked “For the attention of the Data Protection Officer”.

3. General Information

Legal Bases

We process personal data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Consent (Art. 6(1)(a) GDPR)
  • Performance of a contract and steps taken prior to entering into a contract (Art. 6(1)(b) GDPR)
  • Compliance with a legal obligation, such as retention requirements under tax and commercial law (Art. 6(1)(c) GDPR)
  • Legitimate interests (Art. 6(1)(f) GDPR)

The storage of information on your device or access to such information (e.g. cookies) is governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). We use strictly necessary cookies without consent (Section 25(2) TDDDG). We use all other cookies only with your consent (Section 25(1) TDDDG).

Retention Periods

We store personal data only for as long as necessary for the respective purpose. We then delete the data unless statutory retention obligations prevent us from doing so. Specific retention periods are provided in the relevant sections.

Recipients

We use service providers that process data on our behalf (processors under Art. 28 GDPR). We have concluded the required agreements with them. The service providers are identified in the relevant sections.

Transfers to Third Countries

Some service providers are based in the United States or process data there. We base such transfers on the European Commission's adequacy decision concerning the EU-US Data Privacy Framework, where the provider is certified under that framework, and additionally on the European Commission's Standard Contractual Clauses.

Encryption

For security reasons, this website uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” in your browser's address bar.

4. Website Hosting and Delivery

Webflow

Our website is built and hosted using Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you access our website, Webflow processes technical data such as your IP address, the date and time of access, pages visited, browser type and operating system (server log files).

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of our website. Webflow is certified under the EU-US Data Privacy Framework. Further information: https://webflow.com/legal/eu-privacy-policy

Cloudflare

We use Cloudflare's content delivery network to protect our website and deliver it more quickly. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Data traffic between your browser and our website is routed through Cloudflare servers. In particular, your IP address and technical connection data are processed, for example to defend against attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the security and availability of our website. Cloudflare is certified under the EU-US Data Privacy Framework. Further information: https://www.cloudflare.com/privacypolicy/

5. Cookies and Consent Management (Cookiebot)

We use the Cookiebot consent management platform to obtain, manage and document your consent to cookies and similar technologies. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

When you visit our website, Cookiebot stores your selection, the date and time of your decision, information about your browser and device, and a pseudonymous identifier. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent). Storing your consent decision on your device is governed by Section 25(2) No. 2 TDDDG.

You may change or withdraw your consent at any time with effect for the future. To do so, open the cookie settings using the link in the website footer.

6. Booking, Customer Account and Contract Processing

Booking and Customer Account

You can use our car park only if you have booked in advance. We manage bookings and customer accounts using our own booking software, which we operate ourselves on our own servers. No external service provider is involved. We process the following data:

  • Name, email address and telephone number
  • Billing address and, where applicable, company name
  • Vehicle registration number and, where applicable, vehicle type
  • Travel information such as flight number, return time and number of passengers using the shuttle
  • Booking and payment details (period, price, payment method, payment status)

We use this data to process your booking, provide access to the car park, organize the airport shuttle, issue invoices and contact you regarding questions or changes. Access is managed through automatic number plate recognition. Details can be found in our information on video surveillance and automatic number plate recognition.

The legal basis is Art. 6(1)(b) GDPR. We cannot process your booking without this information.

A customer account allows you to save your details and complete future bookings more quickly. Using an account is voluntary; the legal basis is Art. 6(1)(b) GDPR.

Booking Confirmation

After booking, you will receive a confirmation and, where applicable, information about your stay by email from our booking software. The legal basis is Art. 6(1)(b) GDPR.

Booking Software Server Log Files

When you access the booking process, our server stores technical data such as your IP address, the date and time, the page accessed and browser information. We use this data to ensure reliable operation and defend against attacks, and delete it after 14 days. The legal basis is Art. 6(1)(f) GDPR.

Retention Periods

  • We retain booking data until the booking has ended and thereafter for as long as claims arising from the contract may be asserted (generally three years from the end of the calendar year in which the booking was made).
  • We retain invoices and booking-related documents in accordance with statutory retention periods, currently for up to eight years (Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB)). The legal basis is Art. 6(1)(c) GDPR.
  • Your customer account remains active until you request its deletion. Please email info@parkhausplatzhirsch.de. Data that we are legally required to retain will be restricted from processing until the relevant retention period expires.

7. Contact by Email or Telephone

When you contact us by email or telephone, we process the information you provide in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a booking; otherwise, it is Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). We delete the data once the enquiry has been fully resolved, provided there are no retention obligations.

8. Payment Service Providers

We use payment service providers for online payments. When you select a payment method, we transmit the data required for payment (e.g. name, amount, booking number) to the relevant provider. You enter your card and bank account details directly with the provider; we do not receive these details. The legal basis is Art. 6(1)(b) GDPR; the providers also process data for fraud prevention on the basis of Art. 6(1)(f) GDPR.

Unzer (Credit Card, Apple Pay, Google Pay, Wero)

We process credit card payments and payments via Apple Pay, Google Pay and Wero through Unzer. Our contracting partners are Unzer Luxembourg S.A., 18-20 rue Gabriel Lippmann, L-5365 Munsbach, Luxembourg, and Unzer E-Com GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany. For Apple Pay, Google Pay and Wero, Apple Distribution International Ltd. (Ireland), Google Ireland Limited and EPI Company SE (Belgium), respectively, also process your data as independent controllers under their own privacy policies. Further information: https://www.unzer.com/de/datenschutz/

PayPal

If you pay via PayPal, we redirect you to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Further information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

American Express

Payments made with American Express cards are processed through American Express Europe S.A. (German branch), Güterplatz 1, 60327 Frankfurt am Main, Germany.

9. Reviews (iiQ-Check)

We use iiQ-Check for reviews and to display our review score on the website. The provider is ConsultiiQ GmbH, Spitalstraße 1, 38640 Goslar, Germany. If you submit a review through iiQ-Check, ConsultiiQ processes your review and, where applicable, your details on our behalf. Submitting a review is voluntary. We have entered into a data processing agreement with ConsultiiQ under Art. 28 GDPR.

The iiQ-Check widget on our website loads content from ConsultiiQ GmbH servers; in the process, your IP address is transmitted. The widget is loaded only if you have given your consent through the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

10. Analytics and Marketing

We use the following services only if you have given your consent through the cookie banner. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is a tool that allows us to integrate and manage tracking and analytics services on our website. It does not itself create user profiles, but it processes your IP address and may transfer data to Google in the United States. Google is certified under the EU-US Data Privacy Framework.

Google Analytics 4

We use Google Analytics to analyze how visitors use our website so that we can improve it. The provider is Google Ireland Limited. Google Analytics uses cookies and collects information including pages visited, time spent on the website, device, browser and approximate location. Google Analytics 4 does not store IP addresses. The data is deleted after 14 months. We have entered into a data processing agreement with Google. Further information: https://policies.google.com/privacy

Google Ads

We use Google Ads to place advertisements in Google Search and on other websites. Conversion tracking allows us to determine whether an advertisement led to a booking. Remarketing enables us to show relevant advertisements to visitors to our website at a later date. The provider is Google Ireland Limited.

We also use “Enhanced Conversions”. Customer data from a booking, such as your email address, telephone number or name, is cryptographically hashed on our website before being transferred to Google. Google matches this data against signed-in Google accounts to attribute conversions more accurately. This takes place only if you have consented to Google Ads in the cookie banner. Further information: https://policies.google.com/technologies/ads

Meta Pixel

We use Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. This allows us to measure the effectiveness of our advertisements on Facebook and Instagram and show relevant advertisements to visitors to our website on those platforms (Custom Audiences). We use Advanced Matching. Data you provide during booking, such as your email address, telephone number, name or postcode, is cryptographically hashed and transmitted to Meta, where it is matched against user accounts. This also takes place only with your consent via the cookie banner.

We and Meta are joint controllers for the collection and transmission of data to Meta (Art. 26 GDPR); the agreement is available at https://www.facebook.com/legal/controller_addendum. Meta is solely responsible for further processing. Meta is certified under the EU-US Data Privacy Framework. Further information: https://www.facebook.com/privacy/policy/

11. Job Applications

We do not provide a job application form on our website. If you apply to us by email or post, we process your information and documents to decide whether to establish an employment relationship. The legal basis is Art. 6(1)(b) GDPR. If no employment relationship is established, we delete your application documents six months after the application process has ended, unless you have consented to longer storage. This period serves to defend against potential claims under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR).

12. Links to Social Networks

Our website contains links to our profiles on social networks. These are simple links; data is transferred only when you click a link and visit the relevant social network's website. The privacy policy of the respective provider applies there.

13. Your Rights

You have the following rights vis-à-vis us in relation to your personal data:

  • Access to the data processed (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure, where the legal requirements are met (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent previously given, with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): If we process your data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then cease processing the data unless we demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise or defence of legal claims.

To exercise your rights, please contact datenschutz@parkhausplatzhirsch.de.

Right to Lodge a Complaint with a Supervisory Authority

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit)
Wilhelmstraße 7, 65185 Wiesbaden, Germany
PO Box 31 63, 65021 Wiesbaden, Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

14. Video Surveillance and Automatic Number Plate Recognition

We use video surveillance in designated areas of the car park and automatic number plate recognition at the entrances and exits. Full information is available at parkhausplatzhirsch.de/datenschutz/videoueberwachung.

15. Changes

We update this Privacy Policy when our services or legal requirements change. The version published on this website at any given time applies.

Last updated: November 2026

‍