Privacy Policy

Protecting your personal data is very important to us. We process your data exclusively in accordance with legal regulations (GDPR, DSG, TKG 2021). In this Privacy Policy, we inform you, in accordance with Art. 13 and 14 GDPR, about the most important aspects of data processing within our website www.myvanture.com and its associated services.

Data Controller

The data controller for data processing, as defined by the GDPR, is:

myvanture GmbH Wirtschaftspark 20 9130 Poggersdorf Austria

Tel.: +43 50 173 700Email: [email protected]

If you have any questions about data protection, you can reach us using the contact details above. We have not appointed a data protection officer, as there is no legal obligation to do so.

Your Rights

You generally have the following rights regarding your personal data stored with us:

Right to information (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing based on legitimate interest (Art. 21 GDPR)
Right to withdraw consent with future effect (Art. 7 para. 3 GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise these rights, simply send an informal message to [email protected].

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to us or to the supervisory authority. In Austria, this is the Data Protection Authority:

Österreichische Datenschutzbehörde Barichgasse 40-42, 1030 Vienna Tel.: +43 1 52 152-0 Email: [email protected] Web: www.dsb.gv.at

Contacting Us

If you contact us via a form on the website or by email, the data you provide will be stored by us for the purpose of processing your inquiry and for any follow-up questions. We will not share this data without your consent.

Processing is based on Art. 6 para. 1 lit. b GDPR (pre-contractual measures or contract fulfillment) insofar as your inquiry is related to the initiation or execution of a contract; otherwise, it is based on our legitimate interest in responding to inquiries (Art. 6 para. 1 lit. f GDPR). Inquiry data that does not lead to a contract will be deleted as soon as processing is complete and no legal retention obligations prevent deletion.

We use Freshsales as our Customer Relationship Management system for processing inquiries and ongoing customer communication. The provider is Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA. We have a data processing agreement with Freshworks. If you do not agree with the processing of your data in this system, you can contact us by phone or email. Further information can be found in Freshworks' privacy policy at www.freshworks.com/privacy.

We use Zapier software for various automations. The provider is Zapier Inc., 548 Market Street #62411, San Francisco, CA 94104, USA. This software enables the exchange of data between our systems, which is used for order processing as well as for marketing and analysis purposes. We also have a data processing agreement with Zapier. Further information can be found in Zapier's privacy policy at zapier.com/legal/data-privacy.

For data transfer to the USA, please refer to the "Data Transfer to Third Countries (USA)" section.

Booking and Contract Processing

To rent a vehicle, we process the data necessary for contract fulfillment. This includes, in particular, name, address, contact details, date of birth, payment data, and driver's license data of the drivers. The booking process is handled via our booking system at booking.myvanture.com.

The data you provide is required for the fulfillment of the contract or for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR). Without this data, we cannot conclude the rental agreement with you.

Data will only be transmitted to third parties if this is necessary for contract fulfillment or legally required, in particular to our payment service provider for payment processing and to our tax advisor for fulfilling our tax obligations (Art. 6 para. 1 lit. c GDPR).

In the event of a contract being concluded, data from the contractual relationship will be stored until the expiry of the tax retention period (seven years according to § 132 BAO). Insofar as it is necessary for the assertion, exercise, or defense of legal claims, we store individual data until the expiry of civil law limitation periods (up to ten years). If a booking process is canceled, the data collected during this process will be deleted, unless there are legal retention obligations.

Payment Processing

We use the payment service provider Stripe for processing card payments. The provider in the European Economic Area is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. PayPal payments are also processed via Stripe.

When you make a payment, the necessary payment data (e.g., card or account details, amount, time) is processed directly by Stripe. We do not receive full card details ourselves. The legal basis is contract fulfillment (Art. 6 para. 1 lit. b GDPR). Further information can be found in Stripe's privacy policy at stripe.com/at/privacy.

PayPal

If you choose PayPal as your payment method, the payment will be forwarded to PayPal via our payment service provider Stripe. The service provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. As part of the payment processing, the necessary data (in particular your PayPal access data as well as payment and transaction data) are processed directly between you, PayPal, and Stripe. The legal basis is contract fulfillment (Art. 6 para. 1 lit. b GDPR). Further information on data processing by PayPal can be found in the PayPal privacy policy at www.paypal.com/at/webapps/mpp/ua/privacy-full.

Collection and Processing of Vehicle Data

Some vehicles may be equipped with technical devices that record position, status, and other technical information and may transmit this data to myvanture, to third-party providers, or to the manufacturer. These devices may be permanently active, even when other services in the vehicle are switched off. There is no guarantee that a vehicle without these devices will be available for rent.

myvanture does not share your personal data with the manufacturer unless you have given us permission to do so, it is necessary to provide certain services, or it is legally required. We may engage a third-party provider to process this data on our behalf without sharing your personal data, unless this is necessary to provide certain services or legally required.

These devices and the data they collect are used for the following purposes:

to manage the rental of the vehicle
to assist with damage claims
to assist with roadside assistance
to comply with legal requirements
to act in emergencies that pose a threat to the safety of individuals
to enable certain aspects of the services
to better understand user behavior
to assist in the recovery of lost or stolen vehicles
to respond to requests from law enforcement or regulatory authorities
to defend or enforce the rights of the lessor

The legal basis is contract fulfillment (Art. 6 para. 1 lit. b GDPR), compliance with legal obligations (Art. 6 para. 1 lit. c GDPR), and our legitimate interest in protecting our vehicles (Art. 6 para. 1 lit. f GDPR).

You have the option to subscribe to our newsletter via our website. For this, we need your email address or your phone number registered with WhatsApp, as well as your declaration that you agree to receive the newsletter.

The registration takes place via a double opt-in procedure: After registration, we send you a confirmation asking you to confirm the subscription. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 174 TKG 2021).

For sending and managing our email newsletter, we use Freshsales (provider Freshworks Inc., see "Contacting Us" section; privacy policy at www.freshworks.com/privacy). You receive the WhatsApp newsletter via the WhatsApp service (provider WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Further information can be found in WhatsApp's privacy policy at www.whatsapp.com/legal/privacy-policy-eea.

You can cancel your subscription at any time. Please send your cancellation to [email protected] or the word "STOP" to our WhatsApp channel at +43 50 173 700. We will then immediately delete your data stored in connection with the newsletter dispatch. The withdrawal does not affect the lawfulness of the processing carried out up to that point.

Hosting and Content Delivery Network

Hosting

Our website is hosted by DigitalOcean LLC (105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA). The data is stored and processed exclusively in a data center within the European Union (Frankfurt am Main region, Germany).

When you access our website, information is automatically collected in so-called server log files, which your browser transmits. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and the IP address. This data is technically necessary to deliver the website and to ensure its stability and security. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 para. 1 lit. f GDPR). We have a data processing agreement with the provider. Further information can be found in DigitalOcean's privacy policy at www.digitalocean.com/legal/privacy-policy.

Content Delivery Network (Bunny CDN)

To deliver content quickly and securely (especially images and static files), we use Bunny's Content Delivery Network. The provider is BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (EU). Your IP address is processed to deliver the content via the nearest server. The legal basis is our legitimate interest in a high-performance and secure provision of our website (Art. 6 para. 1 lit. f GDPR). We have a data processing agreement with the provider. Further information can be found in Bunny's privacy policy at bunny.net/privacy.

Our website uses cookies. These are small text files that are stored on your device with the help of your browser and do not cause any harm. We use them to make our offer user-friendly, as well as for statistical and marketing purposes.

Technically necessary cookies are set for the basic function of the website. The legal basis is our legitimate interest in the technically flawless operation (Art. 6 para. 1 lit. f GDPR) or § 165 para. 3 TKG 2021.

All other cookies and tracking technologies (statistics and marketing) are used exclusively based on your explicit consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021). We obtain this consent via our consent banner before the corresponding services are loaded. You can adjust or withdraw your selection at any time via the link to the cookie settings at the bottom of the page.

To manage your consents, we use the Consent Management Platform Cookiebot. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot stores your consent decision and an anonymized (shortened) IP address to document your consent. Further information can be found at www.cookiebot.com/de/privacy-policy.

You can also configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, or generally exclude them. If cookies are deactivated, the functionality of our website may be limited.

Tag Management, Web Analytics, and Marketing

To integrate and control the services listed below, we use Google Tag Manager (provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager itself does not set cookies and does not collect personal data; it is used exclusively for managing the integrated tags. Statistical and marketing tags are only triggered after your consent via the consent management. Further information can be found in Google's privacy policy at policies.google.com/privacy.

The following services are loaded exclusively based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021). You can withdraw this consent at any time via the cookie settings.

Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable an analysis of the use of our website. This includes, among other things, pages viewed, dwell time, approximate location (derived from the shortened IP address), technical information about the browser and device, and the source of your visit. The IP address is processed in a shortened form, making direct attribution to your person impossible. The evaluation is pseudonymized. Further information can be found in Google's privacy policy at policies.google.com/privacy.

Google Ads (Conversion Tracking and Remarketing)

We use Google Ads from Google Ireland Limited to draw attention to our offers. In this context, we use conversion tracking, the conversion linker, and remarketing to measure the success of our advertising campaigns and to display interest-based advertising to you. Cookies are set as soon as you reach our website via a Google ad or perform certain actions. Further information can be found in Google's privacy policy at policies.google.com/privacy.

Microsoft Advertising (Bing UET)

We use Universal Event Tracking (UET) from Microsoft Advertising by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) to measure the success of our advertisements and for remarketing. Cookies are set and information about your use of our website is processed. Further information can be found at privacy.microsoft.com/de-de/privacystatement.

Meta Pixel (Facebook/Instagram)

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). The pixel allows us to track user behavior after they have seen or clicked on a Meta ad, as well as to evaluate the effectiveness of our ads for statistical purposes and to display interest-based advertising to you. The collected data is transmitted to Meta. Further information can be found in Meta's data policy at www.facebook.com/privacy/policy.

Hotjar

We use Hotjar to better understand the needs of our users and to optimize our offer. The provider is Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta. Hotjar works with cookies and other technologies to collect data about our users' behavior and their devices, in particular IP address (in anonymized form), screen size, device type, browser information, location (country only), and preferred language. Hotjar stores this information on our behalf in a pseudonymized user profile. Further information can be found at www.hotjar.com/legal/policies/privacy.

ADCELL (Affiliate Marketing)

We participate in the ADCELL affiliate program. The provider is Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany. ADCELL sets cookies to track and bill bookings made through partner websites (tracking of ad clicks and conversions). Further information can be found at www.adcell.de/datenschutz.

Embedded Videos (YouTube)

We embed videos from the YouTube platform on our website. The operator is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use YouTube's enhanced privacy mode, where available. When a video is played, a connection to YouTube's servers is established, informing the server which of our pages you have visited, and cookies may be set. The embedding is based on your consent (Art. 6 para. 1 lit. a GDPR). Further information can be found in Google's privacy policy at policies.google.com/privacy.

Data Transfer to Third Countries (USA)

We use services from providers whose parent companies are based in the United States (in particular Google, Meta, Microsoft, Freshworks, Zapier, and Stripe). This may result in personal data being transferred to and processed in the USA.

The European Commission has determined an adequate level of data protection for the USA with the EU-US Data Privacy Framework (DPF), provided that the receiving company is certified under the DPF. Insofar as a provider is certified, we base the transfer on this adequacy decision (Art. 45 GDPR). In all other cases, the transfer is based on the Standard Contractual Clauses issued by the European Commission in accordance with Art. 46 GDPR.

We point out that despite these guarantees, a level of data protection fully comparable to that in the EU cannot be guaranteed in third countries, and in particular, access by US authorities cannot be completely ruled out. We have no influence on any processing by US authorities.

TLS Encryption with HTTPS

We use HTTPS to transmit data securely over the internet. This secures the entire transmission of all data from your browser to our web server. By using TLS (Transport Layer Security), we meet the requirements for data protection by design (Art. 25 para. 1 GDPR). You can recognize the use of this security by the padlock symbol in your browser's address bar and by the use of the https scheme as part of our internet address (https://www.myvanture.com).

Currency and Changes to this Privacy Policy

This Privacy Policy is current as of June 2026. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to adapt this Privacy Policy. The current version can be accessed at any time on this page.