Privacy Policy
Luxury Sport Cars Vienna
Privacy Policy
Last updated: 26.08.2026
This policy explains how Luxury Sport Cars Vienna GmbH processes personal data under the GDPR and Austrian data protection law. It is general information and does not replace notices provided for a specific service.
1. Controller
The controller is Luxury Sport Cars Vienna GmbH, Hetmanekgasse 11, 1230 Wien, Austria, Vienna, Austria.
- Telephone: +381614114244
- Email: info@example.com
- Privacy enquiries: info@example.com
- Website: https://luxurysportcars.com
2. Categories of data
Depending on your enquiry, booking and use of a vehicle, we process the following categories of personal data:
- Identity and contact data, including name, date of birth, address, telephone number and email
- Driving-licence, passport or identity-document data and driver eligibility information
- Booking, rental, vehicle, mileage and service data
- Payment, billing, deposit and fraud-prevention data; full card data is normally handled by our payment provider
- Communications, complaints, accident reports and evidence
- Technical data such as IP address, device, browser, cookie choices and website usage
- Vehicle location, status and telematics data where enabled and legally permitted
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering enquiries, quotations, bookings, handover and performance of the rental contract | Art. 6(1)(b) GDPR |
| Invoices, accounting, retention duties and cooperation with authorities | Art. 6(1)(c) GDPR |
| Deposit, identity, licence and fraud checks; fleet, security and claims management | Art. 6(1)(f) GDPR — legitimate interests in safe and efficient rental operations |
| Direct marketing to existing customers where permitted | Art. 6(1)(f) GDPR and Section 174 TKG 2021; consent where required |
| Optional cookies, analytics and personalised marketing | Art. 6(1)(a) GDPR and Section 165(3) TKG 2021 |
| Establishment, exercise or defence of legal claims | Art. 6(1)(f) GDPR |
Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
4. Obligation to provide data
Data marked as required is necessary to conclude or perform a rental contract or meet legal duties. Without it, we may be unable to provide a quotation, accept a booking or hand over a vehicle. Optional data may be withheld without contractual disadvantage.
5. Recipients
We disclose data only where necessary and subject to confidentiality and data-protection safeguards.
- Payment, banking, insurance and credit or fraud-prevention providers
- IT hosting, booking, communications, analytics and professional-service providers
- Vehicle manufacturers, workshops, roadside assistance and telematics providers
- Public authorities, courts, police, toll and parking operators where legally required
- Business partners involved in fulfilling a requested rental or mobility service
6. Third-country transfers
If a provider processes data outside the EEA, we use an adequacy decision, EU Standard Contractual Clauses with supplementary measures, or another lawful safeguard. Copies or information about applicable safeguards can be requested at info@example.com.
7. Retention
| Data | Typical retention |
|---|---|
| Enquiries without a contract | Up to 12 months after the final contact |
| Contracts, invoices and accounting records | Generally 7 years under Austrian tax and company law; longer if proceedings are pending |
| Driving-licence and identity verification records | For the rental and as needed for claims, fraud prevention and limitation periods |
| Deposit and payment records | Until settlement, then according to accounting and chargeback periods |
| Telematics and location data | Only as long as required for the stated security, operational or claims purpose |
| Cookie and consent records | For the cookie lifetime and as needed to demonstrate consent |
Different periods may apply where law requires retention or data is needed to establish, exercise or defend claims.
8. Automated decisions
We do not ordinarily make decisions producing legal or similarly significant effects solely by automated means. Fraud or risk indicators may support a human decision. If this changes, we will provide the information and safeguards required by Article 22 GDPR.
9. Vehicle telematics
Vehicles may contain manufacturer or third-party systems recording location, mileage, fuel or charge level, warning codes, driving events and security status. We access such data only where necessary for theft prevention and recovery, emergencies, roadside assistance, maintenance, contract compliance or handling accidents and claims.
Continuous monitoring is not used for general observation of drivers. Access is restricted, proportionate and documented. Drivers must inform passengers and additional drivers that connected-vehicle systems may operate.
12. Your rights
Subject to the legal conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time and object at any time to direct marketing.
- Send requests to info@example.com; we may need to verify your identity
- You may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at
- An objection based on your particular situation will be assessed against any compelling legitimate grounds
13. Data security
We apply appropriate technical and organisational measures, including access controls, encryption where suitable, backups, staff confidentiality and processor oversight. No internet transmission or storage system can be guaranteed completely secure.
14. Children
Our rental services are not directed to children. We do not knowingly collect children's data except where necessary, for example details relevant to a requested child seat or passenger service, and only from an authorised adult.
15. Changes to this policy
We may update this policy to reflect legal, technical or service changes. The current version and its update date are published on https://luxurysportcars.com. Material changes will be highlighted where appropriate.
11. Social media
Our social-media pages are also governed by the platform operator's privacy terms. When you interact with a page, the platform may provide aggregated statistics or process your data for its own purposes. Where we and a platform are joint controllers, the platform's arrangement determines the allocation of GDPR duties.