Privacy Policy

The controller responsible for data processing on this website is:

X-Park Airport
Rheinpromenade 10
40789 Monheim am Rhein
Germany

Email: info@x-parkairport.de
Website: https://x-parkairport.de

The protection of personal data is important to us. We process personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

This privacy policy explains which data we collect, for which purposes we use it and which rights data subjects have.

We process personal data when users visit our website, make a booking, contact us or use services of the platform.

In particular, the following data may be processed:

• Name
• Email address
• Telephone number
• Vehicle data
• Flight number
• Travel dates
• Booking data
• Payment information
• IP address
• Technical usage data

We process personal data for the following purposes:

• Provision of the website
• Execution and brokerage of parking bookings
• Communication with customers and parking providers
• Payment processing
• Sending booking confirmations
• Handling enquiries and complaints
• Improvement of our platform
• Compliance with legal obligations
• Prevention of misuse and fraud

Personal data is processed on the following legal bases:

• Art. 6(1)(b) GDPR for the performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR for compliance with legal obligations
• Art. 6(1)(f) GDPR on the basis of legitimate interests
• Art. 6(1)(a) GDPR where express consent has been given

When a customer makes a booking via X-Park Airport, we process the data required for this purpose.

This includes in particular:

• Name of the customer
• Contact details
• Arrival and departure dates
• Times
• Flight number
• Number of travellers
• Vehicle data
• Booked parking provider
• Booked additional services

This data is required to broker the booking and to pass it on to the respective parking provider.

X-Park Airport is a brokerage and booking platform. To execute the booking, we pass the required booking data on to the respective parking provider.

The parking provider uses this data exclusively to perform the booked parking service.

Payment processing is carried out via external payment service providers, in particular Stripe.

When a payment is made, payment data is transmitted to the respective payment service provider. X-Park Airport does not store complete credit card data.

Payment data is processed for the purpose of secure payment processing.

When users contact us by email or via a contact form, we process the data provided in order to handle the enquiry.

This data is not passed on to third parties without consent, unless this is necessary to handle the enquiry.

When you visit our website, technical data is processed automatically.

This includes in particular:

• IP address
• Date and time of access
• Pages visited
• Browser type
• Operating system
• Referrer URL
• Volume of data transferred

This data serves technical security, error analysis and the stable provision of the website.

Our website uses cookies and similar technologies.

Some cookies are technically necessary to provide the website. Other cookies are only set with consent, in particular for analytics and marketing purposes.

Further information can be found in our Cookie Policy.

We may use Google Analytics to statistically analyse the use of our website.

Google Analytics is only used if the user has given their prior consent.

Consent can be withdrawn at any time via the cookie settings.

We may use Google Tag Manager to manage services and tags on the website.

Google Tag Manager itself does not create user profiles and does not store any analytics or marketing data. However, other services may be integrated via Google Tag Manager, provided that the corresponding consent has been given.

We may use Google Ads to place advertisements and measure their success.

Processing only takes place with the user’s prior consent.

We may use the Meta Pixel to measure and optimise advertising activities on Meta platforms such as Facebook and Instagram.

Processing only takes place with the user’s prior consent.

We use email communication to send booking confirmations and booking-related information and to handle enquiries.

Processing takes place for the execution of the booking and for communication with the customer.

We store personal data only for as long as is necessary for the respective purpose.

Statutory retention obligations remain unaffected.

Booking and invoice data may be stored for up to 10 years due to statutory obligations.

Technical log data is generally only stored for a limited period of time.

Personal data may be transmitted to the following recipients:

• Parking providers
• Payment service providers
• Hosting providers
• Technical service providers
• Email service providers
• Tax advisors or authorities, where required by law

Data is only passed on to the extent necessary for the respective purpose or permitted by law.

When certain services are used, personal data may be transferred to countries outside the European Union.

Where necessary, this takes place on the basis of appropriate safeguards, in particular the standard contractual clauses of the European Commission.

Under the GDPR, data subjects have in particular the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with a data protection supervisory authority

Consent that has been given can be withdrawn at any time with effect for the future.

Withdrawal is possible in particular via the cookie settings.

We take technical and organisational measures to protect personal data against loss, misuse, unauthorised access and alteration.

We reserve the right to amend this privacy policy where legal, technical or organisational changes make this necessary.

The current version is available on our website at all times.