Controller
The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Park Pilot
Feselenstraße 4
85053 Ingolstadt
Deutschland
privacy@parkpilotinfo.de
The principle this site is built on
This website is purely informational. There is no registration, there are no accounts and there is no login. We collect as little data as is technically possible. In concrete terms:
- No analytics software, no tracking, no tag manager.
- No advertising networks and no social media plugins.
- All fonts, images and scripts are served from our own server. Opening this page makes no connection from your browser to any third party.
- No consent banner, because there is nothing here we would need consent for.
Server log files
When a page is requested, your browser transmits technical information which the server needs in order to deliver it, and which it logs:
- The IP address of the requesting device
- The date and time of the request and the address requested
- Browser type, browser version and operating system
- The HTTP status code and the amount of data transferred
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the technically sound and secure operation of the website. This data is not combined with other data, is not used to build profiles, and is deleted within seven days at the latest unless it is needed to investigate a specific security incident.
The contact form
If you write to us through one of the forms, we process only what you entered yourself:
- Name, email address and, if given, telephone number
- For an enquiry about a parking event, the vehicle registration as well, if you give it
- Your message, when it arrived, and the language you wrote in
The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at entering into a contract, and otherwise Art. 6(1)(f) GDPR - our legitimate interest in answering enquiries. Giving a name, telephone number and registration is voluntary; without an email address, however, we cannot reply to you.
We keep your enquiry for as long as it takes to deal with it and delete it afterwards - within two years at the latest, unless a statutory retention period applies. To keep automated bulk submissions out, the form checks a field that is invisible to you and the time between the page opening and the message being sent. No additional personal data is collected for this and no external service is involved.
Keeping automated submissions out
So that the form is not used by programs for bulk sending, we check three things. None of them sets a cookie, none of them involves an outside service, and none of them collects anything about you beyond the following:
- Your browser solves a small arithmetic task set by our server, in the background. Nothing is collected and nothing is sent to anybody else; only processor time is spent. The result is not stored.
- To limit how many messages arrive from one connection in an hour, we store with your enquiry not your IP address but a hash of it made with our secret key. It cannot be turned back into an address, it serves only that counting, and it is deleted after an hour - the enquiry itself stays.
- We ask the Domain Name System whether the domain of your email address can receive mail at all - which stops invented addresses and catches the typos that would otherwise send our reply nowhere. Only the part after the @ is looked up, never the full address.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is in keeping the form usable and in not letting automated submissions make our mailboxes useless.
Cookies
This website sets only strictly necessary cookies. There are exactly three, and none of them is for analytics or advertising:
- parkpilot_language
- Stores the language you chose in the header, so the site opens in the same language next time. Lifetime: one year. Set only if you actively switch language.
- csrftoken
- Protects the contact form against being submitted from another site. Without this cookie the form cannot be sent.
- sessionid
- Needed only to show you the confirmation message after you send the form, and ends when the browser is closed.
- cookie_consent
- Records how you answered the cookie notice, so that it does not appear again on every page. Ends when the browser is closed.
Strictly necessary cookies do not require consent under §25(2) TDDDG. That is why there is no cookie banner here. You can delete cookies in your browser at any time; the site then works exactly as before, apart from remembering your language.
We show the notice at the foot of the page regardless, and we record your answer. Today it changes nothing, because there is nothing here that needs consent - it is the switch for the day something is added that does. If that happens, it would load only after you agree, and it would be described here first.
No disclosure to third parties
Your data is not sold, not used for advertising and not transferred to a third country. It is disclosed only:
- to our hosting provider, which processes the data on our behalf and on our instructions (processing under Art. 28 GDPR)
- to our email provider, to the extent that the notification of your enquiry is delivered by email
- where we are legally obliged to, or where it is necessary to pursue a specific claim
Hosting
This website is hosted with a provider inside the European Union. There is a data processing agreement with that provider under Art. 28 GDPR. The legal basis for using it is Art. 6(1)(f) GDPR - our legitimate interest in a secure and available online presence.
Your rights
You have the following rights in relation to your personal data, at any time:
- The right of access (Art. 15 GDPR)
- The right to rectification (Art. 16 GDPR)
- The right to erasure (Art. 17 GDPR)
- The right to restriction of processing (Art. 18 GDPR)
- The right to data portability (Art. 20 GDPR)
- The right to object to processing (Art. 21 GDPR)
- The right to withdraw a consent you have given, with effect for the future (Art. 7(3) GDPR)
An informal message is enough for any of these: privacy@parkpilotinfo.de
Right to complain to a supervisory authority
Independently of the above, Art. 77 GDPR gives you the right to lodge a complaint with a data protection supervisory authority - usually the one where you live, or the one responsible for us, the Hessian Commissioner for Data Protection and Freedom of Information.
Security of transmission
This website is served only over an encrypted connection (HTTPS/TLS), so what you type into the contact form leaves your device encrypted. Beyond that we take technical and organisational measures under Art. 32 GDPR to protect your data against loss, alteration and unauthorised access.
Changes to this notice
We update this notice whenever the processing on this website changes. The version published here, with the date given above, is always the one that applies.