Privacy Policy
Last updated: June 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation
(GDPR) is:
giant Computer Systems, Marc Breuer
Am Altengraben 23
90768 Fürth
Germany
Phone: +49 (0) 911 976912-0
Email: info@retro-rento.de
2. General information
The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, German Federal Data Protection Act, TDDDG). In this privacy policy we inform you about the most important aspects of data processing within our online rental service. Personal data is any data with which you can be personally identified.
3. Your rights
You generally have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw a given consent (Art. 7 (3) GDPR)
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the competent supervisory authority (Art. 77 GDPR).
4. Hosting
Our platform is operated by a service provider (host) located in Germany. The personal data collected on this website is stored on the host's servers. We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR. The legal basis is our legitimate interest in the secure and efficient provision of our offer (Art. 6 (1) (f) GDPR).
5. SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://".
6. Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources. The collection is carried out on the basis of Art. 6 (1) (f) GDPR for the technically error-free presentation and optimisation of the website and to ensure system security.
7. Cookies
We use only technically necessary cookies that are required for the operation of the platform. These include:
- Session cookie (session management)
- CSRF token (protection against cross-site request forgery)
- Language preference (selected display language)
- Cookie consent (storing your cookie decision)
- Shopping / rental basket (temporary storage of your selected items)
These cookies contain no advertising or tracking functions. No consent is required. The legal basis is § 25 (2) TDDDG and Art. 6 (1) (f) GDPR.
8. Registration and customer account
Registration is required to use our rental service. We process the following data: name, postal address, email address, telephone number, and the password in encrypted form. This data is processed to provide the customer account and to perform the contractual relationship. The legal basis is Art. 6 (1) (b) GDPR. The data is deleted as soon as the account is closed and no statutory retention obligations conflict with this.
9. Reservation and rental contract
When making a reservation, we process the data required to fulfil the contract: booking details, rental period, pickup date, selected items and quantities. This data is used exclusively to process the rental transaction. The legal basis is Art. 6 (1) (b) GDPR. Items are handed over exclusively in person at our premises — no shipping is available.
10. Payment processing via Stripe
For online payments we use Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland). The data required for payment processing is transmitted to Stripe. Stripe may transfer data to the USA; appropriate safeguards pursuant to Art. 46 GDPR (standard contractual clauses) are in place. The legal basis is Art. 6 (1) (b) GDPR. Alternatively, cash payment on pickup is also available; in this case no payment data is transmitted electronically.
11. Security deposit
For certain rental items we charge a security deposit. This is processed to cover potential damage or loss and will be refunded after the return and inspection of the rented item. The legal basis is Art. 6 (1) (b) GDPR.
12. Email notifications
We send you transactional emails in connection with your reservation: booking confirmation, pickup and return reminders, and status updates. The legal basis is Art. 6 (1) (b) and (f) GDPR.
13. Web fonts
This website uses exclusively locally hosted fonts. No external font services (such as Google Fonts or similar providers) are used, meaning no connection to third-party servers is established when the page is loaded.
14. Storage period and deletion
We store personal data only for as long as is necessary for the respective purposes. Invoices and booking-related data are subject to statutory retention periods (generally 10 years pursuant to § 147 AO and § 257 HGB). After these periods expire, the data is routinely deleted, provided that no further statutory retention obligations conflict with this.
15. Changes to this privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to your next visit.