Translation Notice: This is a courtesy translation of the original German Privacy Policy (Datenschutzerklärung). This translation is provided for informational purposes only and is not legally binding. In the event of any discrepancy between the German original and this English translation, the shall prevail. The legally binding version is available in German at www.zeitgeist-taunus.de/datenschutz.
1Data Controller
The party responsible for data processing on this website is:
Zeitgeist Taunus GmbH
Mayers Gärten 11
61462 Königstein im Taunus
Germany
Registration Court: Amtsgericht Königstein im Taunus
Registration Number: HRB 12425
Tax Number: 003/249/50356
Email: info@zeitgeist-taunus.de2General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy.
Server Log Files
The hosting provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- —Browser type and version
- —Operating system used
- —Referrer URL (the previously visited page)
- —Hostname of the accessing computer
- —IP address of the accessing computer
- —Time of the server request
This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website — for this purpose, the server log files must be recorded. The data is usually automatically deleted after 14 days unless further retention is required for evidentiary purposes.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. We distinguish between technically necessary cookies and optional analytics cookies, for which we obtain your consent.
Necessary Cookies
These cookies are required for the proper operation of the website and cannot be deactivated:
- —
Session Cookies: Store your login data during a session (Expiry: When closing the browser)
- —
Shopping Cart Cookies: Store your selection in the rental and ticket shopping cart (Expiry: 7 days)
- —
Language Settings: Store your preferred language (German/English) (Expiry: 1 year)
- —
Cookie Preferences: Store your decision about optional cookies (Expiry: 1 year)
Analytics Cookies (optional)
If you consent via the cookie banner, we use Google Analytics to analyze the use of our website. These cookies are only set with your explicit consent and can be revoked at any time via our cookie banner.
Google Analytics (optional)
This website uses functions of the web analysis service Google Analytics only with your explicit consent via our cookie banner.
Provider:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Google Analytics enables us to analyze the behavior of website visitors. Various usage data is collected, such as page views, session duration, operating systems used, and user origin.
IP Anonymization
We use Google Analytics with activated IP anonymization. Your IP address is truncated by Google within the European Union before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser is not merged with other Google data.
Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time with effect for the future by changing your cookie settings via the cookie banner or using the 'Cookie Settings' link in the footer of each page.
Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses.
Authentication
For the internal administration area of our website, we use an external authentication service from a US-based provider (OAuth procedure).
When logging into the administration area, the following data is transmitted from the authentication service:
- —Username of the user account
- —Profile picture URL (if available)
Data processing is based on Art. 6(1)(b) GDPR (contract performance). This function is exclusively available to our employees and is not relevant for customers. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses.
Payment Processing
For the secure processing of online payments, we use a specialized, PCI-DSS-certified payment service provider based in the European Union (Ireland).
During payment, the following data is transmitted to the payment service provider:
- —Payment data (credit card number, expiry date, security code)
- —Billing address
- —Email address
- —Order amount
Data processing is based on Art. 6(1)(b) GDPR (contract performance). We use Stripe for payment processing. Stripe operates internationally and may process data outside the EU, including in the USA. The Irish establishment does not mean that data is processed exclusively in Ireland. Information about recipients and international transfers is available in Stripe's privacy policy.
Email Delivery
We use Mailjet (Mailjet SAS, France) to send transaction-related emails, including inquiry confirmations, order confirmations and invoices.
During email delivery, the following data is transmitted to the delivery service provider:
- —Recipient's email address
- —Recipient's name
- —Email content (order confirmation, invoice, tickets)
Data processing is based on Art. 6(1)(b) GDPR (contract performance). Processing takes place exclusively within the EU, so no third-country transfer occurs.
Accounting Software
For invoicing and accounting, we use cloud-based accounting software from a German provider. Data processing takes place exclusively on servers in Germany (data centers in the greater Frankfurt am Main area). The data centers used are ISO 27001 certified and meet the requirements of GoBD (Principles for the proper management and storage of books, records, and documents in electronic form and for data access).
Within the scope of commissioned processing pursuant to Art. 28 GDPR, the following data is transmitted to the accounting software:
- —Customer master data (name, address, email address, phone number)
- —For business customers: company name, VAT ID
- —Invoice data (order items, amounts, payment status)
Data processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (fulfillment of legal obligations, in particular tax and commercial law retention obligations under § 147 AO and § 257 HGB). No data is transferred to third countries — processing takes place exclusively within Germany.
Address Lookup (OpenStreetMap)
For calculating delivery distances and address validation, we use the geocoding service from OpenStreetMap (Nominatim).
Provider:
OpenStreetMap Foundation
132 Maney Hill Road
Sutton Coldfield, B72 1JU, United Kingdom
During address lookup, your entered delivery address (street, postal code, city) is transmitted to the service to determine the coordinates for distance calculation.
Data processing is based on Art. 6(1)(b) GDPR (contract performance). OpenStreetMap is an open-source project and does not permanently store personal data.
File Storage
For storing product images and documents, we use a cloud storage service from a US-based provider.
No personal customer data is stored in this storage. The stored files exclusively comprise product images of our rental equipment. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses.
Locally Hosted Fonts
We serve the fonts Montserrat, Playfair Display, Poiret One and Federo locally with this website. Loading these fonts does not require a connection to Google Fonts and does not transmit your IP address to Google for this purpose. The fonts are delivered through our website hosting.
8Orders and Contact Form
For orders (rental, event tickets) and contact inquiries, we collect the following data:
- —Name, email address, phone number
- —Billing and delivery address
- —For business customers: company name, VAT ID
- —Order details and payment information
The processing of this data is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (legal obligations such as retention periods under HGB and AO).
9Data Retention
We store your personal data only for as long as is necessary for the respective processing purposes or as long as statutory retention periods apply:
- —
Order data: 10 years (commercial and tax law retention obligations)
- —
Invoices: 10 years (§ 147 AO, § 257 HGB)
- —
Contact inquiries: After completion of processing, at most 3 years
- —
Session cookies: Until closing the browser
10Your Rights
You have the right at any time to:
- —Request information about your stored personal data (Art. 15 GDPR)
- —Request correction of inaccurate data (Art. 16 GDPR)
- —Request deletion of your data (Art. 17 GDPR)
- —Request restriction of processing (Art. 18 GDPR)
- —Data portability (Art. 20 GDPR)
- —Object to data processing (Art. 21 GDPR)
- —Lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, contact us at: info@zeitgeist-taunus.de
Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
We use AI-powered tools exclusively for the internal creation of blog posts. No personal data of our customers or website visitors is processed or transmitted to AI services.
Hosting and International Processing
We use Replit, Inc. (USA) to host this website, its application database and uploaded files. Replit uses cloud infrastructure, including Google Cloud. Processing outside the EU, particularly in the USA, is possible. We do not promise exclusively European storage.
Further information is available in Replit's privacy policy and its Data Processing Agreement.
Processing and Transfer Safeguards
The legal basis for processing and the safeguards for international transfers are distinct:
- —
International transfers: Transfers require an applicable adequacy decision under Art. 45 GDPR or appropriate safeguards under Art. 46 GDPR. An EU-US Data Privacy Framework certification applies only to the recipient and processing covered by that certification, not automatically to every US provider.
- —
Standard Contractual Clauses (SCCs): Replit's published Data Processing Agreement provides EU Standard Contractual Clauses for transfers requiring safeguards. The applicable recipient and transfer provisions are described in the linked provider documentation.
- —
Website operation: Processing necessary for secure website operation is based on Art. 6(1)(f) GDPR. Placing an order does not by itself constitute explicit consent to international data transfers.
- —
Contract performance (Art. 6(1)(b) GDPR): Data processing is necessary for the fulfillment of your order.
Processed Data
The application processes the following data, depending on the function used:
- —Order data (name, email, address, phone number)
- —Billing address and, if applicable, company data (for business customers)
- —Order history and transaction data
- —Event tickets and QR codes
Note: Card details entered in Stripe Checkout are processed directly by Stripe. Our application stores order amounts, payment status and Stripe references, not full card numbers or security codes. Stripe's international processing is described in the payment section.
International Data Transfer – Summary
Overview of all recipient categories to which personal data is transferred:
| Category | Location | Safeguard |
|---|
| Replit (hosting) | USA / international | See hosting section and provider DPA |
| Stripe (payments) | Ireland / international, including USA | See Stripe privacy policy and transfer safeguards |
| Email Delivery Provider | France (EU) | EU Processing, GDPR |
| Accounting Software | Germany | DE Servers, ISO 27001, GoBD |
| Google Analytics (optional) | Ireland / international, including USA | IP Anonymization, DPF, SCCs |
| Locally hosted fonts | Website hosting | No requests to Google Fonts |
| Replit / Google Cloud (file storage) | USA / international | See hosting section and provider DPA |
| Geocoding Service | UK | Adequacy Decision |
SSL Encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address bar of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser bar.