Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Cezanne & Ribeiro & Teixeira GbR, Richard-Strauss-Straße 52, 81677 München, Germany, represented by its partners Henrique Martins Cezanne, Martim Giebelhausen de Campos Pinto Ribeiro, Tomás Carvalho Machado de Nogueira Teixeira.

Email: contact@freundis.com

We have not appointed a data protection officer, as the legal requirements for doing so are not met.

2. Overview

We only process personal data to the extent necessary to provide this website, answer your inquiry and prepare a contract. This website does not set cookies, does not use tracking or advertising services and does not embed content from social networks.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, the host automatically processes information transmitted by your browser (server log files):

• IP address
• date and time of access
• page or file requested
• referrer URL (the previously visited page)
• browser type, operating system and device type

This processing serves to deliver the website, ensure its stability and security and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the website securely and without errors. The log files are stored by the host only for a short period and then deleted.

We have concluded a data processing agreement with Vercel (Art. 28 GDPR). Vercel is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by an adequacy decision of the European Commission (Art. 45 GDPR). The EU Standard Contractual Clauses apply in addition.

4. Inquiry form

When you send us an inquiry via the form, we process the data you enter:

• details of the rides you need (direction, frequency, number of children, pick-up area as postcode or district, destination, times, preferred option, start date)
• name, email address and phone number
• how you heard about us and, if applicable, the code of an advertising medium (e.g. a flyer) through which you reached the page
• your optional message

Please do not enter your children's names or other details about them in the form; we do not need them for an inquiry.

The purpose is to handle your inquiry and prepare an offer. We need your phone number because we agree route, times and procedure with you personally before making an offer. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps taken at your request). We also process how you heard about us on the basis of our legitimate interest in evaluating our marketing (Art. 6(1)(f) GDPR).

To send the emails – a notification to us and a confirmation to you – we use Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. We have concluded a data processing agreement with Resend; transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Inquiries arrive in our business email inbox. It is operated by an external email provider with whom we have concluded a data processing agreement (Art. 28 GDPR). If the provider processes data outside the EU, this only happens on the basis of an adequacy decision or the EU Standard Contractual Clauses.

We delete your data once your inquiry has been fully handled and no contract is concluded, at the latest after 12 months. If a contract is concluded, we store the data for the duration of the contractual relationship and beyond that only where statutory retention obligations apply (e.g. up to 10 years under commercial and tax law).

5. Contact by email

If you contact us by email, we process your email address and the content of your message in order to respond. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). Section 4 applies accordingly to the storage period.

6. Analytics with Vercel Web Analytics

To understand how our website is used, we use Vercel Web Analytics. No cookies are set and no data is stored on your device. Among other things, pages visited, referrer, country, browser, operating system and device type are recorded. Visitors are only distinguished by an anonymised hash that changes daily; individuals cannot be identified and there is no cross-site tracking.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in statistically evaluating and improving our offering. The provider is Vercel (see section 3).

7. Fonts

The typeface used on this website (Inter) is served locally from our own server. No connection to Google or any other third-party servers is made when you load the page.

8. Cookies

This website does not use cookies or comparable technologies that store or read information on your device. Consent under § 25 TDDDG is therefore not required.

9. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock icon in your browser's address bar. Data you submit via the form cannot be read by third parties.

10. Your rights

With regard to your personal data, you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds.

To exercise your rights, an informal message to contact@freundis.com is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

11. Obligation to provide data and automated decisions

You are under no statutory or contractual obligation to provide your data. Without the details not marked as optional in the form, however, we cannot process your inquiry. There is no automated decision-making, including profiling (Art. 22 GDPR).

12. Changes

We will update this privacy policy if our website or the legal requirements change. The version published here applies.