Privacy Policy
Last updated: 28.01.2026
1. Data Controller
Michael-Felke-Straße 13
55487 Sohren
Germany
Email: info@parkzone-hahn.de
Phone: +49 175 3722093
2. Collection and Processing of Personal Data
2.1 When Booking
When you book a parking space with us, we collect the following data:
- First and last name
- Company name (optional)
- Address (street, house number, postal code, city)
- Email address
- Phone number (optional)
- License plate number
- Arrival and departure dates and times
- Number of persons (for shuttle service coordination)
- Flight number (optional, for coordination)
Multiple vehicle bookings: When booking multiple vehicles together, each vehicle receives a separate parking ticket. All tickets are linked via an internal booking group ID and managed together. The booking customer's data is used for all vehicles in the booking.
2.2 Technical Data
When using our website, the following data is automatically collected:
- IP address (stored encrypted)
- Date and time of access
- Browser type and version
2.3 Payment Data
We do not store complete credit card or bank data. For card payments, only technical reference numbers (session ID, payment ID) are stored to associate your payment.
2.4 Advertising Campaign Tracking
When you visit our website via advertising links (e.g., Google Ads), we collect the following data to measure the success of our advertising campaigns:
- UTM parameters (campaign source, medium, name)
- Google Click ID (gclid)
- Referrer (referring website)
- Browser type (User-Agent)
- Anonymized IP address (stored as hash, not reversible)
- Access time
This data is used exclusively for internal success analysis of our advertising campaigns and is not shared with third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in measuring advertising effectiveness). The data is stored for 90 days and then automatically deleted.
2.5 Google Ads Conversion Tracking
If you have accepted cookies, we use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns. Google sets a cookie to track whether you have completed a booking after clicking on an ad.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data transferred: Cookie ID, timestamp, page views, conversion events (e.g., completed booking)
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner)
Cookie duration: 90 days
You can prevent Google's data collection at any time by deleting cookies in your browser settings or by using Google's opt-out: adssettings.google.com
Google Privacy Policy: policies.google.com/privacy
3. Purpose of Data Processing
We process your data for the following purposes:
- Contract fulfillment: Processing your parking booking, creating invoices and parking tickets
- Communication: Sending booking confirmations, reminders, and for inquiries
- Spam protection: Prevention of abuse through rate limiting (max. 5 bookings per IP address per day)
- Legal obligations: Retention of invoices according to tax law
4. Legal Basis
Your data is processed based on the following legal grounds:
| Legal Basis | Usage |
|---|---|
| Art. 6(1)(b) GDPR | Contract fulfillment (booking, invoice, communication) |
| Art. 6(1)(c) GDPR | Legal obligations (tax law, retention) |
| Art. 6(1)(f) GDPR | Legitimate interest (spam protection, fraud prevention) |
5. Data Recipients
Your personal data is transmitted to the following recipients:
5.1 Payment Service Providers
Stripe Inc. (Ireland/USA)
For card payments, your payment data is transmitted directly to Stripe. We only receive confirmation of payment and technical reference numbers.
Privacy policy: stripe.com/privacy
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)
For PayPal payments, your data is transmitted directly to PayPal.
Privacy policy: paypal.com/privacy
5.2 Email Delivery
We use a server at rainbow-web.com for sending emails. Your email address, name, and email content (booking confirmation, invoice, etc.) are transmitted.
5.3 Links in Emails
Our emails may contain links to the following external services:
- Google Maps: Navigation link to the parking lot. Google's privacy policy applies when clicked.
- Google Reviews: Link to leave a review (optional). Data is transferred to Google when clicked.
Google Privacy Policy: policies.google.com/privacy
6. Storage Duration
| Data Type | Storage Duration | Reason |
|---|---|---|
| Booking and invoice data | 10 years | Tax retention requirement (§ 147 AO) |
| Spam protection logs | 7 days after departure | Automatic deletion |
| Cookie consent | 365 days | Proof of consent |
| Advertising tracking data | 90 days | Campaign analysis |
7. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You can request information about your stored data.
- Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): You can request deletion of your data, unless legal retention obligations exist.
- Right to restriction (Art. 18 GDPR): You can request restriction of processing.
- Right to data portability (Art. 20 GDPR): You can receive your data in a structured format.
- Right to object (Art. 21 GDPR): You can object to processing of your data.
To exercise your rights, please contact: info@parkzone-hahn.de
Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
55020 Mainz
Website: www.datenschutz.rlp.de
8. Cookies
Our website uses exclusively technically necessary cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| PHPSESSID | Session management (booking process) | Until browser is closed |
| cookie_consent | Storage of your cookie consent | 365 days |
| _gcl_aw (Google) | Google Ads conversion tracking (only with consent) | 90 days |
Google Ads cookies are only set if you have accepted cookies via our cookie banner.
9. Data Security
We implement extensive technical and organizational measures to protect your data:
- SSL/TLS encryption: All data is encrypted between your browser and our server (HTTPS).
- Encryption of stored data: Your personal data (name, address, email, phone, license plate) is stored encrypted with AES-256 in our database.
- Password security: Passwords are hashed with the secure Argon2 algorithm.
- Spam and fraud protection: We use rate limiting and CSRF tokens for abuse protection.
10. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy to comply with changed legal requirements or when changing our services. The current version can always be found on this page.