Privacy policy

The controller for the processing of personal data on this site is:

Questions about data protection go to the same address. We are not required to appoint a data protection officer.

This site is hosted by Netlify (Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA). Every time you open a page, your browser sends technically necessary data to their servers: IP address, date and time, the address requested, the amount of data transferred, the referrer, and details about your browser and operating system.

Without this data the page cannot be delivered; it also serves operational security. The legal basis is our legitimate interest in stable and secure operation, Art. 6 (1) (f) GDPR. We do not analyse these logs and do not combine them with other data.

Netlify also processes data in the USA. The transfer is based on a data processing agreement incorporating the EU Commission's standard contractual clauses.

The forms on this site (enquiry, accepting the offer, withdrawal) run through Formspree. What you type goes to Formspree and is forwarded from there by email to our mailbox.

The provider is Formspree, Inc., USA. When you submit, your browser sends the form data to Formspree, which processes it to deliver it to us and stores it under Formspree's own rules, see Formspree's privacy policy. The legal basis is Art. 6 (1) (b) GDPR. Because Formspree is based in the USA, the transfer relies, according to Formspree, on the EU standard contractual clauses. On our side the retention period below applies.

We ask for:

• island
• vehicle class and, where applicable, a specific vehicle
• dates
• pick-up location
• age
• licence class and year of issue
• name
• email
• phone
• accommodation
• message
• your consent to pass the enquiry on

The purpose is the referral itself: we use your details to ask the rental companies that come into question for your dates, and email you the result. The legal basis is Art. 6 (1) (b) GDPR — steps taken at your request prior to entering into a contract.

To handle the enquiry we pass the necessary details to the rental company you asked about. These companies are based in Spain, so within the EU. Without your consent tick we pass nothing on — but then we cannot answer the enquiry either.

We delete the enquiry once it is settled and no further questions are to be expected. If it turns into a booking, the statutory retention periods under German commercial and tax law apply (§ 257 HGB, § 147 AO).

Our mailbox is hosted by Hostinger (Hostinger International Ltd., 61 Lordou Vironos, 6023 Larnaca, Cyprus). If you write to us directly, we process your address and the content of your message in order to answer it — Art. 6 (1) (b) or (f) GDPR. Email is not an encrypted channel. Don't send us anything you wouldn't send unencrypted.

No payment runs through this website. You pay the 20 per cent down payment the way your offer states: by bank transfer or through a payment service named there. The privacy notice of your bank or of that service applies to it. All we receive from there is the information that payment was made and under which reference. The remaining 80 per cent and the security deposit run directly between you and the rental company on the island.

The route pages show a map. Your browser loads the tiles from tile.openstreetmap.org, operated by the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom). Your IP address is transmitted to that server in the process. The map only loads when you open a route page — no other page requests anything from there. The legal basis is our legitimate interest in a usable map, Art. 6 (1) (f) GDPR. For the United Kingdom an adequacy decision of the EU Commission is in place.

We set exactly one technically necessary cookie: “rt_lang”. It contains only the language code (de, en or es), is set when you switch language or are automatically forwarded to your browser language, and expires after one year. Its sole purpose is to serve you the right language version on your next visit; no consent is required for it (Section 25(2) no. 2 TDDDG), and it is not used for tracking. That is why this site has no cookie banner. In addition: If you dismiss the hint about another language version, your browser remembers that in a local storage entry so the hint does not come back on every page. The entry contains nothing that would identify you, it never leaves your device, and you can delete it at any time in your browser settings.

Fonts, images and videos are served from the same server as the page itself. So no connection to Google Fonts or an image CDN is made when you open a page.

No analytics service, no tracking pixel, no ad networks, no social media plugins, no newsletter, no profiling. That is also why there is no cookie banner here: there is nothing to consent to.

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing we base on a legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future; processing up to the withdrawal remains lawful. An informal email to the address above is enough.

You can lodge a complaint with a data protection supervisory authority. The one responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

This privacy policy is dated September 2026. If something about the site changes, we change this text too.