Privacy policy
In the following, we inform you about the processing of your personal data by us and the claims and rights to which you are entitled under the data protection regulations, in particular the European General Data Protection Regulation (GDPR).
This Privacy Policy explains the nature, scope, and purpose of the processing of personal data on our website (hereinafter “Website”). This Privacy Policy applies regardless of the domains, platforms, and devices used (e.g., desktop, mobile, etc.).
Personal data as defined by the GDPR refers to any data that can be linked to you personally, such as your name, address, email addresses, and user behavior. The specific data that is processed and how it is used depends largely on the services you use through us.
We use various other terms in our data protection information in the sense of the GDPR. This includes terms such as processing, restriction of processing, profiling, pseudonymization, controller, processor, recipient, third party, consent, supervisory authority, and international organization. Article 4 of the GDPR provides definitions for these terms.
Who is responsible for data processing and whom can I contact?
Person responsible is:
TIMERIDEGmbH
Management
Berliner Straße 42a
D-60311 Frankfurt
Phone: 0221-27059900
Email:datenschutz@timeride.de
You can reach our external data protection officer at:
Herting Oberbeck
Datenschutz GmbH
Hallerstraße 76
20146 Hamburg
E-mail:datenschutz@timeride.de
What sources & data do we use?
We process personal data that we receive from you in the course of using our website and, if applicable, our business relationship.
When you use the website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the personal data that your browser transmits to our server. When you visit our website, we collect the following access data, which is technically necessary for us to display our website to you and to ensure its stability and security: IP address (anonymized), date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (i.e., name of the specific webpage accessed), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its user interface, language and version, as well as the type of browser software, and a notification of successful retrieval.
We also receive your personal data when you contact us via the online form or make a reservation through our booking service provider, Bookingkit.
What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal grounds:
To the extent that you have given us your consent to process personal data for specific purposes—in particular, to contact you (e.g., via our contact form or by email to handle and process your inquiry, sending newsletters and emails), the lawfulness of this processing is based on your consent. Consent that has been given may be revoked at any time. Please note that the revocation takes effect only for the future. The revocation may be sent to the contact information provided above or to widerruf@timeride.de. Legal basis: Consent , Art. 6(1), first sentence, lit. a) of the GDPR
When you contact us (via the contact form or by email), your information will be processed for the purpose of handling your inquiry and following up on it. Legal basis: Implementation of pre-contractual measures at the request of the individual, Art. 6(1), first sentence, lit. b) of the GDPR
As part of the booking process via Bookingkit, the data required to fulfill the contract (e.g., name, email address, payment information) is processed. Legal basis: Contract performance , Art. 6(1), first sentence, lit. b) of the GDPR
When you visit our website for the first time, you will be asked whether you would like to accept only necessary cookies or all cookies. Legal basis: Consent , Art. 6(1), first sentence, lit. a) of the GDPR
When you apply for a job, we process your data to assess your suitability for the position and to carry out the application process. Legal basis: Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1), first sentence, subparagraph (f) of the General Data Protection Regulation (GDPR)
We process your login credentials to ensure IT security and to assert legal claims. Legal basis: Art . 6(1), first sentence, subparagraph (f) of the GDPR
Who gets my data?
Within the company, access to your data is granted to those departments that need it to fulfill our contractual and legal obligations.
Data processors we engage (Art. 28 GDPR) may also receive data for the purposes mentioned above. These are companies in the categories of IT services, booking processing, telecommunications, advisory and consulting services, as well as sales and marketing. Our data processors include, in particular, Bookingkit GmbH (booking service provider), Intuit Inc. / Mailchimp (email marketing), and HubSpot (CRM). Whenever we engage data processors, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of personal data.
Data is only passed on to third parties who are not order processors within the framework of legal requirements.
How long will my data be stored?
For security reasons, log file information is stored for a maximum of seven days and then deleted. Data that must be retained for evidentiary purposes is exempt from deletion until the incident in question has been fully resolved.
Applicant data will be deleted after 6 months in the event of rejection. Should we fill the advertised position with you, your data will be stored in our personnel management system.
In addition, we are subject to various retention and documentation requirements under the German Commercial Code (HGB) and the German Fiscal Code (AO) (ranging from two to ten years). The retention period is also determined by the statutory limitation periods set forth in Sections 195 et seq. of the German Civil Code (BGB) (generally three years).
Is data transferred to a third country or to an international organization?
Our data processing activities may involve the transfer of certain personal data to third countries—that is, countries where the GDPR is not applicable. Such a transfer is permissible if the European Commission has determined that an adequate level of data protection is ensured in that third country. If no such adequacy decision by the European Commission exists, the transfer of personal data to a third country will only take place if appropriate safeguards are in place pursuant to Article 46 of the GDPR or if one of the conditions set forth in Article 49 of the GDPR is met.
Unless an adequacy decision is in place and unless otherwise specified below, we use the EU Standard Data Protection Clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option to receive a copy of these EU Standard Data Protection Clauses or to review them. To do so, please contact us at the address listed under “Contact.”
If you consent to the transfer of personal data to third countries, the transfer will be based on Article 49(1)(a) of the GDPR.
What data protection rights do I have?
As a data subject, you have the right to exercise your data subject rights with us. In particular, you have the following rights:
- Pursuant to Article 15 of the GDPR and Section 34 of the BDSG, you have the right to request information regarding whether we process personal data about you and, if so, to what extent.
- You have the right to request that we correct your data in accordance with Article 16 of the GDPR.
- You have the right to request that we delete your personal data in accordance with Article 17 of the GDPR and Section 35 of the BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Article 18 of the GDPR.
- In accordance with Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.
- If you have provided us with separate consent to the processing of your data, you may revoke this consent at any time in accordance with Article 7(3) of the GDPR. Such a withdrawal does not affect the lawfulness of the processing that took place on the basis of your consent prior to the withdrawal.
- If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR.
Right to Object Under Article 21 of the GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1), first sentence, subparagraph (e) or (f) of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.
The objection may be submitted in any form and should be addressed to: TIMERIDE GmbH, Berliner Straße 42a, 60311 Frankfurt, or by email to: widerruf@timeride.de
To what extent is there automated decision-making in individual cases, including profiling?
When you access our website or contact us, we generally do not use fully automated decision-making as defined in Article 22 of the GDPR. We do not process your data automatically for the purpose of evaluating certain personal aspects (profiling).
Is there an obligation for me to provide data?
When using our website, you must provide the personal data that is technically necessary or required for IT security purposes. When contacting us via the contact form or by email, you need only provide the data necessary to process your inquiry.
Newsletter
We send newsletters and other electronic communications containing promotional information only with the recipients’ consent or based on a legal authorization.
Signing up for our newsletter uses the so-called double opt-in process. After you sign up, we’ll send you a confirmation email to ensure that you have access to the email address you provided.
The newsletter is sent via Mailchimp (Intuit Inc., 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). EU Standard Data Protection Clauses have been entered into with Intuit Inc. Mailchimp’s privacy policy can be found at https://www.intuit.com/privacy/statement/.
The newsletters contain a so-called web beacon to collect technical information (browser, IP address, open and click-through rates). This data is used to optimize the content of our newsletters.
You can unsubscribe from our newsletter at any time. You will find an unsubscribe link at the end of each newsletter. Legal basis: Art . 6(1), first sentence, lit. a), Art. 7 of the GDPR in conjunction with § 7(2), No. 3 of the UWG
Cookies
We use cookies on our website. Cookies are small text files that are stored on the user’s computer when they visit certain websites.
By default, we use only essential cookies. We use non-essential cookies only if you have given your consent via our cookie banner. You can withdraw your consent at any time.
For more information about the cookies we use and how to adjust your settings, please visit:
www.timeride.de/datenschutz-cookies/
This website uses the Borlabs Cookie consent management tool from Borlabs GmbH (Germany) to manage cookies and the processing of personal data.
The consent banner allows users of our website to give their consent to certain data processing activities or to withdraw consent they have previously given. By clicking the “I Accept” button or by saving your individual cookie settings, you consent to the use of the associated cookies.
The legal basis under data protection law is your consent within the meaning of Article 6(1)(a) of the GDPR.
In addition, the banner helps us provide proof that consent has been given. To this end, we process information regarding the declaration of consent and other log data related to this declaration. Cookies are also used to collect this data. The processing of this data is necessary to provide proof that consent has been given. The legal basis stems from our legal obligation to document your consent (Art. 6(1)(c) in conjunction with Art. 7(1) of the GDPR).
Third party providers that use cookies
Google Analytics
We use Google Analytics 4, a service provided by Google Ireland Limited, Ireland, on our website.
Google Analytics is a web analytics service that allows us to collect and analyze data about user behavior on our website. Google Analytics allows us to measure interaction data from various devices and across different sessions. This enables us to put individual user actions into context and analyze long-term relationships.
Google Analytics uses cookies for this purpose, which enable us to analyze the use of our website. In addition, personal data in the form of IP addresses, device identifiers, and information about your interaction with our website is processed. Some of this data consists of information stored on the device you are using. Furthermore, the cookies used also store additional information on the device you are using.
Google Ireland will process the data collected in this manner on our behalf to analyze how users interact with our website, to compile reports on activity within our website, and to provide us with other services related to the use of our website and internet usage. In doing so, pseudonymous user profiles may be created from the processed data.
The storage of information on your device and access to information already stored are carried out with your consent in accordance with Section 25(1) of the TDDDG. The further processing of personal data described here is also carried out with your consent. The legal basis for this is Article 6(1)(a) of the GDPR. You may revoke this consent at any time with future effect via our Consent Management Tool.
When collecting data in Google Analytics 4, IP addresses of users in the European Union are neither logged nor stored. The IP address is used on servers in the European Union to derive location data and is subsequently deleted before the remaining data is forwarded to Analytics servers for further processing.
User- and event-level data is stored for a period of 2 months and then automatically deleted. Data whose retention period has expired is automatically deleted once a month. The retention setting does not affect standard aggregated reports.
Youtube
We have embedded YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) into our website. The videos are embedded in such a way that data is only transmitted to YouTube when the video is played. Legal basis: Art . 6(1)(a) of the GDPR. Privacy policy: https://policies.google.com/privacy.
Hubspot
On this website, we use HubSpot (HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland). We use HubSpot for contact management and contact forms. Standard contractual clauses have been agreed upon. For more information: https://legal.hubspot.com/de/privacy-policy
Third party providers that do not use cookies
Adobe Fonts
To ensure a visually appealing design, we use Adobe Fonts from Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. When the page loads, your browser establishes a connection to an Adobe server. Adobe Inc. has committed to complying with European data protection standards through standard data protection clauses. For more information: https://www.adobe.com/de/privacy.html.
Our social media presences
You can find us on various social media networks and platforms. Please note that your data may be processed outside the European Union and used for market research and advertising purposes. The processing of personal data is based on your consent pursuant to Article 6(1), first sentence, letter a) of the GDPR and is carried out under joint responsibility with the platform providers pursuant to Article 26 of the GDPR.
For information on the respective processing and the respective objection options, please refer to the data protection information of the providers linked below:
Facebook / Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads
Google / YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – Privacy Policy: https://policies.google.com/privacy, Opt-out: https://adssettings.google.com/authenticated
X (formerly Twitter) (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy Policy: https://twitter.com/de/privacy
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – Privacy Policy: https://de.linkedin.com/legal/privacy-policy
TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) – Privacy Policy: https://www.tiktok.com/legal/privacy-policy-eea?lang=de
In the event that data subject rights are asserted, we recommend that they be asserted with the providers, as the providers have direct access to the data. However, if you would like our assistance, please feel free to contact us using the above contact information.
As of July 2026
