Privacy policy

1. Controller

Tracks&Bytes
Robert-Koch-Str. 44
06110 Halle / Saale

2. Data we process

  • Account data: name, email, phone, postal address, preferred language. Provided by you on registration.
  • Rental and reservation data: items, periods, quantities, hand-over and return protocols. Required for the rental contract.
  • Invoice data: invoice numbers, amounts, due and payment dates. Required for billing and statutory record-keeping.
  • Identity verification: at first pickup we record only the document type and the last four digits, never a copy or full number.
  • Server log / audit: IP address and user agent (truncated, anonymised after 90 days), only for security and abuse detection.

3. Cookies

This site uses only technically necessary cookies. No tracking, no analytics, no third-party cookies.

  • customer_session – your login session (HttpOnly, SameSite=Strict).
  • admin_token – only set inside /admin/ after admin login.
  • lang – your preferred language.
  • cookie_notice_seen – remembers that you have seen the cookie notice.

4. Storage periods

  • Customer accounts: anonymised three years after the last rental, unless you delete your account earlier under "My account".
  • Invoices: ten years (statutory tax retention), then anonymised.
  • Audit log: two years on a rolling basis; IP addresses anonymised after 90 days.
  • Expired/declined reservations: deleted after 30 days.

5. Service providers

  • SMTP server: we operate our own mail server – your email address is only used to send rental and invoice notifications.
  • Altcha (spam protection): self-hosted, no third-party calls, no cookies.

6. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. You can