Skip navigation

Menu

info@trailondo.com

Privacy Policy

THINK. DO. MOVE IT.

At Trailondo, we work every day to protect your data from unauthorised access. This privacy policy explains which personal data we process when you visit our website and use the Trailondo platform and app, for what purposes and on what legal basis, and what rights you have.

This is a translation. In the event of any discrepancy, the German version shall prevail.

1. Controller

iQnexxt Solutions GmbH
Thomas-Eßer-Str. 86
53879 Euskirchen
Germany

Represented by the Managing Director Manuel Finken
Commercial register: Local Court of Bonn, HRB 27327
Email: info@trailondo.com
Data protection enquiries: datenschutz@iqnexxt.com

2. Data Protection Officer

You can reach our Data Protection Officer, Mr Benjamin Hücker, at:

Email: datenschutz@iqnexxt.com
Post: iQnexxt Solutions GmbH, attn. Data Protection Officer, Thomas-Eßer-Str. 86, 53879 Euskirchen, Germany

We process personal data on the basis of the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG):

  • Consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), e.g. for advertising cookies. For biometric data: explicit consent under Art. 9(2)(a) GDPR.
  • Performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR), e.g. registration, booking, billing.
  • Legal obligation (Art. 6(1)(c) GDPR), e.g. driving licence checks, retention under commercial and tax law.
  • Legitimate interest (Art. 6(1)(f) GDPR), e.g. secure operation of the website, prevention of misuse and fraud.

Personal data means any information relating to an identified or identifiable natural person (Art. 4(1) GDPR).

4. How We Handle Your Data

We do not sell personal data, neither complete nor anonymised data sets. Data is only passed on to third parties as described in this privacy policy, for example to service providers acting on our behalf or to partners required to carry out a rental.

We select our service providers carefully and contractually oblige them to comply with the GDPR. Our servers are located in data centres in Frankfurt am Main. Some service providers are based in the USA; see Section 13. We use only encrypted connections (TLS) for communication between systems.

We do not create movement profiles of individuals. We process location data relating to our vehicles during the rental period (see Section 12). We analyse user behaviour on the platform exclusively in anonymised form to improve our services. This does not affect conversion tracking on our website, which only takes place with your consent (Section 7).

5. Hosting and Server Log Files

Our website is hosted by Amazon Web Services (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg) in the Frankfurt am Main region. For fast delivery, we use the Amazon CloudFront content delivery network. Requests may be processed via servers in Europe and North America.

When you access our website, technically necessary data is processed automatically: IP address, date and time, page accessed, referrer URL, browser and operating system. This serves to deliver the website, ensure its stability and defend against attacks. The legal basis is Art. 6(1)(f) GDPR.

This data is deleted as soon as it is no longer required for these purposes. It is only stored for longer if a specific security incident needs to be investigated.

We have a data processing agreement with Amazon Web Services.

We use technically necessary cookies and, only with your consent, cookies for advertising and conversion measurement.

Technically necessary: The cookie "gdpr-google-analitics" stores your choice in the cookie banner (accept or reject) for 12 months. Legal basis: Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR.

Only with consent: Google Tag Manager and Google Ads conversion tracking (Section 7) are only loaded after you have given your consent in the cookie banner. Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR.

Withdrawal: You can withdraw your consent at any time with effect for the future via the "Cookie settings" link at the bottom of every page.

7. Google Tag Manager and Google Ads Conversion Tracking

With your consent, we use Google Tag Manager and Google Ads conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Tag Manager manages the loading of further services. Conversion tracking lets us measure whether a visit came from one of our ads and led to an enquiry or booking. For this purpose, cookies are set and data such as your IP address, device information and interactions with our website are transmitted to Google. Google may combine this data with other data, for example if you are logged into a Google account.

Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. Data may be transferred to Google LLC in the USA (see Section 13).
Further information: https://policies.google.com/privacy

8. Mapbox Map Service

For the map view and location search, we use Mapbox, provided by Mapbox, Inc., USA. We use Mapbox exclusively to display the map and the available vehicles. We have disabled Mapbox's optional performance data collection. Mapbox only records map loads for billing purposes. When the map loads, your IP address and the requested map sections or search terms are transmitted to Mapbox.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to show you available vehicles near you. Mapbox is certified under the EU-US Data Privacy Framework.
Further information: https://www.mapbox.com/legal/privacy

9. Google reCAPTCHA

To protect our forms against spam and misuse, we use Google reCAPTCHA provided by Google Ireland Limited. reCAPTCHA checks whether an input was made by a human. For this purpose, data including your IP address, browser information and interactions with the page are transmitted to Google.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is protection against misuse.

10. Fonts

The font used on our website is served from our own server. No connection to Google servers is established.

11. Contact Form and Email

If you contact us via the contact form or by email, we process the information you provide (e.g. name, email address, message) in order to handle your enquiry.

Legal basis: Art. 6(1)(b) GDPR if the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your enquiry has been fully dealt with and no statutory retention obligations apply.

12. Use of the Trailondo Platform and App

In most cases, the Trailondo services can only be provided by processing personal data. We only collect data that is necessary or legally required for registration, booking and use of our vehicles:

  • Master data: name, address, email address, phone number
  • Booking and usage data: rental period, station, vehicle, ratings of lessors and renters
  • Payment data for processing via our payment service providers
  • Vehicle location data during the rental period, for fleet management, theft protection and billing, and, if you allow it in the app, your current location to find vehicles near you
  • Data for digital vehicle access via the provider of our access system
  • Insurance data in the event of damage or when taking out insurance via our insurance partners

Legal bases: Art. 6(1)(b), (c) and (f) GDPR. Recipients are the categories of service providers and partners listed above and the respective rental partner from whom you rent a vehicle.

You can change the sharing of your location at any time in your smartphone settings.

Driving Licence and Identity Verification

Neither we nor our rental partners are permitted to provide vehicles without checking the driving licence. In addition, we verify your identity to prevent fraud and misuse. This protects lessors and renters alike.

The verification is carried out by our service provider Veriff OÜ, Tallinn, Estonia, acting as a processor. Photos of your ID or driving licence and a selfie or video are taken, and your face is matched against the photo in the document.

  • The legal basis for checking the driving licence and ID data is Art. 6(1)(b) and (c) GDPR.
  • Facial matching involves the processing of biometric data. We obtain your explicit consent in the app before the verification starts (Art. 9(2)(a) GDPR). You can withdraw it at any time with effect for the future.

The data is only stored for as long as necessary for the verification and for evidentiary purposes.

The verification result is determined automatically. If the result is negative, you can contact datenschutz@iqnexxt.com or info@trailondo.com. An employee will then review the decision personally, and you can present your point of view.

13. Transfers to Third Countries

Some service providers are based in the USA or may transfer data there: Amazon (Section 5), Google (Sections 7 and 9) and Mapbox (Section 8). These companies are certified under the EU-US Data Privacy Framework, which is covered by the European Commission's adequacy decision (Art. 45 GDPR). Where necessary, EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) are also in place.

14. Retention Period

We only store personal data for as long as necessary for the respective purpose. As long as you use our platform, i.e. from the creation of your user account, your account data remains stored. If you delete your account, your data will be deleted unless statutory retention obligations apply. Data from contracts and bookings is retained in accordance with the periods under commercial and tax law (up to 10 years) and deleted thereafter.

15. Your Rights

You have the following rights with regard to your personal data:

  • Access (Art. 15 GDPR). You can also view much of your stored data at any time in your account.
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interest, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

To exercise your rights, simply send an email to datenschutz@iqnexxt.com.

Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (www.ldi.nrw.de).

16. Deleting Your Account

You can request the deletion of your account at any time by emailing datenschutz@iqnexxt.com. We will then delete your data, unless statutory retention obligations apply, and confirm the deletion to you.

17. Changes to This Privacy Policy

We update this privacy policy when our services or the legal situation change. The version published here applies.

Last updated: October 2026