1. General

The collection and processing of "personal data" is required for the use of HAPPYCAR services. This is, all information that relates to your person and through which you are personally identifiable, whether on your own or in combination with other information available to us (e.g. name, address, e-mail address or user behavior).

HAPPYCAR GmbH is the service provider within the meaning of § 13 German Act for Telemedia Services (in german Telemediengesetz, TMG) and responsible body within the meaning of § 3 Abs. 7 German Data Protection Act.

HAPPYCAR GmbH
Am Sandtorkai 48
20457 Hamburg
Germany
E-Mail: booking@happycar.com
Web: www.happycar.com

We are prioritized in protecting the personal data of our customers. This Privacy Policy is therefore designed to give you a clear overview of how we use and protect your information. This data protection declaration explains which personal data we collect from you, how and for what purposes we use it and to which third parties we may pass it on. Therefore, we undertake to use personal data, i.e. all data collected, processed and stored by the respective customer during booking, registration and use of HAPPYCAR services, exclusively for processing contracts concluded with our cooperation.

2. What Data is Collected and for What Purpose

a) While Using our Website

No personal data is collected while you are looking for information about our car rental offers, except for the data transmitted by your browser in order to enable you to visit the website. These are i. e. your IP address, date and time of the request and the browser type used. Cookies can also be used to optimize the presentation of the website, our products and services and to make them even better tailored to your needs.

b) Data that we Collect in the Event of an Inquiry

If you ae interested in one of our offers, you can send us an inquiry by e-mail or the contact form. The data given in the inquiry will be stored by us for the purpose of processing the inquiry and in the event that further follow-up questions arise. It will not be passed on to third parties

c) Data that we Collect in the Case of a Booking

If you decide to book a rental car with HAPPYCAR, the following data will be collected: Your title, first name, last name, e-mail address, birthday, telephone number, address (i.e. country, street, house number, postcode, city) and payment information. We primarily use your booking data to forward it to the respective car rental company so that the contract can be concluded, and the car rental company can contact you for processing. If your booking is processed by a payment service provider (i.e. Visa or Mastercard), we will forward the information necessary for the debit to the payment service provider you have chosen. In addition, we use your booking data for advertising purposes within the scope permitted by law. We may use your booking data and your behavior on our website to provide you with individual offers on our website that are more in line with your interests. We also use cookies for this purpose. For more information about cookies and your choice of cookies, see section 3.

d) To Whom We Share your Information

We do not pass on any personal data without your consent. However, the forwarding of your personal data to the respective car rental company is necessary in order for a contract to be concluded. If we disclose information to third parties in this context, it is limited to the use of the data for this purpose. We share your information with companies that provide services for us or on our behalf. This applies, for example, to the storage of data with external service providers. If we disclose information to third parties in this context, it is limited to the use of the data for this purpose. In addition to the cases described in this data protection declaration, we will only pass on your data to third parties if you have given your consent to the transfer or if you have expressly requested such a transfer. We also disclose information to third parties when required by law or necessary for the protection of our services, including

• To comply with laws
• If we are forced to respond to legal action (i.e. a search warrant or other court order)
• To confirm or enforce HAPPYCAR's compliance with the HAPPYCAR terms and conditions

e) Duration of Storage

We store your data for as long as it is necessary for the processing of a booking or if it is necessary for the fulfilment of legal retention periods.

3. Use of Cookies on our Website

We and certain third parties we work with (such as Google, Bing & Criteo) may use cookies and similar technologies ("cookies") relating to your use of the site. Cookies are files that are stored by your browser on the hard drive of your computer. Cookies are able to transmit information about your use of the website, such as your browser type, your search preferences, data relating to advertisements that have been made visible to you or clicked on, and the date and time of your use. Cookies can be stored permanently or only for the duration of a session. Some cookies are used to recognize repeated visits to our website to show you the website as you left it on your last visit. Such cookies are inextricably linked to the provision of our website and the program. You can instruct your browser not to accept these cookies. However, you may not be able to use the full functionality of our website. We may allow third parties to use cookies on the website to collect user information. Such third parties may link the information collected with other information they have about them from other sources. We have no control over the cookies used by these third parties. You can prevent cookies from being stored on your hard drive and the use of similar technologies using your browser and system settings. You can define in the settings of your browser whether you want to accept or reject cookies. Of course, you can use our website without using cookies. Please note, however, that this may limit the functionality of the HAPPYCAR website. For this reason, we recommend that you allow the use of cookies on our site.

4. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (" Google"). Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if you enable IP anonymization on this website, Google will previously reduce your IP address within Member States of the European Union or in other contracting states of the EEA Agreement. Only in exceptional cases the full IP address is transferred to a Google server in the USA and shortened there. On behalf of the website operator, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available under the following link https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data within this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you will need to click this link again. For more information on Google's use of data for advertising purposes, settings and objections, please visit Google's websites at https://www.google.com/policies/privacy/partners/ ("Google's use of data when you use websites or apps from our partners"), http://www.google.com/policies/technologies/ads ("Use of data for advertising purposes"), https://support.google.com/ads/answer/7029158?hl=en ("Manage information that Google uses to show you advertising") and http://www.google.com/ads/preferences/ ("Determine which advertising Google shows you").

5. Social logins (logging in with Google)

When you log in with Google by selecting "G continue with Google", a direct connection is established with the servers of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google detects that you have used your login information from HAPPYCAR as part of this process. We do not obtain your Google Account information. Google then informs you that data from your Google Account will be made available to us and indicates the specific data in question. Registration with and the use of Google are governed by Google's privacy policy and terms of service (https://policies.google.com/privacy?hl). If you have expressly given your consent to Google pursuant to Article 6 (1) (a) of the GDPR, your personal data will be transmitted to us as part of the registration process via Google. We use the following information from the transmitted data, which is stored by us until it is automatically deleted:

• your email address
• your name on your Google account (first and last name)
• the profile image (or the avatar) used on Google
• a link to your Google account
• your gender
• the top-level domain of your logged-in Google account
• the user domain you manage on Google (hosted domain, HD)

This data is used to

• enable us to identify you as our contractual partner
• set up your user account
• check the entered data for plausibility

The legal basis for the use of this data is Article 6 (1) (b) GDPR. Using this data enables us to fulfill our contractual obligations which arise from our Terms of Service (Article 6 (1) (b) GDPR). We will delete the collected data no later than your termination of our platform’s usage contract. You can block the connection within your Google account. Please refer to Google’s privacy policy for details regarding the purpose and scope of the data collection and further processing and use of the data by Google, as well as regarding your associated rights and the settings options you can use to protect your privacy ( https://policies.google.com/privacy?hl).

6. Google DoubleClick

We have integrated components from DoubleClick by Google on our website. DoubleClick is a brand of Google, under which predominantly special on-line marketing solutions are marketed to advertising agencies and publishing houses. DoubleClick by Google transfers data to the DoubleClick server with every impression, click or other activity. Each of these data transfers triggers a cookie request to the browser of the person concerned. If the browser accepts this request, DoubleClick places a cookie in your browser.

DoubleClick uses a cookie ID that is required to complete the technical process. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick may also use the cookie ID to track which ads have already been displayed in a browser to avoid duplication. The cookie ID also enables DoubleClick to track conversions. For example, conversions are captured when a user has previously seen a DoubleClick ad and subsequently makes a purchase on the advertiser's website using the same Internet browser.

A DoubleClick cookie does not contain any personally identifiable information, but may contain additional campaign identifiers. A campaign identifier is used to identify campaigns you have already been in contact with on other websites. As part of this service, Google will learn about data that will also be used by Google to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case your data will be passed on to the operator of Double Click, Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Further information and DoubleClick by Google's applicable privacy policy can be found at https://www.google.com/intl/de/policies/.

We process your data with the aid of the Double-Click cookie for the purpose of optimizing and displaying advertising based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. Among other things, the cookie is used to place and display user-relevant advertisements and to create reports on advertising campaigns or to improve them. Furthermore, the cookie serves to avoid multiple displays of the same advertisement. Each time you access a single page on our website that has a DoubleClick component built in, your browser is automatically prompted by the DoubleClick component to submit data to Google for the purposes of online advertising and commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be available in full.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

7. Google Fonts

We use Google Fonts from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you connect to Google LLC's servers and your IP address is transmitted.

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimization of our online offer according to Art. 6 para. 1 lit. f. GDPR.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

8. Google Tag Manager

We use the Google Tag Manager from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website and collect data. This allows us to flexibly integrate additional services and evaluate user access to our website.

The use of Google Tag Manager is based on our legitimate interests, i.e. interest in the optimization of our services in accordance with Art. 6 para. 1 lit. f. GDPR.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Tag Manager: https://www.google.de/tagmanager/use- policy.html.

9. Google reCAPTCHA

We have integrated components from Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google LLC and allows us to distinguish whether a contact request comes from a natural person or is automated by a program. When you access this content, you connect to servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

The use of the service is based on our legitimate interests, i.e. for protection when submitting forms according to art. 6 paragraph 1 letter f. GDPR.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en- US.

10. Hotjar Behavior Analytics

We have integrated Hotjar Behavior Analytics on our website. Hotjar Behavior Analytics is a service of Hotjar Ltd. and provides optimization tools that analyze the behavior and feedback of users of our website through analysis and feedback tools.

Hotjar Behavior Analytics uses cookies and other browser technologies to analyze user behavior and recognize users.

This information is used, among other things, to compile reports on website activity and to statistically evaluate visitor data. Furthermore, Hotjar Behavior Analytics records clicks, mouse movements and scroll heights to create so-called heat maps and session replays.

In this case your data will be passed on to the operator of Hotjar Behavior Analytics, Hotjar Ltd, Hotjar Ltd, Level 2, St Julians Business Centre 3 Elia Zammit Street St Julians STJ 3155 Malta.

We process your data with the help of Hotjar Behavior Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6 Par. 1 lit. a. GDPR.

The specific storage period of the processed data cannot be influenced by us, but is determined by Hotjar Ltd. For further information, please refer to the Hotjar Behavior Analytics Privacy Policy: https://www.hotjar.com/privacy/.

11. Hotjar CDN

We use Hotjar CDN to properly provide the content of our website. Hotjar CDN is a service provided by Hotjar Ltd. which acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other Hotjar Ltd. services. You will find a separate section in this privacy policy for said services. This section is only about the use of the CDN.

A CDN helps to make the contents of our online offer, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of Hotjar Ltd, Hotjar Ltd, Level 2, St Julians Business Centre 3 Elia Zammit Street St Julians STJ 3155 Malta, where your IP address and, if applicable, browser data such as your user agent are transmitted. This data will be processed solely for the above mentioned purposes and to maintain the security and functionality of Hotjar CDN.

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer in accordance with Art. 6 Par. 1 lit. f. GDPR.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Hotjar Ltd. Further information can be found in the Hotjar CDN data protection declaration: https://www.hotjar.com/privacy/.

12. Visual Website Optimizer

We have integrated components of Visual Website Optimizer on our website. Visual Website Optimizer is a service of Wingify Software Pvt. Ltd. and provides marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing, web analytics and A/B testing.

Visual Website Optimizer uses cookies and other browser technologies to analyze user behavior and recognize users. This information is used, among other things, to compile reports on website activity. Visual Website Optimizer records clicks, mouse movements and scroll heights to create heat maps.

In this case your data will be passed on to the operator of Visual Website Optimizer, Wingify Software Pvt Ltd, KLJ Tower, North, Netaji Subhash Place, Pitam Pura, Delhi, 110034, India.

We process your data with the help of Visual Website Optimizer for the purpose of optimizing our website and for marketing purposes based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Wingify Software Pvt. Ltd. Further information can be found in the Privacy Policy for Visual Website Optimizer: https://vwo.com/privacy-policy/.

13. Bing Ads

We have integrated Bing Ads on our website. Bing Ads is a service from Microsoft Corporation to display targeted advertising to users. Bing Ads uses cookies and other browser technologies to analyze user behavior and recognize users. Bing Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of the advertising. In addition, Bing Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider.

In this case your data will be transferred to the operator of Bing Ads, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

We process your data with the help of Bing Ads for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6 paragraph 1 lit. a. GDPR.

The specific storage period of the processed data cannot be influenced by us, but is determined by Microsoft Corporation. Further information can be found in the privacy policy for Bing Ads: https://privacy.microsoft.com/de-de/privacystatement.

14. Newsletter

To receive the newsletter offered on our website, you can register via our form or as part of the ordering process. For the registration to our newsletter we use the so-called double opt-in procedure. Here, a confirmation email is first sent to your specified email address to validate the address. The registration only becomes effective when you click on the activation link contained in the confirmation email. We use your data that has been transferred to us exclusively for sending the newsletter, which may contain information or an offer.

We use SendInBlue to send our newsletter. Your data will therefore be transmitted to SendInBlue GmbH. In doing so, SendInBlue GmbH is prohibited from using your data for purposes other than sending the newsletter. SendInBlue GmbH is not permitted to pass on or sell your data. SendInBlue is a German, certified newsletter software provider, which has been carefully selected according to the requirements of the GDPR and the BDSG (Bundesdatenschutzgesetz) - a federal data protection act.

You can revoke your consent to the storage of data and its use for newsletter dispatch at any time, e.g. via the unsubscribe link in our newsletter.

15. Your Rights Regarding your Personal Data

a) Right to Information

You can use the contact details given at the end of this data protection declaration https://www.happycar.com/contact to make a request for data about the information we have stored about you, free of charge. Upon your request, which must include sufficient information to confirm your identity, we will provide you with a copy of the personal information we hold about you, if you have a right to be contacted. In addition, we will confirm the purposes for which your personal data are used, their recipients and the origin of the information.

b) Right of Rectification

You may also contact us at any time in writing at https://www.happycar.com/contact to request changes to certain personal information that you believe to be inaccurate or unimportant. In addition, you may ask us to block, delete or otherwise remove your personal data. We will update, block, delete or remove your personal data upon request in accordance with applicable law.

c) Right of Cancellation

You can request the deletion of your personal data from us at any time under the contact details given below https://www.happycar.com/contact. We will examine your application and, if necessary, we will comply with it.

d) Revocation of Consent to Use

If you have given your consent to the use of data, you can revoke this at any time under the contact details given below https://www.happycar.com/contact.

e) Right of Appeal

If you believe that the processing of your personal data is illegal, you can complain at any time to the competent supervisory authority. The responsible supervisory authority for data processing by HAPPYCAR is the Hamburg Commissioner for Data Protection and Freedom of Information, Prof. Dr. Johannes Caspar, Klosterwall 6,20095 Hamburg, telephone: 040/428544040, e-mail: mailbox@datenschutz.hamburg.de.

f) Right of Objection

You have the right to object to the use of your personal data at any time. For this purpose, please contact the following address https://www.happycar.com/contact.

16. Zendesk

a) Nature and scope of processing

We have integrated Zendesk Knowledge Base on our website. Zendesk Knowledge Base is a service of Zendesk, Inc. and provides marketing automation software and support products, including a customer service portal help center.

We use Zendesk Knowledge Base to display a Help Center on our website. There you can find answers to frequently asked questions and other comprehensive information about our services.

Furthermore, Zendesk Knowledge Base is used to process data entered in forms, e.g. when contacting us via contact form. The data provided may be stored in our customer relationship management system (CRM system).

In this case, your data is passed on to the operator of Zendesk Knowledge Base, Zendesk, Inc, 989 Market Street #300, San Francisco, CA 94102

b) Purpose and legal basis

We process your data with the help of Zendesk Knowledge Base for the purpose of handling the contact request and its processing pursuant to Art. 6 para. 1 lit. b. GDPR.

The use of the service is based on our legitimate interests, i.e. interest in optimizing our marketing measures and improving our service quality pursuant to Art. 6 para. 1 lit. f. GDPR.

c) Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Zendesk, Inc. For further information, please refer to the Zendesk Knowledge Base Privacy Policy: https://www.zendesk.de/company/customers-partners/privacy-policy/.

17. Contact Details

All requests for information or objections to data processing please contact data-protection[at]happycar.com.

18. Data Protection Officer

Our Data Protection Officer:

PROTEKTO Data Fuse GmbH
Contact person: Kent F. Schwirz
Wendenstraße 279
20537 Hamburg
Tel: +49 (0)40 360 234 700
E-Mail: datenschutz[at]protekto.group