Privacy policy

We take the protection of your personal data seriously

We strictly observe the rules of the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as this privacy policy. We process our users' personal data only in so far as this is necessary to provide a working website together with our content, services and offers.

Personal data means any information relating to an identified or identifiable natural person.

This privacy policy gives you an overview of which kinds of personal data are processed for which purpose. It also sets out how we ensure the protection of your personal data.

1. Name and contact details of the controller

This privacy information applies to data processing by:

2. Collection and storage of personal data, and the nature and purpose of its use

a) When you visit our website

You can visit our website without telling us anything about who you are.

In such purely informational use of our website — that is, if you do not register or otherwise send us information about yourself — we collect only the personal data that your browser transmits to our server. When our website is called up, the browser on your device automatically sends information to our server. That information is stored temporarily in what is known as a log file. The following information is recorded without any action on your part and stored until it is deleted automatically:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the file retrieved,
• the website from which access was made (referrer URL),
• the browser used and, where applicable, your computer's operating system, the name of your access provider, and the language and version of the browser software.

We process this data for the following purposes:

• to ensure the website connects smoothly,
• to ensure our website is comfortable to use,
• to evaluate system security and stability, and
• for further administrative purposes.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above. We never use the data collected in order to draw conclusions about you as a person.

We also use cookies when you visit our website. Cookies do no harm to your computer and contain no viruses. Further explanation is given in section 4 of this privacy policy.

b) When you use our contact form

So that you can send us your questions, remarks and comments, we provide a contact form on the website. To use it, your email address, telephone number, company name and name are required so that we know whom to reply to; any further details are voluntary.

For a non-binding enquiry, the legal basis for the processing is the consent you give voluntarily (Article 6(1)(a) GDPR). The personal data we collect through the contact form is deleted once your enquiry has been dealt with.

Where your enquiry is directed at concluding a contract or initiating another business relationship, your personal data is processed on the basis of Article 6(1)(b) GDPR (contract or pre-contractual measures). In that case we store and process your details in so far as this is necessary to deal with your enquiry and to carry out pre-contractual and/or contractual measures.

To protect the form against automated access we additionally store a cryptographic digest of your IP address (never the address in plain text) together with the outcome of the security check. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in preventing abuse. These digests are deleted after 30 days at the latest.

c) Contacting us other than through the contact form

If you contact us by email, by telephone or by any other means, we process the personal data you send us (for example name, telephone number, email address and your request) solely in order to deal with your enquiry.

The legal basis for this processing is:

• for general enquiries, your consent under Article 6(1)(a) GDPR,
• or — where the enquiry is directed at a contractual relationship — Article 6(1)(b) GDPR.

Your data is deleted as soon as it is no longer required in order to deal with the matter and no statutory retention obligations stand in the way. We also reserve the right to evaluate anonymised data from enquiries statistically in order to improve the quality of our services.

3. Disclosure of data to third parties

Your personal data is not transferred to third parties for purposes other than those set out below. In particular, no data is passed to third parties without your express consent, for example for advertising purposes.

We pass your personal data to third parties only where:

• you have given your express consent under Article 6(1)(a) GDPR;
• this is necessary under Article 6(1)(b) GDPR in order to handle contractual relationships with you — for example to credit institutions in order to process contractually agreed payments, or to lawyers for the purpose of enforcing rights where contractually agreed payments are not made;
• there is a legal obligation to disclose under Article 6(1)(c) GDPR; or
• disclosure is necessary under Article 6(1)(f) GDPR in order to establish, exercise or defend legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed.

4. Cookies

We use cookies on our site. These are small text files that your browser creates automatically and that are stored on your device (PC, laptop, tablet, smartphone or similar) when you visit our site. Cookies do no harm to your device and contain no viruses, trojans or other malicious software.

A distinction has to be drawn between cookies that are strictly necessary in order to provide the services on this website (necessary cookies) and those that are not (non-necessary cookies). Without the necessary cookies this website does not work properly. Such cookies are used solely by us (first-party cookies) and all information stored in them is sent only to this website.

Necessary cookies are used regardless of whether you give consent. The legal basis for the processing in that case is our legitimate interest in the analysis, optimisation and economic operation of our website and our services (Article 6(1)(f) GDPR).

Non-necessary cookies are used only after you have given consent. By agreeing in the consent panel provided on this website, you consent to the use of those cookies. The legal basis for the processing in that case is your consent (Article 6(1)(a) GDPR). You can change your choice at any time through the “Cookie settings” link in the footer, and thereby withdraw it with effect for the future.

You can set your browser so that cookies are not stored on your device at all, or so that you are asked each time whether you agree to cookies being set. Cookies once set can be deleted at any time; your browser's help function explains how. Disabling cookies altogether may restrict the functions of this website.

5. Protection of the contact form, Google Tag Manager and LinkedIn Insight Tag

Cloudflare Turnstile: to protect our contact form against automated access and abuse we use Cloudflare Turnstile, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Technical details of your browser and your IP address are transmitted to Cloudflare in order to distinguish human input from automated access. The processing serves to ensure the security and functioning of our forms; the legal basis is Article 6(1)(f) GDPR.

Google Tag Manager: we use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself creates no user profiles; it manages the inclusion of other services. It is loaded only after you have agreed in the consent panel; the legal basis is your consent under Article 6(1)(a) GDPR.

LinkedIn Insight Tag: to measure the success of our advertising and to address prospective customers we use the Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. A cookie may be set and technical details of your browser together with your IP address may be transmitted to LinkedIn. This service, too, is loaded only after your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time through the cookie settings in the footer.

Processing of data outside the European Economic Area, in particular in the United States, cannot be ruled out. Further information on the safeguards used for transfers to third countries is given in section 12 of this privacy policy.

6. Retention and deletion

Your personal data is deleted in particular as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed. After that the data is deleted unless, for example, storage is necessary in order to comply with a legal obligation under Union or Member State law to which the controller is subject (Article 17(3)(b) GDPR) or in order to establish, exercise or defend legal claims (Article 17(3)(e) GDPR). Statutory retention obligations constitute such a legal obligation: section 147(1)(4) and (3) of the German Fiscal Code provides for a ten-year retention period for accounting data including order and payment data, and section 257(1)(2) and (3) and (4) of the German Commercial Code provides for a six-year retention period for commercial correspondence such as email messages. For the duration of the retention obligations the data is blocked; once they expire it is deleted.

7. Your rights

You have the right:

• under Article 7(3) GDPR, to withdraw consent once given at any time. The consequence is that we may no longer continue the processing that was based on that consent. The lawfulness of processing carried out up to the withdrawal is unaffected;
• under Article 15 GDPR, to request information about your personal data processed by us;
• under Article 16 GDPR, to request without delay the correction of inaccurate personal data or the completion of your personal data stored by us;
• under Article 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims;
• under Article 18 GDPR, to request restriction of the processing of your personal data;
• under Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
• under Article 77 GDPR, to lodge a complaint with a supervisory authority. The competent authority is the data protection commissioner of the federal state in which our company has its seat.

The address of the supervisory authority responsible for us is:

Before acting on a request for information or erasure we reserve the right to take steps to verify identity, in order to protect your data against unauthorised access.

8. External hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on that provider's servers. This may include IP addresses, contact enquiries, metadata and communication data, contact details, names, website accesses and other data generated through a website. The host is used in order to perform our contract with prospective and existing customers (Article 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Article 6(1)(f) GDPR). Our host will process your data only as far as this is necessary to perform its obligations towards us, and will follow our instructions regarding that data.

Our host is:

This website is served from the Frankfurt am Main region. The details submitted through the contact form are additionally stored with Supabase Inc., 970 Toa Payoh North, Singapore 318992, in a data centre within the European Union (Ireland). To ensure processing complies with data protection law we have concluded a data processing agreement (Article 28 GDPR) with both providers.

9. Right to object

Where your personal data is processed on the basis of legitimate interests under Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation. If your objection is justified we will examine the matter and will either stop or adjust the processing, or set out to you the compelling legitimate grounds on which we continue it.

To exercise your right of withdrawal or objection, an email to datenschutz@securepark24.com is enough.

10. Data security

We use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are improved continuously in line with technological developments. During your visit we also use SSL or TLS encryption. You can recognise the encrypted connection by the prefix “https://” in the browser's address bar and by the padlock symbol in front of it.

11. Automated decision-making

No solely automated decision-making within the meaning of Article 22 GDPR takes place.

12. Transfers to third countries

Through our use of Vercel, Cloudflare, Google and LinkedIn, personal data may be transferred to the United States. Any such transfer takes place under the particular conditions of Articles 44 et seq. GDPR, in particular on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework under Article 45 GDPR. The Commission has certified an adequate level of data protection in the USA for transfers to companies certified under that framework. The providers named are, as matters stand, certified under the EU-U.S. Data Privacy Framework.

As matters stand we use no service providers that process personal data in a third country in connection with number plate capture, parking management, the provision of the protected case area, or the enforcement of any claims.

13. Currency of, and changes to, this privacy policy

This privacy policy is dated September 2026.

Technical developments and changes to legal or regulatory requirements may make it necessary to amend this privacy policy. You will recognise that changes have been made if the date given in the first paragraph of this section 13 has been updated.

The current privacy policy can be called up and printed at any time on our website at https://securepark24.com/en/privacy.

Annex: privacy notice on number plate capture and parking management

1. Controller — the controller for the processing is:

2. Purposes — we process personal data in connection with the use and monitoring of car parks, land and other parking areas. The processing serves in particular the following purposes:

• monitoring the permitted use of the parking area or land concerned,
• establishing arrival and departure times, length of stay and entitlement to use,
• documenting and securing evidence of possible breaches of the terms of use, parking conditions or rights of possession,
• examining, asserting, enforcing or defending civil law claims,
• handling queries, objections and evidence from data subjects,
• the technical provision, security and functioning of the systems used.

Depending on the site, capture also takes place by means of camera-based systems. The specific terms of use and notices on site follow from the signage at that location.

3. Categories of personal data — depending on the site, the event and the system used, the following personal data in particular may be processed: the vehicle's registration number; the date, time and duration of use, in particular arrival and departure times; the location, parking area, land or other place of the event; still or video images of the vehicle concerned, in so far as this is necessary to document the event; timestamps and technical event data; details of the terms of use applying at the location; keeper data, in so far as this is lawfully established in the case of a documented breach; communication and payment data, in so far as data subjects contact us or make payments; and technical access data when digital services are used.

Image areas that are not required, and other people, are obscured or not processed further as far as this is technically and organisationally possible.

Legal bases: the processing is carried out primarily on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in monitoring and ensuring the proper use of the parking areas and land, in protecting rights of ownership and possession, in securing evidence of possible breaches, and in examining, asserting, enforcing or defending civil law claims.

4. Recipients — personal data is passed on only in so far as this is necessary for the purposes set out above or where there is a legal basis. Data relating to an event or a claim may be transmitted to landowners, possessors, operators, clients or other entitled parties; to payment service providers, in so far as payments are processed; and to debt collection providers, lawyers, courts, bailiffs, authorities or other bodies engaged in pursuing or defending legal rights.

5. Origin of the data — depending on the event, the data is either collected directly at the location by the capture or camera systems used, or provided by the data subject, in particular when making contact, making a payment or using an online form. Where keeper data is established in the case of a documented breach, it comes from information supplied by the competent public bodies.

6. Retention — personal data is stored only for as long as is necessary for the processing purposes concerned. Data on regular use where no breach is established and no further handling is required is deleted promptly, and after 72 hours at the latest. Data on events where a possible breach has been documented is stored for the duration of the examination, handling, assertion, enforcement or defence of legal claims.

7. Provision of the data — providing the data required for the use of the parking area or land is necessary for the proper use of that area. Without processing this data, use cannot be monitored, billed or examined, or cannot be done so properly, depending on the location.

8. Automated decision-making — no solely automated decision-making within the meaning of Article 22 GDPR takes place.

9. Rights of data subjects — subject to the statutory conditions, data subjects have the right of access (Article 15 GDPR), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to data portability (Article 20), and the right to object to processing based on Article 6(1)(f) GDPR (Article 21). To exercise these rights, data subjects may use the contact details given above.

10. Right to lodge a complaint — data subjects have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the controller is in particular: