The data controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws is:

Peuka GmbH
Schauenburgerstraße 116
24118 Kiel

E-mail: info@peuka.com
Phone: +49 431 22189390

The data controller's data protection officer is:

Our data protection officer, Mr. Marcel Helmcke from Hanseatic Datenschutz, can be reached by email at datenschutzbeauftragter@ha-ds.de or by phone at 040 88 21 581 – 31.

In accordance with Art. 13 GDPR, we inform you about the legal bases of our data processing. If the legal basis is not explicitly stated in the privacy notice, the following applies:
The legal basis for obtaining consent is Art. 6 para. 1 lit. a in conjunction with Art. 7 GDPR. The legal basis for processing for the performance of our services and the execution of contractual measures, as well as for responding to inquiries, is Art. 6 para. 1 lit. b GDPR. The legal basis for processing for the fulfillment of our legal obligations is Art. 6 para. 1 lit. c GDPR. If the processing of your data is necessary for the legitimate interests of our company or a third party and if your interests, fundamental rights, and freedoms do not outweigh the former, then Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing. In cases where the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

We adhere to the principles of data minimization in accordance with Art. 5 para. 1 lit. c GDPR and storage limitation in accordance with Art. 5 para. 1 lit. e GDPR. We only store your personal data for as long as it is necessary to achieve the purposes stated here or as required by statutory retention periods. After the respective purpose ceases to apply or after the expiration of these retention periods, the corresponding data will be deleted as quickly as possible.

This website may contain links to third-party websites or to other websites for which we are responsible. If you follow a link to a website outside our responsibility, please note that these websites have their own privacy policies. We assume no responsibility or liability for these external websites and their privacy policies. Therefore, before using these websites, please check whether you agree with their privacy policies.

You can recognize external links either by their color, which differs slightly from the rest of the text, or by being underlined. Your cursor will indicate external links when you move it over such a link. Only when you click on an external link will your personal data be transmitted to the destination of the link. In particular, the operator of the other website will receive your IP address, the time you clicked the link, the page on which you clicked the link, and further information which you can find in the privacy policy of the respective provider. 

Please also note that individual links may lead to data transmission outside the European Economic Area. This could allow foreign authorities to access your data. You may not have legal remedies against such data access. If you do not want your personal data to be transmitted to the link's destination or to be unwillingly exposed to access by foreign authorities, please do not click on any links. 

As a data subject within the meaning of the GDPR, you have the option to assert various rights. The data subject rights arising from the GDPR are the right to information (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

Right of withdrawal:

Some data processing operations can only be carried out with your express consent. You have the option to revoke your given consent at any time. However, this does not affect the legality of the data processing carried out until the revocation.

Right to object:

If the processing is based on Art. 6 para. 1 lit. e or f GDPR, you, as the data subject, may object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. Unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims, we will cease processing your data after you have objected.

If the processing of personal data is carried out for direct marketing purposes, you also have the right to object at any time. The same applies to profiling related to direct marketing. In this case too, we will no longer process personal data as soon as you object.

Right to lodge a complaint with a supervisory authority:

Without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data relating to you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

Right to data portability:

If your data is processed automatically based on consent or for the fulfillment of a contract, you have the right to receive this data in a structured, commonly used, and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, as far as this is technically feasible.

Right to information, rectification and erasure:

You have the right to receive information about your processed personal data regarding the purpose of the data processing, the categories, the recipients, and the duration of storage. If you have any questions on this or other topics regarding personal data, you are welcome to contact us via the contact options provided in the imprint.

Right to restriction of processing:

You can request the restriction of the processing of your personal data at any time. To do so, you must meet one of the following requirements: 

• You dispute the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request a restriction of processing.
• If processing is unlawful, you can alternatively request the restriction of the use of the data instead of deletion.
• If we no longer need your personal data for the purposes of processing, but you need the data for the establishment, exercise, or defense of legal claims, you can alternatively request the restriction of processing instead of deletion.
• If you object to processing pursuant to Art. 21 (1) GDPR, a balancing of your and our interests will be carried out. Until this balancing has been completed, you have the right to request the restriction of processing.

A restriction of processing means that, apart from storage, the personal data may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Our website is hosted by:

Vercel Inc.
440 N Barranca Ave #4133, Covina, CA 91723
USA

When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

This includes:

• IP address of the website visitor's device
• Device used
• Hostname of the accessing computer
• Operating system of the visitor
• Browser type and version
• Name of the retrieved file
• Time of the server request
• Amount of data
• Information on whether the retrieval of the data was successful

This data is not merged with other data sources.

Instead of operating this website on our own server, we can also have it operated on the server of an external service provider (hosting company), which we have named above in this case. The personal data collected by this website is then stored on the servers of the hosting company. In addition to the data mentioned above, the web host also stores, for example, contact inquiries, contact data, names, website access data, meta and communication data, contract data, and other data generated via a website for us.

The legal basis for processing this data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website. If the website is accessed to enter into contract negotiations with us or to conclude a contract, another legal basis (Art. 6 para. 1 lit. b GDPR) applies. In the event that we have commissioned a hosting company, there is a data processing agreement with this service provider.

External services are used on our website. External services are third-party services that are used on our website. This can be for various reasons, for example, for embedding videos or for website security. When using these services, personal data is also passed on to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent, which can be revoked at any time, before use as a visitor to our website (Art. 6 para. 1 lit. a GDPR).

We use a map service on this website. For the map to be used and displayed on the website, the map must be loaded from the provider's server. This involves the transfer of your IP address to the provider's server. Depending on the provider, cookies and other technologies up to fonts are loaded. You can find more details on this in the provider's privacy policy.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 para. 1 lit. a GDPR). Without your consent, data processing does not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will stop this data processing. The lawfulness of the processing carried out until the revocation remains unaffected.

We use the MapTiler service on our website. The provider of the service is MapTiler AG, Höfnerstrasse 98, 6314 Unterägeri, Switzerland.

By using the service, data may be transferred to a third country (Switzerland). The European Commission has confirmed an adequate level of data protection for the country by adequacy decision.

Further information can be found in the provider's privacy policy at the following URL: https://www.maptiler.com/terms/.

On our website, you have the option to contact us via a contact form. For contacting us via this form, your contact details are particularly required.

If you give your consent, the legal basis is Art. 6 para. 1 lit. a GDPR. This can be revoked at any time.

If you submit inquiries about our products, services, or our company, processing takes place for the purpose of contract fulfillment or pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. Furthermore, there may be a legitimate interest in maintaining business relationships or responding to your inquiry for other reasons. In this case, the legal basis for processing your data would be Art. 6 para. 1 lit. f GDPR.

The data will be deleted when we have conclusively answered your request and no other retention obligations prevent this.

Social networks process users' personal data to a large extent. When you visit our profiles, your IP address and other information about your devices are processed, which allows IP addresses to be assigned to individual users. We have no influence on this data processing. We point out that you use our profiles on social networks and their functions at your own responsibility. Details on data processing can be found in the operator's privacy policy.

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

You can find details in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

The purpose of our profiles on social media platforms is to increase our internet presence and thus gain greater recognition. Therefore, the legal basis is legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Furthermore, regarding the processing activities by social networks, reference is made to their own legal bases (e.g., consent in accordance with Art. 6 para. 1 lit. a GDPR), which you can find in the respective privacy policy. 

In principle, we are jointly responsible with the social media platform for the data processing operations triggered when visiting our profile. Therefore, you can assert your data subject rights in accordance with Art. 15 et seq. GDPR both against the social media platform and against us. However, we point out that we have no influence on the data processing by the social media platform. 

Social networks process users' personal data to a large extent. When you visit our profiles, your IP address and other information about your devices are processed, which allows IP addresses to be assigned to individual users. We have no influence on this data processing. We point out that you use our profiles on social networks and their functions at your own responsibility. Details on data processing can be found in the operator's privacy policy.

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Detailed information on the handling of personal data can be found in Instagram's privacy policy:  https://help.instagram.com/519522125107875.

The purpose of our profiles on social media platforms is to increase our internet presence and thus gain greater recognition. Therefore, the legal basis is legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Furthermore, regarding the processing activities by social networks, reference is made to their own legal bases (e.g., consent in accordance with Art. 6 para. 1 lit. a GDPR), which you can find in the respective privacy policy. 

In principle, we are jointly responsible with the social media platform for the data processing operations triggered when visiting our profile. Therefore, you can assert your data subject rights both against the social media platform and against us. However, we point out that we have no influence on the data processing by the social media platform. 

Social networks process their users' personal data extensively. When you visit our profiles, your IP address and other information about your devices are processed, which allows IP addresses to be assigned to individual users. We have no influence on this data processing. We point out that you use our profiles on social networks and their functions at your own risk. Details on data processing can be found in the privacy policy of the operator.

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

Detailed information on the handling of personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

The purpose of our profiles on social media platforms is to increase our internet presence and thus gain greater recognition. Therefore, the legal basis is legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Furthermore, with regard to the processing activities by social networks, reference is to be made to their own legal bases (e.g. consent in accordance with Art. 6 para. 1 lit. a GDPR), which you can find in the respective privacy policy.

In principle, we are jointly responsible with the social media platform for the data processing operations triggered when you visit our profile. Therefore, you can assert your data subject rights according to Art. 15ff GDPR against both the social media platform and us. However, we point out that we have no influence on the data processing by the social media platform.

If you use the login form on our website, we process your personal data for the purpose of authentication and to provide access to certain protected content or functions. If registration is possible, we process your data to create a user account and to provide the associated functions and services."

Processing is generally based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time. Insofar as access to certain content or functions is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. In addition, processing may be based on Art. 6 Para. 1 lit. f GDPR if there is a legitimate interest in secure, reliable, and user-specific access control.

Social networks process their users' personal data extensively. When you visit our profiles, your IP address and other information about your devices are processed, which allows IP addresses to be assigned to individual users. We have no influence on this data processing. We point out that you use our profiles on social networks and their functions at your own risk. Details on data processing can be found in the privacy policy of the operator.

We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

Detailed information on the handling of personal data can be found in TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy?lang=de.

The purpose of our profiles on social media platforms is to increase our internet presence and thus gain greater recognition. Therefore, the legal basis is legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Furthermore, with regard to the processing activities by social networks, reference is to be made to their own legal bases (e.g. consent in accordance with Art. 6 para. 1 lit. a GDPR), which you can find in the respective privacy policy.

In principle, we are jointly responsible with the social media platform for the data processing operations triggered when you visit our profile. Therefore, you can assert your data subject rights according to Art. 15ff GDPR against both the social media platform and us. However, we point out that we have no influence on the data processing by the social media platform.

Visitors have the option to register on our website. This requires the provision of personal data. Registration enables us to offer services or content that require specific information about your person. This personal data is processed and stored exclusively for the use of the corresponding service or offer. The purpose of processing is the fulfillment of pre-contractual services, contract fulfillment, or customer care.

This data is generally stored for the period in which you are registered on our website. Any longer storage may occur if this becomes necessary due to legal provisions.

The processing described above in this sub-item is based on the legal basis of consent (Art. 6 para. 1 lit. a GDPR). The data subject has consented to the processing of their personal data with their voluntary, explicit, and prior consent. We proceed similarly if data subjects withdraw their consent.

If registration on the website is necessary to process contract-related content, we rely on the legal basis for the fulfillment of a contract according to Art. 6 para. 1 lit. b GDPR.

The data protection supervision of this website is carried out by Hanseatic Datenschutz. This privacy policy is continuously reviewed and adapted to legal and technical developments as part of this supervision.

In the Peuka App, you have the option to share your current location. The use of location data (e.g., displaying the current position or centering the map) usually takes place on your mobile device. To use the location services, they must be activated in your mobile operating system. As soon as these are activated and the Peuka App is launched for the first time, access to location information will be requested. Confirmation means that the Peuka App is allowed to access your location information. You can deactivate the Peuka App's access to your location at any time in the corresponding settings of your mobile device.

You can grant the Peuka App access to your camera. If you grant the app this permission, you will be able to upload your own images (and possibly videos in the future). However, the camera data will only be stored locally. Should it be possible to share these images in the future, additional explicit consent from you will be required. You can deactivate camera access in your device's settings at any time, thereby revoking your consent.

The legal basis for the aforementioned data processing is Art. 6 para. 1 sentence 1 lit. a GDPR.

To use the app, you must register. With the explicit registration by the user, the following data can be collected (if entered by the user themselves): - Gender, - First name, Last name, - Company/business (if applicable) - VAT ID number or tax number (if applicable) - Date of birth, - E-mail address, - Address, - Phone number - Nationality

The personal data provided by you during registration will be collected, processed, and used by Peuka for the purpose of establishing the contract for the use of the Peuka App, for contract execution and processing, and for billing purposes.

The legal basis for the aforementioned data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

We use the payment provider MANGOPAY S.A., 2 Avenue Amélie, L-1125 Luxembourg, to process our payments.

To use this service, MANGOPAY collects, stores, and processes your personal data such as name, address, phone number, and email address, as well as credit card or bank account data and nationality. MANGOPAY also requires the upload of a copy of an identification document as part of the necessary Know-Your-Customer process ("KYC"), which is automatically deleted from the Peuka server after the KYC is completed. You can grant the Peuka App access to your camera. If you grant the app this permission, you will be able to upload your own images. However, the camera data will only be stored locally. You can deactivate camera access in your device's settings at any time, thereby revoking your consent.

MANGOPAY is solely responsible for the protection and handling of the data collected by MANGOPAY. This data processing is necessary for the execution of payouts; the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR. The MANGOPAY terms of use, which you can find at www.mangopay.com, apply. Further information on the processing of personal data by MANGOPAY can be found here: https://mangopay.com/privacy-statement.

As part of the payment processing for the rental of a parking space, the Peuka App generates corresponding invoices, through which the personal data of the renting party mentioned under Section I., 5 of this privacy policy are passed on to the tenant. This data processing is necessary for the fulfillment of the contract for the rental of a parking space concluded between the parties via the Peuka App. The legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.