Privacy Policy

1. Controller

The data processing on this website is carried out by:
lalaauto.com
Tassilo Pilati
Schwedlerstraße 1-5
60314 Frankfurt am Main
Germany

2. What Data Do We Collect and Why?

2.1 Required Personal Data

For the provision of our ridesharing platform, we process the following personal data:

• Contact Information:
  • Email address
  • First name
  • Phone number with country code
  • Gender
• Ride-related data - for organizing and conducting rideshares, including:
  • Route information
  • Ride preferences
  • Price information

This data is processed based on Article 6(1)(b) GDPR, as it is necessary for the performance of the contract to use our ridesharing platform.

2.2 Optional Personal Data

Users may voluntarily provide additional information:

• Last name
• Address
• Country
• Date of birth

The processing of this optional data is based on Article 6(1)(a) GDPR with your consent.

3. Storage Duration

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law:

• User accounts and associated data are stored until the account is deleted by the user
• Ride data is stored for the duration of statutory retention periods
• After deletion of your account, all personal data will be irrevocably deleted

4. Your Rights

You have the following rights regarding your personal data:

• Right to access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

5. Data Security

We use SSL encryption (Secure Socket Layer) in connection with the highest encryption level supported by your browser. Usually, this is a 256-bit encryption.

6. Data Transfer

We do not transfer your personal data to third parties except in the following cases:

• Sharing of contact information with other users as part of the ride-sharing service (only after explicit request)
• Transfer to service providers who assist us in website administration and maintenance (based on data processing agreements)

7. Cookies and Technical Measures

7.1 Technically Necessary Cookies

This website uses only technically necessary cookies. These cookies are essential for the operation of the website and cannot be deactivated in your system. They are only set in response to actions you take that constitute a service request, such as:

• Login and authentication
• Session management
• Storing your privacy settings

The user data collected through technically necessary cookies is not used to create user profiles. The use is based on Article 6(1)(f) GDPR. We have a legitimate interest in the technically error-free and optimized provision of our website.

You can configure your browser to inform you about the setting of cookies. However, the functionality of the website may be limited if the cookies required for operation are deactivated.

7.2 Google Web Fonts

This site uses Google Web Fonts for uniform font display. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, your browser must connect to Google's servers. Through this, Google becomes aware that our website was accessed via your IP address.

The use of Google Web Fonts is based on Article 6(1)(f) GDPR. We have a legitimate interest in the uniform presentation of fonts on our website.

If your browser does not support web fonts, a standard font from your computer will be used. More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/