Privacy Policy

The entity responsible for data processing on this website is:

Dr. Ali Zolghadriha
Holtenauer Straße 332
24106 Kiel

info@fahrlio.de

We process personal data only in accordance with the applicable legal provisions (General Data Protection Regulation (GDPR), German Federal Data Protection Act (BDSG), and German Telemedia Act (TMG). This privacy policy informs you about the nature, scope, and purpose of the collection and use of personal data.

a) Registration of Driving Students

When you register as a driving student on our platform, we collect the following data:

• First and last name
• Email address
• Username and password
• Phone number (optional)
• Birthday (optional)
• Place of residence (optional)
• Driving license class (optional)

b) Registration of Driving Schools

Driving schools using our platform provide the following additional data:

• Name of the driving school
• Email address (for registration)
• Email address of the driving school
• Phone number of the driving school
• Address and city of the driving school
• Opening hours of the driving school
• Driving school license or business registration (for verification)
• Bank details (for processing monthly payments)
• If applicable, further information about the driving school (e.g., logo, website, spoken languages, description of the school)

c) Registration of Driving Trainers

When you are added as a driving trainer by your school on our platform, we collect the following data:

• First and last name
• Email address
• Username and password
• Phone number (optional)
• Driving license class (optional)

To provide our website and platform, we use hosting services as well as cloud storage to save files uploaded by users (e.g., documents or media from driving schools, instructors, and driving students).

• Server Hosting: We use the servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, for hosting our web application and databases.
• Cloud Storage: For storing user uploads, we use the cloud storage service of 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

These providers are used for the purpose of fulfilling the contract with our users (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). We have concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with each of these providers.

To process monthly subscriptions and paid services for driving schools on our platform, we use the payment service provider Novalnet AG (Financial Institution, Gutenbergstraße 7, 85748 Garching bei München, Germany).

• Data Processing: When a driving school books a paid service, the data necessary for payment processing (e.g., name, billing address, bank details or credit card information, invoice amount, currency, and transaction details) is transmitted to Novalnet. This data is transferred exclusively for the purpose of payment processing.
• Legal Basis: The processing of this data is carried out to fulfill the contract or to perform pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
• Data Processing & Controller Status: We have concluded a Data Processing Agreement (and related compliance agreements) with Novalnet. To the extent necessary, Novalnet also processes data as an independent controller to comply with statutory obligations (e.g., anti-money laundering or regulatory requirements).

For more information on data protection at Novalnet, please refer to their privacy policy at: https://www.novalnet.com/privacy-policy

For sending transactional emails (e.g., registration confirmations, password resets, appointment booking notifications, and in-app message alerts), we use the service Lettermint B.V. (Willemsvaart 16B, Unit 1.08, 8019 AB Zwolle, The Netherlands). The email addresses you enter during registration or usage are processed on Lettermint's servers for the purpose of email delivery.

• Legal Basis: The processing of your data for email delivery is carried out to fulfill our contract or to take steps prior to entering into a contract (Art. 6(1)(b) GDPR), as well as to ensure the functionality of our platform (legitimate interest pursuant to Art. 6(1)(f) GDPR).
• Data Processing Agreement: We have concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with Lettermint. This ensures that Lettermint processes our users' data only in accordance with our instructions and in compliance with the GDPR.

For more information on data protection at Lettermint, please visit: https://lettermint.co/privacy-policy

Your data will be used exclusively for the following purposes:

• Provision and improvement of our services
• Communication with you
• Processing of bookings and payments
• Answering support requests
• Sending the newsletter (if subscribed)

Your data will only be disclosed to third parties if this is necessary for the fulfillment of the contract (e.g., to the booked driving school or the payment service provider) or if we are legally obliged to do so.

The processing of your data is based on:

• Art. 6(1)(a) GDPR (consent, e.g., for the newsletter)
• Art. 6(1)(b) GDPR (for the performance of a contract, e.g., for bookings and payments)
• Art. 6(1)(c) GDPR (legal obligation)
• Art. 6(1)(f) GDPR (legitimate interest, e.g., for improving our services)

Your data will only be stored for as long as necessary to fulfill the purposes mentioned. After termination of the user contract or at your request, your data will be deleted, unless legal retention obligations (e.g., tax or commercial law retention periods) prevent this.

As a user of our platform, you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about the personal data we process.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided there are no legal retention obligations.
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You can receive your data in a machine-readable format.
• Right to object (Art. 21 GDPR): You can object to the processing of your data.
• Right to lodge a complaint (Art. 77 GDPR): You can lodge a complaint with a supervisory authority.

To exercise these rights, please contact: info@fahrlio.de

Our website uses cookies to make our service more user-friendly and to enable core platform features (such as user sessions for driving schools, instructors, and driving students). You can disable the storage of cookies in your browser settings. Please note that doing so may limit the functionality of our website.

• Progressive Web App (PWA): Our web application is designed as a PWA. As part of PWA functionality, data (such as application assets, cached content, or offline data) may be stored locally on your device (e.g., via Service Worker / Cache Storage) to improve loading times and optimize performance. You can clear or block this local storage at any time via your browser or device settings.
• Tracking: We do not use third-party tracking tools (such as Google Analytics or similar) that collect personal data for analysis or marketing purposes without consent.

We implement comprehensive technical and organizational measures (TOM) to protect your data against loss, destruction, manipulation, and unauthorized access. Our security measures are continuously improved in line with technological developments:

• SSL/TLS Encryption: To protect the transmission of confidential content (such as login credentials, messages, bookings, and payment details), our platform uses SSL or TLS encryption. You can recognize an encrypted connection by the lock symbol in your browser's address bar and by the fact that the address changes from http:// to https://.
• Secure Database Handling: Our databases are protected against unauthorized access on our host's servers through strict access controls, firewall systems, role-based permission structures, and encrypted data transmission channels.

We reserve the right to adapt this privacy policy to changed legal situations or changes in our services. The current version can always be found on this page.