Privacy Policy

1. General

We are pleased that you are visiting our website and are interested in our services. DRM Deutsche Reisemobil Vermietungs GmbH (hereinafter referred to as “DRM”) takes the protection of your personal data very seriously. Protecting your privacy when processing personal data is an important concern for us, which we take into account in all of our business processes.

Our website may contain links to websites of other providers to which this privacy policy does not extend. We have no influence over the compliance of third-party providers with data protection regulations.

The following data protection notices cover the currently applicable legal framework under the Federal Data Protection Act (BDSG) and the Europe-wide requirements of the EU General Data Protection Regulation (GDPR). We only process your data if you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR or if the relevant laws permit the data processing or we are legally obliged to carry it out.

2. Controller

The controller responsible for the collection, processing and use of your personal data within the meaning of the GDPR and the BDSG is:

The data protection officer can be contacted at the above address or at datenschutzbeauftragter@drm.de. If you have any comments or questions regarding data protection, you may contact us at any time.

3. Use of our website

When you visit our website, our web servers store access data (server log files) by default. This includes:

• IP address (anonymised)
• Date and time of access
• Page / file accessed
• Amount of data transferred
• Browser type and version
• Operating system
• Referrer URL

This data is stored for a short period for reasons of technical security, in particular to defend against attempted attacks on our web server. This data does not allow us to draw any conclusions about individual persons. The data is anonymised after seven days at the latest. This processing is based on a legitimate interest pursuant to Art. 6(1)(f) GDPR.

Hosting

Our website is hosted on professional hosting infrastructure. For the purpose of securing its own infrastructure, the host stores server log files (IP address, date, time, time zone, file accessed). The processing is based on a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The IP addresses contained therein are anonymised after 7 days.

Content management system

To manage our content, we use a self-hosted content management system (Payload CMS). The content is processed and delivered on the server side. No personal data of website visitors is transmitted to the CMS in the process.

4. Cookies & consent management (CookieFirst)

We use cookies to personalise content and advertisements, to be able to offer social media features and to analyse access to our website. With the exception of the cookies necessary for the operation of the website, your consent is required. Consent is voluntary and you may withdraw it at any time.

Cookies are small text files used by websites to make the user experience more efficient. By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we require your permission.

CookieFirst

In order to obtain your valid consent to the use and storage of cookies and to document it properly, we use the consent management platform CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands.

When you access our website, a connection is established with the CookieFirst server. CookieFirst stores a cookie in your browser so that only those cookies to which you have consented can be activated. The legal basis for this is Art. 6(1)(c) GDPR. We have concluded a data processing agreement with CookieFirst.

The current cookie table is generated automatically by CookieFirst and displayed below. You can also adjust your consent at any time via our cookie consent manager.

This cookie table was created and updated by the CookieFirst Cookie Scan.

5. Contacting us

If you contact us by email or via the contact form, personal data is processed and stored. The data you transmit (including email address, name, telephone number) is processed for the purpose of responding to your enquiry pursuant to Art. 6(1)(b) GDPR.

The data entered via the contact form is transmitted by email (SMTP) to our responsible department. It is not stored in a database. The data is not passed on to third parties and is deleted once processing has been completed, unless further purposes of use arise from it.

6. Non-binding quotation / rental enquiry

If you request a non-binding quotation or submit a rental enquiry via our website, the personal data you provide (name, contact details, travel dates, vehicle preferences) is processed for the purpose of preparing the quotation pursuant to Art. 6(1)(b) GDPR. Your data is not passed on to third parties. Once the quotation has been prepared, the data is deleted in accordance with the statutory provisions, unless further contractual relationships arise from it.

7. Reservation & booking

Motorhomes are reserved and booked via the booking system RentingForce (RentingForce GmbH). If you reserve a motorhome via our website, the personal data you provide (name, address, contact details) is processed for the purpose of the reservation pursuant to Art. 6(1)(b) GDPR. The data is transmitted to the booking system for the purpose of fulfilling the order.

8. Payment options

We only transmit personal data to third parties if this is necessary in the context of performing the contract. Payment transactions are carried out exclusively via encrypted SSL or TLS connections.

Nexi Germany GmbH

We offer the credit card payment method (Visa/MasterCard) with the payment service provider Nexi Germany GmbH, Helfmann-Park 7, 65760 Eschborn. The processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information: nexi.de/datenschutzerklaerung.

Stripe

We offer the option of processing payments via Stripe Inc. (Art. 6(1)(f) GDPR). For payment transactions, the card number, expiry date and card verification code are processed (Art. 6(1)(b) GDPR). The transfer is based on the EU-US Data Privacy Framework. Stripe Inc. is DPF-certified. DRM is not the controller of the data processed by Stripe. Further information: stripe.com/privacy.

PayPal

We offer the option of processing payments via PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (Art. 6(1)(f) GDPR). DRM is not the controller of the data processed by PayPal. Further information: paypal.com/privacy.

9. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Google Analytics uses cookies to analyse your use of the website. IP anonymisation is activated (IP masking).

The legal basis is the consent you give in the cookie consent manager pursuant to Art. 6(1)(a) GDPR. The transfer to Google LLC is based on the EU-US Data Privacy Framework. Google LLC is DPF-certified. You can prevent data collection by Google Analytics by installing the browser plug-in available at tools.google.com/dlpage/gaoptout or by deactivating the marketing cookies in the cookie settings.

10. Google reCAPTCHA

We use Google reCAPTCHA to protect our forms against automated misuse (spam bots). The provider is Google Ireland Limited. reCAPTCHA analyses visitor behaviour on the basis of various characteristics (e.g. IP address, time spent on the page, mouse movements). The analysis begins automatically when the page is visited.

The legal basis is our legitimate interest in protecting our website pursuant to Art. 6(1)(f) GDPR. The transfer is based on the EU-US Data Privacy Framework. Further information: policies.google.com/privacy.

11. Hotjar

This website uses Hotjar, a service provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta. Hotjar analyses user behaviour (mouse and scroll movements, clicks, heatmaps, conversion funnels).

The legal basis is your consent pursuant to Section 25(1) sentence 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1)(a) GDPR, which you give via the cookie banner and may withdraw at any time in the cookie management settings. We have concluded a data processing agreement with Hotjar. Your data is retained for a maximum of 14 months.

12. OpenStreetMap / Leaflet

We embed maps from the OpenStreetMap (OSM) service, operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. To display the maps, map tiles are loaded from the OSM tile servers. In the process, your IP address is transmitted to the servers of OpenStreetMap.

The maps are embedded on the basis of our legitimate interest in an appealing presentation of our locations pursuant to Art. 6(1)(f) GDPR. Further information: osmfoundation.org/wiki/Privacy_Policy.

13. Nominatim geocoding

For the location search by postcode, we use the Nominatim geocoding service of the OpenStreetMap Foundation. When you search by postcode, the postcode you enter is transmitted to the Nominatim servers in order to determine the geographical coordinates. The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

14. Google Fonts

For the uniform display of fonts, this site uses Google Fonts from Google Ireland Limited. The fonts are embedded locally via the Next.js font optimisation and downloaded at build time. During normal operation, no direct connection to Google servers is established when a page is accessed. Further information: policies.google.com/privacy.

15. Matterport 360° tours

On our vehicle detail pages, we embed virtual 360° tours from the provider Matterport Inc., 352 E. Java Dr., Sunnyvale, CA 94089, USA. When the tour is loaded, a connection to the Matterport servers is established, in the course of which your IP address is transmitted. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Further information: matterport.com/privacy-policy.

16. FlyerAlarm

Our website uses a plug-in from Flyeralarm GmbH, Alfred-Nobel-Straße 18, 97080 Würzburg, in order to provide you with our digital brochure. Further information: flyeralarm.digital/datenschutz.

17. bieteundmiete.de

On our auctions page, we embed a widget from the provider bieteundmiete.de. When the widget is loaded, a connection to the servers of bieteundmiete.de is established, in the course of which your IP address is transmitted. The widget is embedded on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

18. Newsletter

If you subscribe to our newsletter, we process your email address solely for our own advertising purposes and only with your express consent within the meaning of Art. 6(1)(a) GDPR. You will first receive a confirmation link (double opt-in). You may withdraw your consent at any time free of charge by clicking on “Unsubscribe from newsletter” at the end of each email or by sending us a short message.

19. Participation in prize draws

Personal data (salutation, name, address, email address, telephone number, date of birth) is collected for the purpose of conducting prize draws. The processing is carried out exclusively for the purpose of conducting the prize draw pursuant to Art. 6(1)(b) GDPR and with your consent pursuant to Art. 6(1)(a) GDPR. The data is deleted once the prize draw has ended. In the event of a win, the winner agrees to the publication of their first name and place of residence.

20. Customer feedback

If you take part in our customer feedback survey, we process your personal data only with your express consent pursuant to Art. 6(1)(a) GDPR. The purpose of the processing is to increase customer satisfaction. You may withdraw your consent at any time free of charge.

21. Social media

For data protection reasons, we do not embed any social plug-ins directly in our website. When you access our pages, no data is transmitted to social media services. The links to Facebook, Instagram and YouTube provided on our website are simple links. When you follow them, you leave our website and are redirected to the respective platform.

22. Application process

By sending us your application documents, you provide DRM with your personal data for the purpose of the job search pursuant to Art. 6(1)(b) GDPR. The data processed includes, among other things, surname, first name, home address, email address, telephone numbers, cover letter, CV, certificates and references.

Your data is accessible only to the employees of the HR department and to the decision-makers in the respective specialist departments. It is not passed on to external parties. We store your details until the application process has been completed, but for no longer than 6 months. Any storage beyond this (up to 2 years) takes place only with your express consent pursuant to Art. 6(1)(a) GDPR.

23. Protection of minors

It is not our intention to collect personal data from children under the age of 16. Processing is only permitted with the consent of the holders of parental responsibility. If we have collected data about your child, you can inform us of this at datenschutzbeauftragter@drm.de accordingly. The data will then be deleted completely.

24. Security & encryption

DRM uses technical and organisational security measures to protect your data against manipulation, loss, destruction and access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Your data is transmitted securely using SSL/TLS encryption.

25. Your rights as a data subject

You are entitled to the following rights, provided the respective statutory requirements are met:

• Withdrawal of consent — You may withdraw any consent you have given at any time. The lawfulness of the processing carried out until the withdrawal remains unaffected.
• Access (Art. 15 GDPR) — Right of access to the personal data stored by us.
• Rectification (Art. 16 GDPR) — Right to rectification of inaccurate data or completion of incomplete data.
• Erasure (Art. 17 GDPR) — Right to erasure, provided no statutory retention obligations apply.
• Restriction (Art. 18 GDPR) — Right to restriction of processing.
• Data portability (Art. 20 GDPR) — Right to receive the data in a structured format.
• Objection (Art. 21 GDPR) — Right to object to processing based on legitimate interests.
• Complaint — Right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact our data protection officer at datenschutzbeauftragter@drm.de.

Last updated: April 2026