Privacy policy
Contents16 clauses
What happens to your information when you send us an enquiry, and what you can do about it. Written to Articles 13 and 14 of the GDPR.
1. Who is responsible
The controller for the processing described here is:
GLANZ Brands LCN e.K.
Hemmingstedter Weg 166
22609 Hamburg
Germany
Email: bookings@ecolimos.de
Telephone: +49 174 722 5918
2. Data protection officer
We are not required to appoint a data protection officer. Neither Article 37 GDPR nor section 38 of the German Federal Data Protection Act applies to a business of our size and activity. Questions about your data go to the contact address above and are answered by us directly.
3. When you send an enquiry
The enquiry form asks for your name and how to reach you, and for the journey: pickup, destination, date and time, and number of passengers. Anything you add in your message is sent with it.
4. Why we are allowed to process it
We use your enquiry to prepare a quote and to reply to you. The legal basis is Article 6 (1) (b) GDPR, steps taken at your request before entering into a contract.
If a booking follows, the same information is used to perform the contract, on the same basis.
Filtering out automated spam and keeping the form usable rest on our legitimate interest under Article 6 (1) (f) GDPR.
Measurement and advertising rest on your consent under Article 6 (1) (a) GDPR and are described further down.
5. Who sees it
Your enquiry is delivered as an email to your point of contact at ecoLimos. It is read by a person, not by an automated system, and no decision affecting you is made automatically.
Delivery is handled by Resend, Inc., which sends the message on our behalf.
Our mailbox is hosted by Google Workspace, operated for customers in Europe by Google Ireland Limited.
The site itself runs on Vercel Inc.
Each of these acts as a processor under a contract required by Article 28 GDPR. We do not sell your information and we do not pass it to anyone for their own marketing.
If your journey involves a vehicle or a chauffeur we source from a partner operator, that partner receives the details needed to carry it out, and nothing beyond them.
6. How long we keep it
Enquiries that do not become bookings are kept for 24 months. After that the personal details are removed - your name, email address, telephone number and the addresses of the journey - and what remains is an anonymous record of the kind of journey that was asked about, which can no longer be connected to you or to anyone else.
Where a booking follows, invoices, payment records, and associated commercial correspondence are retained for 6 or 10 years as required by German commercial and tax law (§ 257 HGB and § 147 AO) under Article 6 (1) (c) GDPR.
You can ask us to delete an enquiry earlier. We will, unless one of those retention duties applies to it.
7. If you call, message or email instead
You can reach us by telephone, by email or on WhatsApp. Whichever you choose, we keep what you send us for as long as it takes to answer you, on the same basis as an enquiry through the form.
WhatsApp is operated by Meta Platforms Ireland Limited. If you message us there, Meta processes that conversation under its own terms, which we do not control. Email or telephone are available if you would rather not use it.
8. Hosting and server logs
The site is hosted by Vercel Inc. Each request generates a log entry containing your IP address, the page requested, the time, the referring page and your browser identification.
These logs exist to keep the site available and to investigate faults and abuse. The basis is our legitimate interest under Article 6 (1) (f) GDPR. They are not used to identify you and are not combined with your enquiry.
9. Typefaces
The typefaces used on this site are served from the site itself. Loading them sends nothing to a font provider.
10. Measurement and advertising
We would like to understand which pages people find useful and which adverts bring real enquiries. For that we use Google Tag Manager, Google Analytics and Google Ads conversion measurement, all operated by Google Ireland Limited.
None of it runs until you accept it. On your first visit a notice asks you, accepting and refusing are equally easy, and refusing leaves the site fully usable. Until you accept, your browser does not contact Google at all: Google Tag Manager is not loaded, and every kind of storage Google's tags could use is set to refused.
If you accept, Google Tag Manager loads Google Analytics and Google Ads. They set cookies holding identifiers in your browser and record which pages you visit, roughly where you are from your IP address, the advert you arrived from, and whether you sent an enquiry. Google Ads may use your visit to show you ecoLimos adverts on other sites.
When you send an enquiry, we also pass the email address and, if you gave one, the telephone number from the form to Google Ads. Your browser converts them into a hashed form (SHA-256), a scrambled code rather than the details themselves, before anything leaves it, so Google never receives them readable. This is called enhanced conversions.
Google compares that code with the same kind of code made from the details of Google accounts. Where they match, Google can tell us that an enquiry followed a click on one of our adverts, even when cookies alone would not show it. We see only counts of enquiries per advert, never who sent them, and the rest of your enquiry, such as your name, the journey and your message, is not passed to Google.
The basis is your consent under Article 6 (1) (a) GDPR together with section 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can withdraw it at any time through Cookie settings at the foot of every page, with effect from the moment you withdraw it. Withdrawing stops the measurement and deletes the identifiers this site set in your browser.
12. Transfers outside the EU
Google, Resend and Vercel are United States companies or have United States parents, so some of the processing described here takes place outside the European Union.
Those transfers rely on the European Commission's adequacy decision for the EU to US Data Privacy Framework where the recipient is certified under it, and otherwise on the Commission's standard contractual clauses together with additional safeguards. You can ask us for a copy of the clauses that apply.
13. Your rights
You have the right to ask us what we hold about you and to receive a copy (Article 15), to have inaccurate information corrected (Article 16), to have it deleted (Article 17), to have its use restricted (Article 18) and to receive it in a portable form (Article 20).
Where processing rests on your consent, you can withdraw that consent at any time without affecting what was lawful before you withdrew it (Article 7 (3)).
Write to bookings@ecolimos.de and a person will handle it. We answer within one month.
14. Your right to object
Where we process your information on the basis of legitimate interest, you have the right under Article 21 GDPR to object at any time on grounds arising from your particular situation.
If you object, we stop unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is needed to establish, exercise or defend legal claims.
15. Complaints
If you think we have handled your information badly, we would rather hear it from you directly and put it right.
You also have the right to complain to a supervisory authority, in the member state where you live or work or where the matter arose. The authority responsible for us is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg.
16. Changes to this notice
We update this notice when what we do changes, and the date below tells you which version you are reading.
Version of 9 October 2026.