Privacy Policy

1. Controller

Dinusha Rasangi, Eggenwaldweg 55, 6020 Innsbruck, Österreich

Email: hello@myrental.at

2. Data we process

• Account: email address, display name, chosen language and your password (stored only in encrypted form – we cannot read it).
• Listings: title, description, rules, prices, deposit, photos, category, town and postcode. We do not collect your exact address.
• Bookings: requested dates, prices, status and your message to the owner.
• Messages: content, time and read status of your conversations.
• Reviews, reports and blocks you make or that concern you.
• Technical data: IP address, browser, time and pages visited in our hosting providers' server logs; used for secure operation.

3. Purposes and legal bases

• Providing the platform, your account, listings, requests, messages and reviews – to perform the user agreement (Art. 6(1)(b) GDPR).
• Security, prevention of abuse and fraud, handling reports and moderation – based on our legitimate interest in a safe platform (Art. 6(1)(f) GDPR).
• Complying with legal obligations, e.g. under the Digital Services Act or future tax reporting duties (Art. 6(1)(c) GDPR).
• Emails about your account (confirmation, password reset) – to perform the agreement. We only send marketing emails with your explicit consent.

4. What other users see

Publicly visible are your display name, “member since”, whether your email is verified, your number of completed rentals, your active listings (with town and postcode) and published reviews. Your email address is never visible to others. Messages are only visible to the two people in a conversation; bookings only to renter and owner.

When you write a message, the app checks directly in your browser whether it contains phone numbers, email addresses or account details and then shows a safety note. No data is sent to us or stored for this, and no automated decision is made.

5. Cookies

We only use strictly necessary cookies: for your login (Supabase session) and your chosen language (“NEXT_LOCALE”). We use no analytics, tracking or advertising cookies and no third-party services such as Google Analytics or social media plugins. Fonts are served from our own server. Consent is therefore not required (§ 165(3) Austrian Telecommunications Act 2021).

6. Recipients and processors

We do not share or sell your data. To run the platform we use carefully selected service providers who process your data only on our instructions (Art. 28 GDPR):

• Supabase Inc. – database, login, file storage and real-time messages. Storage location: data centre in the EU (Ireland).
• Vercel Inc. – website hosting. Server functions run in Frankfurt (EU); delivered pages may be cached in a worldwide network.
• GoDaddy – the mailbox hello@myrental.at when you write to us.

7. Transfers to third countries

Supabase and Vercel are US companies. Although your data is stored in the EU, access from the USA (e.g. for support) cannot be completely ruled out. Such transfers are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (Art. 45 and 46 GDPR).

8. Retention

• We keep account, listing and profile data as long as your account exists.
• Messages, bookings and reviews are kept as long as they are needed by the people involved and to resolve disputes, and are deleted or anonymised at the latest when your account is deleted – unless a legal retention duty requires longer storage (e.g. 7 years for accounting data under § 132 BAO).
• Server logs are deleted automatically by our hosting providers after a short time.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can withdraw any consent at any time. Just write to hello@myrental.at.

If you believe we process your data unlawfully, you can complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

10. Security

All connections are encrypted (HTTPS). Passwords are stored only as hashes. Access to data is strictly controlled in the database: everyone can only read and change the data that concerns them.

11. Changes

When we introduce new features (e.g. payments, phone verification or email notifications), we will update this privacy policy and inform you about significant changes.