Sunce Rent logo
EN / DE
Request a vehicle
Back to home

Privacy Policy

Protecting your personal data is important to us. Below we inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) about which data we process when you visit this website, for what purpose, and what rights you have.

1. Controller

The controller responsible for data processing on this website is:

Sunce Rent
Owner: Mohammad Mousa Siddiqi
Mitterstraßweg 17
82064 Straßlach-Dingharting
Germany

Phone: +49 151 42320867
Email: mailme@sunce.rent

There is no legal obligation to appoint a data protection officer, as the requirements of Art. 37 GDPR in conjunction with § 38 BDSG are not met.

2. Principles of processing

This website is deliberately built to minimise data. We do not use cookies for analytics or marketing purposes, and we do not embed advertising networks, social media plugins or external analytics tools. Fonts are served from our own server; no connection to third-party servers takes place.

3. Visiting the website and server log files

When you access this website, your browser transmits technically necessary data which our hosting provider stores in what are known as server log files. This concerns:

Purpose: establishing the connection, ensuring trouble-free operation, and evaluating system security and stability.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and functional operation of this website.
Retention period: log files are generally deleted after no more than seven days, unless they are required to investigate a specific security incident.

4. Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the data listed above, and the details sent through the request form, exclusively on our behalf and is bound by our instructions. This is based on a data processing agreement pursuant to Art. 28 GDPR. Cloudflare delivers the website through a worldwide server network, so data may also be processed outside the European Union, including in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient provision of our online offering).

5. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar begins with “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.

6. Request form

If you contact us using the “Request a vehicle” form, we process the details you enter in order to handle your request and to be able to make you an offer.

Data processed

Purpose and legal basis

Processing takes place in order to handle your request and to carry out pre-contractual measures. The legal basis is Art. 6 (1) (b) GDPR. Where your request is not aimed at concluding a contract, we base the processing on Art. 6 (1) (f) GDPR; our legitimate interest lies in responding to enquiries addressed to our company. In addition, we obtain your consent via the checkbox pursuant to Art. 6 (1) (a) GDPR, which you may withdraw at any time with effect for the future.

Transmission and retention period

The form data is transmitted by email to our mailbox and stored there. We delete the data as soon as it is no longer required for the purpose for which it was collected, generally no later than six months after your request has been finally processed. Statutory retention obligations, in particular commercial and tax law periods under § 257 HGB and § 147 AO, remain unaffected.

Spam protection

To protect against automated submissions, the form contains an additional field that is invisible to you, as well as a check on how long the form took to complete. No data is transmitted to third parties and no cookies are set in the process. The legal basis is Art. 6 (1) (f) GDPR.

7. Contact by email or telephone

If you contact us by email or telephone, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries and otherwise Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose and no statutory retention obligations prevent deletion.

8. Fonts

This website uses the “Inter” typeface. The font files are loaded exclusively from our own server. No connection is made to third-party servers, in particular not to Google Fonts. Your IP address is not transmitted to third parties in this context.

9. Cookies

This website does not use cookies for analytics, tracking or marketing purposes. No usage profiles are created. Consent pursuant to § 25 (1) TDDDG is therefore not required and no cookie banner is necessary.

10. Recipients of the data

Your data is only passed on to third parties where this is necessary to perform a contract, where you have consented, or where we are legally obliged to do so. Recipients may in particular be: our hosting and email provider as processors and, in the case of a specific vehicle request, the respective vehicle dealer and financing partner, where this is necessary in order to prepare an offer. No transfer takes place to countries outside the EU or the EEA.

11. Your rights as a data subject

You have the following rights in relation to your personal data:

To exercise your rights, an informal message to mailme@sunce.rent is sufficient.

12. Right to object under Art. 21 GDPR

Where we process data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

13. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Germany

14. Obligation to provide data

Providing your data is neither legally nor contractually required. However, without the details marked as mandatory in the request form, we cannot process your request or make you an offer.

15. Automated decision-making

Automated decision-making, including profiling pursuant to Art. 22 GDPR, does not take place.

16. Currency of this policy

This privacy policy is dated August 2026. As our website develops, or as a result of changed legal requirements, it may become necessary to amend it. The current version can always be found on this page.

Note before going live: in section 4 (Hosting), the name and address of the actual hosting provider must be added once it has been determined, and a data processing agreement pursuant to Art. 28 GDPR must be concluded. This policy was written on the basis of the technology actually used on this website; it does not constitute legal advice and should be reviewed by a lawyer before publication. Please also note that for a German business a German-language version of the imprint and privacy policy is generally expected.