This policy explains what personal data we process when you visit this website, contact us or try the live demo, and what rights you have. It applies to clickandshare.co and its subpages, and to our demo store at demo.store.rentals. Last updated: 28 September 2026.
The booking pages that rental operators run on the Click&Share platform have their own privacy notices; the operator you book with is the controller for your booking data there. This page covers our own website only.
Click&Share GmbH, Badeweg 6, 9583 Faak am See, Austria. Email: info@clickandshare.at, phone +43 670 3500425. Managing Director: Thomas Dickhoff. We have not appointed a data protection officer, as we are not required to.
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, the server records the IP address of your device, the date and time, the page requested, the referring page and the browser and operating system used. We use these logs to deliver the website, to keep it secure and to diagnose faults. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Logs are kept for 7 days and then deleted.
Vercel processes data on our behalf under a data processing agreement. Where data is transferred to the United States, this is covered by the EU–US Data Privacy Framework and by standard contractual clauses. Vercel's own sub-processors are listed at security.vercel.com/item/subprocessors.
This website sets no cookies for tracking or advertising and does not load third-party scripts that do. Fonts are served from our own server. The demo store uses technically necessary storage in your browser to keep your booking in progress; it sets no tracking cookies either.
To understand how the website is used, we use SiteBehaviour, a cookie-free analytics service operated by SiteBehaviour Inc., Canada (contact@sitebehaviour.com) and hosted in the EU. Canada is covered by an adequacy decision of the European Commission, so any access by the operator from Canada is a permitted transfer. It sets no cookies and stores no personal data: the IP address is used only to derive aggregated statistics and is not retained, and no profile of you is created. We do not use SiteBehaviour's session recordings or heatmaps. The legal basis is our legitimate interest in understanding and improving our website (Art. 6(1)(f) GDPR).
If you write to us by email, we process the data you send us — usually your name, email address and the content of your message — to answer your enquiry. If you book a call through TidyCal, a scheduling service operated by AppSumo (USA), TidyCal processes your name, email address and the time you choose to create the appointment; TidyCal's privacy policy applies to that processing. The legal basis is the preparation of a contract on your request (Art. 6(1)(b) GDPR) or, for general enquiries, our legitimate interest in answering you (Art. 6(1)(f) GDPR). We keep enquiries for as long as needed to handle them and for 12 months afterwards, unless a contract follows.
The live demo lets you book a rental on our demo store at demo.store.rentals the way a customer would. To run it we process the data you enter: name, email address and phone number. The phone number is required, because the demo sends the codes by SMS, the way a real booking does. We use the data to create the demo booking, send you the demo messages and, once, follow up on your demo by email.
The demo store uses our regular checkout. A test coupon shown on the checkout page sets the price to zero: no payment is taken, no card details are requested, and there is no deposit. If you book without the coupon, the payment is processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland; card details are entered directly with Stripe and we never see or store your full card number. Stripe's privacy policy applies to that processing: stripe.com/privacy.
The following service providers process data on our behalf for the demo, each under a data processing agreement: Supabase (database and authentication), SendGrid (email), Messente (SMS), Stripe (payments, only if you book without the coupon), Vercel (hosting), and Make.com and Activepieces (interfaces between these systems). Some of these providers process data in the United States; transfers are covered by the EU–US Data Privacy Framework or standard contractual clauses.
The legal basis is your request to try the demo (Art. 6(1)(b) GDPR). Demo bookings and the data in them are deleted 30 days after the demo; payment records that Stripe must keep under financial regulation are retained by Stripe for the statutory period. If you asked us for product news, see section 6.
If you tick the box to receive product news, we send you occasional emails about Click&Share. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email or by writing to us. We record when and how consent was given. Emails are sent through SendGrid (Twilio Inc., USA) under a data processing agreement.
We share personal data only with the service providers named in this policy, each bound by a data processing agreement under Art. 28 GDPR, and where we are legally required to. Where providers process data outside the European Economic Area, we rely on adequacy decisions (including the EU–US Data Privacy Framework for certified companies) or on the European Commission's standard contractual clauses.
We keep personal data only as long as the purpose requires: server logs for 7 days, demo data for 30 days, enquiries for 12 months after they are closed, consent records for as long as the consent is in force and three years beyond. Data that falls under statutory retention duties (for example accounting records) is kept for the period the law requires.
You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw that consent at any time with effect for the future. To exercise these rights, write to info@clickandshare.at.
You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
This website is served over HTTPS. Access to systems that hold personal data is restricted, logged and protected by strong authentication. Our providers are selected for their security certifications and bound to appropriate technical and organisational measures.
We update this policy when our website or the services behind it change. The date at the top shows the current version.
