Privacy Policy

1. Data Controller

The data controller is CoreLayerLabs e.U., owner Florian Balaj, Liselotte-Schmidinger-Strasse 9, 4600 Wels, Austria. VAT ID: ATU83306209; Commercial register court: Landesgericht Wels. Contact: info@rentalos.app.

2. Data We Process

We process technical access data (e.g. IP address, browser, timestamps), account data (e.g. name, email), platform usage data and billing-related data.

3. Purposes and Legal Bases

Processing is carried out for contract performance, platform operation and security, communication with users and compliance with legal obligations. Legal bases include contract performance, legitimate interest, consent and legal obligations.

4. Recipients and Processors

We use service providers for hosting, email delivery, monitoring and payments (including Vercel, Resend, Sentry and Stripe). Where required, we use standard contractual clauses and additional safeguards.

5. Retention

We retain personal data only as long as necessary. Statutory retention obligations remain unaffected.

6. Cookies and Analytics

We use technically necessary cookies and - only with consent - analytics cookies. You can adjust your preferences via the cookie banner and your browser settings.

7. Your Rights

You have rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. You also have the right to lodge a complaint with the competent supervisory authority.

8. Privacy Contact

For privacy questions, contact datenschutz@rentalos.app.

Microsoft Clarity

Accept all also allows Microsoft Clarity: heatmaps and masked session recordings on public pages. No recording in your account. Advertising storage is disabled. You can disable Clarity separately in settings.

After consent, Microsoft processes clicks, scrolling, page views and device/connection data including IP address. Form contents and page text are masked. Processing in the USA is possible. Cookies _clck (up to one year) and _clsk (one day) link sessions. Recordings are normally stored for 30 days; selected recordings and aggregated data for up to 9 months. Withdrawal through cookie settings reloads the page to stop recording.

Microsoft Privacy Statement