1. Controller
The controller is Signum Magnum Corporation GmbH, Schöffelstraße 9/1, 2380 Perchtoldsdorf, Austria. Send privacy requests through the contact form using “Privacy request” or email office@nobb.com.
2. Data processed
- Account data such as email address, name, phone number, language, sign-in, and session data.
- Vehicle data such as label, class, dimensions, and optional make or model.
- Host and listing data such as exact address, approximate public location, prices, availability, photos, and evidence of authority to list.
- Booking data such as space, term, price, status, messages, notifications, payments, and renewal activity.
- Parking-alert data consisting of the email address, desired location, intended start date, language, and consent timestamp.
- Booking-linked ratings and support, contact, and business inquiries.
- Technical and security data such as timestamps, device label, minimized or otherwise necessary connection data, request ID, and error records.
3. Purposes and legal bases
- Contract and pre-contract steps under Article 6(1)(b) GDPR for accounts, listings, requests, bookings, renewals, communication, and support.
- Legal obligations under Article 6(1)(c) GDPR for billing, tax, authority requests, and statutory records.
- Legitimate interests under Article 6(1)(f) GDPR for security, fraud prevention, platform operation, abuse controls, diagnostics, and legal claims.
- Consent under Article 6(1)(a) GDPR for parking alerts and other functions that expressly request consent. Consent may be withdrawn prospectively.
4. Public and private information
Public listing information is limited to details intended for search and selection, including title, description, approximate area, price, amenities, approved photos, and aggregate host rating. Exact addresses, private contact details, access instructions, and authority evidence are not public.
Confirmed parties receive only details required for performance and access. Staff access is role-based and limited to review, support, security, or legal duties.
5. Service providers and recipients
- Cloudflare for delivery, protection, and private file storage.
- Neon for the database.
- Postmark for emails about account access, bookings, renewals, parking alerts, and inquiries.
- Google Maps Platform for maps, place suggestions, and geographic display.
- The payment provider named at booking for payments and refunds.
- Authorities, courts, advisers, or contractual parties where a legal basis or duty applies.
6. Processing outside the EEA
Some providers may process data outside the European Economic Area. nobb relies on an adequacy decision, Standard Contractual Clauses, or another lawful Chapter V GDPR mechanism and limits transfers to what is necessary.
8. Retention
Sign-in codes remain valid for ten minutes. Active sessions expire after no more than 30 days or earlier through sign-out or revocation. Parking alerts remain active until consent is withdrawn or their purpose no longer applies. They are then deleted or limited to what is required to document consent.
Other data is retained while needed for the account, inquiry, booking, security, legal claims, and statutory retention. Proof of authority and original files are retained only as long as needed for review, security, contract performance, or legal duties. Data is then deleted or anonymized where no overriding duty or claim applies.
9. Individual rights
- Access to personal data.
- Correction of inaccurate or incomplete data.
- Deletion or restriction where no overriding duty or legal basis applies.
- Data portability where statutory conditions are met.
- Objection to processing based on legitimate interests.
- Withdrawal of consent with prospective effect.
- A complaint to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, or another competent supervisory authority.
10. Security and decisions
nobb uses encrypted transport, secure cookies, hashed session tokens, separate private and public location data, private file storage, and role-based access. No technical system can guarantee absolute security.
nobb makes no solely automated decision with legal or similarly significant effect. Automated checks may flag risks or block invalid input; material individual decisions remain reviewable.
11. Changes and contact
This notice will be updated when functions, providers, or legal bases change. Every published version carries a date and version number. Send privacy requests to office@nobb.com or through the contact form.