Privacy Policy

Updated: 25 October 2026. This policy applies to caratrip.de. Processing in the CaraTrip app and its sync services is covered by the app privacy policy.

1. Controller and privacy contact

The controller is market port GmbH, Splieterstraße 27, 48231 Warendorf, Germany. Email: info@marketport.de, telephone: +49 2581 9493360. For support, contact service@marketport.de.

Data protection officer: Nils Möllers, Keyed GmbH, email: info@keyed.de, telephone: +49 2505 639797.

2. Website access and secure operation

When you visit, the web server processes your IP address, date and time, requested address, response status, and any browser, operating system and referrer information provided. This is needed to deliver the website, investigate errors and prevent attacks. Server and error logs and limited abuse prevention data may be stored. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable website operation.

3. Contact form and email

When you contact us, we process your name, email address, subject, message, language and any optional company details. Requests sent through the app may also include technical app information. Form submissions are stored in the CaraTrip system and may be forwarded by email to our support team for handling. Technical limits protect the form against abuse, temporarily using an identifier derived from the email address and IP address.

We need this information to handle and answer your request. Contract-related enquiries are based on Article 6(1)(b) GDPR; other enquiries and abuse prevention on Article 6(1)(f) GDPR. Without the required contact details, we cannot process the form. Do not send passwords, sync codes or unnecessary personal information about others.

4. Cookies, language and dark mode

We use technically necessary session and security cookies, particularly for form protection, your selected language and administration sign-in. An explicitly requested persistent administrator sign-in may use an additional authentication cookie. Sessions end when their validity expires; you can also delete or block cookies in your browser. Doing so may restrict sign-in and forms.

Your choice of Light, Dark or System appearance is stored in your browser’s local storage under caratrip-appearance until you change it or clear the website data. It serves only your requested appearance. The necessary device access is based on section 25(2)(2) of Germany’s TDDDG; personal data processing to provide and secure these functions is based on Article 6(1)(f) GDPR. This website does not use advertising or analytics tracking cookies.

5. Images, fonts and external links

Fonts and embedded website images are loaded from caratrip.de. Google Fonts, Gravatar and WordPress comment services are not automatically embedded. When you open a link to the App Store, Mac App Store, Google Play or another external website, that provider receives the usual connection data needed for the visit. Its privacy information applies there. This website does not use a Sentry script for visitor analytics; the app’s technical Sentry diagnostics are explained in the app privacy policy.

6. Recipients and international transfers

Access is limited to authorised employees and service providers engaged for operation, hosting, maintenance and, where applicable, email delivery, as needed for their tasks. Authorities or other recipients receive data when required by law or another legal basis. We do not sell your data. External services may process data outside the European Economic Area. Consult the respective provider’s information; an external link alone does not send your form contents to it.

7. Retention

Contact requests are retained for as long as needed to handle them and, where applicable, document a resulting contractual relationship or defend specific legal claims. Statutory retention requirements remain applicable (Article 6(1)(c) GDPR). Operational and security logs are deleted or anonymised when their purpose ends, unless a specific security incident requires longer retention. Backup copies may remain until replaced or their retention period expires. There is therefore no single retention period in days for every type of data.

8. Your rights

Subject to the legal conditions, you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time for the future. Contact the privacy contacts listed above. We do not make automated decisions with legal or similarly significant effects, or carry out associated profiling.

You may complain to a data protection supervisory authority, particularly the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

9. Scope and changes

App data, iCloud, Private Cloud, trip sharing, location and app diagnostics are covered by the app privacy policy. The separate marketport.de website has its own privacy policy. We update this page when the website or its data processing changes materially.