Privacy notice
Last updated: 18 October 2026
This notice explains personal data processing when visiting noleggiomacchina.com and when contacting us. It applies to the Italian, German and English versions and to the addresses with and without www.
1. Controller
Günther Herrmann, trading as GMH Consulting Munich, Lindwurmstraße 80, 80337 München, Germany. Email: guenther@gmh-consult.com. Please use this address for privacy enquiries as well.
2. Website operation and technical access data
The website is published through OpenAI Sites and delivered using Cloudflare infrastructure. IONOS manages the domain and DNS settings; the content is not served from IONOS webspace. Visiting the website requires technical connection data to be processed, including IP address, time, requested address, browser and system information and, if transmitted, the referring page. The purposes are delivery, fault diagnosis and abuse prevention. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in reliable and secure website operation.
3. Providers and recipients
Technical recipients include OpenAI and Cloudflare group companies involved in publishing, networking and security. Cloudflare, Inc. is located at 101 Townsend Street, San Francisco, CA 94107, USA. Details about OpenAI companies and platform processing are available in the OpenAI privacy policy. For Cloudflare, see its privacy policy. Our email and IT service providers also process contact enquiries. Data is disclosed to authorities or other recipients only where a legal obligation or another lawful basis applies.
4. Security cookies and local storage
We have not integrated advertising or analytics tools. Our website code sets no cookies of its own and stores no visitor data in Local Storage. Language choices use page addresses. The delivery platform may use security cookies, such as __cf_bm to detect automated traffic. Cloudflare states that this cookie expires after 30 minutes of continuous inactivity. Other technical cookies depend on the enabled protection features. Storage or access on your device without consent is limited to what is strictly necessary for the service you expressly request, under section 25(2)(2) of the German TDDDG. Other uses require prior consent. Subsequent processing of necessary security data relies on Article 6(1)(f) GDPR. Details: Cloudflare cookies.
5. Contact and purchase enquiries
Email links open your mail application. We receive the information you provide, such as email address, name, message and attachments, only when you send a message. We use it to handle and respond to your enquiry. Article 6(1)(b) GDPR applies to enquiries about a potential contract with you; Article 6(1)(f) applies to other business communication, based on our interest in responding. There are no mandatory website form fields. Without sufficient contact details, we may be unable to reply.
6. Retention
We keep enquiry data until the enquiry has been dealt with and then delete it unless further lawful use is necessary. Commercial or tax retention duties, or establishing, exercising or defending legal claims, may require longer storage. The nature and content of the matter determine the applicable period. Platform connection and security data is retained according to operational and protection purposes, security incidents and legal duties. Providers publish purpose-based retention criteria; we do not promise a single fixed deletion period for all technical data. We do not create our own permanent record of identifiable visitors.
7. Processing outside the European Economic Area
International infrastructure may involve processing outside the EEA, particularly in the United States. Providers describe adequacy decisions and EU Standard Contractual Clauses as transfer mechanisms. Cloudflare also refers to its EU-US Data Privacy Framework certification. The applicable mechanism depends on the recipient and processing. See OpenAI and the Cloudflare Data Processing Addendum. Further information or a copy of applicable safeguards may be requested using our contact address above. Exclusively European processing is not promised.
8. Your data protection rights
Subject to the relevant legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and portability (Article 20). Where processing relies on consent, you may withdraw it at any time for the future. This does not affect processing that was lawful before withdrawal. To exercise your rights, contact guenther@gmh-consult.com.
9. Your right to object
Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21(1). We will then stop processing unless we demonstrate compelling legitimate grounds or the processing concerns legal claims. You may object to processing for direct marketing at any time without giving reasons.
10. Complaints to a supervisory authority
Under Article 77 GDPR you may complain to a supervisory authority, particularly where you normally live or work, or where an alleged infringement occurred. The authority responsible for private organisations in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht: BayLDA complaints.
11. Other features and security
The website has no booking process, payment function, customer accounts or embedded social networks. Our website code does not perform automated decision making or profiling. Fonts and images load from the same website address. External links contact their destination only when clicked. The website connection uses HTTPS. This notice will be updated when the website or its data processing changes.