Privacy Policy

This page explains what data we process when you rent a scooter from us or visit our website – and what rights you have.

Last updated: October 2026. This English version is provided for your convenience; in case of discrepancies, the German version prevails.

At a glance

We do not sell data and we do not create movement profiles for advertising.

1. Who is responsible?

We are not required to appoint a data protection officer. For any questions about data protection, you can reach us at the email address above.

2. Rental enquiries and contact

When you contact us via the enquiry form, by email or by phone, we process your name, contact details, requested period, scooter model and your message. We use them only to answer your enquiry (Art. 6(1)(b) GDPR; for general questions Art. 6(1)(f)). If no booking follows, we delete the data after 6 months.

3. Booking and rental contract

For the rental we need:

• First and last name, address, email, mobile number
• Date of birth – to check the minimum age of 18
• Driving licence details (category, date of issue – licence held for at least 12 months); online and at handover – this is how we register you as a driver
• For bookings by companies: the named drivers
• Rental period, vehicle, extras, handover and return report with photos
• Payment details (see section 5)

The legal basis is the rental contract (Art. 6(1)(b) GDPR) and our retention obligations under Austrian tax and commercial law (Art. 6(1)(c)). Without this information we cannot hand over a vehicle to you.

4. Location and vehicle data

Our scooters are fitted with GPS trackers that record their location. We do not analyse movement profiles of your trips.

During the rental, we only look up the location if

• we suspect theft or misappropriation,
• the return is more than 1 hour overdue and we cannot reach you,
• you or emergency services need help after an accident or breakdown, or
• the device automatically reports that the scooter has left the agreed area of use (usually Austria).

The legal basis is the rental contract (Art. 6(1)(b) GDPR) and our legitimate interest in protecting our vehicles and helping you in an emergency (Art. 6(1)(f)). Only authorised staff have access. We delete location data 90 days after the rental ends, unless it is needed to clarify a specific incident.

5. Payment, additional charges and credit checks

If you pay online, payment is made when booking through our payment service provider by credit or debit card, Apple Pay or Google Pay. You enter your card details directly with the provider; we only see the payment status, the amount and the last digits of your card. Our payment service provider also processes the data under its own responsibility, for example to prevent fraud.

For online payment, instead of a deposit, your payment method remains stored with the payment service provider until 30 days after the rental ends, so that we can collect additional charges under our GTC (e.g. fuel, damage, traffic fines). After that, we delete the stored payment method (Art. 6(1)(b) GDPR). We may assign outstanding claims to a debt collection agency (Art. 6(1)(f)). If you pay in cash, you pay a deposit at handover; we record the amount and its refund in our accounts (Art. 6(1)(b) and (c)).

Credit checks in individual cases

For long-term rentals without a fixed end date and for bookings by companies, we may check your creditworthiness before confirming your booking. We do not do this routinely for every booking.

• Credit agency: CRIF GmbH, Rothschildplatz 3/Top 3.06.B, 1020 Vienna, Austria; CRIF is itself responsible for its own data processing.
• What we transmit: name, address, date of birth.
• What we receive: a credit score, i.e. a probability value for payment default, and any stored payment history.
• Legal basis: our legitimate interest in avoiding payment defaults when providing vehicles (Art. 6(1)(f) GDPR).
• Decision: a person decides on your booking; the score only supports the decision. If the result is negative, you can tell us your side. If we decline, we refund all payments in full.
• Retention: if no contract is concluded, we delete the result after 6 months; otherwise we keep it with the contract records.
• Objection: you can object to the check on grounds relating to your particular situation (Art. 21 GDPR).

You can ask CRIF free of charge what data it holds about you: CRIF privacy information.

6. Accidents, fines and requests from authorities

For traffic offences, as the registered keeper we are legally required to tell the authority on request who was driving the vehicle (§ 103(2) Austrian Motor Vehicles Act, KFG). After accidents, we pass on the necessary data to insurers and assessors. In the event of theft or other criminal offences connected with the rental, we may transmit contract and location data to the police and public prosecutor (Art. 6(1)(c) and (f) GDPR).

7. Newsletter, offers and surveys

We only send you newsletters if you have given your consent (Art. 6(1)(a) GDPR). Without consent, as a customer you will at most receive emails about our own similar offers, provided you did not object when booking (§ 174(4) Austrian Telecommunications Act 2021, TKG; Art. 6(1)(f) GDPR). The same applies to short satisfaction surveys after your rental.

You can unsubscribe from marketing at any time, free of charge – via the link in every email or by writing to datenschutz@sco2t.com. After that we will no longer use your data for marketing (Art. 21(2) GDPR).

8. Visiting our website

Our website is hosted in Austria. Each time a page is accessed, the server automatically stores the IP address, date and time, the page requested, browser and operating system. This is necessary to deliver the site securely and reliably (Art. 6(1)(f) GDPR). We delete these logs after 14 days. All data is transmitted in encrypted form (TLS).

9. Cookies and your consent

We set technically necessary cookies without asking, for example to store your language setting or your cookie choice (§ 165(3) Austrian Telecommunications Act 2021). All other cookies and services – statistics and marketing – only load once you agree in the cookie banner (Art. 6(1)(a) GDPR).

You can change or withdraw your choice at any time.

Change cookie settings

10. Google Tag Manager and Google Analytics

With your consent, we use Google Analytics 4 to understand how our website is used. It is integrated via Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

• Data: pages visited, time on site, referral source (e.g. search engine), device type, approximate location at city level. Google Analytics 4 does not store IP addresses.
• Retention: 14 months.
• USA: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR).
• More information: Google Privacy Policy.

None of these services load without your consent.

11. Maps and social networks

Our address links to Google Maps, and our profiles link to Facebook, Instagram and X. These are simple links: data only flows to the respective provider when you click them. Their privacy policy then applies, for example that of Meta Platforms Ireland Limited for Facebook and Instagram.

12. Who receives your data

We only share data where it is necessary for the rental, required by law, or you have consented. Service providers working for us are contractually bound by our instructions (Art. 28 GDPR).

Data is only processed outside the EU by the services named in section 10 and 11.

13. How long we keep data

14. Your rights

You have the right at any time to:

• Access the data we hold about you (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16)
• Erasure, unless we are required to retain the data (Art. 17)
• Restriction of processing (Art. 18)
• Data portability in a common format (Art. 20)
• Withdraw your consent with effect for the future (Art. 7(3))

Right to object: where we process data based on our legitimate interest, you can object on grounds relating to your particular situation. You can object to marketing at any time without giving reasons (Art. 21 GDPR).

Just write to us at datenschutz@sco2t.com. We will reply within one month.

15. Complaints

If you believe we are not processing your data correctly, you can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at. We would, however, prefer to resolve your concern with you directly first.

16. Automated decisions

We do not make decisions based solely on automated processing (Art. 22 GDPR). Even after a credit check (section 5), a person decides on your booking. On request, we will explain which data and criteria were taken into account.

17. Changes

We update this policy when our services or the law change. The version published here applies; the date is shown at the top.

Questions about data protection? datenschutz@sco2t.com

All rental details are set out in our GTC. You can find our prices in the price list.