{"id":3808,"date":"2026-09-02T03:36:09","date_gmt":"2026-09-02T00:36:09","guid":{"rendered":"https:\/\/rennkron.com\/?page_id=3808"},"modified":"2026-10-15T19:35:51","modified_gmt":"2026-10-15T16:35:51","slug":"rennkron-privacy-policy","status":"publish","type":"page","link":"https:\/\/rennkron.com\/en\/rennkron-privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<article class=\"rennkron-legal-document\" data-rennkron-legal-document=\"privacy\" data-release=\"privacy-mobile-20261107-r4-legal-delta1\" lang=\"en\">\n<header class=\"rennkron-legal-document__header\">\n<p class=\"rennkron-legal-document__eyebrow\">Rennkron<\/p>\n<h1>Privacy Policy<\/h1>\n<p data-clause=\"document-version\">Text version: privacy-mobile-20261107-r4-legal-delta1<\/p>\n<\/header>\n<p>This Privacy Policy explains the general approach to privacy when using the Rennkron website and mobile apps. Detailed information about the controller, purposes, legal grounds and rights relating to the processing of personal data is provided in the KVKK Privacy Notice.<\/p>\n<p><a href=\"https:\/\/rennkron.com\/en\/kvkk-privacy-notice\/\">Read the KVKK Privacy Notice<\/a>.<\/p>\n<section>\n<h2>What categories of information may be involved?<\/h2>\n<ul>\n<li>Identity, contact and session information when an account is created.<\/li>\n<li>Saved races, sports preferences, notification preferences and \u201cMy Rennkron\u201d selections.<\/li>\n<li>Contact, passenger\/guest and service requirement information entered by the user in a service or reservation request.<\/li>\n<li>Products, options and configuration information selected in the cart.<\/li>\n<li>Support correspondence, request records and technical records retained for transaction security.<\/li>\n<\/ul>\n<\/section>\n<section>\n<h2>Purposes of use<\/h2>\n<ul>\n<li>Providing the account and selected features.<\/li>\n<li>Assessing requests for races, accommodation, transfers and other services.<\/li>\n<li>Conducting customer communication, security, abuse prevention and troubleshooting.<\/li>\n<li>Meeting legal obligations, managing disputes and preserving business records.<\/li>\n<\/ul>\n<\/section>\n<section>\n<h2>Sharing and service providers<\/h2>\n<p>Information may be shared with suppliers of hosting, email, information technology and support services only to the extent necessary for the relevant purpose; with the relevant travel\/service supplier where needed to fulfil a service request; and with legally authorised public bodies. The scope of each disclosure depends on the nature of the service and the applicable legal requirements.<\/p>\n<\/section>\n<section data-clause-group=\"hosting\">\n<h2>Hosting, security and site administration<\/h2>\n<p data-clause=\"hosting\">Rennkron\u2019s website and database are hosted on infrastructure provided by Hetzner Online GmbH in the Nuremberg region of Germany. This infrastructure processes account, contact, verification, user preference, service and booking request data and technical security records needed to provide the service. This location does not mean that all service providers, support access or backup copies are located only in Germany.<\/p>\n<p data-clause=\"security\">Wordfence Security Network may transmit security-event IP addresses, times, rules and request information and, for relevant events, URLs, HTTP headers, parameters and request content to Defiant, Inc. systems. User\/administrator identifiers and proxy information may be included where present in the event. This does not mean that every visitor request or all customer records are transmitted. The lifetime of a local security cookie or local event record is not the retention period of Defiant\u2019s remote records.<\/p>\n<p data-clause=\"administration\">The daily administration report configured for Extendify Insights may include site identity\/address, software and plugin information, user\/administrator and login counts, setup tasks and metadata such as titles, slugs, status and dates of pages\/revisions changed in the preceding 24 hours. Personal information entered in page titles may appear in that metadata. This administration flow is separate from customer search. Sending content to an administrator AI tool depends on use of that tool; installation of the plugin does not mean that all customer data are sent to an AI service.<\/p>\n<\/section>\n<section data-clause-group=\"transfers\">\n<h2>International data transfers<\/h2>\n<p data-clause=\"transfers\">Sending personal data from T\u00fcrkiye to hosting infrastructure in Germany or providers in other countries is treated as an international transfer. The purpose, data categories, recipient, country and applicable transfer basis must be identified for each flow. European hosting alone does not establish that the transfer safeguards required by T\u00fcrkiye\u2019s KVKK have been completed.<\/p>\n<\/section>\n<section>\n<h2>Analytics and advertising technologies<\/h2>\n<p>As of the publication date of this text, Google Analytics, Meta Pixel and advertising tracking cookies are not active on the Rennkron website. If such a technology is added later, advertising or analytics tracking will not start before the relevant policy and necessary preference\/permission mechanism are implemented.<\/p>\n<\/section>\n<section>\n<h2>Pre-payment information and service documents<\/h2>\n<p>Depending on your invoice preference, individual identity and contact information or company name, tax office and tax number, together with the billing address, are collected. A Turkish identity number is requested for individual invoices for T\u00fcrkiye. This information is stored on the server with the order.<\/p>\n<p>For signed-in users, pre-payment form information can be restored for 30 minutes from a temporary server record linked to the account so that the purchase can be continued. This draft is not a new browser cookie or a localStorage\/sessionStorage record; it is cleared when an order is created or the user signs out.<\/p>\n<p data-clause=\"hotel-booking-confirmation\">For a hotel booking within this offering, confirmation is immediate once successful payment has been verified and inventory for the relevant nights has been atomically committed. Order and booking documents are generated automatically; the customer does not wait for manual hotel confirmation. The document is available only to the relevant account and does not replace a tax invoice. No definitive booking confirmation is given while payment is uncertain or inventory has not been committed. Personal data in the documents remains subject to the existing order retention and deletion rules.<\/p>\n<\/section>\n<section>\n<h2>Retention and security<\/h2>\n<p>Information is retained only for as long as necessary, taking into account the processing purpose, service relationship, statutory retention obligations and potential dispute periods. Rennkron applies appropriate technical and organisational measures; however, no internet service can offer an absolute security guarantee.<\/p>\n<\/section>\n<section>\n<h2>Your preferences and contact<\/h2>\n<p>In the Privacy section of your account, you can export account data, reset optional preferences and initiate a verified account deletion request. Privacy questions may be addressed to destek@rennkron.com.<\/p>\n<\/section>\n<section>\n<h2>Mobile apps and personal data<\/h2>\n<p>RENNKRON is operated by LEONA TRAVEL TUR\u0130ZM T\u0130CARET L\u0130M\u0130TED \u015e\u0130RKET\u0130. Privacy and deletion contact: destek@rennkron.com. This policy covers the RENNKRON website, mobile apps and RENNKRON services accessed through those apps. The services are intended for adults aged 18 and over.<\/p>\n<p>Installation and device identifiers, app version, language, time zone and session records may be processed to manage account and device access, maintain security and troubleshoot technical issues.<\/p>\n<p>Account use involves names, email addresses, user identifiers, verification\/session information and, where provided, phone, country, language and preferences. Saved races, follows, search queries, service enquiries and cart data support requested features. Billing\/service flows may involve addresses, guest details and applicable national\/tax identifiers. Card details are not entered in RENNKRON\u2019s native app screens. Enabled web payments take place on the \u0130\u015fbank\/Payten payment page; information entered there is processed by the relevant payment provider.<\/p>\n<p>Optional voice search in the native Android app uses supported on-device recognition with no remote-recognition fallback in that native flow. Recognized text may be submitted to RENNKRON search; audio and search text are distinct. Security processing can include IP addresses and inferred city\/country, rather than GPS location.<\/p>\n<p>Voice search on the web works only if your browser can recognize the selected language on your device. Audio stays on your device during recognition. If the language or feature is unavailable, you can type your search. The text of a typed or spoken query may be sent to RENNKRON to retrieve search results.<\/p>\n<p data-clause=\"providers\">Hosting: Hetzner Online GmbH; technical server administration: SpinupWP. Transactional email is sent through Google SMTP, which processes the email address and message content needed for the transaction. Information entered on the \u0130\u015fbank\/Payten hosted payment page for enabled web payments is processed by the relevant payment provider. Google Maps accommodation links opened by the user lead to an external mapping service. Wordfence\/Defiant may process security events and Extendify the administration metadata described above. External social-profile links are available. A provider\u2019s role does not mean that all data are processed in the same country.<\/p>\n<\/section>\n<section>\n<h2>Retention and account deletion<\/h2>\n<p>You can request account deletion in the app privacy area, at https:\/\/rennkron.com\/en\/account-deletion-request\/ or by emailing destek@rennkron.com without reinstalling the app. The Leona Travel support team is responsible and reviews requests daily. Valid, identity-verified account deletion requests are completed within 14 calendar days of verification, and the user is notified by email. Mandatory financial and commercial retention exceptions are preserved; their scope, grounds and applicable periods are explained separately. The original receipt date is tracked; verification does not restart statutory response deadlines.<\/p>\n<p>General support correspondence that contains no order, invoice, contract, dispute or mandatory legal record is retained for 12 calendar months after the support case is closed and is then appropriately deleted. The period does not begin when the message is sent or received. Records covered by exceptions are assessed separately, limited to the necessary fields and applicable legal periods.<\/p>\n<p data-clause=\"backup-retention\">Rennkron\u2019s production backups are encrypted and stored separately in Hetzner\u2019s Falkenstein region in Germany. Daily full backups retain 14 daily, 8 weekly and 3 monthly recovery points. Five-minute financial database backups retain the points from the last 48 hours, plus 14 daily and 8 weekly recovery points. Certain initial copies reserved for restore verification are excluded from automatic rotation and are subject to a separate retention and deletion assessment. Deleting data from a live account does not erase all backups at the same time. Records that must legally be preserved are retained only for the relevant obligation and necessary period. This backup information does not mean that all copies held by former providers or made during migration have been deleted or follow the same schedule.<\/p>\n<p>Recording a request and ending sessions do not mean that account deletion is complete. The Leona Travel support team manually fulfils the verified request by deleting the account and associated personal data that must be erased. The completion email states what was done, the completion date and, where applicable, the scope, reason and applicable retention period for records that must be retained.<\/p>\n<\/section>\n<section data-clause=\"ios_scope\">\n<h2>Rennkron website and iOS app<\/h2>\n<p>This policy covers the Rennkron website and RENNKRON iOS app operated by LEONA TRAVEL TUR\u0130ZM T\u0130CARET L\u0130M\u0130TED \u015e\u0130RKET\u0130, including Rennkron account, support, accommodation and reservation pages opened from the app. Independent third-party services that you open from the app also have their own privacy notices.<\/p>\n<\/section>\n<section data-clause=\"ios_account_local_storage\">\n<h2>Account, session and on-device data<\/h2>\n<p>The app processes account and session identifiers so you can sign in, remain signed in and synchronise race preferences and calendar items with your account. Language and display preferences and some data required for the app to work are stored on your device; the local database is encrypted. On-device storage is separate from account and synchronisation data sent to the server. Uninstalling the app does not delete your server-side account or transaction records retained by law.<\/p>\n<\/section>\n<section data-clause=\"ios_search_audio\">\n<h2>Search and audio<\/h2>\n<p>Race search in the iOS app operates on the on-device catalogue. Some searches on Rennkron web pages opened from the app may send the search text to the server in the page address; these requests may appear in technical security logs together with the IP address. Native voice search is not enabled in the current iOS app. Voice search on the Rennkron web page starts only when on-device processing is supported; it does not switch to remote audio processing.<\/p>\n<\/section>\n<section data-clause=\"ios_hosted_payment\">\n<h2>Service and payment pages opened from the app<\/h2>\n<p>Account, accommodation and reservation pages process the identity, contact, guest and billing details needed for the service you select. When web payments are available, the order number, amount and currency are sent to the payment service. In flows using billing prefill, the name or invoice title, email, phone and billing address you provide are also sent. The card number, expiry date and card security code are processed for card payment on the bank payment page using Payten\/NestPay infrastructure; the card issuer performs 3-D Secure authentication. Rennkron processes orders and transaction results, amounts, currency and transaction references to provide the service, secure transactions and meet financial record-keeping obligations. This does not mean that the payment provider never stores card information or only processes all data transiently. Disabling native paid transactions does not exclude these app-opened web flows or existing transaction records from this policy.<\/p>\n<\/section>\n<section data-clause=\"ios_security_scope\">\n<h2>Security of iOS connections<\/h2>\n<p>Connections from the app to Rennkron servers are also subject to the hosting and security processing described for the website. The security-event scope described for Wordfence also covers relevant events arising from these connections. Approximate city or country information derived from an IP address is not GPS location. A local security-log retention period must not be interpreted as the provider\u2019s remote retention period.<\/p>\n<\/section>\n<section data-clause=\"payment-return-storage\">\n<h2>Payment returns and records<\/h2>\n<p>Card expiry month\/year and masked card fields included in a bank return may be processed transiently to verify the payment notification signature. Rennkron payment code does not copy these fields into the order payment result or durable verification receipt; full card numbers and security codes are not accepted payment-return fields. Orders and payment method\/provider, amount, currency, transaction reference, result and verification evidence are retained linked to the account for transaction security, reconciliation and financial records. The code does not set one deletion deadline for all financial evidence; applicable legal and operational retention requirements are assessed separately. The security-event scope and backup retention schedule above also apply to these records. This is not a guarantee that the bank or security provider never retains data.<\/p>\n<\/section>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Rennkron Privacy Policy Text version: privacy-mobile-20261107-r4-legal-delta1 This Privacy Policy explains the general approach to privacy when using the Rennkron website and mobile apps. Detailed information about the controller, purposes, legal grounds and rights relating to the processing of personal data is provided in the KVKK Privacy Notice. Read the KVKK Privacy Notice. What categories of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_zipai_imported":false,"footnotes":""},"class_list":["post-3808","page","type-page","status-publish","hentry"],"acf":[],"spectra_blocks_featured_image_url":null,"spectra_blocks_author_info":{"display_name":"admin","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/d9e401628a811f8137ea41ca1aa6f8a3c53737f7f8ff20b99dd866dfed2d7fb6?s=96&d=mm&r=g","author_link":"https:\/\/rennkron.com\/en\/author\/admin\/","description":""},"_links":{"self":[{"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/pages\/3808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/comments?post=3808"}],"version-history":[{"count":1,"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/pages\/3808\/revisions"}],"predecessor-version":[{"id":3809,"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/pages\/3808\/revisions\/3809"}],"wp:attachment":[{"href":"https:\/\/rennkron.com\/en\/wp-json\/wp\/v2\/media?parent=3808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}