Privacy Policy

We, the operators of railassetrent.com, take the protection of your personal data very seriously. We process personal data confidentially and exclusively in accordance with the applicable data protection legislation, in particular the General Data Protection Regulation (GDPR).

This Privacy Policy explains what personal data is processed when you visit our website and use our services, the purposes for which such processing takes place, and the rights available to you.

Controller

The controller responsible for the processing of personal data on this website is the provider named in the Legal Notice. Full contact details can be found there.

Definitions

This Privacy Policy uses the terminology of the GDPR. “Personal data” means any information relating to an identified or identifiable natural person. “Processing” means any operation performed in connection with personal data, such as its collection, storage, use, transmission or deletion. The “controller” is the natural or legal person who determines the purposes and means of the processing.

Data Processing When Visiting This Website

When you access our website, your browser automatically transmits certain information to our website server. This data is temporarily stored in server log files. In particular, the following data may be processed:

browser type and browser version,
operating system used,
previously visited website (referrer URL),
pages and files accessed,
date and time of access,
IP address,
internet service provider, and
comparable data required for the technical provision and security of the website.

The data is processed in order to provide the website technically, ensure its stability and security, and detect and defend against attacks on our information technology systems. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and user-friendly operation of our website.

Server log files are stored only for as long as necessary for the purposes stated above. Longer storage will only take place where required to investigate a security-related incident or to comply with legal obligations.

Contacting Us

If you contact us by email, telephone or by other means, we process the information you provide in order to deal with your enquiry and any follow-up questions. The scope and nature of the data processed depend on the information you provide.

Where your enquiry relates to a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in handling your enquiry appropriately pursuant to Art. 6(1)(f) GDPR. Where we expressly request your consent, Art. 6(1)(a) GDPR serves as the legal basis.

The data will be deleted once your enquiry has been fully dealt with and provided that there are no statutory retention obligations or other legitimate reasons requiring further storage.

Contact Form

If you send us an enquiry via the contact form, we process the data you enter, including your contact details, in order to deal with your enquiry and answer any follow-up questions. Mandatory fields are marked accordingly; all other information is provided voluntarily.

Where your enquiry relates to a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in handling your enquiry efficiently pursuant to Art. 6(1)(f) GDPR. Where consent is obtained in an individual case, processing is based on Art. 6(1)(a) GDPR.

The data submitted via the contact form will be deleted once your enquiry has been fully dealt with and provided that there are no statutory retention obligations or other legitimate reasons requiring further storage.

Cookies and Consent Management

Our website uses cookies and similar technologies. Cookies are small text files stored on your device. Some cookies are technically necessary to ensure the proper functioning of the website. Other cookies and services are used only if you have given your prior consent.

Technically necessary cookies are used on the basis of our legitimate interest in operating a secure and functional website pursuant to Art. 6(1)(f) GDPR. Where consent is required, processing is based on Art. 6(1)(a) GDPR. You may withdraw or change your consent at any time with effect for the future via the cookie settings.

We use Borlabs Cookie to manage and document your consent. A technically necessary cookie containing your selected preferences is stored for this purpose. Further information about the cookies and services used, their storage periods and their providers can be found in the cookie settings.

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand how visitors use our website and enables us to improve its content and user experience.

Google Analytics processes, among other things, information about pages viewed, duration of use, approximate location, browser and device information, and interactions with our website. Cookies or similar technologies may be used for this purpose. Google Analytics uses IP addresses during data collection to determine approximate location information. According to Google, IP addresses are discarded before the data is logged in a data centre or on a server.

Google Analytics is loaded only after you have given your explicit consent. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings. When using Google services, the transfer of data to affiliated companies or servers outside the European Economic Area cannot be excluded. Any such transfer will take place in accordance with Art. 44 et seq. GDPR.

The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings. Further information can be found in the Google Privacy Policy and the Google Maps Terms of Service.

Google Maps

Google Maps may be integrated into this website to display maps and locations. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Maps is loaded only after you have given your explicit consent. When the map is loaded, your IP address, browser and device information, and information about the page accessed may in particular be transmitted to Google. If you are logged into a Google account, Google may associate this data with your account. When using Google services, the transfer of data to affiliated companies or servers outside the European Economic Area cannot be excluded.

Adobe Fonts

This website uses Adobe Fonts to ensure the consistent display of fonts. The provider is Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (“Adobe”).

To load the fonts, your browser establishes a connection to Adobe servers. For technical reasons, Adobe receives your IP address in order to deliver the font files. According to Adobe, the IP address is not stored. Adobe may also process technical information relating to the provision of the fonts, including the fonts delivered, the web project ID, the type of integration and the hostname of the website being accessed.

Adobe Fonts is loaded only after you have given your explicit consent. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings. When using Adobe services, the transfer of data to affiliated companies or servers outside the European Economic Area cannot be excluded. Any such transfer will take place in accordance with Art. 44 et seq. GDPR.

Further information can be found in the Adobe Fonts Privacy Information and the Adobe Privacy Policy.

Data Protection for Job Applications

If you apply for a position with us, we process the personal data you submit exclusively for the purpose of carrying out the recruitment process. This may include, in particular, contact details, your CV, references and other application documents. The legal basis is Art. 6(1)(b) GDPR in conjunction with the applicable provisions of employment law.

If an employment relationship is established, the data required for this purpose will continue to be processed for the performance of the employment relationship. Otherwise, application data will be deleted after the recruitment process has been completed, provided that there are no statutory retention obligations or legitimate interests – for example, for the defence against or assertion of legal claims – requiring further storage.

Embedded Content from External Providers

Individual pages may contain embedded content from external providers, such as videos, maps or platform widgets. When such content is loaded, the respective provider may in particular receive your IP address, browser and device information, and information about the page accessed. External content that is not technically necessary is loaded only after you have given your consent. The legal basis is Art. 6(1)(a) GDPR.

Further information about the specific services used can be found in the cookie settings and, where required, in separate sections of this Privacy Policy.

Recipients of Personal Data

We disclose personal data only where this is legally permitted or required. Recipients may include, in particular, hosting, IT and communications service providers engaged by us and – subject to your consent – providers of analytics, maps, fonts or other external services. Where service providers process data on our behalf, they are contractually bound in accordance with the applicable legal requirements.

Data Transfers to Third Countries

Some of the service providers used on this website may process personal data in countries outside the European Union or the European Economic Area. Where no adequacy decision by the European Commission exists for the country concerned, data will be transferred only on the basis of appropriate safeguards or another legal basis in accordance with Art. 44 et seq. GDPR.

Storage Period

We store personal data only for as long as necessary for the respective purpose of processing. The data will then be deleted unless statutory retention obligations, legitimate interests or other legal grounds require further storage.

Provision of Personal Data

The provision of personal data may be required by law or contract or may be necessary for entering into a contract. Without the required information, we may be unable to process an enquiry, take pre-contractual measures or enter into a contract. Any provision of personal data beyond this is voluntary.

Your Rights

Subject to the applicable legal requirements, you have the following rights in particular:

Access: You may request information about the personal data we process concerning you (Art. 15 GDPR).
Rectification: You may request the correction of inaccurate data and the completion of incomplete data (Art. 16 GDPR).
Erasure: You may request the deletion of your personal data provided that there are no legal grounds requiring further processing (Art. 17 GDPR).
Restriction: Under certain circumstances, you may request the restriction of processing (Art. 18 GDPR).
Data portability: You may receive data that you have provided to us and that is processed by automated means on the basis of consent or a contract in a structured, commonly used and machine-readable format, or – where technically feasible – have such data transmitted to another controller (Art. 20 GDPR).
Objection: You may object, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).
Withdrawal of consent: You may withdraw consent that you have given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

To exercise your rights, you may contact the controller identified in the Legal Notice.

Objection to Direct Marketing

Where personal data is processed for direct marketing purposes, you may object to such processing at any time. Following your objection, your personal data will no longer be processed for these purposes.

Automated Decision-Making

No decision-making based solely on automated processing, including profiling within the meaning of Art. 22 GDPR, takes place.

Data Security

We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other risks. Data transmitted between your browser and our website is encrypted.

Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, our website or the services we use change. The current version published on this website shall apply.

Last updated: September 2026

INQUIRY