Privacy
Last updated: 25 October 2026
The Hillward GmbH privacy policy applies to Hillward Rent. It names the controller, legal bases, your rights and the services used (including hosting at Netlify, database at Supabase in Frankfurt, email delivery via Resend, mailbox at Google Workspace). In addition, the following applies to Hillward Rent (translation; the German version prevails):
Hillward GmbH privacy policy ↗No cookies, no tracking
Hillward Rent does not use cookies or similar technologies for analytics or advertising and does not embed third-party content in your browser. Fonts are loaded from our own server. That is why there is no cookie banner here.
Request form
We process the details from the form (contact, company, production, location, delivery address, on-site contact, period, equipment list, files, notes) to check availability, send you a quote and carry out the order (Art. 6 (1)(b) GDPR).
To prevent misuse, we store an irreversible hash of your IP address with requests and uploads, not the IP address itself (Art. 6 (1)(f) GDPR). Uploaded files that are not sent with a request are deleted automatically after 48 hours.
Address suggestions
While you type the delivery address, we suggest matching addresses. For this, our server sends the typed text and the selected location to Google Places (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address and other form data are not sent to Google. If Google is unavailable, we use Photon by komoot GmbH, Potsdam, Germany, with OpenStreetMap data. The suggestions are optional (Art. 6 (1)(b) and (f) GDPR). A transfer to Google LLC in the USA cannot be ruled out; it is based on the EU-US Data Privacy Framework.
Payment
If you pay via a payment link, we redirect you to SumUp (SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, D02 K580, Ireland). SumUp processes payment data such as card numbers itself and under its own responsibility; we only receive the amount, payment status and a reference. We pass the request number, the payment description and the amount to SumUp (Art. 6 (1)(b) GDPR). A transfer to countries outside the EEA, for example to SumUp companies in the United Kingdom, is possible; according to SumUp, it is safeguarded by contractual agreements. Details: sumup.com/en-ie/privacy.
Feedback form
If you give us feedback via rent.hillward.de/feedback, we store your answers (ratings, comments, role, company, production and, if provided, your first name). If you come via a link from us, we assign the answers to your request. We use them to improve our service and to follow up on criticism (Art. 6 (1)(f) GDPR). To prevent misuse, here too we only store a hash of your IP address.
We only quote your feedback as a reference if you allow it in the form, and only in the way you choose there (with name and company or anonymously, Art. 6 (1)(a) GDPR). You can withdraw your consent at any time by email.
Sharing with partner rental houses
We rent the equipment from partner rental houses at the shooting location. For quotes and availability checks we share the equipment, period, location and delivery address, but not who is asking. To carry out an order, the partner rental house also receives the on-site contact as far as needed for delivery, collection or handover (Art. 6 (1)(b) GDPR).
Retention
We keep order data as long as statutory retention obligations require (usually six years for business correspondence and ten years for accounting records, section 257 HGB, section 147 AO). Requests that do not lead to an order are deleted once we no longer need them, at the latest three years after the last contact, unless a retention obligation applies.
Questions and rights
For access, rectification, erasure and your other rights, write to hello@hillward.de. The competent supervisory authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

