Privacy Policy

1. Controller

The controller of personal data is:

The controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 18/2018 Coll. on the Protection of Personal Data, and other generally binding legal regulations of the Slovak Republic.

2. What personal data we process

Depending on the purpose of processing, we may process in particular:

• first name and surname,
• phone number,
• email address,
• residential or correspondence address,
• data provided in the reservation form,
• a copy of the identity card,
• a copy of the driving licence,
• data necessary for concluding and performing the rental agreement,
• technical data about the website visit (IP address, device type, browser, etc.),
• data processed via Google Analytics after consent is given,
• vehicle location data from the GPS Dozor system for the duration of the rental.

3. Purposes of processing

We process personal data primarily for the purpose of:

• handling enquiries sent via the contact form,
• creating and managing a non-binding vehicle reservation,
• preparing, concluding and performing the rental agreement,
• verifying the customer's identity and driving authorisation,
• issuing accounting and tax documents,
• protecting the company's property and handling insurance claims,
• handling complaints and asserting legal claims,
• improving the functionality of the website through analytical tools.

4. Legal basis of processing

We process personal data on the basis of:

• performance of a contract or taking steps prior to entering into a contract,
• compliance with legal obligations,
• the legitimate interest of the controller (property protection, GPS location, handling of damage events and legal claims),
• the consent of the data subject where required by law (for example, for analytical cookies).

5. Vehicle reservation

A reservation created via the website is non-binding.

A binding contractual relationship arises only after:

• confirmation of the reservation by the controller, and
• fulfilment of the agreed payment terms under the rental agreement or issued invoice.

6. Identity card and driving licence

When making a reservation or concluding the rental agreement, the customer may be asked to upload their identity card and driving licence.

These documents are processed exclusively for the purpose of:

• verifying identity,
• verifying authorisation to drive a motor vehicle,
• preparing and concluding the rental agreement,
• protecting the legitimate interests of the controller.

Only authorised administrative staff of the company have access to these documents.

7. GPS vehicle location

Rented vehicles are equipped with the GPS Dozor system.

Location data is processed exclusively for the purposes of:

• protecting the company's property,
• locating the vehicle in the event of theft,
• handling insurance claims,
• protecting the legitimate interests of the controller.

GPS data is not used for marketing or customer profiling.

8. Retention period

We retain personal data only for the period necessary to fulfil the purpose for which it was obtained.

• contact form data – no more than 12 months,
• reservation form data – no more than 12 months,
• copies of the identity card and driving licence – no more than 12 months,
• GPS data – no more than 12 months,
• accounting and contractual documents – for the periods laid down by the relevant legal regulations.

9. Recipients of personal data

Personal data may be disclosed only to the extent necessary to:

• the hosting provider,
• the provider of Google Analytics analytical services,
• the provider of the GPS Dozor system,
• the accountant or tax advisor,
• the insurance company when handling insurance claims,
• public authorities where required by law.

10. Data security

The controller has adopted appropriate technical and organisational measures to protect personal data, in particular:

• secure encrypted connection (HTTPS),
• restriction of data access to authorised persons only,
• regular updates of information systems,
• protection of data against loss, misuse or unauthorised access.

11. Rights of the data subject

You have the right:

• to access your personal data,
• to rectify inaccurate data,
• to erase personal data where the conditions of GDPR are met,
• to restrict processing,
• to data portability,
• to object to processing based on legitimate interest,
• to withdraw consent where processing is based on consent,
• to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

12. Contact

If you have questions regarding the protection of personal data or wish to exercise your rights, you can contact us:

This Privacy Policy takes effect on the day it is published on the company's website.