General We would like to inform you, that at “OMIO RENTACAR”, we respect your privacy and are committed to protecting your personal data. In the following, we would like to inform you about the types of data processed and for which purpose, as well as the way we safeguard such information. Furthermore, we would like to inform you about the important legal aspects of data protection, such as your rights.
Processing of personal data All processed data has been provided willingly by you, giving your full consent. We process your identity, communication, contract and financial data. Furthermore, we use the identity and communication data for customer relations in order to handle any complaints, changes or reservations and in the purpose of settling accounts in the sales processing. Our Company is also legally obliged to compare your data with official perpetrator lists, for purposes of prevention or investigation of crimes. Once all obligations of rental have been fulfilled, your personal information is stored until the statutory retention period expires.
Legal basis for processing The processing of your data is carried out in accordance with: a) the terms of our contractual relationship, b) your consent, where required; c) the obligations of the Company arising from the law (e.g.tax, labor and insurance legislation etc.) d) damages resulting from accidents e) for purposes of complaints management, providing customer services in case of damage etc. f) the legitimate interest of our Company.
Categories of information collected We obtain the right to collect, store, process and forward, when necessary, the following types of personal information.
Identity data include full name (trade name for sole proprietorships), parents’ names, date of birth, identity card (number, date of issue/expiry and place of issue), or passport (number, date of issue/expiry and place of issue), residence permit, valid driver’s license (number, date of issue/expiry and place of issue),
Creation of Account – Data you register as a user on the Company’s website, such as e-mail address, password, full name. phone number etc.
Contact information include home address, phone number and e-mail.
Financial data include taxpayer ID, bank account, payment card details, indication of VAT exemption, activity (sole proprietorship), tax office and headquarters (for sole proprietorship),
Contract data, include rental information (vehicle category, pick-up and return dates etc), in the event of an accident or damage to the vehicle, we process data relating to the respective course of events. These data may be provided by customers, passengers etc and may include health-related data.
Cookies, Our website uses “cookies”, in the purpose of offering our customers the best possible services. Cookies are small text files that are copied from a web server onto your hard disk. They contain information that can later be read by a web server but cannot execute any programs or infect your software. The cookies do not contain personal data.
Storage duration We retain your personal data only for as long as it is necessary to fulfill the purposed for which they were collected, as described herein or in the general contractual documents between us, provided that your consent has been granted. Commercial and tax data are stored for a period of ten (10) years from the day of issue of the respective document. Data related to the establishment, practice and support pf legal claims of the Company or third party are kept for a period of twenty (20) years from the birth date of the person and as even more, if it is required, until the statute of limitations or end of possible legal claims.
Recipients of the data Our Company guarantees that it will not share your data with others, except those listed in this document. Therefore, for the purposes described in the foregoing we disclose your data to the following recipients: insurance agencies, lawyers, public authorities, experts and assistance service providers.
You have the right to:
To withdraw at any time your consent to the processing of your data.
Request access to your personal data, enabling you to receive a copy of the data under storage, in accordance with Art. 15 GDPR.
You may request the rectification of inaccurate personal data concerning you, in accordance with Art. 16 GDPR.
You may demand the erasure of personal data concerning you, in accordance with Art. 17 GDPR. Our Company is obliged to erase any personal data in these circumstances.
Moreover under certain circumstances and in accordance with Art. 18 GDPR, you have the right to restrict the processing of your data and we refrain from using it, until the issue has been resolved.
Request the transfer of your personal data to you or a third party, in accordance with Art. 20 GDPR.
To lodge complaints with the supervisory authorities according to Art. 77 GDPR.
Modifications to the present policy We reserve the right to modify the present policy and effect any changes in the above. We encourage you to read regularly this Policy for any updates and to confirm that your data is protected.