The personal data provided to CarPin are processed in an automated manner and used for the confirmation and execution of the car rental contract and compliance with legal obligations. They may also be used for sending marketing campaigns, promotions, and discounts related to our services, always based on the prior consent of the data subject.
Proteção de Dados
1-Use of Personal Data
2- Responsibility for Data Processing
CarPin is responsible for the processing of the personal data collected, ensuring its proper handling from the moment of collection until its deletion, in accordance with the legal obligations established by the current personal data protection legislation.
3- Collected Data
4- Purpose of Data Processing
The personal data provided are used exclusively for the purposes mentioned and, in some cases, may be shared with partner service providers, particularly in the case of sub-rentals. The provision of personal data is essential for the preparation of the rental contract. If the necessary data is not provided, it will not be possible to proceed with the rental process.
5 - Subcontracting of Data Processing
CarPin may use subcontracted entities for the processing of personal data, particularly for sending marketing campaigns, promotions, and discounts. In such cases, CarPin ensures that these entities provide sufficient guarantees of implementing appropriate technical and organizational measures to ensure that the processing is in compliance with the applicable legal requirements and protects the rights of the data subject.
6 - Retention of Personal Data
7- Rights of the Data Subject"
“The data subject has the right to request access, rectification, erasure, restriction of processing, objection to processing, and data portability. To exercise these rights, you can contact us via email at: geral@carpinrent.com.”
8 - Legal Basis for Data Processing"
“Under Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), the lessor provides the following information:
a) The entity responsible for processing the personal data provided under the contract is the lessor CarPin, headquartered in Portugal, with contact via email at geral@carpinrent.com;
b) The processing of personal data is for the purpose of entering into and executing this contract, pursuant to point (b) of paragraph 1 of Article 6 of the GDPR;
c) Personal data may be transmitted to third parties in order to ensure compliance with any legal obligations to which the lessor is subject, in accordance with point (c) of paragraph 1 of Article 6 of the GDPR, including judicial authorities, criminal police authorities, tax and customs authorities, and regulatory entities;
d) Personal data may be processed for other purposes for which the data subject has given explicit consent to the lessor.”
9- Security Measures"
“CarPin is committed to protecting the information it collects through our website. In particular, CarPin uses appropriate physical, technical, and organizational security measures to prevent unauthorized or unlawful processing, accidental loss, destruction, or damage to your personal data.”
10. Cookies
“Our website uses ‘cookies.’ Cookies are small text files that are copied from a web server to your hard drive. These files contain information that can later be read by a web server in the domain where the cookie was assigned to you. Cookies do not run programs or infect your computer with viruses. The files we use do not contain personal data, nor are they linked to such data.”
11- Data Retention Policy"
-
3 years from the end of the contractual relationship or until the confirmation of the deletion of your account, if requested.
-
5 years from the end of the rental.
-
If the user is a CarPin customer, 3 years from the end of the commercial relationship.
-
If the user is not a CarPin customer, 3 years from the collection of their personal data OR from the last time they requested information from us.
-
12 months from the collection of data.
-
During the period of enrollment in any loyalty programs and up to 4 years after the expiration of your loyalty points.
-
3 years from your last commercial contact with us.
12 - Right to Withdraw Consent"
“At any time, the data subject has the right to access their personal data, as well as, within the limits of the contract and the GDPR, to modify them, object to their processing, decide on automated processing, withdraw consent, request the deletion of data, and exercise other rights provided under applicable law (except for data that is necessary for the execution of the contract, and therefore must be provided, as well as for compliance with legal obligations to which the lessor is subject). If you withdraw your consent, this will not affect the lawfulness of the processing carried out up to that point.”
13 - Complaints to the Supervisory Authority"
“The data subject has the right to lodge complaints with the Data Protection Supervisory Authority, such as the National Data Protection Commission (CNPD), in the event of a violation of rights.”
14- Updates to the Privacy Policy"
“The privacy policy may be periodically updated, and changes will be communicated through the website or other appropriate communication channels.”
15- Contact for Privacy Issues"
“If, at any time, you wish to access, rectify, delete, erase, object to the processing, or request the portability of your personal data, you can do so via email at geral@carpinrent.com or, if applicable, by sending a letter to the address provided on CarPin’s website.”