EUROPCAR Privacy Policy

Privacy policy

Preamble

This privacy policy is composed of 2 parts:

-        one for processing activities performed by the parent company, Europcar International S.A.S.U.

-        one for processing activities performed by the franchisee

Europcar® is the European leader of car rental and light commercial vehicle rental and operates in over 140 countries, via fully owned subsidiaries as well as franchisees and agents. A Europcar branded vehicle hire station can be operated by a company member of Europcar Mobility Group or by one of our franchisee (i.e. a separate legal entity from the Group).

When renting a car at Europcar, your Personal Data would be processed by Europcar International S.A.S.U. in particular for management of your online account and booking and by our franchisee, which deliver the service locally.

Part 1 - Processing activities performed by Europcar International S.A.S.U

As the parent company of Europcar Mobility Group, Europcar International S.A.S.U. whose registered office is at 13 ter Boulevard Berthier, 75017, Paris (hereinafter referred to as “we”, “us” or “our(s)”) is the "Data Controller" of your Personal Data collected and processed via this website and our mobile applications for the purposes defined below.

When you communicate your Personal Data to us or when we collect Personal Data about you, we undertake to use it in accordance with this information notice.

1. What Personal Data do we collect about you?

As Europcar Mobility Group parent company, Europcar International S.A.S.U. collects and processes various categories of Personal Data in connection with this website and our mobile applications in order to allow you to benefit from the products and services provided by our franchisees.

By Personal Data, we mean not only data that identifies you directly, but also data that identifies you indirectly like your Driver ID or the Vehicle Identification Number (VIN) attached to your rental vehicle.

The categories of Personal Data that we collect include the following:

-Your identification data: surname, first name, email address, telephone number, postal address, date of birth, account identifier

-If applicable, identification data of additional driver(s): surname, first name, email address, telephone number, postal address

-Your driver's licence and that of any additional driver(s);

-Payment data: account numbers, card numbers etc;

-Information on your vehicle reservation, in particular for the management of any loyalty programs;

-Data relating to your navigation on our website or our mobile applications;

-Data relating to your satisfaction surveys.

2. For what purposes do we process your Personal Data?

We collect and process your Personal Data for various purposes and on the following legal bases:

 3. Who are the recipients of your Personal Data?

3.1. Categories of recipients

Your personal data may be communicated to our employees, our authorized representatives, other companies within our Group and our franchisee network, our agents and intermediaries mandated to provide you with our products and services and if necessary :

a. to the relevant franchisee that delivers your service, in particular for the purposes described below (see Part 2);

b. to our subcontractors, in particular our IT service providers for hosting, maintenance or development purposes, who assist us in providing you with our products and services. These may be entities that are members of our Group or external service providers;

c. marketing agencies to help us collect and analyse your customer satisfaction;

d. to our partners or those of our Group, in particular to enable you to collect loyalty points when you are a member of their program. The list of our partners is available online here.

We may also disclose your personal data in accordance with applicable laws and regulations to the relevant authorities.

3.2. International transfers

In order to provide you with our products and services, we may use service providers located outside the European Union. In the event that the vehicle is booked abroad, data transfers will be carried out in the country in question in order to provide you with our mobility solutions.

Depending on the assumptions, some recipients may be located in countries recognized by the European Commission as providing an adequate level of protection of personal data or in countries that have not been recognized by the European Commission as providing such a level of protection. In any case, we have implemented appropriate protection measures to protect your personal data in accordance with data protection regulations.

4. How long do we keep your Personal Data?

Your personal data are kept for different periods of time, depending on the purposes of the processing concerned:

5. What rights can you exercise regarding the processing of your Personal Data?

Within the limits and conditions allowed by the regulations in force, you can:

- access to your Personal Data and obtain further information on the characteristics of the processing we carry out;

- have your Personal Data corrected, updated and deleted, it being specified that deletion can only be carried out when (i) the data is no longer necessary in relation to the purposes for which it was processed, (ii) you withdraw your consent and there is no other legal basis for the processing, (iii) you object to the processing of your personal data and there is no compelling legitimate reason for the processing (iv) it has been established that your personal data has been processed unlawfully, (v) the personal data must be deleted in order to comply with one of our legal obligations

- you object to the processing of your Personal Data based on legitimate interest, which you can check by taking a look the table shown in the part “For what purposes do we process your Personal Data” and in particular the column “Legal basis of the processing”

- you object to the processing of your Personal Data for commercial prospecting purposes

- receive the personal data you have provided us with or request us to pass them on to a third party when the processing of your personal data (i) has been carried out by automated means and (ii) is based on your consent or on the execution of a contract binding us

- request the limitation of the processing of your Personal Data, which means that we will not be able to use your Personal Data for a defined period of time. You can exercise this right when:

a) you dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of your personal data;

b) the processing of personal data is unlawful and you object to the deletion of your personal data and instead demand that its use be restricted;

c) we no longer need your Personal Data but they are still required for the establishment, exercise or defence of legal claims;

d) you object to the processing for reasons relating to your particular situation, while we are checking whether the legitimate reasons pursued by us take precedence over your own.

- withdrawing your consent to treatment based on your consent

- submit a complaint to a Supervisory Authority. In France, you can contact the Commission nationale de l'informatique et des libertés (CNIL) at cnil.fr.

6. How do you exercise your rights?

If you would like to know more about the provisions of this information notice or to contact our Data Protection Officer, you can also write to us at the following address : 13 ter Boulevard Berthier, 75017, Paris , or by e-mail to: dpo@europcar.com

To exercise your rights, you must prove your identity by clearly indicating your surname, first names, driver ID and any useful information enabling us to identify you (such as the place and date of your last vehicle rental). You must also give us the e-mail address or the physical address to which you would like the reply to be sent to you.

7. How do we protect your Personal Data?

Europcar International S.A.S.U is committed to protecting the information it collects through our website and mobile applications. In particular, Europcar International S.A.S.U uses appropriate physical, technical and organizational security measures to prevent unauthorized or unlawful processing, accidental loss of or destruction of or damage to your personal data.

8. What rules apply to the processing of your Personal Data when you click on links placed on our website, redirecting to our partner's or other sites?

On this site you will find various links to the websites of our partners (e.g. for travel services). We would like to draw your attention to the fact that this information notice does not apply to the processing of your Personal Data by our partners or other third parties, which may occur when you visit their websites, and that we are not responsible for such data processing. If you would like information on how these partners and third parties process your personal data, we invite you to consult their Privacy Policies.

9. Changes to this information notice

This information notice regarding the Processing Activities performed by Europcar International was last updated on 21.12.2021

Part 2 - Processing Activities performed by the franchisee

When delivering your Services, the franchisee collects and processes your Personal Data.
See more info here.