Privacy policy / personal data

Data protection declaration in accordance with Articles 13 and 14 of the DPMR

We hereby inform you of the type of personal data processed by HERMITAGE CAR RENTAL and the purposes of this processing. In addition, we inform you of other important details from the point of view of data protection, such as your rights.

 

Personal data category

 In the context of our services, we may process the following categories of personal data:

  • Standing data : This includes, for example, first name, surname, address (private and/or professional), date of birth.
  • Contact data: This includes, for example, telephone number, e-mail address (private and/or business), possibly fax number, communication contents (e.g. e-mails, letters, faxes).
  • Contractual data: This includes, for example, rental information (vehicle category, pick-up and return date, pick-up and return agency, reserved services and supplements), rental contract number, reservation number, driver's license data, photo of the driver's license, license plate of the vehicle you have reserved and information on loyalty and partnership programs.
  • Financial data such as credit card data.
  • Optional data: This includes optional data that you provide us without our request, such as your wishes regarding vehicle equipment or your preferences regarding vehicle category.
  • Special data categories: In the event of an accident, vehicle damage or similar incidents, we process the information relating to the circumstances of the claim and the report. This information may be provided by customers, passengers or injured parties. In these cases, data relating to the state of health, such as injuries, blood alcohol level or driving under the influence of drugs may also be processed.
  • Third Party Data: We also process personal data about a third party (e.g. family members, secondary drivers, passengers) that you may provide to us in the course of your contractual relationship.

 

 

Purposes of processing

We process your permanent data, contact data, contract data, financial data and any optional information for the purpose of booking and concluding and executing the rental contract.

In addition, we use permanent data, contact data and contract data for customer service purposes if you need to contact us, for example in the event of complaints or transfers.

If you book your vehicle through a travel agency, an online travel agency or any other intermediary, our partners will send us your permanent data, contact data, booking information and, if applicable, your financial data.

In addition, we use your permanent data and contract data for the purpose of commission billing and business management, for example with travel agencies, partner agencies or franchises. We also pass on your data to partner companies if the desired vehicle or type of vehicle is not available from us.

In addition, we are obliged to compare your master and contact data with a predetermined official list of offenders for the purpose of preventing and clarifying criminal investigations. This comparison enables us to prevent risks and to initiate criminal proceedings at the same time.

We also use your data to ensure your and our security, for example to avoid payment defaults and to prevent damage to property, including fraud, theft and embezzlement). In the event that you wish to rent against invoice, we process your permanent and financial data to check your creditworthiness by obtaining information from credit agencies.

After the reciprocal execution of the rental agreement, your permanent, financial and contractual data will remain stored until the expiry of the legal retention periods.

Legal grounds for processing operations for the abovementioned purposes

Article 6(1), subparagraph 1(b) of the GDMP applicable to the processing of data for the purposes of reservations, the conclusion and performance of rental contracts and customer service.

Article 6(1), subparagraph 1(f) of the GDMP applicable to the processing of data for the purpose of invoicing a third party, for the purpose of enforcing one's own rights and for the prevention of risks and fraud.

Article 6(1), subparagraph 1(c) of the RGPD applicable to the processing of data for the purpose of the detection, prevention and suppression of criminal offences, the verification and recording of driving licence data and the fiscal and commercial retention obligation.

Legitimate interest if data processing is based on Article 6(1)(f) of the GPR

Our legitimate interest in using your personal data in order to improve our services and our customer service is to offer you the best possible services and to increase customer satisfaction in the long term.

With regard to the processing of data in order to prevent damage to our company or our vehicles by means of appropriate analyses, our legitimate interest is to guarantee costs and avoid economic damage, for example in the event of non-payment or loss of our vehicles.