Identification of Operators:
RentalPort.com, a.s.
Drieňová 27, Bratislava - Ružinov 821 01
ID 52 339 530
and
Business Partner chosen by the Customer through Rentalport.com platform to provide the Customer with the Service (Rental of Vehicle, Rental of Accessories, provision of Extra Services) in accordance with the RentalPort.com General Terms and Conditions.
(hereinafter together referred to as "Operators")
Terms of privacy
The Customers personal data protection and other legal persons is important for the Operators. These conditions explain how the Operators process personal data based on the concluded Agreement of Operators on the processing of personal data concluded in accordance with § 33 of Act no. 18/2018 Z.z. on the Protection of Personal Data (hereinafter referred to as the “Act”) when providing the mediation of motor vehicles rental through the website www.rentalport.com. If Customer has any privacy concerns, Customer may contact the Operators by emailing (gdpr@rentalport.com) or by post.
All definitions included in this declaration are governed by the provisions of Law or Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing the Directive 95/46 / ES (General Data Protection Regulation) (hereinafter referred to as "GDPR").
In particular, these definitions are as follows:
"Personal Data" means data relating to an identified legal person or an identifiable legal person that can be identified directly or indirectly, in particular on the basis of a generic identifier, other identifier such as name, surname, identification number, location data, or online identifier; or on the basis of one or more characteristics or traits that constitute its physical identity, physiological identity, genetic identity, psychic identity, mental identity, economic identity, cultural identity or social identity.
Personal data may include, in particular, data relating to the Operator's representatives, employees, project team members and contractors (so-called "data subjects") as well as personal data included in the information systems obtained in connection with the contract.
"Operator" means anyone who, alone or together with others, defines the purpose and means of the processing of personal data and processes personal data in his own name; the controller or specific requirements for its determination may be stipulated in a separate regulation or an international agreement by which the Slovak Republic is bound, if such regulation or this agreement stipulates the purpose and means of processing of personal data.
"Intermediary" means anyone who processes personal data on behalf of the Operator.
"Recipient" means anyone to whom personal data is disclosed, whether or not it is a third party; the recipient is not considered a public authority that processes personal data on the basis of a special regulation or an international agreement by which the Slovak Republic is bound, in accordance with the rules of personal data protection applicable to the purpose of processing personal data,
Processing Purpose
The personal data provided by Customers to the Operators will be processed for the following purposes and / or in connection with them:
- Provision of rental services for vehicles or the provision of Extra services or rental of Accessories, which will be provided through www.rentalport.com
- Compliance with legal and regulatory requirements (archiving and retention of documents for compliance with other legal requirements, such as the Accounting Law)
- Requirements solving and communication with competent authorities, where appropriate
- Contract management, accounting, internal analysis, risk analysis, customer relationship analysis
- Use of IT application systems for information technology services and information systems such as (but not exclusively) email / archiving, etc. Cloud-hosted applications may also be included in this group, subject to compliance with data security and data transfer obligations under personal data protection laws
- Protection of the rights and obligations of the Data subject and / or Operators.
The legitimate interests of the Operators
The Operators may process personal data even if it is necessary for the legitimate interests of the Operators or a third party, except cases where the interests or rights of the data subject requiring the protection of personal data obtain those interests, especially if the data subject is a child.
The legitimate interests of the Operators, including the Operators to whom such personal data may be provided, or third parties may never obtain the interests or fundamental rights and freedoms of the data subject, taking into account the reasonable expectations of the data subjects based on their relationship with the Operators.
A legitimate interest is, for example, when there is a relevant and appropriate relationship between the data subject and the Operator, for example when the data subject is in relation to the Operator in the position of a client or in its services. In any event, the existence of a legitimate interest would require a thorough assessment, including an assessment of whether the data subject can reasonably expect, at a given time and in the context of the collection of personal data, that processing for that purpose can take place.
The interests and fundamental rights of the data subject outweigh the interests of the Data Operators, in particular when personal data are processed in circumstances where the data subjects do not reasonably expect further processing.
The processing of personal data for purposes other than those for which the personal data were originally obtained may only be carried out if such processing is compatible with the purposes for which the personal data were originally obtained. In such a case, no separate legal basis other than the legal basis allowing the collection of personal data shall be required.
If the data subject has consented or is based on Union or the Slovak republic law, which constitutes a necessary and proportionate measure in a democratic society, in particular to protect important public interests, the Operator has the possibility to further process personal data, regardless of the compatibility of purposes.Examples of legitimate interest include:
- Processing of personal data necessary for the purpose of fraud prevention.
- Processing personal data for the direct marketing of existing Customers. However, such persons may object to such processing and may request the termination of such processing, to which the Operators must comply.
- Transfer of personal data within the Operator's group of enterprises for internal administrative purposes, including the processing of Customers' personal data. This is without prejudice to the general principles governing the transfer of personal data within the enterprises group to an company situated in a third country.
- Processing of personal data to the extent strictly necessary and proportionate for the purpose of ensuring network security and information security, i. e. the ability of the network or information system to withstand, at a given level of confidentiality, malfunctions or unlawful or intentional acts that undermine the availability, authenticity, integrity and confidentiality of stored or transferred personal data, and the security of related services offered or available via such networks communication networks and the spread of malicious program codes, as well as stopping attacks that target targeted server congestion ('denial of service') and damage to the Operator's computer and electronic communications systems.
- Notification to the competent authority of possible offenses or threats to public security by the Operators and the provision of relevant personal data in individual or several cases relating to the same crime or threat to public security, and such processing is in accordance with.
- The provision of personal data to the business partners of a person, but always subject to the same personal data protection conditions as the Controllers, while at the same time either exercising the rights of the Controllers and / or fulfilling his obligations under the relationship with the data subject and / its business activities.
Third countries transfer
Cross-border transfer of your personal data to third countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein) Operators do not intend.
Personal data recipients and categories of personal data recipients
In accordance with the above purposes, personal data may be processed by the following persons as recipients of personal data:
- RentalPort.com, a.s., Drieňová 27, Bratislava - Ružinov 821 01, IN: 52 339 530;
- A business partner chosen by the Customer through Rentalport.com, which provides the Customer with the Service (Rental of the Vehicles, Rental of the Accessories, the provision of Extra Services) in accordance with the RentalPort.com General Terms and Conditions. RentalPort.com, a.s., IN 52 339 530, Drieňová 27, Bratislava - Ružinov 821 01.
Recipients of personal data categories are as follows:
- social insurance agency, tax offices, health insurance companies, information technology companies, tax auditing companies, and financial institutions (Google Pay, Apple Pay, GoPay).
- Recipients of personal data shall implement and adopt technical, physical, administrative and procedural safeguards in accordance with industry-recognized standards in order to protect personal data processed and to ensure their confidentiality, integrity or availability. These safeguards will prevent unauthorized use of personal data, unauthorized access to them or breach of personal data protection, so called security incident in accordance with applicable regulations.
Data Subjects Rights
The provision of personal data is voluntary. The provision of personal data is not a condition for entering into a contractual relationship but may lead to a deterioration in the position and comfort of the data subject.
Customer and other data subjects have the right (i) to access personal data, (ii) to correct inaccurate or false personal data (iii) to request clarification if personal data is suspected to be processing your personal and private information or the data are processed in violation of the law (iv) to seek remedy of the situation in violation of the law, in particular by stopping the handling of personal data, correcting, supplementing or deleting (v) contacting the Office for Personal Data Protection. The data subject / customer also has (iv) the right to delete personal data if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, or if it has been found to have been processed unlawfully, (vii) to limit the processing of personal data. (viii) the portability of the data; and (ix) the right to object after which the processing of your personal data will be terminated unless it is not established that there are serious legitimate reasons for the processing that outweigh the interests or rights or freedoms of the data subjects, especially the possible enforcement of legal claims.
Any and all of these rights may be asserted by these persons by sending a request to the Operator to the email address (gdpr@rentalport.com).
As stated above, the Customer / Data subject also has the right to address the collection of personal data and their processing within the Operators to the above mentioned email address. Likewise, these persons have the right to lodge a complaint with the supervisory authority in their country of residence in situations where they consider that personal data is being processed in breach of the relevant legislation.
Time of processing of personal data
Personal data will be processed for a period of 10 years from the date of the last contractual performance and, if there is no contractual performance, for a period of 10 years from the granting of this consent. Personal data processed for the purpose of fulfilling legal obligations are processed for the time required by the relevant legislation.
Cookies processing
Cookies are small text files that improve the use of the website such as by recognizing previous visitors when logging in to the user environment, remembering the visitor's choice when opening a new window, measuring traffic to a website or how it is being used to improve user experience. These cookies may be removed or blocked by Customer, but in this case some features of the Operator's Website may not work as intended. Cookies information is not used to personally identify the Customer. These cookies are not used for any purpose other than those described in the Cookie Policy found at www.rentalport.com/legal/cookies. You can prevent these files from being saved to your device at any time by setting up your web browser. According to § 55 sec. 5 of the Electronic Communications Act considered to be the consent to the use of cookies on the Operators website.
What are the legal bases for Operators processing personal data?
Arranging the rental of motor vehicles
- performance of the contract according to Article 6 sec. 1, par. b) GDPR or a legitimate interest under Art. 6 sec. 1, par. f) GDPR
- Purposes concerning the protection of legitimate interests.The legitimate interest of Operators or third parties under Article 6, sec. 1, par. f) GDPR Marketing purposes
- Consent of the data subject under Article 6 sec. 1, par. a) GDPR or the legitimate interest of Operators or third parties under Art. 6 sec. 1, par. f) GDPR. More information about the processing of personal data for marketing purposes can be found here: www.rentalport.com/legal/marketing