Jump straight to the destinations that concentrate our internal authority and keep your rental journey connected from start to finish.
INFORMATION NOTICE
regarding the processing of personal data of Natural Persons and Representatives of Legal Entities
DELTA FLOT S.R.L., having its registered office at Strada Demnității nr. 27, Sector 1, Bucharest, registered with the Trade Registry under no. J40/5093/2023, VAT number 47820724, legally represented by Mr. Vescu Pavel Ion as administrator (the “Company”), acts as personal data controller and undertakes to protect your personal data in accordance with the applicable privacy and data protection laws, including Regulation (EU) no. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the “Regulation”) adopted at EU level, as well as any other applicable local laws governing the storage, processing, access and transfer of personal data.
This Information Notice describes how the Personal Data of natural persons who enter into legal relations regarding the vehicle rental agreement (namely natural persons contracting the Company’s services, either in their own name, on behalf of a legal entity or acting as a contact person of a legal entity, collectively referred to as “Data Subjects”) may be collected, stored and used by the Company as data controller.
For example, in order to comply with new regulations in this field or to align the information included herein with the processing activities we carry out, this Information Notice may be amended, updated or otherwise changed from time to time. We will duly inform you via the Website ( www.dacars.ro ) or physically, by displaying the Information Notice at the Company’s premises, regarding any material change to this Information Notice.
Nevertheless, your Personal Data (as defined below) will always be managed in accordance with the Information Notice in force at the time of collection and as further detailed in the updated versions of this Notice.
Personal Data collected
The Company may collect Personal Data such as your name, surname, email address, phone number, home address, personal numeric code etc. (“Personal Data”) for the purpose of concluding the rental agreement and other documents required by the legislation in force, as well as for performing and invoicing the services provided by the Company to you. The processed categories of data include:
General Data: name, surname, personal numeric code, ID card / passport series and number and other personal data included in the copy of the identity document submitted to the Company, as well as the personal data contained in the copy of the driving licence;
Data regarding the status of the Data Subject: status as individual customer, representative of a legal entity or contact person of a legal entity;
Contact and billing data: your email address, phone number, account settings on the Company’s website and the data contained in that account, bank details such as the bank issuing your card, IBAN and other data visible on the bank card;
Reservation data: information on the start and end of the reservation, the location where the vehicle should be delivered and / or the pickup location;
Personal data resulting from communications with the Company: messages sent through the Company’s public communication platforms, letters or any other communications carried out via the Company’s platform, email or phone number that may contain personal data;
Photos and / or audio-video recordings: photos or audio-video recordings that may include your personal data (voice or image) as a result of recording the vehicle when it is handed over to you by the Company;
Statistical and marketing data: IP address, satisfaction level regarding the Company’s services, marketing preferences, surveys, marketing consent, data resulting from the non-essential cookies accepted by you, such as the categories of websites visited, location data and other similar information detailed in the Cookie Policy;
As a rule, the personal data processed are collected directly from you. However, we may occasionally rely on third-party services to obtain such information, for example from public sources or from records made available by various authorities or public institutions.
When we collect personal data
We collect your personal data when:
you are interested in our rental services and contact us through one of the available channels (email, phone, visiting our offices, website);
you are a representative or contact person of a legal entity that intends to or already engages in commercial relations with the Company;
you use our vehicle rental services;
you visit or browse our website or are redirected to our website following an advertisement or any other link to the Company’s website;
you create a user account on our website;
you contact us through various channels or request information about our services, including through social media communication channels such as Facebook, Instagram, etc.;
you subscribe to marketing communications (Newsletter), alerts or other services provided by us;
We use cookies (small text files stored in your browser) and other specific techniques. When you visit the Website, we automatically collect data via your browser or device, through the use of cookies and similar technologies. For more details and to learn how to opt out, please see the Cookies section on our website www.dacars.ro .
Purposes and legal grounds of processing
The personal data categories listed above are processed based on the following legal grounds and purposes:
Legal ground: performance of the contract: ensuring interactions when you are interested in our services (pre-contractual steps prior to concluding the rental agreement) and for the execution of the rental contract;
Legal ground: performance of the contract or legitimate interest: ensuring interactions and establishing a relationship with you when we have a contractual relationship or a legitimate interest;
Legal ground: performance of the contract: ensuring communication and establishing a relationship with the entity you represent, whether you are the legal representative or the contact person for a current or potential corporate customer with whom we intend to conclude or have concluded a contract;
Legal ground: legal obligation: interacting with the competent authorities in case of traffic incidents, accounting and tax requirements, reporting, implementing know-your-customer measures for the prevention and combating of money laundering, fulfilling activities related to inspections and information requests from authorities such as the National Agency for Fiscal Administration (ANAF), the National Authority for Consumer Protection (ANPC), the Romanian Data Protection Authority (ANSPDCP), the Romanian Police and any other legal obligations imposed by public authorities and institutions;
Legal ground: legitimate interest: creating and managing the user account, handling vehicle rental requests placed through the user account;
Legal ground: legitimate interest: establishing, exercising or defending a legal claim, protecting the Company’s assets and values and those of the customers, improving the services provided;
Legal ground: legitimate interest: processing personal data that may result from photos / video recordings made of the vehicle in order to assess its condition at pickup and return;
Legal ground: consent: for marketing purposes insofar as you have agreed to such purposes, generally covering:
providing information on commercial offers;
providing information and invitations regarding the Company’s events;
participation in surveys regarding the Company’s services and customer satisfaction;
participation in market analyses and studies concerning the car rental market dynamics;
participation in questionnaires following events organized by the Company;
informing you by email or phone that you can leave online reviews or testimonials in order to recommend the services offered by the Company.
If you no longer wish to receive marketing communications from us, please update your preferences by:
changing the settings in your customer account;
accessing the unsubscribe link available on the website;
clicking the unsubscribe link displayed in the messages you receive from us;
contacting the Company using the communication channels described below.
If you opt out of marketing communications, we may still send you messages related to your orders or regarding updates to our policies, messages necessary under an ongoing contract with you.
We also process personal data when the processing is necessary for the performance of a task carried out in the public interest.
You also have the right to withdraw your consent at any time for any of the processing activities based on consent mentioned above.
Recipients of Personal Data
The recipients of your Personal Data are the Company’s employees from the sales department and the departments responsible for managing the execution of rental contracts, from the accounting department, as well as services connected to the aforementioned contract, namely external Emergency Situations / Fire Safety services, external Accounting services, the Company’s external legal advisers or similar services, as well as public institutions.
Your Personal Data will not be sold, shared or otherwise distributed to third parties without your consent, unless we are required to do so under applicable law, a court order or a government regulation, or if such disclosure is otherwise necessary to achieve the purposes described above, to support any criminal or other investigation or legal proceedings in Romania or abroad.
For the purposes described above, the Company may need to disclose Personal Data to the following authorised third parties:
Its subsidiaries and / or strategic contractual partners involved in conducting the activity, acting as joint controllers under Article 26 GDPR;
Selected distributors, service providers and vendors acting in accordance with the Company’s instructions to provide related infrastructure, customer services, email delivery, audits, legal assistance, IT services, marketing and promotional services, etc.;
Legal or administrative authorities: as required by the applicable laws;
In any case, the Company will require such third parties to:
Commit to complying with data protection laws and the principles of this Policy;
Process Personal Data solely for the purposes described in this Policy;
Implement appropriate technical and organisational security measures designed to protect the integrity and confidentiality of your Personal Data.
Transfer of Personal Data
The Company will not transfer Personal Data to other jurisdictions, to countries that cannot be considered to provide the same level of protection as the jurisdiction in which you are located, including outside or within the European Economic Area. If the Company needs to transfer Personal Data within the European Economic Area, it will ensure that appropriate safeguards are implemented, as required by the applicable data protection legislation.
Retention period of Personal Data
Personal Data will be stored for a limited period, as long as the rental agreement is in force, as long as it is necessary to perform the contract, during the resolution of any dispute, and in accordance with applicable legislation for as long as we are legally required to keep contracts and other legal documents in the Company’s accounting records and archive.
In general, your data are retained: (i) for the duration of the rental agreement, (ii) for the lifetime of the user account until its deletion, (iii) for the time needed to provide the requested information, (iv) for the duration of any investigation or administrative procedure related to the performance of the contract by state authorities and (v) for the duration of any statutory retention period or for the Company’s legitimate interests.
Audio-video recordings made when the vehicle is handed over to you will be kept for 30 days from the end of the rental contract.
Marketing consent will be retained for 2 years from the date when the explicit consent was obtained.
Copies of your ID card and driving licence will be stored for 30 days if you cancel the reservation, and for 1 year from the return of the rented vehicle upon termination of the contract.
The Company has established technical and organisational measures to protect and ensure the confidentiality, integrity and availability of your processed Personal Data; we will prevent unauthorised use or access and prevent personal data breaches, in accordance with the applicable legislation.
Your rights
Depending on the circumstances and the applicable legislation, you have the following rights regarding the processing of your Personal Data:
|
Right |
What it means |
|
Right of access |
You have the right to obtain confirmation that your Personal Data are being processed by us and, if so, relevant details about those processing activities, as well as access to the Personal Data processed by the Company. |
|
Right to rectification |
You have the right to obtain the rectification of your Personal Data if they are inaccurate or incomplete. |
|
Right to erasure |
This right is also known as the “right to be forgotten” and, in simple terms, allows you to request the deletion or removal of your Personal Data when there is no compelling reason for the Company to continue processing them. It is not an absolute right; exceptions apply. |
|
Right to restriction of processing |
You have the right to “block” or suppress processing of your Personal Data in certain circumstances. When processing is restricted, the Company may still store your data, but will not use them. |
|
Right to data portability |
You have the right to obtain and reuse your Personal Data, in a structured, commonly used and machine-readable format, in certain circumstances. |
|
Right to object |
You have the right to object to certain types of processing in specific circumstances. |
|
Right not to be subject to automated individual decision-making |
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. |
|
Right to withdraw consent |
You have the right to request that processing based on your consent be stopped. The withdrawal will not affect the lawfulness of processing based on consent prior to its withdrawal. |
If you wish to exercise any of these rights, please send us a Data Subject Rights request at: gdpr@dacars.ro
You can also contact us using the contact details indicated above to exercise your rights.
If you are not satisfied with our response or consider that the processing of Personal Data does not comply with data protection legislation, you have the right to lodge a complaint with the competent supervisory authority: the Romanian National Supervisory Authority for Personal Data Processing, using the information available at https://www.dataprotection.ro/ , or to initiate legal proceedings.
How to contact us
If you have any questions or comments about this Privacy Policy, please email the Company’s Data Protection Officer at gdpr@dacars.ro .