Terms of personal data processing
in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Regulation on the Protection of Personal Data (hereinafter "the Regulation")
Autopůjčovna Praha s.r.o. (hereinafter referred to as the “ Company ” or “ we ”), with its registered office at Aviatická 1092/8, 161 00 Praha 6 – Ruzyně, is aware of the importance of protecting your personal data and your privacy. We undertake to protect and respect your values when handling your personal data as part of the provision of our services.
Below you will find the necessary information regarding the processing of your personal data by our Company - if you have any additional questions, write to us.
- Definitions
- Who is the manager of your personal information?
- What data do we process and why?
- What entitles us to the processing of personal data?
- Can you refuse the processing of personal data?
- To whom can we provide your personal data?
- How long will we process your data?
- What are your rights?
- Personal information means any information about an identified or identifiable individual subject to protection.
- Special categories of personal data means personal data which indicate racial or ethnic origin, political opinions, religions or philosophical beliefs or trade union membership, as well as genetic data, biometric data for the purpose of unique identification of the natural person and data on the state of health or sexual life or sexual orientation of the natural person.
- Personal data relating to criminal convictions and criminal offenses (hereinafter referred to as "criminal conviction data") means personal data which can only be processed under the supervision of a public authority or on the basis of authorization under the law of the Union or of a Member State providing appropriate safeguards with regard to the rights and freedoms of data subjects.
- Processing means any operation or set of operations involving personal data or files of personal data which is carried out with or without automated procedures (such as the collection, storage, modification, restriction, deletion or destruction of ).
- Data subject means any identified or identifiable individual. Personal data is directly or indirectly identified by the data subject.
- Controller means a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
- Processor means a natural or legal person, public authority, agency or other entity that processes personal data for the controller.
Who is the manager of your personal information?
We are the administrator of your personal data, ie:
Autopůjčovna Praha s.r.o.
ID: 09302697 -
with its registered office at Aviatická 1092/8, 161 00 Praha 6 – Ruzyně
entered in the Commercial Register kept by the Municipal Court in Prague, file no. C 334096 -
e-mail: info@autopujcovnapraha.com
What data do we process and why?
We primarily process your personal data, which you provide to us yourself, within the framework of vehicle reservation and when concluding a rental agreement, or during or after the end of the rental relationship in connection with your questions, claims and complaints.
This is in particular the following personal data:
- Your address and identification data (e.g. academic degree, name, surname, date of birth, address of permanent residence, possibly delivery address, OP number and driver's license number, telephone number, e -mail, ID number and VAT number in the case of tenants - natural persons),
- descriptive data (e.g. bank account number, part of your payment card number (last 4 digits) when making online payments, when using a late charge transaction payment card data (type, number, expiry date ); position or function in the company, signature).
The personal data of tenants - natural persons - are processed. If the tenant is a legal entity, the personal data of its representatives/contact persons are processed according to the lease agreement.
We also process personal data of third parties who are authorized to use the vehicle under the rental agreement together with the lessee or on behalf of the lessee and whose personal data the lessee provides to us (in particular, the name and surname of the authorized person).
All vehicles in our fleet are equipped with a GPS monitoring system, therefore we also process information from the GPS bus about the position and speed of the vehicle.
Based on our legitimate interest in ensuring the operation of the website, we process so-called technical cookies used to identify website visitors. If you give us your consent to process other types of cookies (e.g. analytical or marketing cookies), we will also be able to process other personal data.
More about cookies.
Reserving a car, concluding a rental agreement: We process the personal data that you fill in the reservation form on our website and subsequently communicate in order to conclude a rental agreement, or add to the agreement to make a late charge payment. We need this information to reserve the car you have chosen, prepare the rental agreement including the subsequent handover and return of the vehicle, communicate with you and issue the invoice. Information on the position and speed of the vehicle obtained from the GPS bus is also processed.
We process the above personal data on the basis of the rental agreement for the purpose of realizing the rights and obligations under this agreement, while detailed information on the provision and processing of this personal data is contained directly in the car rental agreement.
The mentioned personal data are further processed for the purposes of your and/or our legitimate interest in the settlement of mutual rights and obligations arising from the contract, or to exercise and enforce our rights within judicial/extrajudicial/enforcement proceedings or in connection with inspections carried out by public authorities.
The processing of personal data is also necessary after the end of the contractual relationship for the fulfillment of the legal obligation imposed on us, in particular by the Accounting Act and tax regulations.
by e-mail, by telephone or in person, primarily for the purpose of processing your inquiry, claim or complaint.
We can process the personal data provided/transmitted by you to the extent necessary:
- in order to exercise our rights and legal claims (e.g. if you have an outstanding claim against us or in the event of a legal dispute);
- for the purposes of checks carried out by public authorities and/or as part of accounting and tax compliance, in order to meet our legal obligations.
Commercial communications: If you are our customers, we may send you commercial communications to promote our services (by email or SMS) based on our legitimate interest .
You can unsubscribe from business communications by sending an email to info@autopujcovnapraha.com.
There is no automated decision-making when processing your personal data, but profiling may occur when certain types of cookies are processed.
What entitles us to process personal data?
We may process your personal data on the basis of the following legal titles:
- when reserving a car and subsequently concluding a car rental contract, if processing is necessary:
(i) for the fulfillment of the rental agreement (fulfilment of the contractual obligation and conclusion of the contract);
(ii) for the purposes of our and/or your legitimate interests (settlement of mutual rights and obligations, exercise and enforcement of rights from the contract, in the case of data processing from the GPS bus, our legitimate interest in the protection of our property, protection of life and health and documentation of security incidents) ;
(iii) to fulfill our legal obligations, in particular the obligation to keep accounting and tax documents according to the Act on Accounting and Tax Regulations, or in connection with inspections carried out by public authorities; - within the resolution of complaints, complaints and questions, if processing is necessary:
(i) to fulfill a contractual obligation;
(ii) for the purposes of our and/or your legitimate interests (handling claims/complaints, including out-of-court dispute resolution, answering questions, settling mutual rights and obligations);
(iii) to fulfill our legal obligations, in particular the obligation to keep accounting and tax documents according to the Act on Accounting and Tax Regulations, or in connection with inspections carried out by public authorities. - when sending commercial messages, if processing is necessary:
(i) for the purposes of our legitimate interest in direct marketing, if you are our customer and you have not refused consent.
Can you refuse the processing of personal data?
If you refuse to provide your personal data required for the purpose of booking a car and concluding a rental agreement, we will probably not be able to accept your reservation and/or conclude a car rental agreement with you.
Failure to provide the personal data necessary to process the inquiry/complaint/complaint, in particular your identification data and description of the inquiry, complaint or complaint, will result in us not being able to properly investigate and process your request.
To whom can we provide your personal data?
We process your personal data as administrators, while we may make them available to third parties - processors whom we have entrusted with the processing of personal data, or to other authorized recipients (e.g. in cases where the use of their professional expertise is necessary for the relevant processing), in particular to providers of accounting and tax services, providers of legal services, the relevant leasing company if it is the owner of the loaned vehicle, or IT service providers and administrators website.
Insurance companies may also have access to personal data (e.g. in the event of an insurance event), the Police of the Czech Republic and other public law entities in the exercise of their powers.
All the above entities are bound by legal or contractual confidentiality in relation to personal data. All processors provide sufficient guarantees of implementing appropriate technical and organizational measures to ensure a sufficient level of security of personal data.
In case of payment by payment card, our company does not have access to your payment card data, but only to part of your payment card number (last 4 digits). This part of your payment card number is stored for a certain period of time in order to fulfill contractual obligations towards payment gateway operators. When making online payments, only the secure payment gateway and the relevant banking institution have access to your payment card data.
When granting consent to a late charge transaction, we process the payment card data you have filled in (type, number, expiration date).
How long will we process your data?
We primarily process your personal data for the entire duration of our contractual relationship. After its termination, your data is stored with us to the extent necessary for the following 4 years until the expiration of any claims of the contractual parties, or until the settlement of mutual rights and obligations.
Personal data obtained via the GPS bus are disposed of within 15 days after the end of the contractual relationship, unless their further processing is necessary in a possible legal dispute or administrative procedure.
In the case of sending commercial communications, your personal data is processed until you express your disagreement with the sending of these commercial communications. You can object to the sending of commercial communications by email to info@autopujcovnapraha.com.
In the case of personal data processing as part of dealing with claims, complaints and inquiries, your personal data is processed: (i) until the time of settlement of your claim/complaint, including out-of-court settlement of the dispute, and subsequently us Your data to the necessary extent stored for the following 4 years until the statute of limitations of any claims of the contractual parties, or until the settlement of mutual rights and obligations, and (ii) in the case of questions, until the time of answering your question.
If the obligation to store your personal data is imposed by another legal regulation (e.g. accounting or tax regulations, the Act on Payment Systems, the Act on Certain Measures Against the Legalization of Criminal Activity) or if we, as administrators, may be subject to an inspection by administrative authorities within a certain period of time, during which documents containing your personal data could be required, your personal data will be processed to this extent for the appropriate period of time.
Personal data will not be transferred to a third country (outside the EU) or an international organization.
You can exercise the following rights with us in relation to your personal data:
- right to information and access to personal data.
You have the right to be informed whether your personal data is being processed and, if so, you have the right to access the personal data and information about: the purpose of the processing, the category of the personal data concerned, the recipients, the retention period of the personal data, about your rights in relation to the processing of personal data , about the possibility of filing a complaint with the Office for the Protection of Personal Data, about the source of personal data, if it does not come from you and about whether there is automated decision-making, including profiling, and also about suitable guarantees in the case of providing personal data to a third country. You also have the right to be provided with a copy of your personal data; the provision of a copy must not adversely affect the rights of third parties. - right to correct personal data.
If you discover or believe that we are processing your data in violation of the protection of your private and personal life or in violation of the law, especially if the data is inaccurate or incomplete, you can request that inaccurate or incomplete personal data be corrected. - right to erasure of personal data.
You have the right to delete personal data concerning you, if there are reasons for this - in particular, personal data must be deleted if they are no longer needed for the purpose for which they were collected or processed, if you revoke the consent on the basis of which they were processed, if you raise an objection and it is either processing for the purposes of direct marketing, or there are no overriding serious reasons for the processing of personal data, or if deletion is imposed by the law of the Union or the Czech Republic. - right to restrict processing of personal data.
If you deny the accuracy of your personal data (for the time required to verify accuracy) or if you believe that the processing of your personal data is illegal or that we no longer need your data, but you, on the contrary, need it to determine, exercise or defend your claims, you can request restriction of the processing of your personal data. You can also exercise this right if you have objected to the processing of your personal data on the grounds of our legitimate interest, for a period until we verify whether we do not have overriding serious reasons justifying such processing. - right to portability of personal data, if personal data is processed automatically and on the basis of consent or contract.
You have the right to portability, i.e. the transfer of personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format, to you / to an entity designated by you, if this is technically possible.
If your personal data is used for the purpose of sending commercial messages or if we process your data for another purpose based on our legitimate interest, you have also the right to object to such processing. If you object to processing for the purposes of sending commercial communications, your personal data will no longer be processed for these purposes; in other cases, we will assess whether we have serious reasons for the processing, of which we will of course inform you.
The above rights may be exercised against our company upon request which can be made:
a) in writing at the address of the registered office of the company: Aviatická 1092/8, 161 00 Praha 6 – Ruzyně,
b) electronically at the email address: info@autopujcovnapraha.com.
For the purposes of identifying the applicant, it is necessary to state at least the name, surname and email (or other contact) in the application. In the event that your request is sent, we are entitled - based on the assessment of the risk of harm that would occur in the event of incorrect identification - to verify your identity in another way (e.g. by sending a control e-mail/SMS with a request for a reply to the e-mail address/telephone number provided in the rental agreement, or a call to provide additional information about you).
If you believe that the processing of your personal data violates the Regulation, you also have the right to file a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (address: Pplk. Sochora 27, 170 00 Prague 7 , email: posta@uoou.cz).