Privacy Policy
Last updated January 1, 2024
At Enterprise Holdings, Inc., through our independent regional subsidiaries (collectively “Enterprise Holdings”) and network of independent franchisees and fulfillment partners operating the Enterprise Rent-A-Car, National Car Rental, Alamo Rent A Car, as well as other various programs, features and services (" Enterprise Holdings", "we", "our" or "us" as referred to in the policy below), we respect your privacy. We have implemented our privacy policy ("Privacy Policy") and cookie policy ("Cookie Policy") to explain our data collection, use, disclosure, and transfer practices, as well as individual access rights you may have when you use our sites and services, including global reservations and other rental services.
We host and maintain this website on behalf of a franchisee or fulfillment partner. For information about their privacy practices, please see below.
INFORMATION ABOUT PROCESSING OF PERSONAL DATA (ACCORDING TO ARTICLE 13, GDPR)
Why do we process your personal data?
In order to offer our full service, while following all duties resulting from both the rental agreement and legal requirements.
What lawful reasons do we have to process your personal data?
The legal basis for processing of your personal data is:
- fulfilment of lawful duties by our company as an administrator towards the tax office and other institutions
- fulfilment of duties resulting from the vehicle rental agreement
- the legitimate interest of our company as an administrator is to protect our property, to secure proper service according to our standards, to improve the quality of our service
Who keeps your personal data and where do we pass it?
The administrator of your personal data is Czechocar CZ, spol. s r. o., with registered office 5. května 1640/65, 140 00 Prague 4, Czech Republic, VAT ID.: CZ48587460. We as Franchisee will disclose Customer Personal Data to (i) EAN Data Services UK Ltd., (ii) Enterprise Holdings, Inc. and/or any of relevant subsidiaries (for details please see EHI’s Privacy Policy at https://www.enterprise.co.uk/en/privacy-policy.html) (together “EHI”), all acting as independent data controllers.
The Lessee agrees that the Data Controller may transfer Lessee's personal data to EHI located in:
- European Union
- United Kingdom of Great Britain and Northern Ireland
- United States of America
and has adopted contractual means to ensure that the transfer takes place under guarantees recognized as giving an adequate level of protection of personal data.
In the case of using a self-service automatic kiosk when renting a vehicle, our company, Czechocar CZ, spol. s r.o., VAT number: CZ48587460, is still your data administrator but company Service Automatics SC Oy, with its registered office at PL 15, 04401 JÄRVENPÄÄ, Finland, VAT No.: FI28577936, becomes also as the processor. This does not affect the above provision on the transfer of customer data to EAN Data Services UK Ltd and Enterprise Holdings, Inc.
Customer Personal Data will be shared for the following purposes:
Process Customer Personal Data to manage the rental and the commercial relationship, communicate with the Customer about or assist with his rental. EHI processes Customer Personal Data for this purpose on the basis of (i) contractual necessity (e.g. billing) or (ii) its legitimate interests in ensuring the effective delivery of the requested services, when these interests are not overridden by the Customer’s – and any applicable additional Authorized Drivers’ – data protection rights;
Store Customer Personal Data that relates to any incident arising from the Customer’s dealings or an additional Authorized Driver’s dealing with EHI if it thinks that, as a result of such incident, the Customer or an additional Authorized Driver could be a risk for future rentals. EHI processes Customer Personal Data for this purpose on the basis of its legitimate interests in protecting its employees, other customers, the public and its property from safety or financial risks based on past customer conduct, when these interests are not overridden by the Customer’s – and any applicable additional Authorized Drivers’ – data protection rights;