Žalanského 1674/52a, Praha 17 – Řepy rent@driverent.cz +420 736 133 100 Reservation online
CS | EN

Conditions for the processing of personal data 
 

in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (hereinafter referred to as the "Regulation")

DRIVERENT PRAGUE s.r.o. (hereinafter referred to as the "Company" or "we"), with its registered office at Žalanského 1674/52a, 163 00 Prague 6, recognizes the importance of protecting your personal data and your privacy. We are committed to protecting and respecting these values when handling your personal data in the course of providing our services.

Below you will find the necessary information regarding the processing of your personal data by our Company – if you have any additional questions, please write to us.

 

Definitions

  • Personal data means any information relating to an identified or identifiable natural person that is subject to protection.
     
  • Special categories of personal data mean personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, and data concerning a natural person's health or sex life or sexual orientation.
     
  • Personal data relating to criminal convictions and offenses (hereinafter referred to as "criminal conviction data") means personal data that may only be processed under the supervision of a public authority or on the basis of authorization under Union or Member State law providing appropriate safeguards for the rights and freedoms of data subjects.
     
  • Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means (such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction).
     
  • A data subject is any identified or identifiable natural person. Personal data identifies the data subject directly or indirectly.
     
  • A controller is a natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
     
  • A processor is a natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the controller.
     

Who is the controller of your personal data?

 

The controller of your personal data is:

DRIVERENT PRAGUE s.r.o.

Company ID: 22633065

Registered office: Žalanského 1674/52a, 163 00 Prague 6

Registered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 419356 Email: rent@driverent.cz

 

What data do we process and why?

We primarily process your personal data that you provide to us yourself when booking a vehicle and when concluding a rental agreement, or during or after the rental relationship in connection with your inquiries, complaints, and claims.

 

This mainly concerns the following personal data:

Your address and identification data (e.g. academic title, first name, surname, date of birth, permanent address or delivery address, ID card number and driver's license number, telephone number, e-mail, ID number and VAT number in the case of lessees who are natural persons),
descriptive data (e.g., bank account number, part of your payment card number (last 4 digits) when making online payments, when using a late charge transaction, payment card details (type, number, expiration date); position or function in the company, signature).


The personal data of tenants who are natural persons is processed. If the lessee is a legal entity, the personal data of its representatives/contact persons are processed in accordance with the lease agreement. The personal data of third parties who are authorized to use the vehicle in accordance with the lease agreement together with or on behalf of the lessee and whose personal data are provided to us by the lessee (in particular the name and surname of the authorized person) are also processed.

 

All vehicles in our fleet are equipped with a GPS monitoring system, so we also process information from the GPS bus about the location and speed of the vehicle.

 

Based on our legitimate interest in ensuring the operation of the website, we process so-called technical cookies used to identify website visitors. If you give us your consent to process other types of cookies (e.g., analytical or marketing cookies), we will also be able to process other personal data.

 

More about cookies.

 

Car reservation, conclusion of a rental agreement: We process the personal data that you enter in the reservation form on our website and subsequently provide for the purpose of concluding a rental agreement. We need this information to reserve the car you have selected, prepare the rental agreement, including the subsequent handover and return of the vehicle, communicate with you, and issue an invoice. Information about the location and speed of the vehicle obtained from the GPS bus is also processed.

 

We process the above personal data on the basis of the rental agreement for the purpose of exercising the rights and obligations under this agreement, and detailed information on the provision and processing of this personal data is contained directly in the car rental agreement.

 

The personal data mentioned above is also processed for the purposes of your and/or our legitimate interest in settling mutual rights and obligations arising from the agreement, or in exercising and enforcing our rights in court/out-of-court/enforcement proceedings or in connection with inspections carried out by public authorities.

 

The processing of personal data is also necessary after the termination of the contractual relationship for the fulfillment of legal obligations imposed on us, in particular by the Accounting Act and tax regulations.

 

Questions, complaints, grievances: We also process all personal data that you provide to us, for example in the context of questions, complaints, grievances, or other suggestions, whether by email, telephone, or in person, primarily for the purpose of handling your question, complaint, or grievance.

 

We may process the personal data you provide/transfer to us to the extent necessary:

  • for the purpose of exercising our rights and legal claims (e.g., if you have an outstanding claim against us or in the event of a legal dispute);
     
  • for the purposes of inspections carried out by public authorities and/or for accounting and tax compliance purposes, in order to comply with our legal obligations. 
     

Commercial communications: If you are our customer, we may send you commercial communications for the purpose of promoting our services (by email or SMS) on the basis of our legitimate interest.

 

You can unsubscribe from commercial communications by emailing to:rent@driverent.cz.

No automated decision-making takes place when processing your personal data, but profiling may occur when processing certain types of cookies.

 

What entitles us to process personal data?

We may process your personal data on the basis of the following legal grounds:

  • processing necessary: 

(i) for the performance of a lease agreement (fulfillment of a contractual obligation and conclusion of a contract);

(ii) for the purposes of our and/or your legitimate interests (settlement of mutual rights and obligations, exercise and enforcement of rights under the contract, in the case of processing data from the GPS bus, our legitimate interest in protecting our property, protecting life and health, and documenting security incidents);

(iii) to fulfill our legal obligation, in particular the obligation to keep accounting and tax documents in accordance with the Accounting Act and tax regulations, or in connection with inspections carried out by public authorities;

  • in the context of resolving complaints, claims, and inquiries, if processing is necessary: 
     

(i) to fulfill a contractual obligation;

(ii) for the purposes of our and/or your legitimate interests (handling of complaints/claims, including out-of-court dispute resolution, answering inquiries, settling mutual rights and obligations);

(iii) to fulfill our legal obligation, in particular the obligation to keep accounting and tax documents in accordance with the Accounting Act and tax regulations, or in connection with inspections carried out by public authorities.

  • when sending commercial communications, if processing is necessary: 
     

(i) for the purposes of our legitimate interest in direct marketing, if you are our customer and you have not refused consent.

 

Can you refuse the processing of personal data?

If you refuse to provide your personal data necessary for the purposes of booking a car and concluding a rental agreement, we will probably not be able to accept your booking and/or conclude a car rental agreement with you.

 

Failure to provide the personal data necessary to process an inquiry/complaint/claim, in particular your identification data and a description of the inquiry, complaint, or claim, will result in us being unable to properly investigate and process your request.

 

Who can we share your personal data with?

We process your personal data as controllers, and we may share it with third parties—processors we've hired to process personal data, or other authorized recipients (e.g., when their professional expertise is needed for the relevant processing), in particular to providers of accounting and tax services, providers of legal services, the owner of the rented vehicle, the leasing company if it is the owner of the rented vehicle, or providers of IT and GPS services and website administrators.

 

Insurance companies (e.g. in the event of an insured event), the Czech Police, and other public law entities may also have access to personal data in the exercise of their powers.

 

All of the above entities are bound by legal or contractual confidentiality in relation to personal data. All processors provide sufficient guarantees that appropriate technical and organizational measures are in place to ensure an adequate level of security for personal data.

 

In the case of payment by credit card, our company does not have access to your credit card details, but only to part of your credit card number (the last 4 digits). This part of your credit card number is stored for a certain period of time in order to fulfill our contractual obligations to payment gateway operators. When making online payments, only the secure payment gateway and the relevant banking institution have access to your payment card details.

 

When you give your consent to a late charge transaction, we process the payment card details you have provided (type, number, expiry date).

 

How long will we process your data?

We primarily process your personal data for the entire duration of our contractual relationship. After its termination, your data will be stored by us to the extent necessary for the following 4 years until the expiry of any claims of the contracting parties, or until the settlement of mutual rights and obligations.

 

Personal data collected via the GPS bus is destroyed within 15 days after the end of the contractual relationship, unless its further processing is necessary in a possible legal dispute or administrative proceedings.

 

In the case of sending commercial communications, your personal data will be processed until you express your disagreement with the sending of these commercial communications. You can express your disagreement with the sending of commercial communications by email at rent@driverent.cz.

 

In the case of processing personal data in the context of resolving complaints, claims, and inquiries, your personal data will be processed: (i) until your complaint/claim has been resolved, including out-of-court dispute resolution, and subsequently your data is stored by us to the extent necessary for the following 4 years until the expiry of any claims of the contracting parties, or until the settlement of mutual rights and obligations, and (ii) in the case of inquiries, until your inquiry has been answered.

 

If we are required to store your personal data by other legal regulations (e.g., accounting or tax regulations, the Payment System Act, the Act on Certain Measures Against the Legalization of Criminal Activity), or if we, as controllers, may be subject to an inspection by administrative authorities within a certain period of time, during which documents containing your personal data may be required, your personal data will be processed to this extent for the relevant period.

 

Personal data will not be transferred to a third country (outside the EU) or to an international organization.

 

What are your rights? 

You can exercise the following rights in relation to your personal data:

  • the right to information and access to personal data. You have the right to be informed whether your personal data is being processed and, if so, you have the right to access your personal data and information about: the purpose of processing, the category of personal data concerned, the recipients, the period of storage of personal data, your rights in relation to the processing of personal data, the possibility of lodging a complaint with the Office for Personal Data Protection, the source of personal data if it does not come from you, and whether automated decision-making, including profiling, takes place, as well as appropriate safeguards in the event of personal data being transferred to a third country. You also have the right to be provided with a copy of your personal data; the provision of a copy must not adversely affect the rights of third parties.
     
  • the right to rectification of personal data. If you discover or believe that we are processing your data in a manner that is contrary to the protection of your private and personal life or contrary to the law, in particular if the data is inaccurate or incomplete, you may request that the inaccurate data be rectified or the incomplete personal data be completed.
     
  • the right to erasure of personal data. You have the right to erasure of personal data concerning you if there are reasons for doing so – in particular, personal data must be erased if it is no longer necessary for the purpose for which it was collected or processed, if you withdraw the consent on the basis of which it was processed, if you object and it concerns either processing for direct marketing purposes or there are no overriding serious reasons for processing personal data, or if erasure is required by Union or Czech law.
     
  • the right to restriction of processing. If you contest the accuracy of your personal data (for the period necessary to verify its accuracy) or believe that the processing of your personal data is unlawful, or that we no longer need your data but you need it to determine, exercise, or defend your claims, you may request the restriction of the processing of your personal data. You may also exercise this right if you have objected to the processing of your personal data on the basis of our legitimate interest, for a period of time until we verify whether we have overriding legitimate grounds for such processing.
     
  • the right to data portability, if personal data is processed automatically and on the basis of consent or a contract. You have the right to portability, i.e. the transfer of personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format, to you or to a body designated by you, if technically possible. 
     

If your personal data is used for the purpose of sending commercial communications or if we process your data for another purpose based on our legitimate interest, you also have the right to object to such processing. If you object to processing for the purpose of sending commercial communications, your personal data will no longer be processed for these purposes; in other cases, we will assess whether we have serious reasons for processing, which we will of course inform you about.

 

The above rights may be exercised against our company on the basis of a request, which can be made:

a) in writing to the company's registered office: Žalanského 1674/52a, 163 00 Prague 6

b) electronically to the e-mail address: rent@driverent.cz

 

For the purposes of identifying the applicant, the request must include at least the first name, last name, and email address (or other contact information). If you send us your request, we are entitled – based on an assessment of the risk of harm that would arise in the event of incorrect identification – verify your identity in another way (e.g., by sending a verification email/SMS with a request for a reply to the email address/phone number provided in the lease agreement, or by requesting additional information about you).

 

If you believe that the processing of your personal data violates the Regulation, you also have the right to lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (address: Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz).