Privacy Notice

We can’t help you make a booking or request a quote without certain information. When you do either of those things, we ask you for the information we need so we can give you what you want. This is pretty standard stuff and may include your name, age, date and place of birth and contact details (email, address and phone number). It can also include information about your passport, identity card and driving licence – and your loyalty programme number and payment information.

In addition, we collect information from your computer when you use one of our platforms, even if you don’t make a booking. This may include your IP address, which browser you use, and your language settings. There are also situations where we receive information about you from third parties, or automatically collect other information. This is a basic overview of the information we collect. Would you like to know more?

We store and use the information that you give us. When you make a booking, we need at least your name, email address and payment information. We might also ask for your home address, phone number and date of birth, and the names of any additional drivers.

If you get in touch with us (by phone, by email or through social media, for example) we will collect information from you there too.

After your booking, we may ask you to provide a review to help us improve our services, and to help ensure future customers get exactly what they’re looking for.

There are also other ways you might give us information. For example, if you’re browsing with your mobile device, you can share your current location with us, so we can provide you with the best possible service. To make things easier, you can also open a user account, which lets you review and manage your bookings, as well as saving your personal settings and your passport and driving licence details. It also makes it easier to make future bookings.

You might also be invited to write reviews to help inform others about your car rental experience. When you write a review on the Rentalcars.com platform, we’ll collect any information you’ve included, along with your display name.

If you create a user account, we’ll also store your personal settings and reviews of previous bookings. This saved data can be used to help you plan and manage future reservations or personalized recommendations or benefit from other features only available to account holders (such as incentives or other benefits).

We may offer you referral programs or sweepstakes, and participating in these will mean providing us with relevant personal data.

We may use your personal data in the following ways:

We also use your personal data to contact you about the latest deals, special offers and other products or services we think you might be interested in. There are other uses, too. If you’d like to find out what they are, read on for a more detailed explanation.

Providing your personal data to us is voluntary. However, depending on the type of service you may want to use, we may only be able to provide you with this service if certain personal data is collected. For instance, we cannot process your booking if we do not collect your name and contact details.

A. Bookings: First and foremost, we use your personal data to make and administer your booking, and to forward the necessary details to the company that provides your car (or other product or service, such as insurance). This includes sending you communications in relation to your booking, such as confirmations, modifications, reminders and billing (including issuing invoices). In some cases this may also include processing your personal data to enable online check-in or processing personal data in relation to damage deposits.
B. Customer service: We provide international customer service from our local offices in more than 40 languages, and we’re here to help 24 hours a day, 7 days a week. Our international customer service teams need your details so they can help you make a booking, for example, or to reply to any queries you may have before, during or after your booking.
C. Account facilities: To make things easier, you can create a user account on our platforms. This involves giving us your personal data, and it lets you do a number of useful things. We use the information you give us to administer this account, allowing you to do a number of useful things. You can manage your bookings or other purchases, take advantage of special offers, and manage your personal settings and preferences. It also makes it easier to make future bookings. Managing personal settings gives you the ability to easily see car rentals you’ve searched for and check information you’ve provided.
D. Marketing activities: We use your contact information, reservation details, account information, browsing data, location data, and preferences for marketing activities. These activities include:
- a. Using your contact information to send you regular news about our special offers, discounts and updates, including details of our travel-related products and services (and/or those of our group companies or affiliate business partners). You can unsubscribe from email marketing communications quickly, easily and at any time – just click the “unsubscribe” link in any email or visit our Data Subject Request Portal.
- b. Based on your information, individualized offers might be shown to you on or about the Booking.com website, in mobile apps or on third-party websites/apps (including social media sites) and the content of the site displayed to you might be personalized. These could be offers that you can book directly on the website or on co-branded sites, or other third-party offers or products we think you might find interesting. Our “How We Work” page contains more information on our ranking and recommendation systems, including how you can manage your personalization preferences.
- c. Contacting you by phone, email or SMS with information about insurance products that you didn’t include in your booking.
- d. Inviting you to participate in promotional activities (such as sweepstakes, referral programmes or competitions). When you participate in other promotional activities (such as sweepstakes, referral programmes or competitions), only the relevant information will be used to administer these promotions.
E. Communicating with you: There might be other times when we get in touch, including by email, by post, by phone or by texting you. Which method we choose depends on the contact information you’ve previously shared. We process the communications you send to us. There could be a number of reasons for this, including:
- a. Responding to and handling any requests you have made.
- b. If you have started but not finished a booking online, we might contact you to invite you to continue with your booking. We believe that this additional service benefits you as it allows you to pick up the process where you left off without having to search for a car rental or fill in your booking details again.
- c. When you use our services, we might send you a questionnaire or invite you to provide a review about your experience with Rentalcars.com or the car rental company.
- d. Sending you other material related to your bookings, such as how to contact Rentalcars.com if you need assistance at the pick-up desk, and information that we feel might be useful to you in planning or getting the best out of your car rental. We might also send you material related to upcoming bookings or a summary of previous bookings you made through Rentalcars.com.
- e. Even if you don’t have an upcoming booking, we may still need to send you other administrative messages, which could include security alerts.
- f. Sending you a summary of your previous bookings.
F. Market research: We sometimes invite our customers to take part in market research. Please see the information that accompanies this kind of invitation to understand what personal data will be collected and how that data is used.
G. Improving our services: We also use personal data for analytical purposes and product improvement, where permitted by applicable law, such as offering a more personalized experience based on how you or customers like you with similar interests use our platform for making your car rental booking. Further, we may process your user ID, which is linked to the email address used to create your account, or to your reservation if you have no account, for the purpose of measuring the audience visiting our websites. This is part of our commitment to improving our services and enhancing the user experience. In this case, we use data for testing and troubleshooting purposes, as well as generating statistics about our business. The main goal here is to get insights into how our services perform, how they are used, and ultimately to optimize and customize our website and apps, making them easier and more meaningful to use. As much as possible, we strive to use de-identified data for this analytical work.
H. Providing the best price applicable to you, depending on where you are based: When you search our apps or website to find a car rental, we process your IP address to confirm whether you are in the European Economic Area (EEA) or in another country. We do this to offer you the best price for the region (EEA) or country (non-EEA) where you are based.
I. Customer reviews: During and after your booking, we might invite you to submit a review. This invite asks for information about the car rental company and your experience. You can choose to display a screen name next to your review, instead of your real name. By completing a review, you’re agreeing that it can be displayed (as described in detail in our Terms and Conditions) on, for example, our platforms, on our mobile apps, on our social media accounts and social media apps, or other channels owned, hosted, used or controlled by Rentalcars.com. This is to inform other customers about the quality of the car rental company you used and any other experiences you choose to share.
J. Call monitoring: During calls with our customer service team, live listening might be carried out or calls might be recorded for quality control and training purposes. This includes the usage of the recordings for the handling of complaints, legal claims and for fraud detection. Not all calls are recorded and recordings are kept for a limited amount of time before being automatically deleted unless Rentalcars.com has determined before then that the recorded calls need to be retained for fraud investigation or legal purposes (as further described below).
K. Promotion of a safe and trustworthy service: To create a trustworthy environment for you, any additional drivers, Rentalcars.com’s business partners, and car rental companies, we continuously analyze and use certain personal data to detect and prevent fraud and other illegal or unwanted activities. In the unlikely event of concerns about integrity and/or safety incidents, we consult publicly available information. In doing so, we cannot prevent that some of that information may include special categories of personal data. Similarly, we use personal data for risk assessment and security purposes, including when you report a safety concern, or for the authentication of users and bookings, or when others report a fraud or safety incident about you. When we do this, we may have to stop or put certain bookings on hold until we’ve finished our assessment. For the purposes of detecting and preventing fraud and harm, and protecting our customers, business partners, car rental providers, and Rentalcars.com, we may use your contact information, reservation details, reviews, account information, browsing data, location data, communications data, or other information that you or another person has provided to Rentalcars.com. If we have concerns about serious misconduct, we may decide to cancel your upcoming reservations or to decline future reservations via our platform.
L. Legal purposes: Finally, in certain cases, we may need to use your information to handle and resolve legal disputes, for regulatory investigations and compliance, to enforce our Terms and Conditions or to comply with lawful requests from law enforcement and other public authorities. Further, we may process your user ID, which is linked to the email address used to create your account, or to your reservation if you have no account, for the purpose of measuring the audience visiting our websites where required by applicable laws, and for accounting of users on our platforms as required by the Digital Markets Act.

If we use automated means to process personal data which produces legal effects or significantly affects you, we will implement suitable measures to safeguard you rights and freedoms, including the right to obtain human intervention.

n/a

As applicable, for purpose A and B, Rentalcars.com relies on the legal basis that the processing of personal data is necessary for the performance of a contract, specifically to finalize and administer your booking. For example, when you book ground transportation such as a car or airport transfer, we need to transfer your booking details to the company and the driver providing the ground transportation. If the required personal data is not provided, Rentalcars.com cannot finalize the booking, nor can we provide customer service. In view of purposes C to K, Rentalcars.com relies on its (or its third parties’) legitimate interest to provide its services, to prevent fraud, and to improve its services (as set out more specifically under C to K). Moreover, in the unlikely event that Rentalcars.com would process special categories of personal data in the context of purpose K, Rentalcars.com relies, where applicable, on the fact that processing relates to personal data which are manifestly made public by the data subject.

When using personal data to serve Rentalcars.com’s or a third party’s legitimate interests, Rentalcars.com will always balance your rights and interests in the protection of your personal data against the rights and interests of Rentalcars.com or those of the third party. For purpose L, Rentalcars.com also relies, where applicable, on compliance with legal obligations (such as lawful law enforcement requests). In the EEA, the Booking Holdings Corporate Group also ensures that data flows between companies in the Group comply with relevant European regulations such as the Digital Markets Act.

Where needed under applicable law, Rentalcars.com will obtain your consent prior to processing your personal data, including for email marketing purposes or as otherwise required by law.

We may use your personal data to develop and train artificial intelligence models and/or systems (AI) where the purpose of collecting your data is to provide or improve our services to you. The legal bases for using AI which we rely on are:

Beyond preventing and detecting fraud attempts, we may have a legitimate interest in developing AI to improve the efficiency and quality of our products and services. We always consider whether your rights and freedoms are infringed and will only proceed where this legitimate interest is not overridden by your rights.
In other cases where we may use AI, we will seek your consent where this is required.

If you wish to object to the processing set out under C to K or, where applicable, to the use of your personal data in the context of AI and no opt-out mechanism is available to you directly (for example, on our Data Subject Rights Portal), please contact us at datarights@rentalcars.com, stating “Privacy” in the subject line.

There are a number of different business partners integrated in the services we provide, and in certain situations we may share your personal data with them. In most cases, we’re simply passing on your booking details to the business partners that are helping us deliver the service you’re requesting. We will also share your data with other third parties, which may include payment service providers, advertising partners, subsidiaries of the Rentalcars.com corporate family and affiliates of the Booking Holdings Inc corporate group, and – in some cases – the authorities. These are the main reasons we would share your personal data. Would you like to know more?

We also involve other parties to provide you with the Rentalcars.com services. This includes, for example, financial institutions, advertisers, subsidiaries of the Rentalcars.com corporate group and other affiliates of the Booking Holdings Inc. corporate group. Or, in some cases, if we’re required to by law, we might share your data with governmental or other authorities.

Below, we go into more detail about how the information you share with us is used and exchanged with these parties.

In certain circumstances, we’ll share your personal data with third parties. These third parties include:

1. The car rental company you booked with: In order to complete your booking, we transfer relevant booking details to the company/companies supplying the car and/or other related products (including insurance) that you have requested. This is one of the most essential things we do for you.
Depending on the booking, the details we share can include your name, age range, contact details, the names of any additional drivers and any other information or preferences you specified when you made your booking.
If the car rental company you select on our platform participates in our pre-registration scheme, the details we share can also include your email address, home address, phone number, date and place of birth, passport and driving licence information if you have provided this information to us at your sole discretion. Providing further pre-registration information will enhance your pick-up experience, but it is optional and you will still be able to pick-up your car rental even if you do not provide any pre-registration information.
If you have a query about your booking, we may contact the car rental company for assistance with your request.
In cases of booking or insurance related claims, disputes or any other kind of customer service issue, we may provide the car rental company with your contact details, including your email address and information about the booking process as well as the dispute itself as needed to handle the dispute. This can include, but may not be limited to, a copy of your booking confirmation to demonstrate that a booking was actually made, as well as any information related to your complaint.
Car rental companies will further process your personal data, outside of the control of Rentalcars.com. They may also ask for additional personal data, for instance to provide additional services, or to comply with local restrictions. If available, please read the privacy statement of the car rental company to understand how they process your personal data.
2. Connectivity Providers: Please note that, sometimes, at the direction of the car rental company, we will need to share your personal data with connectivity providers related to and/or contracted by the car rental company in order to finalise and administer your reservation. Connectivity providers act on behalf of the car rental company.
3. Your local Rentalcars.com office: To support the use of Rentalcars.com services, your details may be shared with subsidiaries of the Rentalcars.com corporate group, including for customer service. To find out more about the Rentalcars.com corporate group, visit About Rentalcars.com.
4. Third-party service providers: We use service providers from outside of the Rentalcars.com corporate group to support us in providing our services. These include:
- Customer support
- Market research
- Fraud detection and prevention (including anti-fraud screening)
- Payment
  - We use third parties to process payments, handle chargebacks or provide billing collection services or other billing services, for which we might share information collected during the booking process. When a chargeback is requested for your booking, either by you or by the holder of the credit card used to make your booking, we need to share certain booking details with the payment service provider and the relevant financial institution so they can handle the chargeback. This may also include a copy of your booking confirmation or the IP address used to make your booking. We may share information with relevant financial institutions, if we consider it strictly necessary for fraud detection and prevention purposes.
- Marketing services
  - We share personal data with advertising partners, including your email address, as part of marketing Rentalcars.com services via third parties (to ensure that relevant advertisements are shown to the right audience). We use techniques such as hashing to enable the matching of your email address with an existing customer database, so that your email address cannot be used for other purposes. For information on other personalised advertisements and your choices, please read our Cookie Statement.
- Advertising partners
  - We use advertising partners, such as metasearch providers, to allow you to compare our offers with the offers of other companies. When you make a booking on Rentalcars.com after using an advertising partner, we will send the details of the booking that you made on Rentalcars.com to that partner. All service providers are required to continue to adequately safeguard your personal data.
5. Competent authorities: We disclose personal data to law enforcement to the extent that it is required by law or is strictly necessary for the prevention, detection or prosecution of criminal acts and fraud, or if we are otherwise legally obliged to do so. We may need to further disclose personal data to competent authorities to protect and defend our rights or properties, or the rights and properties of our business partners.
6. Business partners: We work with many business partners around the world. These business partners distribute or advertise the Rentalcars.com services, including the services and products of our business partners. When you make a booking on one of our business partners’ websites or apps, certain personal data that you give them, such as your name and email address, pickup and drop-off address (which may be the same as your home address), payment details, and other information, may be forwarded to us to finalize and manage your booking.
- If customer service is provided by the business partner, Rentalcars.com will share relevant booking details with them (as and when needed) in order to provide you with appropriate and efficient support.
- When you make a booking through one of our business partners’ websites, the business partners can receive certain parts of your personal data related to the specific booking and your interactions on these partner websites. This is for their commercial purposes.
- When you make a booking on a business partners’ website, please also take the time to read their privacy statement if you’d like to understand how they process your personal data.
- For fraud detection and prevention purposes, we may also exchange information about our users with business partners – but only when strictly necessary.
7. The Booking Holdings Inc. corporate group: Please read on to find out how we may share your personal data with the Booking Holdings Inc. corporate group.

Rentalcars.com is a global business. The data that we collect from you, as described in this Privacy Statement, could be made accessible from, transferred to, or stored in countries which may not have the same data protection laws as the country in which you initially provided the information. In such cases, we will protect your data as described in this Privacy Statement.

This may also be applicable if you are in the European Economic Area (EEA). Countries to which your data could be transferred may not have laws that provide the same level of protection to your personal data as laws within the EEA. Where this is the case, we will put in place appropriate safeguards to ensure that such transfers comply with relevant UK and/or EEA regulation.

In particular, when your data is transferred to third-party service providers, we establish and implement appropriate contractual, organisational and technical measures with such providers. In certain specific cases, we transfer your data outside the UK and/or EEA because this is necessary to conclude or fulfil the contract we have with you or is in your interest. For instance, when you make a reservation on Rentalcars.com or through a business partner, we may need to transfer your data to our supply partner or business partner, which might be located outside the EEA.

You can ask us to see a copy of implemented safeguards (where possible) by contacting us at datarights@rentalcars.com.

We offer free apps for a range of mobile devices, as well as versions of our regular website that have been optimised for mobile and tablet browsing. They collect and process your personal data in much the same way as our other platforms do, and they also allow you to find local rental cars based on your current location. Would you like to know more?

If you agree to it, we can send ‘push’ notifications straight to your mobile device, so you don’t miss important information about your booking. And, if you let us access your device’s location or contact details, we can provide extra services if you request them. Your mobile device will have instructions on allowing push notifications and giving us access to this kind of data.

To give you a better service and more relevant marketing, we may use something known as ‘cross-device tracking’. This just means we look at the way you use our platforms on more than one device: we could, for example, combine data from your mobile phone and your home computer. This is something we may or may not use cookies for (for more on cookies and similar technologies, please see our [Cookie Statement]).

With your consent, we may send you push notifications with information about your booking. You can also choose to grant us access to your location data or contact details in order to provide services you’ve requested. Please read your mobile device’s instructions to understand how to change your settings and control the sharing of this category of data.

In order to optimise our services and marketing activities, and to make sure we give you a consistent user experience, we use something known as ‘cross-device tracking’. This can be done with or without the use of cookies. For more general information about cookies and other similar technologies, please see our Cookie statement.

With cross-device tracking, Rentalcars.com is able to track user behaviour across multiple devices. As part of cross-device tracking, we may combine data collected from a particular browser or mobile device with data from another computer or device that is linked to it.

In order to optimise the content of the Rentalcars.com newsletter, we combine searches and bookings made from different computers and devices. You can unsubscribe from the Rentalcars.com newsletter at any time.

Personalised ads shown to you on other websites or in apps, can be offered based on your activities on linked computers and devices. By changing the cookie settings on your device (see our Cookie statement under “What are your choices?”), you can change your cross-device tracking settings for advertisement purposes. You should know that logging out of your Rentalcars.com account doesn’t mean that you will no longer receive personalised ads.

The use of social media may be integrated into Rentalcars.com services in various ways. These will involve us collecting some of your personal data or the social media provider receiving some of your information. If you’d like to learn more about how this information is used and exchanged, read on.

At Rentalcars.com, we use social media in different ways. We use it to promote our partners’ travel-related products and services and to advertise, improve and facilitate our own services.

Note that the use of social media features can result in the exchange of personal data between Rentalcars.com and the social media service provider, as we describe below. You are free not to use any of the social media features available to you.

We may maintain social media accounts and offer apps on several social media sites. Whenever you connect with Rentalcars.com through social media, your social media service provider may allow you to share information with us. If you choose to share, you will generally be told by your social media provider which information will be shared.

When you register with a Rentalcars.com social media app or connect to a social media messaging service without a Rentalcars.com user account, the information you choose to share with us may include the basic information available in your social media profile (including your email address, status updates and a list of your contacts).

We’ll use this information to help provide you with the service you requested – for example, to forward a message you want to send to your contacts, or to create a personalised user experience in the app or on our websites. It means that if you want us to, we can tailor our services to suit your needs, connecting you and your friends with the best ground transport companies and analysing and improving our travel-related services.

Your social media provider will be able to tell you more about how they use and process your data when you connect to Rentalcars.com through them. This can include combining the personal data they collect when you use Rentalcars.com through them with information they collect when you use other online platforms you have also linked to your social media account.

We are always looking for opportunities to innovate and improve the customer experience by using new technologies such as AI. We currently use AI for the following purposes:

A. Promotion of a safe and trustworthy service and prevention of fraud.
B. Showing you the most relevant content. We use AI to improve the customer experience and personalization on our platforms (such as providing you with summarized reviews). This may include sending you details of a trip we think you would be interested in (where you have consented to this communication) and ranking search results to put the best matches at the top of your feed. Our How We Work page contains more information on our recommendation systems, including on how you can manage your personalization preferences.
C. Improving our services. We use AI to improve trip services in accordance with the details set out in the section titled “To process your personal data like this, we rely on the following legal grounds.” This includes the identification of trends, monitoring the operations of the platform, troubleshooting our websites and apps, as well as improving the services we offer to you.
D. Developing AI interactive chats to allow you to ask questions about a trip or service and receive AI-generated relevant responses or itinerary suggestions.
E. Improving the effectiveness of the other purposes set out in this privacy statement.

We assess our AI against data protection principles, such as minimization, accuracy, and purpose limitation. We take steps to prevent data inaccuracies, harm, and biases from our use of AI.

See the section titled “What security and retention procedures do we put in place to safeguard your personal data?” for more information regarding the safeguards we have implemented which will also apply to personal data we process to train or use AI.

In most cases, the use of AI will not result in an automated decision being made about you. When we provide you with a trip recommendation using AI, this is only a suggestion and you have control over how this is used.

We do not currently use any solely automated systems to make a decision about you which would result in a legal or similarly significant effect on you. We will inform you if this changes and will ensure that we have implemented suitable measures to safeguard your rights and freedoms. Sometimes, AI will contribute to a decision we make. AI that is used to inform or monitor the platform, for example for fraud attempts, will not autonomously make any decision that will have a significant impact on you. Where an AI identifies a possible issue, a member of our team will complete the review and make an informed decision. In limited cases, we may complete decision-making without human review after we have assessed that the decision would not result in a significant effect on you.

If you would like to know more about our use of AI, contact us as described in the section titled “How can you control the personal data you have given us?”

Tienes el derecho, sujeto a determinadas excepciones legales, a acceder, corregir o borrar cualquier dato personal del que dispongamos, y a rechazar que los mismos sean procesados. Puedes usar nuestro Portal de Solicitud de Datos Personales para ejercer cualquiera de estos derechos. Si así lo haces, te solicitaremos más información para confirmar tu identidad, a fin de mantener a salvo la información, y gestionaremos tu solicitud de acuerdo con la ley de protección de datos aplicable del Reino Unido. Puedes actualizar o borrar tu cuenta de usuario en cualquier momento iniciando sesión en nuestra web.

When you make a booking or request a quote, we ask whether you’d like to opt in to receive marketing emails. You can opt out at any time by clicking “unsubscribe” in any of these marketing emails, or by updating your email preferences in your user account.

1. You can ask us for a copy of the personal data we hold about you,
2. You can inform us of any changes to your personal data, or you can ask us to correct any of the personal data we hold about you. As explained below, you can make some of these changes directly online yourself when you have a user account,
3. In certain situations, you can ask us to erase, block, or restrict the processing of the personal data we hold about you, or object to particular ways in which we are using your personal data,
4. In certain situations, you can also ask us to send the personal data you have given us to a third party,
5. Where we are using your personal data on the basis of your consent, you are entitled to withdraw that consent at any time subject to applicable law, and
6. Where we process your personal data based on legitimate interest or the public interest, you have the right to object to that use of your personal data at any time, subject to applicable law.

We rely on you to make sure that your personal information is complete, accurate and current. Please do let us know about any changes to, or inaccuracies in, your personal information as soon as possible.

If you have a Rentalcars.com user account, you can access a lot of your personal data through our website or apps. You’ll generally find the option to add, update or remove information we have about you in your account settings.

If any of the personal data we have about you isn’t accessible through our website or apps, you can send us a request.

If you want to exercise your right of correction, access, erasure or objection or if you do not want us to share your data with Booking.com, all you need to do is complete and submit the form found in the Data Subject Request Portal. For any requests relating to this Privacy Statement, to exercise any of your other rights, or if you have a complaint, please contact our Data Protection Officer at dataprotectionofficer@rentalcars.com. You can also contact your local data protection authority if you have a complaint.

If you’d like to object to your personal data being processed on the basis of legitimate interest and there’s no way to opt out directly, please contact us at dataprotectionofficer@rentalcars.com. If you’d like to contact us by post, please address it to the Data Protection Officer and use the following postal address: 6 Goods Yard Street, Manchester, M3 3BG, United Kingdom.

Requests from law enforcement should be submitted to lossprevention@rentalcars.com.

This section supplements our Privacy Statement and only applies if you reside in the state of California. Where applicable, it describes how we use and process your personal information (the term used under the law) and explains your particular rights under California law.

Below, we describe the categories of personal information we collect about you:

A. Identifiers (e.g. your name, account number, email address, IP address, unique personal identifier)
B. Financial, medical, or health insurance information (e.g. your bank account number, payment card number, medical information if provided by you or on your behalf)
C. Characteristics of protected classifications under California or federal law (e.g. your gender, religion, sexual orientation)
D. Commercial information (e.g. your purchase information or purchase history)
E. Internet or other electronic network activity information (e.g. information about your website or app usage)
F. Geolocation data (e.g. your physical location)
G. Visual information (e.g. any photographs you may upload on your account)
H. Inferences (e.g. analytics and preferences)
I. Professional or employment-related information (e.g. employer and business travel details).
J. Sensitive information (e.g. driver’s licence, state identification or passport number, account sign-in details, communications between you and a car rental supplier via Rentalcars.com)

If you would like more information about the categories mentioned above, the specific types of personal information we collect, or the purposes for which we collect them, please read the sections of our Privacy Statement titled “Personal data you give us”, “Personal data you give us about others”, and “Why do we collect and use your personal data?”.

To learn more about the receipt of personal information from and the sharing of personal information with third parties, please read the sections “Personal data we get from other companies” and “What third parties do we share your personal data with – and why?”.

To learn more about our security and retention procedures, please read the section of our Privacy Statement “What security and retention procedures do we put in place to safeguard your personal data?”.

We may share certain pieces of your personal information with third parties, which under California law can be treated as a 'sale' of information. This may include information related to (A) Identifiers, (D) Commercial information, (E) Internet Activity, (F) Geolocation data, and (H) Inferences, as described above. We may also share your personal information, listed above under A-I for “business purposes,” such as to service providers who assist us with securing our services, for payment purposes, customer support services, delivering marketing messages, or advertisements. For more details, including the recipients of your personal information, you can check out the “Personal data we get from other companies” and “What third parties do we share your personal data with – and why?” sections of our Privacy Statement.

We may also share your personal information, listed above under A-I for “business purposes,” such as to service providers who assist us with securing our services, for payment purposes, customer support services, delivering marketing messages, or advertisements. For more details, including the recipients of your personal information, you can check out the “Personal data we get from other companies” and “What third parties do we share your personal data with – and why?” sections of our Privacy Statement.

For more details, including the recipients of your personal information, you can check out the “Personal data we get from other companies” and “What third parties do we share your personal data with – and why?” sections of our Privacy Statement.

California law provides you with certain rights, including the right to access specific pieces of personal information, to learn about how we process personal information (including disclosing or selling personal information), to correct your personal information, to request deletion of personal information, to opt out of ‘sales’, to opt out of ‘sharing’, and not to be denied goods or services for exercising these rights. You may exercise your right to opt out of 'sales' by clicking on this link and following the instructions.

To exercise your right to request access to or the deletion of your personal information under California law, please submit a request via our Data Subject Request Portal. To otherwise exercise these or any of your other rights under California law, or to contact us with questions and concerns about this Privacy Statement and our practices, you can also contact us by telephone at 018335743225 or by email at dataprotectionofficer@rentalcars.com with the subject line: “California Resident Privacy Rights - Request”.

If you are an authorized agent wishing to exercise rights on behalf of a California consumer, please contact us at the email above, attaching a copy of the consumer’s written authorization, designating you as their agent. We may need to verify your identity before completing your rights request by, for example, requesting information about your previous bookings with us.

Rentalcars.com’s services are not directed at children under the age of 16 years. Therefore, Rentalcars.com does not knowingly sell the personal information of minors under the age of 16 years without appropriate consent, as required under the California Consumer Privacy Act (CCPA).

Rentalcars.com has compiled the following statistics about the receipt and handling of requests identified as being submitted under the CCPA by consumers from California, for the period between 1 January 2021 and 31 December2021:

Number of ‘requests to know’ that Booking.com Transport Limited received, complied with (wholly or in part) or denied: 31
Number of ‘requests to delete’ that Booking.com Transport Limited received, complied with (wholly or in part) or denied: 65
Number of ‘requests to opt out of sales’ that Booking.com Transport Limited complied with (wholly or in part) or denied: 1893
Average number of days taken by Booking.com Transport Limited to substantially respond to requests to know, delete or opt out: 2.82 days

If you live in the United States (excluding California), this section applies to you (along with the rest of this Privacy Statement). It informs you of certain rights you have in various US States (excluding California), which may be different from those described elsewhere in this Privacy Statement. If you are a resident of California, please go to the ‘For California Residents’ section directly above to learn more about your specific rights.

In addition to the ones listed earlier in this Privacy Statement, the categories of personal data we may collect about you include:

A. Geolocation data (i.e. your physical location)
B. Sensitive data (citizenship or immigration status, data revealing your racial, ethnic origin, religious beliefs, mental or physical health diagnosis or sexual orientation - if provided by you
C. Inferences (e.g. analytics and preferences)

If you would like more information about these categories, the specific types of personal data we collect, or the purposes for which we collect them, please read the sections of our Privacy Statement titled “Personal data you give us”, “Personal data we collect automatically”, “Personal data we get from other companies" and "Why do we collect and use your personal data?".

To learn more about the receipt of personal data from and the sharing of personal data with business partners, please read the sections “Personal data you give us”, “Personal data we collect automatically”, “Personal data we get from other companies” and “What third parties do we share your personal data with – and why?”.

We may share certain elements of your personal data with third parties, which under US State privacy laws may be considered the sale of personal data. This may include information related to inferences and analytics. We may also share your personal data with service providers who assist us with delivering marketing messages, or advertisements.

For more details you can find more information about this in the “Personal data you give us”, “Personal data we collect automatically”, “Personal data we get from other companies” and “What third parties do we share your personal data with – and why?” sections of our Privacy Statement.

Your rights under privacy laws include the right of access to your personal data, the right to correct your personal data, the right to request deletion of your personal data and the right to obtain a copy of your personal data. US State privacy laws provide you with certain additional rights, which include the right to opt out of: the sale of your personal data, targeted advertising, and profiling which may have a legal impact on you.

Please fill out the DSR form in our Data Subject Request Portal to exercise your right to:

request access to, obtain a copy of, correct and/or delete your personal data, and/or
opt out of targeted advertising, profiling and/or the sale of your personal data.

You can also contact us with any questions and/or concerns about this Privacy Statement and our practices, or to exercise any of your rights, by sending an email to dataprotectionofficer@rentalcars.com with the subject line: ‘US Resident Privacy Rights - Request’.

If you are the parent, legal guardian, or authorised agent of a consumer and you wish to exercise rights on their behalf, please contact us at dataprotectionofficer@rentalcars.com. We may need to verify your identity and authorisation before completing the rights request.

When you exercise your rights, we verify your identity in various ways, including whether the name and the email address you provide in the request match the data you (or the person on whose behalf you are acting) provided when using our services. You may authorise another individual to exercise opt-out rights on your behalf. If we receive such a request, we will send an email to confirm you authorised the requester to act for you.

Rentalcars.com’s services are not directed at children under the age of 16 years. Therefore, Rentalcars.com does not intentionally collect the personal data of minors and we do not knowingly sell the personal information of minors under the age of 16 years without appropriate consent.

This section supplements our Privacy Statement and only applies if you reside in South Korea.

1. Items of personal information collected

For information about the items of personal information that we collect, please read the sections of our Privacy Statement titled “Personal data you give us”, “Personal data you give us about others”, “Personal data we collect automatically” and “Personal data we get from other companies”.

2. Purposes of collection and use of personal information

For information about the purpose and use of the personal information that we collect, please read the section of our Privacy Statement titled “Why do we collect and use your personal data?”

3. Period of retention and use of personal information

We’ll keep your personal data for as long as is necessary to enable you to use our services, to enable us to provide our services to you (which includes maintaining any Booking.com Transport Limited user accounts you may have), to comply with applicable laws, to resolve any disputes, and in general to allow us to conduct our business, which includes detecting and preventing fraud and/or other illegal activities.

4. Delegation of processing to trustees and disclosure of personal information to third parties

Trustees and Purpose / Entrusted Duties
- Payment Processing trustees
  - View list of payment processing trustees
  - We use third parties to process payments, handle chargebacks or provide billing collection services. When a chargeback is requested for your reservation, either by you or by the holder of the credit card used to make it, we need to share certain reservation details with the payment service provider and the relevant financial institution so they can handle the chargeback. This may also include a copy of your reservation confirmation, or the IP address used to make your reservation. We may also share information with relevant financial institutions, if we consider it strictly necessary for fraud detection and prevention purposes.
- Customer support trustees
  - View list of customer support trustees
  - Personal information is shared with these trustees so that we can provide customer support services to you when you need us.
- Market research trustees
  - View list of market research trustees
  - We sometimes invite our customers to take part in market research. If you accept our invitation to participate, personal information will be collected, used and shared with trustees. These trustees help us to carry out this market research.
- Advertising and marketing trustees
  - View list of advertising and marketing trustees
  - We share personal data, including your email address, with advertising partners as part of third-party marketing services (to ensure that the relevant advertisements are shown to the right audience).
  - We use techniques like hashing to enable your email address to be matched with an existing customer database, so it cannot be used for other purposes. For information on other personalised advertisements and your choices, please read our [Cookie Statement].
  - We use advertising partners, such as metasearch providers, to allow you to compare our offers against offers from other online car rental services. When you make a reservation on Rentalcars.com after using an advertising partner, we will send the details of the reservation that you made on Rentalcars.com to that partner.
- Booking Holdings Inc.
  - Personal information is shared with companies in the Booking Holdings Inc. corporate group for the following purposes:
    To provide services (including to make, administer and manage reservations or handle payments);
    To provide customer service;
    to detect, prevent and investigate data breaches, fraud and other illegal activities;
    D. For analytical and product improvement purposes, where permitted by applicable law;
    To provide personalised offers or send you marketing with your consent or as otherwise permitted by applicable law;
    For hosting, technical support, overall maintenance and maintaining security of such shared personal information;
    To ensure compliance with applicable laws.
- Connectivity Providers
  - View list of connectivity providers
  - Please note that certain suppliers or partners may need us to share your personal data with a contracted Connectivity Provider in order to be able to finalise and administer your reservation. Connectivity Providers act on behalf of suppliers and partners and help them to manage their reservations.
- Trip Providers
  - In order to complete your car rental booking, we transfer relevant reservation details to the car rental provider you have booked with. This is one of the most essential things we do for you.
  - Depending on the booking and the car rental provider, the details we share can include your name, contact and payment details , the names of the people accompanying you and any other information or preferences you specified when you made your booking.

5. Destruction of personal information

When destroying personal information, Booking.com Transport Limited takes commercially reasonable and technically feasible measures to make the personal information irrecoverable or irreproducible. Electronic documents or files containing personal information are permanently deleted using a technical method that makes recovery or retrieval of information impossible. Non-electronic documents or files containing personal information are shredded or incinerated. In some cases, personal information needs to be kept beyond the period of retention and used as prescribed by applicable law. In these cases this information will be stored or maintained separately from other items of personal information, to the extent technically possible.

6. Physical, technical and administrative measures for protecting personal information

a. Administrative measures: establishment of information protection and personal information protection policies and guidelines; minimisation and education of personal information handlers.
b. Technical measures: control of access to personal information; storage, review and prevention of forgery of access records; encryption of personal information; installation of security programs.
c. Physical measures: control of access to data centres.

7. Department for protection of personal information

If you have a request that is related to this Privacy Statement or your data subject rights, please contact our Data Protection Office. This is the department responsible for the protection of personal information and related complaints:
Data Protection Office
82 2 6323 8008
dataprotectionofficer@rentalcars.com
You may also use any of the addresses below to contact or consult your local authorities about personal information related matters:
- Privacy Infringement Report Center privacy.kisa.or.kr / 118
- Cyber Investigation Division, Supreme Prosecutors' Office www.spo.go.kr / 1301
- National Police Agency Cyber Security Bureau www.ctrc.go.kr / 182

8. Domestic Representative in Korea

Pursuant to the Personal Information Protection Act and the Act on the Promotion of the Use of the Information Network and Information Protection, the information regarding the domestic agent is as follows:
- Name and representative: Bae, Kim & Lee LLC (Representative: Soonik Kwon)
- Address, phone number and email address: Tower B, Centropolis, 26 Ujeongguk-ro, Jongno-gu, Seoul 03161, +82 2 3404 0153, privacy.kr@booking.com.

9. Previous versions of our Privacy Statement

In this section you can access the previous versions of our Privacy Statement. View the previous versions.

If you live in Japan, this section applies to you (along with the rest of this Privacy Statement).

It describes how we use and process your personal data, and explains your particular rights under Japanese law - specifically, the ‘Act on the Protection of Personal Information’ (APPI).
If there’s a mismatch between any provision in this section and any provision in another part of this Privacy Statement, the provision in this section will determine how we process your personal data if you live in Japan.

Sensitive personal information

‘Sensitive personal information’ is any personal information that can be the basis for discrimination or prejudice. When using Rentalcars.com’s services, sensitive information may be collected by Rentalcars.com or a third party. For example, when making a booking, you might disclose information about a disability you have.
We will ask for your consent before we collect sensitive personal information. However, where you voluntarily provide other sensitive personal information, we will assume that you have given us consent to process that information within the context it was submitted.

Data sharing

To enable us to provide our services, your personal information will be shared with, processed by and stored by third parties, as further described below under “List of third parties”, many of which are located outside of Japan. We ask for your consent before sharing your personal information with such third parties.
In order to complete your reservation, we transfer relevant reservation details to the service provider with whom you have booked. This is one of the most essential things we do for you.
Depending on the reservation and the service provider, the personal information we transfer can include your name, contact and payment details, the names of the people accompanying you, and any other information or preferences you've specified when making your reservation.
In addition to the list of third parties provided, other recipients of your personal information may include Booking Holdings Inc. corporate group and its service providers.
You can find out more about this in the “How is your personal data shared within the Booking Holdings Inc. corporate group?” section of our Privacy Statement.

List of third parties

With your consent, we may disclose your personal data to third parties in the following categories and for the following purposes, as permitted by the APPI. These parties can be located inside or outside Japan, as described below.
Types of third parties and Purposes of processing:
- Payment service providers
  - To help us process payments, handle chargebacks and/or provide billing collection services.
  - View list of payment service providers
- Advertising
  - To help advertise more relevant products and services to you.
  - View list of advertising parties
- Market research
  - To help us carry out research, so that we can improve the products and services we offer.
  - View list of market research parties
- Customer support
  - To provide support with requests, claims and queries in relation to your reservation or other aspects connected to your trip.
  - View list of customer support parties
- Connectivity providers
  - To facilitate the transfer of your reservation details to the car rental provider you have booked with.
  - View list of connectivity providers
- Cloud providers
  - To help us to run the services we offer to you.
  - View list of cloud providers
- Fraud prevention
  - To help us detect and prevent fraud and fraudulent transactions.
  - View list of fraud prevention providers
We take all necessary steps to ensure the above third parties are selected based on their capacity to comply with Booking.com Transport Limited’s privacy and data protection requirements and the applicable privacy and data protection laws, including the relevant international data transfer requirements.
To find out more about the measures and systems in place regarding the protection of personal information in the countries where the above third parties are based, please visit the website for The Japanese Data Protection Authority (the Personal Information Protection Commission, or PPC). There, you will find issued investigations regarding the systems for the protection of personal information in certain countries and/or regions.
If you have any questions, please contact us at dataprotectionofficer@rentalcars.com. Please use the subject line: ‘Japan APPI - Data Sharing’.

Safety management measures

Booking.com Transport Limited takes its responsibilities for privacy and security seriously and implements appropriate technical and organisational measures to protect your personal information.
We have established – and continue to maintain and apply – a framework of policies and procedures to comply with all the privacy and data protection laws that apply to us. This includes organising recurring security and privacy awareness initiatives and training for employees and maintaining an inventory of information assets and processing activities.
We have also implemented physical safety management measures, to prevent theft of or damage to personal information, and technical security management measures, such as system access restrictions and authentication mechanisms. We take further measures to protect your data against data leakage and exfiltration, as well as accidental data destruction.
Booking.com Transport Limited requires that any third party it appoints has similar (or better) security and organisation measures in place, so that your personal information is kept confidential and secure at all times.
For details of the measures we take for the safety of our customers' personal information, contact us at dataprotectionofficer@rentalcars.com. Please use the subject line: ‘Japan APPI - Safety management measures’.

How to exercise your rights

If you have a Rentalcars.com account, you can find the personal information we store about you in your account settings. This includes your name, email address, phone number, address and payment information. You can exercise your right to access, rectification or erasure of this information by viewing, changing or deleting it at any time.
If you want to delete your account, you can also do this by going to account settings on the Rentalcars.com website, clicking into the ‘Account Details’ section and selecting ‘Deactivate Account’.
In addition, if you’d like to exercise your right to access or delete your data, to unsubscribe from email marketing, or to withdraw the consent you have given us to process your personal information, please fill out our form: Data Subject Request Portal.
To protect your personal information, we will need to verify your identity before completing your request. We will do this by asking you questions about your previous reservations with us. We will respond to your request without undue delay.
To otherwise exercise these or any of your other rights under the APPI, or to contact us about this Privacy Statement, you can email us at dataprotectionofficer@rentalcars.com. Please use the subject line: ‘Japan APPI Privacy Rights - Request’.