PRIVACY POLICY

1. Data Controller

CLS Rent a Car Unipessoal Lda., headquartered at Av. do Alto da Lixa n.º 1592, unit 3732-C, 4615-480 Lixa, Felgueiras, VAT no. 518914828, is the entity responsible for processing personal data collected in the scope of its activity.

2. Personal Data Collected

We collect and process the following personal data:

• Identification data (name, address, VAT number, date of birth, ID number, and driving license);
• Contact details (phone number, e-mail);
• Payment and billing data;
• Rental contract data (including booking history, returns, and damages);
• Traffic and usage data (tolls, fines, fuel consumption, mileage);
• Geolocation data (only in case of contractual breach, theft, or legal requirement).

3. Purpose of Processing

Personal data is processed for the following purposes:

• Management and execution of the rental contract;
• Invoicing, payment management, and compliance with tax obligations;
• Compliance with legal obligations (e.g., driver identification to authorities);
• Customer communication (before and after rental);
• Handling complaints and disputes;
• Marketing and commercial communication, only with the data subject’s consent.

4. Legal Basis

Processing is carried out based on:

• Execution of the contract (Art. 6(1)(b) GDPR);
• Compliance with legal obligations (Art. 6(1)(c) GDPR);
• Legitimate interests of the controller (Art. 6(1)(f) GDPR);
• Consent of the data subject (Art. 6(1)(a) GDPR).

5. Data Retention

Personal data will be kept only for the necessary period:

• During the contract term and up to 5 years after its termination (legal period for tax and contractual purposes);
• Marketing data until consent is withdrawn;
• Data related to disputes until a final decision is reached.

6. Data Sharing

Data may be disclosed to:

• Judicial, tax, police, and regulatory authorities;
• Insurance companies and financial institutions;
• Service providers essential to the activity (e.g., workshops, IT companies, accounting services).

7. Data Subject Rights

Under the law, clients have the following rights:

• Access to data;
• Rectification;
• Erasure (“right to be forgotten”);
• Restriction of processing;
• Data portability;
• Objection to processing;
• Withdrawal of consent at any time (when applicable).

Requests to exercise these rights must be submitted in writing to: geral@clsrentacar.pt

8. Security

CLS Rent a Car adopts appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, preventing unauthorized access, loss, destruction, or alteration.

9. Complaints

Data subjects may file a complaint with the Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt – or resort to alternative dispute resolution mechanisms available.

10. Changes to the Policy

CLS Rent a Car may amend this Privacy Policy at any time, with the updated version published on the official website.