Privacy Policy

Data protection information note of “HOLIDAY-CAR-RENTAL” Autókereskedelmi és Kölcsönző Korlátolt Felelősségű Társaság

 

Dear Client,

Please read this data protection information note carefully before contacting our Company. Our clients may access the present data protection information note at any time on the website of the Company: http://holidaycarrental.hu/, and in the client area at the seat of the Company.

I.) The purpose of the data protection information note

The purpose of this data protection information note is to provide You with short, understandable and clear information on the process of handling your personal data by our Company in order to inform You before the data processing, in accordance with new Union law and Hungarian legislation, about all questions related to the processing of your personal data as well as the way of handling any personal data breach.

Please note that this data protection information note is based on the internal data processing policy that contains the Company’s data processing procedure, with due account to the Regulation (EU) 2016/679 of the European Parliament and the Council (hereinafter: GDPR) that entered into force on 25 May 2018, and certain provisions of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (hereinafter: Information Act), Act C of 2000 on Accounting, Act CL of 2017 on the Order of Taxation and Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising.

During the term of data processing, our Company shall guarantee that all data provided by You to us, including Your personal data, shall only be processed for the purpose of the following data processing purposes, to the extent necessary, and such data shall enjoy protection against unauthorised access by third persons, amendment or deletion, and they shall be safeguarded against incidental loss, damaging or disclosure. To guarantee the security of data processing, our Company has its own internal data protection policy. 

The present data protection information note provides information on certain data processing, the exercising of rights, the handling of personal data breaches and the storing of data by the Company in relation to the Company’s activity.

II.) Processing of personal data obtained by the Company in the context of services of car rental and damage claims handling provided by the Company

Our Company shall handle the following data for the purpose of performing the present contracts:

 

- name of the contracting partner

- address

- place and date of birth

- mother’s maiden name

- ID card or passport number

- driving licence number

- e-mail address

- GPS-based driving data (in case of car rental services).

 

We shall photocopy your ID card or passport and residence card as well as driving licence upon contracting; the photocopies shall form an inseparable annex to the contract and they shall be stored attached to the contract.

 

Legal basis and purpose of data processing:

During the performance of car rental and damage claim handling contracts, our Company may process Your personal data as the contracting party to the extent necessary for performing the contract, and for the purpose of compliance with the obligations binding our Company and specified by the law on the basis of the contractual relationship. By signing the contract, You consent to the Company processing your above-mentioned personal data as regulated in this data protection information note.

Term of data processing:  8 years, with account to the fact that our Company, as a taxpayer engaged in a taxable activity according to the laws in force on the order of taxation, shall retain the contracts concluded with You as the documents that serve the basis of levying the tax until the expiry of the term of limitation of the right to levy the tax.

Data transfer:

Our Company shall meet its obligation related to accounting and bookkeeping by the ............................. Kft. (company reg. No.:................., seat:.............................., tax no.:.................) as accountant (hereinafter: Accountant). Accountant shall be the Company’s data processor, and the scope of the data processed by him as well as the method and the extent of data processing shall be specified by our Company; the Accountant may only process Your personal data in the interest of our Company, for the purpose of compliance with the obligations specified by the law.

 

GPS-based data processing

Please note that during the performance of the car rental contracts, our Company uses a GPS tracking device in the vehicles rented out. With regard to the data received by the Company via the tracking device, the basis of processing is monitoring the performance of the rights and obligations set forth in the car rental contracts.

 

Our Company has access to the GPS signs of the vehicles without the contribution of any third party.

III.) Processing of the data related to the website of the Company

Using cookies

To better serve your needs, our Website may place on your computer small data package(s) (so called “cookie”). The cookie is a small package of information sent by the website server to Your browser and sent back by the browser to the server at the time of each request directed to the server. The service provider processing the cookie may connect the current visit by the user with his earlier visits, but only as regards its own content. You can manually delete cookies from your computer or you can set your browser to ban the application of cookies. Handling cookies is usually possible in the browsers’ Tools/Settings menu, in the menu Data Protection/History/Personal settings under the name cookie or tracking. Please note that certain function(s) of the website can only be used after accepting the installation of specific cookies.

Cookies shall only be placed on Your computer after You explicitly accept the information note on the placement of cookies.

Please note that the cookie used on our website is not suitable for automated data collection for the analysis or forecast of the features related to Your personal data performance, Your interest, reliability, conduct, place of stay, movement, health condition or personal preferences (prohibition of profiling), nor for transferring any personal data to third persons.

The website of our Company may place two types of cookies on Your computer, these are:

 

• short term cookies (session-id cookies): they store information temporarily and for the duration of the User using the website; they are deleted automatically afterwards.
• long term cookies: they store data for a longer period or until actual manual deletion. The storage period of cookies may also depend on the settings of the internet browser used by the User. The Data Controller shall also use analytical or performance monitoring cookies aimed at differentiating and counting the visitors of the website, and at monitoring how the Users use the website, for example which pages they visit most often and whether they receive an error message from the website.

Our Company uses codes of different services that (may) place cookies on the computer of the relevant person. The Company shall thus use the codes of the following services: the Google Adwords remarketing tracing code aimed at the Data Controller placing remarketing advertisements for the affected person on the websites that belong to the Google Display network; the pixel code of Facebook aimed at the Data Controller placing advertisements on Facebook for the Affected person; the Google Analytics code aimed at collecting visiting statistics about the Website.

 

Online request for quotation

 

The website of our Company offers a functionality of online request for quotation subject to the provision of the following data:

 

- name of the person requesting quotation

- e-mail address

- phone number

 

The data provided in the course of online quotation request shall only be processed for the purpose of informing You, until the performance of our obligation to provide information, then we shall irrecoverably delete the data from our server.

IV.) Data processing by the Company in the context of the newsletter service

In the interest of providing You with up-to-date information on the latest offers and services of our Company, we shall provide a newsletter service subject to your request.

The scope of the data processed:

You have to provide our Company with Your name and e-mail address when you subscribe to the newsletter. After subscribing to the newsletter, you may amend your data at any time by sending an electronic mail to info@holidaycarrental.hu or by sending a letter by mail to the address of the Company.

 

VI.) Your rights connected to the data processing by the Company

Our Company shall ensure that during the whole term of the data processing, You may effectively exercise your rights connected to data processing as provided by the GDPR and the Hungarian laws.

You shall have the following rights during the data processing:

• right to prior information,
• right to access,
• right to rectification,
• right to have the processing restricted,
• right to deletion.

VII.) Handling personal data breaches

Personal data breach shall mean any unlawful handling or processing of personal data, in particular any unauthorised access, alteration, transfer, disclosure, deletion or destruction as well as any accidental destruction or damaging of it.

 

Our Company undertakes to investigate and evaluate without delay the risks and the potential effects of the personal data breach, should it become aware of such breach within its own scope of operation or upon reporting.

VIII.) Method of data storage

The IT systems and other data storage facilities of our Company are located in its registered office and on the servers operated by Creartwork Kft. [hosting provider].

Our Company provides for technical, organisational and structural measures that grant protection for the security of processing and offers an adequate level of protection against the risks related to the processing.

During the processing, our Company shall retain

1. a) secrecy;
2. b) integrity;
3. c) availability.