COLLECTION

We collect Personal Data that you provide on our websites, on third-party websites, on applications and offline in connection with any inquiries, reservations, rentals or purchases you make in relation to our services. We may collect your Personal Data directly or through our service providers, business partners, discount sponsors, licensees, advertisers and booking channel providers. For further details, see below:

TYPES OF INFORMATION COLLECTED (may include but not limited to):

  1. Personal Information: (name, age, date and place of birth, gender, address, email address, phone number, passport number, driving license or other ID photograph, credit score and history, criminal history)
  2. Rental Information: (payment card information, booking location, rental location, return location, preferences and usage information, charges incurred, purchase prices and details, itinerary information, data related to claims)

METHODS AND SOURCES OF COLLECTION

  1. Online: (our website, our offices, our mobile apps, our social network pages)
  2. Offline
    1. calls to or from our reservation, customer service, emergency road-side assistance, customer contact or member care centers
    2. interaction with our various licensees, affiliates, and subsidiaries, including car sales and other businesses
    3. in-person at rental locations
    4. in-vehicle or in-equipment technology or through other telematic devices
    5. in connection with a reservation (even an abandoned or interrupted reservation), a rental of a vehicle or equipment, or your purchase of a vehicle or equipment
    6. reservations you make with us through licensees, travel agents or brokers, online or in-person
    7. transactions you complete with us, our licensees, and agents including options you take, charges you incur and any incidents or accidents that may occur
    8. when you join our membership programs
    9. CDP Sponsors or sponsors of promotion codes, affiliation, or special discount codes.
    10. consumer reporting agencies and other companies that have business relationships with us, such as our licensees’ affiliates and business partners, including airlines, hotels, and insurance companies
    11. Claims Management service providers (either affiliated directly with us, or operated by a third party)

Depending on the purposes for which we collect and use your Personal Data, as set out in this Policy, the Personal Data we collect from you may be required due to a statutory or contractual obligation, provided on a voluntary basis, or necessary for us to enter into a contract with you. If you do not provide your Personal Data to us this may result in disadvantages to you. In particular, we may not be able to rent to you. However, unless otherwise stated, not providing your Personal Data will not result in legal consequence for you.

PURPOSES

Below we have set out the various purposes for which we process your Personal Data. We have also set out the legal grounds for the processing of your Personal Data for each purpose.

OPERATIONS AND SERVICES

We may use your Personal Data to provide you with the services or products you request from us and to perform other activities related to such services or products, including:

  1. to Confirm/Modify/Cancel your booking
  2. to correspond with you in relation to your booking or rental
  3. to verify your identity and to carry out credit and fraud prevention checks prior to releasing a vehicle to you at the start of your rental
  4. to manage your rental and/or invoice and/or any dispute or claims or recover any losses relating to your rental
  5. to manage any fines and penalties (this processing is either required by low or carried out to support our legitimate interests.

Legal grounds: to perform our contract with you or to take steps at your request prior to entering into a contract with you.

OUR MARKETING

We may use your Personal Data to provide you with marketing information, special offers and promotions via various means, including e-mail, in accordance with applicable law.

Legal grounds: on the basis of your consent. You can unsubscribe from receiving such messages at any time by contacting us at the details at the Contacts Section below as well as the unsubscribe link in each e-mail message

NORMAL COURSE OF BUSINESS

We may also process your Personal Data and other information if such processing is necessary

  1. to comply with the law or in response to a subpoena, court order, law enforcement request, or other legal process
    Legal grounds: where it is necessary for compliance with a legal obligation to which we are subject.
  2. to protect the interests, rights, safety, or property of us or others
    Legal grounds: where it is necessary for compliance with a legal obligation to which we are subject.
  3. to enforce any terms of service on our websites or the terms and conditions of any rental, purchase, or utilization
    Legal grounds: for our legitimate interests, which are to protect us and enforce such terms of service or terms and conditions.
  4. as part of a business transaction where all or some of our assets are bought, sold, or otherwise transferred by act of law or contract
    Legal grounds: for our and third parties’ legitimate interests.
  5. to operate our systems properly.
    Legal grounds: for our legitimate interests, which are the proper running of our systems and our business in order to provide our products and services to you and other customers.

TELEMATICS

We may use in-vehicle data systems to collect data about the vehicle’s position, condition and performance during your rental. Use may include:

  1. to collect data relating the vehicle’s condition and performance during the rental to improve the accuracy of our billing processes on return of the vehicle
    Legal grounds: for our legitimate interests to ensure accurate charging for your uses of the vehicle, including for fuel and damage, during your rental
  2. to collect data relating to the driver’s operation of the vehicle during the rental for safety, security and claims management reasons, including to contact the renter if the data suggests there is a security, safety or operational issue that we need to bring to your attention
    Legal grounds: for our legitimate interests to enable us to defend and manage claims arising out of accidents involving the rental vehicle; to ensure we meet our safety and security obligations in relation to the vehicle and each rental
  3. to track the vehicle’s location throughout the duration of a rental in order to access such information solely where the driver is in breach of the rental agreement (by failing to return the vehicle on time or by driving into unauthorized territories) or to assist in the defense and management of claims following an accident involving the vehicle
    Legal grounds: our legitimate interests to protect our assets, enforce our terms and conditions and defend and manage claims

WEBSITES

If you use our website, we may process your Personal Data as follows:

SHARING

CATEGORIES OF RECIPIENT

We may share your personal data among ourselves, our agents, our licensees and other companies to provide services to you. Your personal data will be disclosed, where necessary and relevant:

INTERNATIONAL TRANSFERS

Depending on the circumstances, certain recipients may be located in countries which have, or have not, been recognized by the European Commission as ensuring an adequate level of data protection. In the event your destination country is not recognized by the European Commission as having adequate levels of data protection you should be assured that we have put in place the appropriate safeguards to ensure that your personal data is protected in accordance with the requirements of the Data Protection Act 1998 and associated EU regulations.

RETENTION & SECURITY

DATA RETENTION

We retain personal data about our customers for as long as we believe is necessary for the purposes for which it was collected, or unless otherwise allowed or required by law. We collect Personal Data for a number of purposes (see above) and may be required to retain it for legal (including tax) reasons for a period which is longer than the time we need or use the data for the purpose of providing our rental services to you. We maintain a data retention policy to cover all the Personal Data we retain across our systems. If you have any questions about the retention period applying to the Personal Data, we collect about you, please contact us in the details provided below.

SECURITY MEASURES

Information is stored and accessed in various locations and cloud services. Servers which store information are primarily located in Greece and Europe, although storage may occur in other locations as well. We use reasonable administrative, technical, personnel, and physical measures

  1. to safeguard Personal Data against loss, theft, unauthorized use, disclosure, or modification
  2. to ensure the integrity of your Personal Data

To help us protect your privacy, you should maintain the secrecy of any logon IDs and passwords, Member numbers, or other identifiers or credentials you may have set up or were provided with in connection with your participation in or use of our products, services, or websites.

TRANSMISSIONS

As you may be aware, there is no completely secure method of transmitting or storing data. Although their physical characteristics are different, postal mail, telephone calls, text messages, faxes and transmissions over the Internet or wireless networks all present possibilities of loss, misrouting, interception and misuse of the data that is transmitted. If you have reason to believe that any account with us is no longer secure, you must immediately contact us.

We try to strike a balance between the security of your data and your convenience. As a result, we may sometimes use a method of communication that is less secure than a less convenient alternative. Please do not include confidential information, such as your credit or debit card number or account passwords, in any e-mail or text you send to us or on any posting you make to a public area of a third-party social network page, especially since any such posting immediately becomes public. For a more secure way to communicate with us over the Internet, please click on the “Contact Us” link on our website.

YOUR RIGHTS

You can make a request to us to exercise any of these rights by contacting us as set out in the Section Contacts below.

QUESTIONS & CHANGES

CONTACT US

We do business in many countries and aim to comply with the privacy laws applicable to the Personal Data we collect and use. Should you have a concern or complaint about our handling of your Personal Data, you may contact us directly via the methods described below. We will work to respond and resolve your complaints in an expeditious manner. You also have the right to lodge a complaint with a competent data protection supervisory authority in your jurisdiction.

Please contact us by emailing legal@abbycar.com or writing to the address below if you have any questions, wish to exercise your rights of access, or seek other assistance as described above. We will work to respond and resolve your complaints in an expeditious manner.

CHANGES

We reserve the right to change this Policy at any time for any reason by posting revisions on this webpage. Such changes will be effective upon posting, but will not apply retroactively. Whenever we make a material change, we will note the date of such update in the introductory page above, and post a note on the home page of our applicable website.