Deutsch
Español
Français
Italiano
Polski
Româna
Personal data on auto-rent.ro
clarity, control, security
This section explains how we collect, use and protect your personal information when you interact with the services of Promotor Rent a Car Broker SRL.
1) Who we are
The website auto-rent.ro is owned by S.C. Promotor Rent a Car Broker SRL, registered in Bucharest, sector 4, bd. Tineretului nr. 31 registered under J40/3344/2023, VAT number RO47670988.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable legislation. Data may be collected through automated and/or manual means, primarily for the purpose of fulfilling contractual relationships and informing you about our services.
2) What personal data we process
Identification information
Full name, address, date of birth, phone number, email, bank account, driving licence, ID/passport.
Marketing data
Data collected through interactions (e.g. social media), within the limits permitted by your settings and consent.
Video footage (CCTV)
Recordings for security purposes and service improvement. Retention period: 20 days.
HR data (where applicable)
Data required for recruitment or employment contracts, in accordance with legal obligations.
We inform data subjects about the purposes, use and rights associated with their personal data.
3) Why we collect and use data
Operational purposes
- Bookings: making and managing reservations.
- Customer reviews: post-booking surveys to improve our services.
- Marketing: offers, news and updates (unsubscribe at any time at dpo@auto-rent.ro).
- Fraud & security: detecting and preventing unauthorised use.
- Complaints: handling requests and claims.
- Legal purposes: disputes, investigations, compliance with terms and conditions.
- Insurance / damage claims: issuing certificates and managing claim files.
- Powers of attorney: documents for border crossings (where applicable).
- Pre-authorisations: blocking/charging amounts in accordance with banking procedures.
HR purposes (where applicable)
Recruitment, skills assessment and preparation/signing of individual employment contracts.
4) Legal basis for processing
- Contract: for the performance of the rental/service agreement.
- Legal obligation: compliance with applicable legal requirements.
- Legitimate interest: service improvement, security, fraud prevention.
- Consent: for certain activities (e.g. direct marketing), withdrawable at any time at dpo@auto-rent.ro.
5) Who we share data with
We may share data strictly to the extent necessary to provide the requested services, with:
- Partners providing car rental services and related products.
- Insurers and/or leasing companies (where applicable).
- Authorities (where required by law).
- Service providers processing data on our behalf (subject to confidentiality obligations).
- Payment processors and financial institutions (where applicable).
6) Storage & transfer
Transfer outside the country
Data is stored on servers located in Romania and/or within the European Union. In certain situations, it may be transferred to providers outside the EU, with appropriate safeguards applied in accordance with GDPR (e.g. standard contractual clauses).
Retention period
Personal data is retained in accordance with legal and contractual obligations, including for handling fines, incidents or requests from authorities.
The retention period may be up to 5 years after the end of the contract, or longer if required by applicable law.
For certain services (e.g. third-party tools), separate policies may apply; we recommend reviewing them individually.
7) Your data subject rights
Under the GDPR, you have the right to request:
- Access to your data
- Rectification / erasure (where applicable)
- Restriction of or objection to processing
- Data portability (where permitted by law)
- Withdrawal of consent at any time (where processing is based on consent)
You may contact us at dpo@auto-rent.ro. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
8) Data security
We apply appropriate technical and organisational measures (e.g. SSL encryption for data in transit); however, we cannot guarantee absolute security for data transmitted over the internet.
If you suspect suspicious requests by email or phone, please contact us.
What you can do
- Use long, complex passwords (including numbers and special characters).
- Change your password regularly (recommended: every ~3 months).
- Never share your password with anyone (including us).
- Use a different password for each account.
9) Future changes
We reserve the right to update this policy. We recommend checking this page periodically for the latest version.
Last updated: 21 August 2026