Privacy Policy

ABOUT US

This policy covers all Autohellas Group companies and informs you about the processing of your personal data as a customer, potential customer, visitor or user of the website and/or applications of the Group Companies. Furthermore, it provides information about your privacy rights and how you are protected by the law.

In case of vehicle rental, detailed information and the obtaining of your consent, where required by Law, from both the renter and any additional driver, regarding the transfer of Personal Data to the Franchisor (Hertz International, Ltd. ) and other recipients, is carried out through a special consent form that is completed upon conclusion of the rental agreement. Renters should ensure that additional drivers are aware of this Policy and complete the above-mentioned consent form prior to the transfer of their Personal Data.

At Autohellas we respect your privacy and are committed to protecting your data. We are responsible for the collection, management and processing of your personal data and have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions raised in relation to this privacy statement. For any clarification regarding this privacy statement, including any request to exercise your legal rights, please contact the DPO using the following contact details. 

• General Data Protection Office
• Autohellas S.A.
• 31, Viltanioti St., Kifissia
• 14564
• Attica , Greece​

You reserve the right to file a complaint at any time with the supervisory authority in your country regarding data protection issues. In Greece, this authority is the Hellenic Data Protection Authority and you can find relevant details via the following link:  www.dpa.gr.We would, however, appreciate the opportunity to address your concerns before you approach the data protection authority and therefore we kindly ask you to initially contact us, using the contact details listed above.

Contents​

1. Collection
2. Purpose
3. Transfer
4. Storage and safety​
5. Your rights​
6. Questions & Amendments​

1. COLLECTION

We collect Personal Data that you provide during the execution of our services, on our websites, through applications that we use to better serve you, as well as through any inquiries, reservations, rentals or purchases you make in relation to our services. We may collect your Personal Data directly or through our service providers, our business partners, our affiliates, our Franchisor and booking channel providers. In detail:

Α. DATA CATEGORIES:WHAT WE COLLECT:

We reserve the right to collect, process, store and transfer different types of personal data about you, which we have grouped as follows:

Personal information :​

• Full name
• Date and place of birth
• Gender
• Home address​​
• email​​ address
• Mobile telephone number
• Passport Number ​
• Driving license or other​ license
• Identity card​​
• Credit record

Technological information :​

• IP address
• Device ID
• Operational system​
• Browser type​​​
• Mobile device ID
• Geographic location data​​
• State or country from which you are accessing our websites
• Specific websites of our company that you visited
• Date and time of visit​​
• Number of links and specific links you click on our websites
• Features you use on our websites
• Any reservations, updates, purchases or other transactions through our websites
• Data viewed or downloaded from our websites
• Number of times you see specific ads

Rental Information:

• Reservation Place
• Rental Place ​
• Return Place​
• Rental period​​
• Number of airline frequent passenger​​​​
• Payment card​ data
• Data of any additional drivers
• Insurance coverage options​​​
• Additional service options​​​
• Charges incurred​​​​

Sensitive data:​

We may collect certain Personal Data that constitutes sensitive data, such as (indicatively but not limited to) data regarding your health status (for example, disability or in the event of an accident where we need to work with insurance companies and claims management companies regarding any injury you may suffer).

Please note that if you need to provide us with sensitive personal data in the context of the services provided or the purchase of products from us, we will use such sensitive data for the business purposes described in this Privacy Policy subject to your consent where required under applicable law.

Β. COLLECTION METHODS AND SOURCES:

Online collection of personal data :

• from our websites
• from info-kiosks at your self-service points
• from internet browser
• from our official pages on third-party social networking sites

Cookies and online data collection

We use cookies on our websites to store information on your computer or mobile device to improve your online experience. Cookies are small text files that allow you to navigate between pages efficiently, help us evaluate whether our website is working efficiently, and generally improve your browsing experience. Cookies can also help make the advertisements you see online more relevant to your interests.

In general, our cookies can perform the following functions:

Cookies and online data collection

In case you wish to enable or disable the use of cookies from your browser settings, please select the browser you are using to find instructions on necessary actions:

• Microsoft Internet Explorer
• Microsoft Edge
• Mozilla Firefox
• Google Chrome
• Opera
• Safari
• Safari for iPad and iPhone

Note

Our websites are not intended for persons under the age of 13 and we do not knowingly collect Personal Data from such persons.

Offline personal data collection :

• from calls to or from the reservation call centre, customer service, emergency roadside assistance, customer communication or customer care centres
• from interaction with our various franchisees and affiliates, including automotive distributors and other businesses
• from rental or leasing contracts
• in connection with a reservation (even if cancelled or interrupted) for vehicle or equipment rental or car purchase
• from transactions you conduct with us, our franchisees and our agents, including the choices you make, your charges and any incidents or accidents that may occur
• from other companies that have business relationships with us, such as our affiliates and business partners, including airlines, hotels and insurance companies
• from credit reporting service providers

Depending on the purposes for which we collect and use your Personal Data, as set out in this Policy, the Personal Data we collect from you may either be required due to a legal or contractual obligation, whether provided by you on a voluntary basis or necessary for us to enter into a contractual relationship with you. If you do not provide your Personal Data to us, this may result in us not being able to provide you with the requested services(rental, leasing, repair, sale, etc.).

2. PROCESSING PURPOSES

Below, we set out the various purposes for which we process your Personal Data. We have also set out the legal grounds for processing your Personal Data for each purpose:

A. ACTIVITIES AND SERVICES:We may use your Personal Data to provide you with the services or products you request from us and to carry out other activities related to those services or products, including billing and collection following a rental or long-term lease or to contact you regarding:

1. any reservation you submit or any rental you make with us
2. matters related to the safety, maintenance and insurance coverage of the vehicle you rent from us
3. matters related to the safety & maintenance of the vehicle you have purchased from us

Legal reasons: to perform our contract or purchase transaction with you or to take steps at your request before you enter a contractual relationship with us

B. OUR MARKETING:We may use your Personal Data to provide you with marketing information, customer satisfaction surveys or evaluations of our services and offers through various means, including email and SMS messages , in accordance with applicable law.

Legal reasons: Where permitted by applicable law, we may lawfully use your Personal Data to send you such commercial communications (including email) for these marketing purposes, where necessary for our legitimate interests, which include promoting our products and services that may be of interest to you.

You may opt out of receiving such communications at any time by contacting us at the details in section 6 below, as well as by using the unsubscribe link included in each email. Please note that if you exercise these choices, you will continue to receive communications regarding your account and the products and services you have requested as well as responses to any requests for information from you. Please also note that this opt-out process may take a considerable amount of time to complete, in accordance with applicable law.

C. THIRD-PARTY MARKETING:We may also share your Personal Data with a third party who provides you with special offers or promotions that may be of interest to you(“Third Party Provider”) where permitted.

Legal reasons: based on your consent you may instruct us at any time not to share your Personal Data covered by this Policy with such Third-Party Providers where you have previously consented.

D. BUSINESS ACTIVITY:We may also process your Personal Data and other information if such processing is required:

1. to comply with the law or in response to a subpoena, court order, law enforcement request, or other legal process
2. to protect our interests, rights, safety or property or those of others.
3. to enforce any terms of service on our websites or the terms and conditions of any lease, purchase or use.
4. As part of a commercial transaction where all or some of our assets are bought, sold or otherwise transferred by legal act or contract
5. To improve our services.

E. WEBSITES: If you use our websites, we may process your Personal Data as follows:

1. Social media:If you participate in certain public features of our websites , applications, or social media websites /applications, please note that information that you or others voluntarily disclose through the use of such features becomes available to the public and/or to other users you designate. If you choose to provide access credentials to specific individuals, please be aware that any data you provide to us may be visible to those individuals. We are not responsible for the data that you or others choose to disclose publicly, and such data is not subject to this Policy.
2. Links to third parties: We may provide links to or connecting to third-party websites. Since we do not control third-party websites and are not responsible for any data you may provide while on such websites, we suggest you read the privacy policies on those websites before providing those third parties with your personal data.

3. TRANSFER

A. THIRD PARTY COMPANIES

We may share your personal data with third parties in the following cases:

1.Provision of services to you: We will share your Personal Data with one another, with our agents, with our licensed partners and with other companies to provide you with services. In particular, your Personal Data (including renter and driver information) may be transferred to Hertz International, Ltd. (hereinafter “Franchisor”), which is based in the United States of America and is the franchisor of the Hertz network within which we operate. Such transfer is carried out for the following purposes, among others:

• to make your rental reservations
• to process and/or confirm your transactions
• to provide you with customer support
• to bill and collect amounts due in relation to your rentals
• to conduct customer satisfaction surveys and market research purposes to help us improve our services

2. Disclosure to companies you use: We will also share your information with companies you use in connection with your rental or purchase, including:

• your credit card administrator/issuer or provider and other companies that process your payments
• any intermediary you use, such as a travel agent or broker, in relation to any aspect of your rental
• a membership program administrator through which you are rewarded for renting from us, such as frequent flyer programs
• an authorized partner who provides car maintenance and repair services

3. Protective and Legal Purposes: We may use and share your personal data for legal reasons, as we believe is necessary or appropriate, including:

• complying with applicable law, including laws outside your country of residence
• processing, handling and, in any event, responding to claims for compensation, including personal injury or property damage
• complying with legal and insurance procedures
• responding to requests from public and governmental authorities, including those located outside your country of residence
• applying our terms and conditions
• recovering our vehicles or any money owed, such as through debt collection agencies
• protecting our operations or those of our subsidiaries
• protecting our rights, privacy, safety or property, and/or those of our affiliates,
• allowing us to pursue available remedies or limit the damages we are required to incur

4. Disclosure to our service providers and agents : We may use other companies as our service providers or agents to act on our behalf and assist us in conducting our business by providing services for us under our guidance. These services may include hosting certain websites or databases, operating “apps” for us on social media pages, conducting contests, sweepstakes and other promotions, sending marketing communications, analysing data and conducting customer satisfaction surveys or other research. We will require our service providers and agents to maintain appropriate security standards to protect your Personal Data and to use the Personal Data we provide to them only for the purposes we specify and in accordance with the law.
5. Disclosure for corporate transactions: We may disclose your Personal Data to third parties in connection with any planned or actual reorganization, merger, sale, spin-off, joint venture, assignment, transfer or other disposition of all or part of our business,of our assets or stock (including bankruptcy or similar proceedings).

B. INTERNATIONAL TRANSFERS

Some of the uses and disclosures referred to in this Policy may involve the transfer of your Personal Data to countries that may have different levels of privacy protection than the country of residence or interaction with you, such as when you request that we provide you with rental services in a country outside the European Union (“EU”). In particular, your Personal Data is transferred to the Franchisor (Hertz International, Ltd.), which is based in the United States of America. Depending on the nature of the processing, the Franchisor acts either as an independent Controller or as a Processor, as follows:

The Franchisor as an independent Data Controller: The Franchisor acts as an independent Data Controller when processing Personal Data of customers (renters and drivers) for the following purposes: (a) management of vehicle reservations and rentals through the central reservation system (Vehicle Rental System), (b) provision of related services, including customer service, vehicle maintenance and damage inspection, (c) sending promotional actions and targeted offers, where permitted, (d) improvement of products and services, including research, analysis and development activities, (e) operation and management of the Systems and Applications of the network, including access management, customer satisfaction monitoring and calculation of fees and commissions, and ( f ) compliance with legal and regulatory obligations, including tax and audit obligations. Legal basis: the performance of a contract [Article 6(1)(b) GDPR], our legitimate interest in the proper functioning of the franchise network [Article 6(1)(f) GDPR], as well as your consent [Article 6(1)(a) GDPR] where required.

The Franchisor as Processor: The Franchisor acts as a Processor on our behalf in the following cases: (a) provision of IT support services (IT helpdesk) in relation to the vehicle rental system, (b) storage of Personal Data used to provide reservations, rentals and related services in the systems and applications of the Franchisor , (c) management of reservation queries, customer complaints before and after the rental, as well as provision of accounting and financial services. In the above cases, the Franchisor processes your Personal Data strictly in accordance with our instructions and under the obligations arising from the data processing contract we have concluded therewith, in accordance with Article 28 GDPR.

To ensure an adequate level of protection when transferring Personal Data to the Franchisor in the United States of America, we have entered into standard contractual clauses (Standard Contractual Clauses – SCCs) approved by the European Commission by virtue of the Implementing Decision of  June 4, 2021, and in particular: (a) Module One (Controller to Controller) for data transfers in which the Franchisor acts as an independent Data Controller, and (b) Module Two (Controller to Processor) for data transfers in which the Franchisor acts as a Processor. It is noted that, to the extent that the Franchisor acts as an independent Processor, they independently determine the purposes and means of processing your Personal Data and are subject to the same obligations under applicable data protection legislation. You may exercise your rights (access, rectification, erasure, restriction, objection, portability ) both by contacting us, in accordance with Section 5 of this Policy, and directly to the Franchisor. You may request further information regarding the safeguards applicable to the transfer of your Personal Data by contacting us at the contact details provided in Section 6 of this Policy.

Where the transfer of your data is necessary for the provision of the rental services you requested, the legal basis for the transfer is the contractual necessity of the transfer [Article 49(1)( b) GDPR]. Where the transfer is to the Franchisor (Hertz International, Ltd.) for the purposes of operating and managing the franchise network, the legal basis is our legitimate interest [Article 6(1)(f) GDPR] in combination with the appropriate safeguards set out below. Your Personal Data will be processed by the company providing the services you requested in accordance with applicable law.

4. STORAGE & SAFETY

DATA STORAGE

We store personal data relating to our customers for as long as necessary to fulfil the purposes of the processing or as required by Law. We collect Personal Data for various purposes (see above) and may need to store it for legal reasons (including tax, civil or other legal requirements) for a period longer than that required to provide our services to you. We implement a data storage policy to cover all Personal Data held in our systems. If you have any questions about the storage period that applies to the personal data we collect about you, please contact us at gdpr@hertz.gr.

SAFETY MEASURES

Information is stored and made available in various locations, including cloud services. The Servers that store information are primarily located in Greece, Europe and the United States, although storage may also occur in other locations. We use appropriate technical and organizational measures (a) to protect Personal Data from loss, theft, unauthorized use, disclosure or modification and (b) to ensure the integrity of your Personal Data. To help us protect your privacy, you should maintain the confidentiality of login IDs and passwords or other identifiers or credentials that you may have created or provided to you in connection with your participation in or use of our products, services and websites. As you are aware, no method of transferring or storing data is completely secure. Although their physical characteristics are different, postal mail, telephone calls, email, text messages, faxes, and transmissions over the Internet or wireless networks all involve potential risk of loss, misuse, interception, and abuse of the data transmitted. If you have reason to believe that any account with us is no longer secure, you must contact us immediately.

5. YOUR RIGHTS

You have all rights under the provisions of the applicable law. In particular, you have the right to access, review and update your Personal Data covered by this Policy and you may request this by contacting us at the details set out in Section 6 below. While we will make reasonable efforts to accommodate your request, we also reserve the right to impose certain limitations and requirements on such access requests, where permitted or required by applicable law. If you are a member of one of our membership or rewards programs, you may update the information in your member profile by registering your applicable member profile.

 Among other things, you also have the right to:

1. request the correction of your Personal Data when the data we hold about you is incorrect or incomplete.
2. object to the processing of your Personal Data for direct marketing purposes, including profiling, to the extent it is related to direct marketing
3. object to the processing of your Personal Data where our legal basis for such processing is that such processing is necessary for our legitimate interests, without prejudice to any compelling legitimate grounds we may have for the processing.
4. object to automated decision-making processes (including profiling) in certain circumstances
5. request the erasure of your Personal Data under certain conditions, such as where processing is no longer necessary for the purpose for which it was originally collected and there is no compelling reason for us to continue processing or storing it
6. request restriction of the processing of your Personal Data in certain cases, for example, that we do not process your Personal Data (other than simply storing it) after a rental or other transaction with us and that the data is only stored to meet specific legal (e.g. tax) requirements, and
7. receive or request us to transfer to another organization your Personal Data that you have provided to us and which we process automatically when our processing is based either on your consent or is necessary for the performance of the contract or transaction with you.

In addition, where we process your Personal Data based on your consent, you may withdraw your consent at any time. You may request us to exercise any of these rights by contacting us as set out in Section 6 below.

6. QUESTIONS & AMENDMENTS

CONTACT US: We operate in many countries and seek to comply with the privacy laws that apply to the Personal Data we collect and use. If you have a request regarding the handling of your Personal Data, you may contact us directly using the methods described below. We will work to respond promptly and serve your requests. You also have the right to file a relevant request with a competent data protection supervisory authority within your jurisdiction.

Contact us via email at gdpr@hertz.gr or by writing to the address below if you have any questions, wish to exercise your access rights or seek other assistance as described above.

• General Data Protection Regulation
• Autohellas A.
• 31, Viltanioti St., Kifissia
• 14564
• Attica , Greece​

AMENDMENTS: We reserve the right to make amendments to this Policy at any time, for any reason, by posting revisions on this website or in applications or on other websites. Such changes will be effective upon posting but will not be effective retroactively.