1. Data Controller
“Funchal Car Rental”, Estrada José Avelino Pinto, nr 88 AA2, Caniço de Baixo, Madeira, Portugal, (contact: info@funchalcarrental.com) acts as the data controller for the personal data you provide when using our website and rental services.
2. What personal data we collect
When you use our website or rental services, we may collect the following categories of personal data:
- Name, contact details (email address, telephone number, address)
- Driver’s licence details and expiration date
- Date of birth
- Payment and billing information
- Details of the rental (pickup/drop-off dates and locations, vehicle type)
- Booking history and preferences
- Website usage data (e.g., IP address, cookies, device/browser information)
3. Legal basis for processing
We process your personal data based on one or more of the following lawful bases under the General Data Protection Regulation (GDPR):
- To perform our contract with you (the vehicle rental agreement) and take steps at your request prior to entering into the contract.
- To comply with legal and regulatory obligations (e.g., verifying driving licence, handling accident/fine matters).
- Where you have given your consent (for example marketing communications) and you may withdraw that consent at any time.
- For our legitimate interests (for example to improve our service, manage our fleet, prevent fraud) so long as these do not override your rights and freedoms.
4. How we use your personal data
We use your personal data for purposes including but not limited to:
- Booking and managing your car rental, including payment, vehicle collection and return.
- Verifying your identity and driving licence, handling any incidents, fines or damage.
- Communicating with you regarding your booking, our services and any changes.
- Analysis and improvement of our services (for example usage patterns, customer feedback).
- Marketing communications, where you have opted-in.
- Ensuring security of our website and the rented vehicles (for example via cookies, analytics, anti-fraud measures).
5. Data sharing and third parties
We may share your personal data with:
- Service providers who assist us in performing the contract (e.g., payment processors, vehicle delivery/return services, insurance companies).
- Law enforcement, regulatory authorities or legal advisors if required by law or to protect our rights.
- Affiliates or partners if you agree or where necessary for the service.
We will ensure such third parties are bound by appropriate safeguards and we retain responsibility for your data where required.
6. International transfers
If we transfer your personal data to countries outside the European Economic Area (“EEA”), we will do so only where an adequate level of protection is ensured (for example via EU-approved standard contractual clauses or other mechanisms) in compliance with Articles 44-49 of the GDPR.
7. Data retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, including for the duration of the rental contract, handling any claims or disputes, fulfilling legal obligations (e.g., accounting, taxation), and for audit purposes. When no longer required, we will securely delete or anonymise your data.
8. Your rights
Under the GDPR you have the following rights in relation to your personal data:
- Right of access – you may request access to your personal data processed by us.
- Right to rectification – you may ask us to correct inaccurate or incomplete data.
- Right to erasure – in certain circumstances you may request deletion of your personal data (“right to be forgotten”).
- Right to restrict processing – you may ask us to restrict how we process your personal data in certain cases.
- Right to object – you may object to processing of your data based on our legitimate interests (unless we can demonstrate compelling grounds).
- Right to data portability – you may ask for your personal data in a structured, commonly used and machine-readable format.
- Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time (without affecting processing done prior to withdrawal).
- Right to lodge a complaint – you may lodge a complaint with the competent supervisory authority (in Portugal: the CNPD).
9. Cookies and tracking technologies
Our website uses cookies and other tracking technologies to improve your browsing experience, to personalise content and, if you consent, for marketing or analytic purposes. You can manage your cookie preferences via your browser settings or via the cookie banner on the site.
10. Data security
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. However, no system is completely secure and we cannot guarantee absolute security.
11. Changes to this notice
We may update this Privacy Notice from time to time (for example to reflect changes in legal obligations or our processing practices). If we make significant changes we will provide a prominent notice on our website.
12. Contact details
If you have any questions, requests or concerns regarding the processing of your personal data, you may contact us at info@funchalcarrental.com.
If you are unhappy with how we process your data you have the right to lodge a complaint with CNPD in Portugal.