Updated 25th May, 2018
This Privacy Statement sets out details of the personal data relating to you that we collect through the CarRental.Deals website and any mobile sites and applications relating to CarRental.Deals (the “Platform”), how we will process such data and to whom it may be disclosed. This notice also explains your rights under applicable data protection law, including the EU General Data Protection Regulation (“GDPR”), in relation to our processing of your data.
About Us
This website works thanks to the cooperation of two platforms:
- 1st. This website: CarRental.Deals
- 2nd. Cartrawler Booking Engine Integration
So, let’s explain separately both Privacy Policies.
1st.- CarRental.Deals Privacy Policy
Who owns this website?
HOLDER 1:
Name: JORGE PABLO VENTURA
DNI: 53222116R
Address: Av. de la Mura, 3, 12540 Vila-real, Castelló
Email: info@carrental.deals
Social activity: Car Rental booking platform.
HOLDER 2:
Name: BENJAMÍN DEMBILIO
DNI: 53221700E
Address: Av. de la Mura, 3, 12540 Vila-real, Castelló
Email: info@carrental.deals
Social activity: Car Rental booking platform.
What personal information do we collect from the people that visit our blog, website or app?
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address or other details to help you with your experience.
- In our Contact Forms :
- Personal Data: Name, Email, Messages sent.
- Purpose: channel of contact with our users dedicated to the reception of messages by them.
- Treatment: Not given to third parties
- Storage time and use of data: Limited to the time strictly necessary to resolve user’s doubts. The user can exercise the right to revocation and request the deletion of their data by email to the address info@carrental.deals or to the postal address Av. de la Mura, 3, 12540 Vila-real, Castelló.
- Storage: Electronic Mailbox hired and maintained by the company Webempresa.
- Tracking cookies, according to the following rules. Read carefully our cookie policy below.
- Personal Data: Navigation and IP Address. When browsing this website, the user automatically provides the web server with information regarding your IP address, date and time of access, the hyperlink that has forwarded to them, your operating system and the browser used.
- Purpose: Collection of statistical data through the Google Analytics Platform , and Affiliation advertising platforms through Google Adsense .
- Treatment: It is not transferred to third parties.
- Storage time and use of data: They have an expiration date, which can range from the time the session lasts until a specified future date, from which they cease to be operative.
- Storage: Cookies are text files that some servers ask our browser to write on our hard drive, with information about what we have been doing on their pages.
When do we collect information?
We collect information from you when you fill and send your details in the Contact Forms on our site. We also collect Tracking cookies, please read our cookie policy.
How do we use your information?
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
• To personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested.
• To improve our website in order to better serve you.
• To allow us to better service you in responding to your customer service requests.
• To administer a contest, promotion, survey or other site feature.
• To ask for ratings and reviews of services or products
How do we protect your information?
We do not use vulnerability scanning and/or scanning to PCI standards.
We only provide articles and information. We never ask for credit card numbers.
We use regular Malware Scanning.
Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information.
All transactions are processed through a gateway provider and are not stored or processed on our servers.
Do we use ‘cookies’?
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
We use cookies to:
• Help remember and process the items in the shopping cart.
• Understand and save user’s preferences for future visits.
• Keep track of advertisements.
• Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.
If you turn cookies off, It won’t affect the user’s experience .
Third-party disclosure
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Third-party links
Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
We use Google AdSense Advertising on our website.
Google, as a third-party vendor, uses cookies to serve ads on our site. Google’s use of the DART cookie enables it to serve ads to our users based on previous visits to our site and other sites on the Internet. Users may opt-out of the use of the DART cookie by visiting the Google Ad and Content Network privacy policy.
We have implemented the following:
• Remarketing with Google AdSense
We, along with third-party vendors such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.
Opting out:
Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt Out page or by using the Google Analytics Opt Out Browser add on.
California Online Privacy Protection Act
CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. – See more at: http://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf
According to CalOPPA, we agree to the following:
Users can visit our site anonymously.
Once this privacy policy is created, we will add a link to it on our home page or as a minimum, on the first significant page after entering our website.
Our Privacy Policy link includes the word ‘Privacy’ and can easily be found on the page specified above.
You will be notified of any Privacy Policy changes:
• On our Privacy Policy Page
Can change your personal information:
• By logging in to your account
How does our site handle Do Not Track signals?
We honor Do Not Track signals and Do Not Track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
Does our site allow third-party behavioral tracking?
It’s also important to note that we allow third-party behavioral tracking
COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under the age of 13 years old.
Do we let third-parties, including ad networks or plug-ins collect PII from children under 13?
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
We will notify you via email
• Within 7 business days
We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.
CAN SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
• Send information, respond to inquiries, and/or other requests or questions
To be in accordance with CANSPAM, we agree to the following:
• Not use false or misleading subjects or email addresses.
• Identify the message as an advertisement in some reasonable way.
• Include the physical address of our business or site headquarters.
• Monitor third-party email marketing services for compliance, if one is used.
• Honor opt-out/unsubscribe requests quickly.
• Allow users to unsubscribe by using the link at the bottom of each email.
If at any time you would like to unsubscribe from receiving future emails, you can email us at
• Follow the instructions at the bottom of each email.
and we will promptly remove you from ALL correspondence.
2.- Cartrawler Booking Engine Privacy Policy
ETrawler Unlimited Company t/a, whose registered office is Classon House, Dundrum Business, Dundrum, Dublin 14, is the owner and operator of the Cartrawler Booking Engine Platform and is therefore the controller of the personal data which is described in this Data Protection Notice. References to “we”, “us” and “our” in this notice are therefore references to Cartrawler.
We introduce customers to vehicle rental and other ground transportation services such as bus, rail and taxi transfers (“Transportation”) and ancillary travel related products and services.
You can contact us using the details at the end of this statement, or if you have any queries in relation to the processing of your personal data you can also contact our Data Protection Officer by emailing dpo@cartrawler.com.
Personal Data that We Process
In order for us process your Transportation booking or your booking of any ancillary services we will ask you for certain information, such as your name, address, email address, payment information and booking details. We also collect certain information from the device you use to access our Platform, such as your IP address, what browser you use and what type of device you are using. In addition to the information that we collect ourselves, we sometimes receive information that is collected on our behalf by third parties, such as when you see an Cartrawler advert displayed on a third party site.
Most of the personal data that we collect about you will be information that you have given to us. This may include the following:
• Transportation Quote – If you seek a quote for Transportation, we will collect your name, e-mail address, IP address and quote reference. Where you have contacted us by phone, we will also collect your phone number and a recording of your call with us.
• Abandonment E-mails and Phone Calls –If you commence but do not complete a booking, we will still have collected limited details such as your name, e-mail address and phone number (depending on your method of communication with us).
• Booking Details – When you make a booking with us we will ask you for information that we need in order to process the booking. This will include your name, address, email address, phone number and your payment details.
• Queries and Complaints – If you contact our Customer Service team with a query or a complaint, we will record details of the query or complaint and how it is dealt with on our systems. We may also seek further details about the query or complaint from the relevant Transportation or other service provider, which we will also record on our systems.
• Insurance Policy – If you take out an insurance policy with one of our insurance partners, we will collect your name, address, e-mail address, phone number, booking reference, IP address and payment details to facilitate the purchase of your insurance policy.
• Other ancillary products and services – If you book or purchase any other ancillary service, such as parking, we will ask you for information that we need in order to process your request. This will include your name, address, e-mail address, phone number, booking reference, IP address and payment details.
• On Demand Taxi Booking Details
• If you sign up for our on demand taxi app, we will collect your name, e-mail address, loyalty ID (if relevant) and password and payment details.
• When you use our on demand taxi app, we will collect your name, e-mail address, payment details. We will also gather your location data when you use our app and during your journey.
• Location Data – If you are using our services on a mobile device and you have enabled location services, we will record your location to help you find local Transportation or other services. We also use your IP address to determine what country you are in when you make a booking.
• Loyalty Programme Data – If you join our Loyalty Programme, e.g. MyAccount, we will store details of your name, e-mail address, phone number, date of birth, username and password and your historic booking references.
• Email Marketing – When we collect your email address we will record your preferences regarding receipt of marketing emails from us in relation to our own products and services and those of third parties.
• Surveys – If you participate in a survey, we will record your responses to the survey along with your name and e-mail address.
Personal information that we collect automatically:
When you use our Platform, we use various technologies to automatically capture details about the device you are using and how you interact with the Platform. This information includes:
• Device Details – We automatically collect details about the device you are using, including its IP address, its device ID, the browser you are using, and the operating system that the device uses.
• How You Interact With Our Platform – We record details about how you use our Platform, e.g. the date and time that you visit, what pages you visit, how long you stay on the pages, where you have clicked on a page, and details of any crashes or system bugs you may have encountered.
• How You Reached the Platform – Where we can, we record how you arrived on our Platform (e.g. whether you arrived from a search engine, or by clicking on one of our adverts).
Sources of Personal Data
Although we mainly collect information directly from you, there are circumstances where we collect information from third party sources. These circumstances include:
• Third Parties – We operate a programme under which third parties advertise our Platform on our behalf. If you click on one of those advertisements you are directed to our Platform using a technology that allows us to understand which third party referred you. We then track if you make a booking, and if you do we attribute that booking to the relevant third party for the purposes of paying them a commission. However, we do not provide the third party with any personal information in relation to you.
• Service Provider – If there are any issues with your Transportation or other service provider, the service provider may contact us with information about the issue.
• Advertisements – When we work with third parties to display advertisements we may use technologies like cookies or pixel tags to record details of your interaction with those advertisements. This data is sometimes sent to us through cookies and pixel tags that are set on our behalf by those third parties. If data is sent to us it will be done on an anonymised basis.
Purposes of Processing and Legal Basis
The main reason we use your personal data is to process your bookings for Transportation and ancillary services and to deal with any queries or issues that may arise in relation to those bookings. We also use your personal data for certain other reasons, such as tailoring our adverts and marketing emails to ensure that they are relevant to you and monitoring your use of our Platform to help us make improvements and tailor our display.
The following are further details of our processing and the legal basis which justifies this processing:
• Transportation Quote – We process your personal data in order to provide you with your Transportation quote. We process this data on the basis that it is necessary in order to take steps at your request prior to potentially entering into a Transportation contract.
• Abandonment E-mails and Phone Calls – We process personal data in order to contact you and clarify whether you encountered any issues when seeking to make a booking. We do this on the basis of our legitimate interest in ensuring quality customer service and that there are no issues with our Platform.
• Bookings – We use your personal data in order to process bookings with us and Transportation providers, and to let you manage your bookings through the Platform. Where we process personal data for this purpose we will do so either on the basis that it is necessary for the performance of a contract or on the basis of our legitimate interests in providing our Transportation booking service.
• Insurance Policy / Other Ancillary Product or Service – If you take out an insurance policy with one of our insurance partners in connection with your Transportation reservation or book another ancillary service, we process your data in order to facilitate the booking of that service. Where we process personal data for this purpose we will do so either on the basis that it is necessary for the performance of a contract with you, or on the basis of our legitimate interests in providing you with that service.
• Queries and Complaints – When you send us a query, or have a complaint, about a Transportation booking or about any other ancillary service, we will process your personal data in order to answer your query or in order to resolve your complaint. Where we process personal data in the context of a query or complaint we will do so on the basis of our legitimate interest in resolving customer queries and complaints. If you volunteer data in relation to your health, we will process that personal data on the basis that you explicitly consent to us using it in order to resolve your query or complaint.
• On Demand Taxi Booking App – We process your data in order to facilitate your sign up to and use of the On Demand Taxi App. This is either on the basis that we have a contractual duty to do so, or on the basis of our legitimate interests in providing this service to our customers.
• Loyalty Programme – Where a loyalty programme exists, we use your personal data in order to administer the loyalty programme, to add/deduct loyalty points and to notify you of loyalty rewards. We process this data on the basis that it is necessary for the performance of our contract with you.
• Email Marketing – Where we have collected your email address in the context of providing you with a service, then depending on the marketing preferences you have expressed to us, we may send you emails about products and services that we think may be of interest to you. We send these marketing e-mails on the basis of our legitimate interests in marketing our products and services.
• Providing and Improving our Services – Where we collect data in relation to your use of our Platform and services, such as your device details and how you interact with our Platform and services, we use this data in order to deliver our services and personalise your experience. We also use the data to test new features that we are thinking about introducing, to analyse how our Platform is used, and to evaluate and improve our services. Where possible we use this data on an anonymous basis. All of this processing of your personal data is on the basis of our legitimate interests in operating, improving and securing our services.
• Analysis/Reporting – We use data in relation to bookings in order to create internal reports regarding how our business is operating. We also use this data for other commercial analysis purposes, and to try to predict future trends that may affect our business. This processing is undertaken on an aggregated basis, so you are not identifiable from the reports or analysis that is produced.
• Advertising – We want to ensure that when you see a Cartrawler or other advert it will be relevant to you and your interests, whether the advert appears on a Platform we operate, in our marketing emails or on a third-party site. We may also use the same information to show you adverts for carefully selected third-party products and services. When you are using our Platform we use the searches you have made in order to tailor our adverts to your interests. For example, if you have been searching for vehicle rental options in Berlin, we might use this information to display adverts to you on our Platform and on third party websites for vehicles to rent in Berlin that may be of interested to you. We may also use data about your past transactions on our Platform to tailor our advertising. We process your personal data for this purpose on the basis of our legitimate interests in ensuring that our advertising, or the advertising of third parties, is effective.
• Surveys – If you agree to participate in a survey, we process your data on the basis of your consent.
Personal Data that We Require You to Provide
You are not obliged to provide us with any of your personal data. However, if you want to make a Transportation booking, or avail of an ancillary service, you will need to provide us with the information that is requested on our booking engine. If you don’t provide us with this information, we will not be in a position to process your booking. Similarly, you may be required to provide certain information if you contact our customer services team with a query or complaint. We will inform you where such information is required.
Recipients of Data
In order to process your booking we have to send your details to the relevant Transportation provider. If you contact us with a query or complaint in relation to a booking we may also share details of the query or complaint with the Transportation provider so that we can resolve it.
If you purchase another service we may need to share personal data with the third-party service provider so that they can provide you with that service. If you make a claim under an insurance policy we may need to share personal data with the underwriter or other appointed claims handler.
As part of our online advertising programmes we may share your personal data with third parties, who will combine it with data that they hold about you in order to tailor adverts that appear on third-party websites (which may be our own adverts, or adverts we serve on behalf of third parties). Where this data is shared it is protected using encryption or other security measures.
We also use a number of service providers to assist us in providing our services, some of whom will have access to your data (e.g. we use various software service providers who host our data as part of their services). Where we engage a third party to process your data on our behalf, we make sure that they respect your privacy rights and that they process data in accordance with data protection law. Further details are as follows:
• Hosting Providers – We use various cloud service and co-location providers to help us host and manage our data.
• Payment Processors – We use third-party payment processors in order to assist us with taking payments on our Platform.
• Technology Providers – This includes service providers who provide services such as helping us to secure our network, systems and emails.
• Customer Service Providers – We use a third party service provider to provide customer service outside working hours.
• Auditors – We have an internal and external audit function that is provided by third parties. The auditors help us to ensure that we are complying with our legal obligations, including in relation to our processing of personal data. In certain circumstances this may mean that they have access to our systems that process personal data, or that they might need to review how we have processed certain personal data.
Transfers Abroad
There are certain circumstances where we will transfer your personal data outside of the European Union to a country which is not recognised by the European Commission as providing an equivalent level of protection for personal data as is provided for in the European Union. The most common of these is where we transfer personal data to a Transportation provider so that they can fulfil your booking. We may also transfer your personal data outside of the European Union in connection with the operation of our business, such as when we use a service provider that is based in another jurisdiction. If we transfer your personal data outside of the European Union, we will ensure that appropriate measures are in place to protect your personal data and to comply with our obligations under applicable data protection law. This may include entering into contracts in the form approved by the European Commission with the entity to whom we have transferred personal data, or ensuring that the company to which we transfer your personal data has agreed to abide by an approved transfer mechanism, such as the EU-US Privacy Shield framework.
If you would like further details about the measures we have taken in relation to the transfer of your personal data, or copies of the agreements that we have put in place in relation to the transfers, please contact us using the details at the bottom of this statement.
Retention
We retain your personal data in accordance with our record retention policy. The record retention policy operates on the principle that we keep personal data for no longer than is necessary for the purpose for which we collected it, and in accordance with any requirements that are imposed on us by law. This means that the retention period for your personal data will vary depending on the type of personal data. For example:
• Transaction Data – We retain details of your bookings and your interaction with us in relation to such bookings for as long is necessary to facilitate your booking and resolve any issues that may arise. Where your marketing preferences are such that we are able to send you marketing messages, then such data will still be retained as per the details below.
• Loyalty Programme Data – We retain data relating to loyalty programmes for as long is necessary to facilitate administration of our loyalty programme.
• Email Marketing – We will keep a copy of personal data that is required in order to send you marketing messages for as long as necessary to facilitate your marketing preferences. As part of this we will also retain certain information in relation to your transactions in order to allow us to customise our marketing messages.
• Managing legal claims – When we assess how long we keep personal data we take into account whether that data may be required in order to bring or defend any legal claims. If such data is required, we may keep it until the statute of limitations runs out in relation to the type of claim that can be made (which varies from 2 years to 12 years).
Cookies
This Platform uses cookies. Cookies are small, simple text files that are sent from a website and stored on your computer, tablet or mobile phone when you visit a website. Information related to your visit of a website is recorded in these cookies. To find out more about the cookies we use, please visit our cookies policy.
Other websites
This Platform may contain links to other websites or you may have arrived here via a link from another website. This Privacy Statement only applies to this Platform and the services operated by Cartrawler in connection with Cartrawler on the Platform. When you link to other websites you should read their own privacy statements.
Important Information about Consent
In circumstances where we process your personal data on the basis of your consent, you are free to withdraw that consent at any time. You can withdraw your consent by contacting us using the contact details at the bottom of this statement. If your consent relates to receiving email marketing you can use the unsubscribe link in the email. Please note that if you withdraw your consent we may not be able to continue to provide the related service to you.
Your Rights
You have the following rights, in certain circumstances, in relation to your personal data:
• Right to access the data – You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.
• Right to rectification – You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.
• Right to erasure – You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
• Right to restriction of processing or to object to processing – You have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
• Right to data portability – You have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.
In order to exercise any of the rights set out above, please contact us at using the contact details at the bottom of this statement.
Changes to our Privacy Statement
We keep our privacy statement under regular review and we will place any updates on this web page.