Privacy Policy

1. Introduction

This policy describes how PROMOTORS DRIVE SRL collects, uses, and protects your personal data when you use promotorsdrive.ro or rent a car from our fleet.

2. Data controller

PROMOTORS DRIVE SRL, CUI 36170421, registered in Romania, is the controller processing your personal data under Regulation (EU) 2016/679 (GDPR) and Law 190/2018. For questions, write to us at simona.frunza@promotors.ro.

3. Data we process

Depending on how you interact with us, we may process:

• Identification data: name, ID/passport number, date and place of birth.
• Contact data: email, phone, address.
• Licence data: number, issue date, issuing country.
• Payment data: last 4 card digits, BIN, transaction date — full card data is processed by our payment processor and is NOT stored by us.
• Usage data: IP address, user agent, pages visited, application logs.
• Contract data: the rented vehicle, period, locations, mileage, any damage.

4. Legal basis

We process your data on one of the following bases:

• Contract performance (art. 6.1.b GDPR) — for bookings.
• Legal obligation (art. 6.1.c) — invoicing, tax, statutory records.
• Legitimate interest (art. 6.1.f) — fraud prevention, security.
• Consent (art. 6.1.a) — newsletter and analytics/marketing cookies, if and when enabled.

5. Who we share data with

We share data, strictly for the purposes above, with:

• Payment processors — for secure 3DS2 transactions.
• Transactional email providers — for booking confirmations and notifications.
• Cloud hosting and infrastructure providers (EU) — Google Cloud / Firebase for the site, plus the database and file-storage providers used by the booking system.
• Tax authorities — ANAF, for e-Factura, as required by law.
• Insurer — our CASCO partner, in case of a claim.

6. Retention period

We keep contract and tax data for 5 years after the contract ends, per the Fiscal Code. Marketing data is kept until consent is withdrawn. A customer account, if you create one, stays active until deactivated.

7. Your rights

Under GDPR, you have the right:

• to be informed about processing,
• to access your data,
• to rectification,
• to erasure ("the right to be forgotten"),
• to restriction of processing,
• to portability,
• to object, and not to be subject to automated decision-making.

8. Cookies

The site uses necessary cookies for it to function and, optionally, analytics and marketing categories you can enable from the consent banner. Full details are in the Cookie Policy.

9. Changes

This policy may be updated periodically. The version in force is the one shown on this page, with the last-updated date in the footer.