Privacy Policy and Personal Data Protection
This Privacy Policy explains how we collect, use, and protect any information about you. It also provides instructions on how to contact Rent a Car Auto Ramalhense if you have any questions regarding this document, and we will be happy to respond to your inquiries. If you're interested in how we handle cookies and related technologies, please refer to our Cookies section.
Rent a Car Auto Ramalhense reserves the right to make adjustments or changes to this Privacy and Personal Data Protection Policy whenever necessary, so please check it regularly to stay informed about any updates.
We offer online car rental services. This Policy applies to all personal data we collect while you use our website or when you contact us via email, live chat, phone, or mail.

1. Personal Data
Personal data refers to information related to a person who can be identified by such data, or by confirming or not confirming with other information. Common examples of personal data processed by Rent a Car Auto Ramalhense during its daily operations include names, addresses, phone numbers, and other contact details, driver's license, etc.

2. Personal Data You Provide Us
If you're a customer or potential customer of Rent a Car Auto Ramalhense, we can't assist you in making a reservation or requesting an offer without certain information from you. To make a reservation or receive a booking offer, we require essential information to provide the requested services. This may include your name, age, date and place of birth, and contact details (email, address, and phone number). It may also include identification information such as a passport, ID card, or driver's license, or payment information (bank card or bank account details).
Additionally, we collect information from your computer when you use one of our platforms, even if you don't make a reservation, and regarding this, please refer to our Cookies section. This may include your IP address, browser, and language settings.

Personal Data Collected About Other People
You may make a reservation on behalf of someone else, such as a friend, employee, family member, or colleague. In this situation, make sure that the person is aware that you're providing their data to us and that they have agreed to how we handle personal data (as described in this Policy). This is your responsibility.
Automatically Collected Personal Data
Even if you don't make a reservation, we may automatically collect certain information when you visit our platforms, and regarding this, please refer to our Cookies section.

3. Why Do We Collect and Use Your Personal Data?
We request your personal data to help book your car or motorcycle rental and ensure you benefit from the best service available. These are the main reasons we collect your personal data, although there may be other reasons.
We may use your personal data in the following ways:

• Reservations: First, we use your personal data to make and manage your reservation (or any other product or service, such as insurance).
• Customer Service: Our customer support team needs your data to assist you, for example, in making a reservation or answering any questions you have before, during, or after the booking.
• Communication: There may be times when we contact you by phone, email, or SMS to respond to your inquiries, address requests, prevent fraud, and detect other illegal or undesirable activities. Similarly, we may use your personal data for security and risk assessment purposes, which may include user and reservation verification.
• Improving Our Services: We analyze personal data to improve the functionality and quality of our online services and enhance the overall user experience. We continuously work to make our website more pleasant and user-friendly.
• Legal Purposes: In some cases, we may need to use your personal data to resolve certain legal matters, comply with our legal obligations, or participate in investigations by public authorities.

4. What Is the Legal Basis for Processing Personal Data?
To process your personal data, we rely on the following legal grounds:

• Contract Execution: We need to use your personal data to perform any contract you’ve entered into with us. For example, when booking a car or representing an entity with which we've entered into a collaboration agreement, you must provide us with certain information to complete the agreement.
• Legitimate Interest: We may use your information for our "legitimate interests" (a term used for activities that we believe are essential for the efficient performance of our business), while respecting your rights and the law. For example, to provide you with the most relevant content on our platforms and to improve and promote our products and services.
• Compliance with Legal Obligations: We may use your personal data for the administrative and legal aspects of our business. For example, we may be required to collect certain information about our customers for tax and accounting purposes or to provide information to courts or regulatory authorities.
• Consent: We may rely on your consent to use your personal data in certain circumstances, such as for direct marketing purposes, contacting you to finalize a reservation, or analyzing the quality of the services we offer. You can withdraw your consent at any time by submitting a request to geral@autoramalhense.pt, with "Privacy" in the subject line.

5. Who Do We Share Your Personal Data With and Why?
There are several business partners integrated into the services we provide, and in certain cases, we may share your personal data with them. These may include payment service providers, marketing partners, and in certain cases, public authorities.

• Competent Authorities: We may disclose personal data to public authorities or investigative bodies if required by law (or any regulation equivalent to a law). This may include court orders, subpoenas, and orders resulting from legal procedures and investigations. We may also disclose your personal data if necessary to prevent, detect, or resolve fraud or other criminal activities. Additionally, we may disclose your personal data to protect our rights, property, or the rights or property of our business partners.
• Third-Party Service Providers: We may use third-party service providers to process your personal data on our behalf. For example, we may use your personal data to invoice services provided by us, organize payments, payment guarantees, or reimbursements.
  We ensure that any third-party service providers we use can provide sufficient guarantees concerning the confidentiality and security of your data. We will have written contracts with them to guarantee the protections they will offer your data and their compliance with our data security standards and international transfer restrictions.

6. Do We Transfer Personal Data Outside the European Economic Area?
We also transfer the personal data we process to countries outside the European Economic Area (EEA), for example, when one of our service providers employs staff or equipment outside the EEA – for example, a cloud service provider located in the United States. We have implemented appropriate safeguards to protect your privacy, rights, and fundamental freedoms and to ensure you can exercise your rights. For example, we have established an adequate level of data protection, usually through the EU Standard Contractual Clauses based on the European Commission's model clauses or other available safeguards.

7. What Security Measures Do We Apply to Protect Your Personal Data?
Our systems and procedures have been organized to include all reasonable security measures necessary to protect your personal data from unauthorized access and destruction, in accordance with Portuguese and European data protection legislation. Additionally, we have specific technical and physical procedures and restrictions to limit access and protect the personal data we maintain. Only authorized personnel can access this data, and only for authorized and specific reasons.

8. How Long Do We Retain Your Personal Data?
We will keep your personal data for a time determined by the purpose for which it was collected and its nature. We will retain your personal information for no longer than necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is permitted by law. We implement appropriate measures to ensure that your personal information is securely and consistently destroyed when no longer necessary.
In specific circumstances, we may store your personal information for extended periods to maintain an accurate record of your transactions with us in case of any complaints, or if we reasonably believe there is potential for litigation related to your personal data or transactions.

9. What Are Your Rights Regarding the Personal Data You Provide to Us?
Except in certain cases provided by law, depending on the processing activity we are carrying out, you have the right to request access to, correction of, or deletion of your personal data, as well as the right to request data portability. You also have the right to object to the processing of your personal data in certain cases. If we process your personal data based on consent, you may withdraw it at any time for the future. You can also file a complaint with a supervisory authority.
If you believe that we are violating our obligations under data protection laws, as set out in the applicable personal data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and Council, of April 27, 2016 ("GDPR"), you may file a complaint with the competent National Authority for Data Protection at https://www.cnpd.pt/.

10. Who Is Responsible for the Processing of Your Personal Data on Our Website?
Rent a Car Auto Ramalhense, Lda is responsible for the processing of your personal data and acts as the data controller as defined by the applicable data protection legislation.
If you have any questions, concerns, or comments about our practices or this Privacy Notice, please email us at geral@autoramalhense.pt