The company United Rental Group, sro , Ivánska cesta 4358/43, Bratislava 821 04 Company ID: 44 560 940, registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert no. 56233 / B (hereinafter referred to as " operator ") in accordance with Art. 13 REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (hereinafter referred to as "the General Data Protection Regulation ") ) provides the persons concerned with the following information on the processing of personal data:
The operator processes the personal data of the data subjects in the information system, which is jointly operated by the owners and holders of Payless licenses - other operators (with the exception of data obtained from GPS monitoring devices that are processed in the operator's special information system). Under this processing, personal data are transmitted within EU countries (the premises of the operators concerned), with individual operators obliged to ensure an adequate level of security for the personal data being processed.
The data subject is required to provide only an email address to which they have authorized and secure access. If the data subject provides an email address to which a third party has or may have access, or if they fail to ensure adequate protection of their email account, passwords, device, or authentication factors, they bear the associated risks and consequences. The controller is not liable for the consequences resulting from a breach of these obligations by the data subject if the controller has implemented appropriate technical and organizational measures and the agreed method of identity verification.
Why does the controller process personal data?
The operator processes the personal data of the data subjects for the purposes of:
pre-contractual and contractual relations in particular for the purposes of processing and sending price offers, reservations, preparation and conclusion of contracts and fulfillment of contractual obligations of the operator, especially within lease agreements, lease agreements, framework agreements related to contract management, receipt and handover of guides, complaints, invoicing, etc. The provision of personal data by the data subject is a contractual requirement. Failure to provide personal data will not make it possible to enter into a contractual relationship with the data subject.
unambiguous identification of the person concerned on the basis of the consent given by the data subject before making a photocopy of the data subject's official documents and / or other electronically made and recorded copies and descriptions of official documents (document scanning, authentication of documents stored on electronic media, etc.), provided that: the operator shall, in duly justified cases, request such copies of official documents from the person concerned. Giving consent is voluntary. In order to unambiguously identify the data subject, the controller may, to the extent appropriate, also use electronic verification mechanisms, in particular verification of the email address, sending a one-time authorization code, a verification link, or another security feature, and recording the result of such verification.
security, protection of property and financial interests resulting from the concluded contractual relationship and the legitimate interest of the operator derived from it. For this purpose, selected leased vehicles are secured by monitoring their location via satellite tracking (GPS) (tracing of leased vehicles during their use and after theft). The processing of personal data (resulting from the obtained information on the occurrence of the vehicle) occurs if the rented motor vehicle is used by a single natural person, ie if at the time of using the rented motor vehicle the operator is able to identify a specific natural person and the vehicle is equipped with a monitoring device. In this case, personal data will be processed to the extent of the obtained GPS information about the occurrence of the vehicle and the derivable characteristics of the person concerned. When taking over the vehicle, the lessee is informed that the rented vehicle is equipped with a GPS monitoring device.
recovery of incurred damages and receivables, settlement of insurance claims, storage of documentation and prepared records and on the basis of other necessary legitimate interests of the operator.
communication with the data subject via electronic communication tools, in particular chatbots, voicebots, and other automated or AI-supported communication tools, for the purposes of processing requests, reservations, changes to reservations, the conclusion and management of contractual relationships, customer support, the resolution of complaints, claims, and disputes, the verification of the data subject’s identity, the verification of authority to act, and the protection of the controller’s rights and legally protected interests, including the prevention of fraudulent conduct and misuse of services. For this purpose, the controller may process, in particular, the data subject’s identification, contact, contractual, transactional, and communication data, including the content of communications, data on the course and result of identity verification, data on the authentication elements used, and technical records of communications. For the purpose of identity verification, the controller may use the email address provided by the data subject as an identifier and send to it, or via another agreed communication channel, a one-time authorization code, verification link, or other security element as part of two-factor authentication. The provision of this data is a contractual or pre-contractual requirement; without it, it may not be possible to process the data subject’s request, enter into a contractual relationship, or securely provide access to information regarding the reservation or rental.
how to legally provide personal information about another individual?
to provide personal data to the operator about another natural person without his consent is entitled to perform the lessor, which is the employer of the natural person, only in connection with the introduction of pre-contractual and contractual relations related to renting a vehicle and only to the extent: title, name, surname, work classification, job classification, functional classification, personal number or employee's employee number, professional department, place of work, telephone number, fax number, e-mail address to the workplace and identification data of the employer, if necessary in connection with the performance of work duties, duties or functions of the person concerned. The provision of personal data must not impair the seriousness, dignity and security of the data subject.
provide personal data to the operator about another natural person without his consent, is entitled to perform a natural person who is the lessor only in accordance with applicable laws and contractual conditions only if it protects its legally protected interests, e.g. in the case of claims settlement.
In other cases, the person concerned is obliged to provide the operator with personal data of another natural person only with his consent, which he is obliged to submit to the operator. By providing data on another natural person, the data subject expressly declares that he / she has adequate authorization, on the basis of which he / she is entitled to provide this person's personal data to the operator.
in what periods is personal data retained?
Personal data obtained from vehicle monitoring are stored for a period of 2 years after the proper termination of the contractual relationship.
Photocopies of official documents are kept for the duration of the contractual relationship and are destroyed within 3 years at the latest, if the operator does not use them on the basis of legitimate interests (eg in the settlement of damages, insurance claims and theft).
Personal data processed for other purposes shall be kept for the period necessary to achieve the purpose of their processing, which is determined by special legislation or within the legitimate interest of the controller, but not longer than 10 years and only to the extent necessary for accounting purposes.
Personal data processed in the context of communication via chatbots, voicebots, and other automated or AI-powered communication tools, including records of the communication process, logs, technical records, and data regarding identity verification, are retained for the period necessary to fulfill the purpose of their processing, in particular to demonstrate the content of the communication, protect the rights and legally protected interests of the controller, resolve complaints, disputes, damages, and claims, generally for the duration of the contractual relationship and subsequently for the duration of the applicable statutes of limitations and retention periods, but for no longer than 10 years, unless a specific legal regulation or the controller’s legitimate interest requires a longer retention period.
to which recipients is personal data provided?
Control bodies within the scope of their activities in accordance with a special legal regulation (eg Slovak Trade Inspection),
Courts and law enforcement authorities at their request or within the legitimate interests of the operator,
insurance companies with which the operator has concluded an insurance contract related to the rented vehicle,
contracted agent: United Automotive Group, sro ID: 50202511; United Finance Group, sro IČO: 44560486, contractual intermediaries within the Payless Slovakia branch network. Information on current intermediaries can be obtained via the infoline +421 2 2030 2100, or in electronic form (e-mail) based on a request sent to an email address customerservice@paylesscar.sk .
and other recipients to whom the controller is obliged to provide personal data in accordance with a special law or a legitimate interest.
providers of information technology, cloud services, communication platforms, authentication and verification services, providers of chatbots, voicebots, and other AI solutions, as well as other contractual intermediaries who provide the operator with technical operation, maintenance, support, security, user authentication, and the recording and archiving of communications, to the extent necessary to fulfill their contractual obligations to the operator.
What are the rights of the data subject when processing his or her personal data?
The person concerned has the right to:
for information on the processing of her personal data;
gain access to the personal data processed and stored about it;
request a correction your incorrect, inaccurate or incomplete personal data;
request deletion their personal data when they are no longer needed or when the processing is illegal;
to object against processing your personal data for marketing purposes or on a basis related to a specific situation;
request a restriction processing their personal data in specific cases;
get your personal information in machine - readable format and / or request their transfer to another operator;
anytime your withdraw consent without prejudice to the lawfulness of processing based on consent given before its withdrawal, if such consent has been given by the person concerned;
request that decisions based solely on automated processing of personal data concerning the data subject, which produce legal effects or similarly significantly affect the data subject, be reviewed by a natural person, if the personal data are processed in this manner by the controller; The data subject has the right to express their opinion and object to such a decision;
lodge a complaint with the supervisory authority , in particular in the Member State of his habitual residence, at the place of work or at the place of the alleged infringement, and the right to an effective judicial remedy if it considers that the processing of its personal data is contrary to law. The supervisory body in the territory of the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12 Bratislava;
submit a request or complaint to the operator in connection with the protection and processing of her personal data. Any person concerned who wishes to make a request or complaint and to exercise his or her rights may do so:
in writing at: United Rental Group, sro, Ivánska cesta 4358/43, Bratislava 821 04.
electronically at: customerservice@paylesscar.sk ,
by phone on the infoline: +421 2 2030 2100