This page explains which personal data we use when you ask for a rental car, rent from us or visit the website, why we use it, how long we keep it and what your rights are.
Who we are
The controller of your data, the one who decides how it is used, is ALV Static Auto, a car rental service in Constanța, with the website alv-site.pages.dev.
Your name, phone, the dates, the car you chose and the site language. If you give us a delivery address or a comment, those too.
Why
To reply, check that the car is free and prepare the rental.
Legal basis
Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
How long
If the request does not become a rental, the name, phone, address and comment are deleted automatically after 12 months. If it does, the data moves to the rental (below).
The rental
What data
Your name, phone, email (if you give it), the details of your ID card or passport and driving licence, handover and return addresses, the rental itself, payments and the deposit.
Why
To sign and carry out the contract, hand over and take back the car, issue payment documents and keep the accounts.
Legal basis
Performance of the contract (Article 6(1)(b) GDPR) and our legal obligations, such as accounting, or giving the driver's details to the authorities when the law requires it, for example for a traffic fine (Article 6(1)(c)).
How long
Contact details in our client list are deleted automatically 36 months after your last rental. The contract and accounting documents are kept for as long as accounting and tax law requires.
Rental history
What data
Notes about past rentals, for example damage or unpaid amounts.
Why
To decide whether to rent to you again and to protect our cars.
Legal basis
Our legitimate interest in protecting our property (Article 6(1)(f) GDPR). You can object; see Your rights.
How long
The same as client details: 36 months after the last rental.
Messages and calls
What data
Your number or account name and what you write or tell us (phone, WhatsApp or Instagram).
Why
To answer you and agree on the rental.
Legal basis
Steps before a contract or its performance (Article 6(1)(b) GDPR); for other questions, our legitimate interest in answering you (Article 6(1)(f)).
How long
For as long as the conversation and the rental need. Messages also stay with the app's provider under its own rules.
Visiting the website
What data
IP address, browser and device type, the pages requested and the time.
Why
To deliver the pages and protect the site from attacks and abuse. Our hosting provider, Cloudflare, does this.
Legal basis
Our legitimate interest in a secure, working website (Article 6(1)(f) GDPR).
How long
A short time, in Cloudflare's technical logs.
Who else receives the data
Our colleagues who handle requests and rentals. They work in an internal app with personal accounts, and each sees only what their role needs.
Cloudflare, Inc., which hosts the website, the database and files, and works on our behalf under a contract.
Our accountant, the insurer in case of damage, and the authorities, such as the police, when the law requires it.
We don't sell data and don't make automated decisions about you.
Data outside the European Economic Area
Our provider Cloudflare is based in the United States, so data may be transferred there. It takes part in the EU-US Data Privacy Framework, which the European Commission recognises as giving adequate protection, and also uses the Commission's standard contractual clauses.
Your rights
To find out what data we hold about you and get a copy.
To correct wrong or incomplete data.
To have your data deleted when we no longer need it and the law does not require us to keep it.
To ask us to restrict the use of your data, for example while we check a complaint.
To receive the data you gave us in a format you can pass on to someone else.
To object to uses based on our legitimate interest.
To withdraw your consent to cookies at any time, under Cookie settings at the bottom of the page. What was done before stays lawful.
Write to us or call +40 752 561 121. We reply within one month. So that we don't give your data to someone else, we may ask you to confirm it's you, for example by calling from the number in the request.
If you think we don't respect your rights, you can complain to the Romanian data protection authority, ANSPDCP: B-dul G-ral Gheorghe Magheru 28-30, sector 1, Bucharest, 010336, dataprotection.ro, anspdcp@dataprotection.ro. You can also complain to the authority in the EU country where you live or work.
Cookies
Which cookies we use and how to change your choice: Cookie policy.
How we protect the data
The site opens only over an encrypted connection (HTTPS). Only our colleagues get into the internal app, with personal accounts, and each sees only what their role needs. We keep a record of changes.
Minors
We rent cars only to adults, usually from 21, and the site is not aimed at children. We do not knowingly collect data from minors.
Changes
We update this policy when the data we use or the services we work with change; the date at the top shows the current version. The policy is published in Romanian, English and Ukrainian. If the versions differ, the Romanian one prevails.
