Source: https://www.sixt.be/informatie/privacy-policy/
Timestamp: 2019-04-25 16:59:44+00:00

Document:
Your personal data is recorded via SIXT websites if you actively provide such data to us, for instance as part of a registration procedure, by filling out forms, by sending emails, and, primarily, by making a vehicle reservation. We use these data for the purposes described above or for purposes that arise from the respective request, for example, to process specific reservation requests or preferences.
The data are only used for advertising purposes to the extent that such advertising is our own (including tell-a-friend features).
Further information can be found at www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that the code "gat._anonymizeIp();" has been added to Google Analytics on this website to ensure anonymous collection of IP addresses (so-called IP masking). Under tools.google.com/dlpage/gaoptout?hl=nl you will find instructions for deactivating Google Analytics Services.
The party responsible for processing your data (controller) is Sixt Belgium BVBA, Aankomsthal TA 1972, BE 1930 Zaventem (hereinafter also referred to as SIXT).
If you have any questions on data protection, please contact us at dataprotection@sixt.com.
Contract data These include, for example, the rental information (vehicle category, pick-up and return dates, pick-up and return branch, booked extras/services), rental contract number, reservation number, driver’s licence data, driver’s licence photograph, license plates of the vehicle you rented, and information on customer loyalty and partner programmes.
Special data categories: In the event of an accident, damage to the vehicle, or similar incidents, we process data relating to the respective course of events and the damage incurred. These data can be provided by customers, passengers or injured parties. The data processed in such circumstances can include health-related data such as data on injuries, blood alcohol levels, driving under the influence of narcotic substances, and the like.
Third-party data If, within the scope of your vehicle rental, you provided us with personal data of third parties (e.g., family members, second drivers, passengers), then we will also process these data.
We process your master data, communication data, contract data, financial data and any data you have provided voluntarily, for purposes of implementing your reservations and facilitating the conclusion and performance of your rental contract.
We moreover use the master data, communication data and contract data for customer services purposes, for example to handle any complaints or changes of reservation that you contact us about.
If you book your vehicle via travel agencies, online travel agencies or other agents, then your master data, communication data, rental information and, if applicable, financial information, will be transferred to us by our partners.
We also use your master data, and contract data for purposes of settling accounts (e.g., com-missions and sales processing) with, for example, travel agencies, other agencies, franchise partners and cooperation partners. We also transfer your data to partner companies in the event that we do not have the vehicle or vehicle type requested by you available.
We are furthermore legally obliged – for purposes of preventing and investigating criminal offences – to compare your master and communication data with official perpetrator lists provided to us. Such comparisons also serve to ward off dangers and to facilitate prosecution by the state authorities.
We furthermore use your data for your and our security, for example to avoid payment defaults and to prevent property offences (in particular fraud, theft, embezzlement). If you request to pay for your rental by invoice, then we process your master and financial data in order to assess your creditworthiness by obtaining the corresponding information from credit agencies.
Once both contracting parties have fulfilled their obligations under the rental contract, your master data, financial data and contract data will be stored until the statutory retention period expires.
Art. 6 (1) point f) GDPR applies to the processing of data to the extent required to settle accounts vis-à-vis third parties, to assert one’s own claims, and to mitigate risks and prevent fraud.
Art. 6 (1) point c) GDPR applies to the processing of data to the extent required to detect, prevent and investigate criminal offences, to examine and store driver’s licence data, and to comply with preservation periods under commercial and tax law.
Our legitimate interests in using your personal data to improve our services and customer services lie in the fact that we want to offer you the best possible services and to sustainably improve customer satisfaction.
To the extent that data processing is required to perform analyses with a view to preventing damage to our company and our vehicles, our legitimate interests lie in maintaining security for costs and preventing economic disadvantages such as those arising from non-payment or the loss of our vehicles.
For the purposes described in the foregoing, we disclose your data to the following recipients: IT service providers, call centres, collection companies, financial services providers, credit agencies, agency partners, franchise partners and other cooperation partners.
If you use our company to reserve vehicles that you want to rent in third countries, we send your personal data to your contracting partner in the third country concerned. The transfer of your data to a third country is based on an adequacy decision by the European Commission. If no adequacy decision by the European Commission exists for the respective third country, then the transfer to that third country will take place subject to appropriate safeguards as per Art. 46 (2) GDPR. We can also transfer your data to a third country subject to the conditions set forth in Art. 49 GDPR. You can request copies of the aforementioned safeguards from SIXT by writing to the address specified above (see → Controller). Third countries are countries outside the European Economic Area. The European Economic Area comprises all countries of the European Union as well as the countries of the so-called European Free Trade Association, which are Norway, Iceland and Liechtenstein.
We process your master data, communication data and contract data for purposes of promoting customer loyalty, implementing bonus programmes, optimising customer offers and holding customer events (see → Events and donations). The customer loyalty programmes we promote include our own programme and the programmes of our cooperation partners.
Our legitimate interests in using your personal data for purposes of implementing direct mar-keting measures and the marketing measures mentioned lie in the fact that we want to convince you of our services and promote a lasting customer relationship with you.
The transfer of data to third countries takes place within the scope of partner programmes. The transfer of your data to a third country is based on an adequacy decision by the European Commission. If no adequacy decision by the European Commission exists for the respective third country, then the transfer to that third country will take place subject to appropriate safeguards as per Art. 46 (2) GDPR. We can also transfer your data to a third country subject to the conditions set forth in Art. 49 GDPR. You can request copies of the aforementioned safeguards from SIXT by writing to the address specified above (see → Controller). Third countries are countries outside the European Economic Area. The European Economic Area comprises all countries of the European Union as well as the countries of the so-called European Free Trade Association, which are Norway, Iceland and Liechtenstein.
processing damages resulting from accidents (processing based on information provided by you and third parties such as the police, subsequent renters, witnesses, etc.).
When dealing with cases of damage and accidents, we also process you master data, communication data and contract data with a view to providing help in the form of our SIXT damage assistance services and mobility guarantee.
We also process you master data, communication data and contract data for purposes of fulfilling legal obligations (e.g. providing information to investigating authorities).
Should the competent authorities suspect you of having committed an administrative or criminal offence with one of our vehicles, then we will process not only the master data pertaining to you that we have stored, but also the data conveyed to us by the competent authorities.
We also process your master data, communication data, financial data, contract data and, if applicable, data concerning health, for purposes of upholding and asserting any claims that we may have against you, for example claims resulting from non-payment or damage caused to our vehicles.
Art. 6 (1) point b) GDPR applies to data processing for purposes of complaints management, providing customer services in cases of damage, and processing damages resulting from accidents.
Art. 6 (1) point c) GDPR applies to data processing for purposes of processing damages resulting from accidents. Art. 6 (1) point f) GDPR applies to data processing for purposes of settling claims, asserting any claims that we may have against you, and handling claims relating to administrative offences.
Art. 9 (2) point f) GDPR applies to the processing of data concerning health for purposes of establishing, exercising or defending legal claims.
Our legitimate interests in using your personal data for purposes of settling claims and asserting any claims that we may have against you lies in our desire to ward off damage to our company and to ensure that we can provide our customers with undamaged vehicles. We are moreover obliged, pursuant to our contractual relations with third parties (e.g. insurance com-panies), to process your data for purposes of settling claims. Our legitimate interests in this respect lie in ensuring our contractual fidelity.
For the purposes described in the foregoing, we disclose your data to the following recipients: Public authorities (investigating authorities; regulatory authorities; police authorities), collecting companies, experts, assistance services providers, lawyers and insurance companies.
In cases of damage and/ accidents suffered in a third country, we send your personal data to the competent authorities and to insurance companies in such third country. The transfer of your data to a third country is based on an adequacy decision by the European Commission. If no adequacy decision by the European Commission exists for the respective third country, then the transfer to that third country will take place subject to appropriate safeguards as per Art. 46 (2) GDPR. We can also transfer your data to a third country subject to the conditions set forth in Art. 49 GDPR. You can request copies of the aforementioned safeguards from SIXT by writing to the address specified above (see → Controller). Third countries are countries outside the Euro-pean Economic Area. The European Economic Area comprises all countries of the European Union as well as the countries of the so-called European Free Trade Association, which are Norway, Iceland and Liechtenstein.
We process your master data, communication data, contract data and financial data for purposes of fulfilling the legal obligations to which SIXT is subject. These require us to process data, for example in order to comply with duties of disclosure vis-à-vis authorities and to comply with the processing requirements as stipulated by commercial and tax law provisions (e.g., the preservation period for bookkeeping documents and accounting records as per Section 257 (4) of the German Commercial Code (HGB).
Art. 6 (1) point c) of the General Data Protection Regulation (GDPR).
The authorities may require us to disclose your data to them for the purposes described above.
We process your master data, communication data and contract data, as well as any data provided voluntarily, for purposes of optimising our processes and offerings.
This involves, for example, compiling and evaluating rental reports, implementing capacity planning to improve vehicle allocation procedures, setting up a data warehouse, analysing and rectifying sources of error, and conducting customer satisfaction surveys. We moreover pro-cess your master data and contract data for purposes of optimising our online presence (see → Website).
To improve the quality of our offering and our customer services, we process your master data and contract data on the basis of an algorithm with a view to, for instance, creating profiles and probability values in relation to future rentals and to take-up rates for our offers.
We also process your master data, communication data and contract data in connection with our collaboration with franchise partners, cooperation partners and agency partners, and for purposes of optimising the related processes and offers (see. → Reserving and renting vehicles).
We also process address data originating from external service providers to update our address database and to ensure that the master data we use for contract handling is correct.
Art. 6 (1) point a) of the General Data Protection Regulation (GDPR) applies where consent is required to implement measures intended to optimise our processes and offers.
Art. 6 (1) point f) GDPR.
For the purposes described in the foregoing, we disclose your data to the following recipients: IT service providers, call centres, cooperation partners, agency partners and franchise partners.
Where our cooperation partners, agency partners and franchise partners are based in a third country, we transmit your personal data to that third country. The transfer of your data to a third country is based on an adequacy decision by the European Commission. If no adequacy decision by the European Commission exists for the respective third country, then the transfer to that third country will take place subject to appropriate safeguards as per Art. 46 (2) GDPR. We can also transfer your data to a third country subject to the conditions set forth in Art. 49 GDPR. You can request copies of the aforementioned safeguards from SIXT by writing to the address specified above (see → Controller). Third countries are countries outside the European Economic Area. The European Economic Area comprises all countries of the European Union as well as the countries of the so-called European Free Trade Association, which are Norway, Iceland and Liechtenstein.
We may also process your master data and communication data to invite you to events as part of our customer service and customer loyalty activities. We may moreover use your master data and communication data for charitable purposes (e.g., to appeal for donations).
Art. 6 (1) point f) GDPR applies to data processing for purposes of acquiring customers, strengthening customer relations and managing business customers.
Our legitimate interests in using your personal data for customer service, customer loyalty and charitable purposes lie in our desire to, on the one hand, offer the best possible services and sustainably raise customer satisfaction, and, on the other, fulfil the social responsibilities that we, as a large company, are bound to.
For the purposes described in the foregoing, we disclose data relating to contacts at our business customers to the following recipients: IT service providers, call centres, event organisers.
If business customers use our services to reserve vehicles that are to be rented in a third country, we transmit the personal data of the driver to our contractual and business partners in such third country. The transfer of your data to a third country is based on an adequacy decision by the European Commission. If no adequacy decision by the European Commission exists for the respective third country, then the transfer to that third country will take place subject to appropriate safeguards as per Art. 46 (2) GDPR. You can request copies of the aforementioned safe-guards from SIXT by writing to the address specified above (see → Controller).
You have the right to, at reasonable intervals, obtain information about your personal data under storage (Art. 15 GDPR). The information you are entitled to includes information about whether or not personal data concerning you are stored, about the categories of personal data concerned, and about the purposes of the processing. Upon request, SIXT will provide you with a copy of the personal data that are processed.
You also have the right to obtain from SIXT the rectification of inaccurate personal data concerning you (Art. 16 GDPR).
You furthermore have the right to obtain from SIXT the erasure of personal data concerning you (Art. 17 GDPR). We are under obligation to erase personal data in certain circumstances, including if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw the consent on which the processing is based, and if the personal data have been unlawfully processed.
Should you opt to change to a different vehicle rental company, you have the right either to receive, in a machine-readable format, the data that you provided to us based on your consent or on a contractual agreement with us, or to have us transmit, also in a machine-readable format, such data to a third party of your choice (Right to data portability, Art. 20 GDPR).
If the processing of your data by SIXT is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Art. 6 (1) point e) GDPR) or if it is necessary in the legitimate interests of SIXT, then you have the right to object at any time, on grounds relating to your particular situation, to the processing of your data. SIXT will then end the processing, unless we can present compelling legitimate grounds for such processing that supersede the grounds for ending the processing.

References: Art. 6

Art. 6
 Art. 46
 Art. 49
 Art. 46
 Art. 49

Art. 6

Art. 6
 Art. 6

Art. 9
 Art. 46
 Art. 49

Art. 6

Art. 6

Art. 6
 Art. 46
 Art. 49

Art. 6
 Art. 46
 Art. 20