This Privacy Statement sets out details of the personal data relating to you that we collect through the Cars-scanner.com website and applications relating to Cars-Scanner: Android app - https://play.google.com/store/apps/details?id=com.carsscanner; iOS App - https://apps.apple.com/us/app/cars-scanner-rent-a-car/id1008401287 (the “Platform”), how we will process such data and to whom it may be disclosed. This notice also explains your rights under applicable data protection law, including the EU General Data Protection Regulation (“GDPR”), in relation to our processing of your data.
Bons Websistemes SL (registered address: AD400, Andorra, Arinsal, Carretera mas de Ribafeta, 2) is the administrator of the Platform and operate as an affiliate partner of ETrawler Unlimited Company registered address at CarTrawler, Classon House, Dundrum Business Park, Dundrum, Dublin 14, Ireland, is the owner and operator of the booking engine integrated to the Platform and is therefore the controller of the personal data which is described in this Data Protection Notice. References to “we”, “us” and “our” in this notice are therefore references to Cars-Scanner, ETrawler and Cars-Scanner mobile applications (as the case may be).
We introduce customers to vehicle rental and other ground transportation services such as bus, rail and taxi transfers (“Transportation”) and ancillary travel related products and services. Once your personal data is transferred to the transportation provider, they become a separate data controller for their processing.
You can contact us using the details at the end of this statement, or if you have any queries in relation to the processing of your personal data you can also contact our Data Protection Officer by emailing dpo @cartrawler.com
We collect and process various types of personal data when you use our Platform, including your name, address, email address, payment information, booking details, IP address, browser type, and device information. We may also receive information collected on our behalf by third parties, such as when you see our advert on a third-party site.
The following are further details of our processing and the legal basis which justifies this processing of personal data:
Transportation Quote: We collect your name, email address, IP address, quote reference, and phone number (if contacted by phone) to provide a quote for Transportation. This processing is necessary to take steps at your request prior to potentially entering into a Transportation contract.
Booking Details: We collect your name, address, email address, phone number, and payment details to process your booking or refunds. This processing is necessary for entering into or performing a contract to provide our Transportation booking service.
Queries and Complaints: We record details of queries or complaints and how they are dealt with on our systems. We may also seek further details from relevant Transportation or other service providers. Calls are recorded for training and quality purposes based on our legitimate interest. Processing personal data for queries or complaints is based on our legitimate interest in resolving customer queries and complaints. In limited circumstances, we may process health data with your explicit consent to resolve your query or complaint.
Insurance Policy: We collect your name, address, email address, phone number, booking reference, IP address, and payment details to facilitate the purchase of your insurance policy. This processing is necessary for entering into or performing a contract to provide you with that service.
Other ancillary products and services: We collect your name, address, email address, phone number, booking reference, IP address, and payment details to process your request for ancillary services, such as parking. This processing is necessary for entering into or performing a contract to provide you with that service.
Mobility Booking Details: When you use our mobility app and services on a mobile device, we collect your name, email address, phone number, loyalty ID (if relevant), password, payment details, and location data during taxi journeys. This processing is necessary for entering into or performing a contract.
Location Data: If you are using our services on a mobile device with location services enabled, we record your location to help you find local Transportation or other services. This processing is necessary for entering into or performing a contract. We also use your IP address to determine your country when making a booking.
Loyalty Programme Data: If you join our Loyalty Programme, we store your name, email address, phone number, date of birth, username, password, and historic booking references to administer the loyalty programme, add/deduct loyalty points, and notify you of loyalty rewards. This processing is necessary for the performance of a contract with you.
Marketing: We record your preferences for receiving marketing communications from us and third parties regarding car rental products and services. We send this marketing based on your legitimate interest in receiving important travel product information and exclusive deals. You can opt out at any time.
Analysis/Reporting: We use aggregated booking data to create internal reports on our business operations, conduct commercial analysis, and predict future trends affecting our business. You are not identifiable from the reports or analysis produced.
Advertising and Look-Alike Audiences: We use your personal data to create look-alike audiences and share it with third-party advertising platforms, including Google, to target similar potential customers and display relevant advertisements based on your interests and preferences. We process and share your data for these advertising purposes based on your consent when you agree to the use of cookies and similar technologies on our Platform.
Surveys: If you participate in a survey, we record your responses along with your name and email address. We process your data based on our legitimate interest to get feedback and improve the service we provide to customers.
Fraud Detection and Financial Crime Prevention: We may use your personal data to prevent and detect fraud and complete sanction screening based on our legitimate interest.
Profiling: We use your personal information to recommend vehicles and services that might interest you, identify your preferences, personalize your experience, and prevent fraud.
Automated Decision-Making: We process your personal data to assess the risk of fraud associated with each rental transaction. If the system detects a high likelihood of fraudulent activity, it may result in an automated decision to deny access to the car for hire. You have the right to request human intervention, express your point of view, and contest the decision. We may personalize the pricing for services available through the booking engine based on automated decision-making.
Use of AI in Customer Support: Our customer support chatbot uses AI, including OpenAI's language models, to assist in resolving your inquiries efficiently. OpenAI does not use the data submitted through the API for training its models. We ensure that all data is handled securely and solely for the purpose of providing support.
When you use our Platform, we use various technologies to automatically capture details about the device you are using and how you interact with the Platform, including:
Device Details and how you interact with the Platform: We automatically collect details about your device, including its IP address, device ID, browser, operating system, date and time of visit, pages visited, duration of stay, clicks on a page, and details of crashes or system bugs encountered. We use this data to deliver our services, personalize your experience, test new features, analyze Platform usage, and evaluate and improve our services. Where possible, we use this data anonymously. This processing is based on our legitimate interests in operating, improving, and securing our services.
How You Reached the Platform: Where possible, we record how you arrived on our Platform (e.g., from a search engine or by clicking on one of our adverts). We collect cookie consent to allow for this processing.
We mainly collect information directly from you, but there are circumstances where we collect information from third party sources. These circumstances include:
Third Parties – We operate a programme where third parties advertise our Platform on our behalf. If you click on one of their advertisements and are directed to our Platform, we track if you make a booking and attribute that booking to the relevant third party to pay them a commission, without providing them any of your personal information.
Service Provider – If there are issues with your Transportation or other service provider, they may contact us with information about the issue.
Advertisements – When we work with third parties to display advertisements, we may use technologies like cookies or pixel tags to record your interaction with those advertisements. This anonymised data is sometimes sent to us through cookies and pixel tags set on our behalf by those third parties.
You are not obliged to provide us with any of your personal data. However, to make a Transportation booking or avail of an ancillary service, you will need to provide the information requested on our booking engine, otherwise we cannot process your booking. Similarly, if you contact our customer services team with a query or complaint, you may be required to provide certain information, which we will inform you of.
To process your booking, we send your details to the relevant Transportation provider. If you contact us with a query or complaint about a booking, we may share details with the Transportation provider to resolve it.
If you purchase another service, we may need to share personal data with the third-party service provider to provide you with that service. For insurance policy claims, we may need to share personal data with the underwriter or appointed claims handler.
We also use service providers to assist in providing our services, some of whom will have access to your data (e.g. software service providers who host our data). Where we engage a third party to process your data on our behalf, we ensure they respect your privacy rights and process data in accordance with data protection law. Further details:
Hosting Providers – We use various cloud service and co-location providers to help us host and manage our data.
Payment Processors - We use third-party payment processors and providers to assist us in processing payments on our Platform. AIB Merchant Services, Worldpay, Klarna and PayPal are separate data controllers. Their respective privacy policies can be found at:
Technology Providers - This includes service providers who provide translation tools, help secure our network, systems and emails, and help manage your data subject rights requests.
Customer Service Providers – We use a third-party service provider for customer service outside working hours and third party platforms for processing customer correspondence.
Auditors – Our internal and external audit functions are provided by third parties. The auditors help ensure we comply with legal obligations, including processing personal data. This may mean they access systems that process personal data or review how we have processed certain personal data.
Fraud and screening databases – We may use external fraud detection and prevention databases and screening tools that are available in the industry and publicly available information to prevent and detect possible criminal activity, sanctions or fraud.
Law Enforcement Agencies – We may share your data with law enforcement agencies for them to investigate, detect or prevent possible criminal or fraudulent activity, based on complying with a legal obligation.
In certain circumstances, we will transfer your personal data outside of the European Union to a country not recognized by the European Commission as providing an equivalent level of protection for personal data as the European Union. This typically occurs when transferring personal data to a Transportation provider in your chosen country to fulfill your booking, or to payment providers based in the US, falling under Derogation 49 1) b) where the transfer is occasional and necessary for the transportation service or payment. We may also transfer your personal data outside the EU when using service providers based in the US, Egypt, or the UK. We ensure appropriate measures are in place to protect your personal data and comply with applicable data protection laws, such as contracts approved by the European Commission for transfers to the US and Egypt, and relying on the EU Commission's adequacy decision for transfers to the UK. The following categories of data are transferred to our email security software system in the UK: Name, booking reference, telephone number, address, email address, IP Address, and customer correspondence. More information on the UK adequacy decision can be found at: https://ec.europa.eu/commission/presscorner/detail/en/ip_21_3183
CarTrawler has updated our data protection agreements with third parties to implement the new standard contractual clauses (SCCs) published by the European Commission on 4 June 2021, incorporating GDPR requirements and the Schrems II decision. We have adopted contractual, organizational, and technical measures in line with EDPB Recommendations, including state-of-the-art encryption, malicious code detection, intrusion detection monitoring, network and application scanning and testing, security access controls, annual staff compliance training, Transfer Impact Assessments for processing outside the EEA, and a Law Enforcement Request policy. CarTrawler ensures that third parties implement similar measures to ensure an adequate level of protection for personal data transferred outside the EEA.
For further details about the supplementary measures taken or copies of agreements related to personal data transfers, please contact us using the details at the bottom of this statement.
We retain your personal data in accordance with our record retention policy, keeping it no longer than necessary for the purpose it was collected and in accordance with legal requirements. Retention periods vary depending on the type of personal data:
Transaction Data – Retained as long as necessary to facilitate your booking and resolve any issues. If your marketing preferences allow us to send you marketing messages, such data will be retained as per the details below.
Loyalty Programme Data – Retained as long as necessary to facilitate administration of our loyalty programme.
Email Marketing – Retained as long as necessary to facilitate your marketing preferences, including certain transaction information to customize marketing messages.
Managing legal claims – Personal data may be retained until the statute of limitations runs out for potential legal claims (varying from 2 to 12 years).
This Platform uses cookies, which are small text files sent from a website and stored on your device when you visit a website, recording information related to your visit. For more information on the cookies we use, please visit our cookies policy.
Where we process your personal data based on your consent, you are free to withdraw that consent at any time by contacting us using the details at the bottom of this statement or, for email marketing, by using the unsubscribe link in the email. Please note that withdrawing consent may prevent us from continuing to provide the related service to you.
In certain circumstances, you have the following rights in relation to your personal data:
Right to access the data – You have the right to request a copy of the personal data we hold about you, along with other information about our processing of that data.
Right to rectification – You have the right to request that any inaccurate data we hold about you is corrected, or to request that we update incomplete information.
Right to erasure – You have the right to request that we delete the personal data we hold about you, sometimes referred to as the right to be forgotten.
Right to restriction of processing or to object to processing – You have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
Right to data portability – You have the right to request that we provide you, or a third party, with a copy of your personal data in a structured, commonly used machine-readable format.
In order to exercise any of the rights set out above, please contact us at using the contact details at the bottom of this statement or click on the following link:
https://privacyportalde-cdn.onetrust.com/dsarwebform/d542f8c6-e8f4-416b-8125-62a18e5fc649/9ee201c6-e6ac-41c4-bd6c-3e7787691a53.html
We regularly review our privacy statement and post any updates on this web page.
If you have any questions or complaints regarding our processing of your personal data, please contact us at:
Data Protection Officer, ETrawler Unlimited Company, Classon House, Dundrum Business Park, Ireland (by post)
dpo@cartrawler.com (by email)
You also have the right to file a complaint with the Irish Data Protection Commission if you are dissatisfied with how we process your personal data. Information on filing a complaint can be found at (https://forms.dataprotection.ie/contact).
Updated at: Fri, 29 Oct 2024 16:15:22 GMT