CAR COSTI SERV S.R.L (ZIP RENT A CAR) is a company registered in Romania with VAT no. 35177154 having headquarters in Sibiu, Tiglarilor street 101.

The personal information we collect includes: Contact details (name, postal address, telephone / mobile phone number, e-mail address). In order to make the reservation, CAR COSTI SERV S.R.L (ZIP RENT A CAR) requires identification, which may include an ID card, a passport, a driving license, or a utility bill.

The purposes for which we collect personal data are: to book for rent; to be assisted in the transaction to rent a vehicle; to confirm and verify your identity for fraud prevention; provide “customer expierience”, “customer satisfaction” information in connection with your rental, or respond to an inquiry made by us; to contact you in connection with a complaint during the rental period, from the insurer or a fine notice (parking fine, police fine, etc.); to invoice and collect the amounts due in connection with the lease; to offer to you marketing offers, promotional campaigns: to protect our rights and property.

The legal grounds for processing your personal information are: executing a rent’a’car contract, assistance in the transaction to rent your vehicle; to invoice and collect the amounts due in connection with the lease; collection; complying with statutory accounting records, contacting you in connection with a complaint during the rental period, from the insurer or a fine notice (parking fine, circulation fine, etc.); the consent that you gave us permission to use personal data – booking, marketing, providing customer expierience, customer satisfaction information about your rental or responding to an inquiry made by us; legitimate interest – to confirm and verify your identity for fraud prevention; to protect the rights and property of CAR COSTI SERV S.R.L (ZIP RENT A CAR).

Categories of recipients and empowered: we may share personal data collected following categories of recipients: state authorities (including tax authorities), suppliers involved directly / indirectly in the work (IT service providers, banks, service providers archiving, law firms, courier companies, etc.), state agencies, government agencies, if the legislation so provides;

Archiving and procesing duration: Personal data will be stored as follows: for a period of 36 months from the date of booking. Certain personal data will be retained under the law (archive law, tax law, and accounting law). For consignment warranties, the storage and archiving duration is as long as it is in force.

The rights of individuals in relation to the processing of personal data: the right to information (you have the right to be informed about the collection and use of personal data); the right of access (you have the right to access your personal data and additional information, and let you know and check the lawfulness of the processing); the right to rectification (the right to obtain inaccurate data rectification and the addition of incomplete data, including by providing additional information to you); the right to delete data ( “right to be forgotten ‘in situations regulated by law, especially if you withdraw consent or if it is found that data were processed illegally, you are entitled to obtain from the Company Data deletion); the right to withdraw consent (the right to withdraw at any time the consent to the processing of the Data); the right to data portability (the right to receive the data you have provided in a structured format that can be read automatically and the right to request that the data be transmitted to another operator); right to restrict processing (right to obtain from the Company restricting processing in some cases regulated by law, especially if you dispute the accuracy of data or where processing is illegal, but you oppose the deletion. In these situations, except for storage, Data will no longer be processed); the right to lodge a complaint (your right to file a complaint with the National Supervisory Authority for Personal Data Processing); the right to opposition (the right to oppose legitimate interest processing or the performance of a public interest task / the exercise of public authority, including profiling, direct marketing and processing for scientific / historical research and statistics); rights not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or a similar affect to a significant extent. If you have given us your consent to the processing of personal data you have the right to withdraw this consent at any time.

Personal data processing for direct marketing purposes: As far as you have agreed, we will process for direct marketing purposes: newslater, commercial offer, campaigns.

For any inquiries you may have regarding the exercise of the rights mentioned above, for withdrawal of consent, or to ask us any questions regarding the press in this, you can contact by e-mail: gdpr@ziprentacar.ro, and / or the postal address mentioned above, to the responsible with GDPR.. We will not process data of minors. If you do not agree to processing the data as outlined above, we will be unable to provide you with our services.