Privacy policy

our data privacy matters to us. We take responsibility for protecting the personal data you provide. This privacy policy explains the types of data collected, how they are used and protected, as well as your rights regarding the processing of personal data.

 

To ensure the protection of personal data, we implement appropriate processes and procedures to prevent unauthorized access and misuse. We use modern and secure technologies to safeguard information.

 

Data Controller

 

FIMA MOTORS S.R.L., with its registered office at Calea Bucureștilor, no. 291B, Otopeni, Ilfov, registered under CUI 33418698, processes personal data in accordance with Law no. 677/2001 and EU Regulation no. 679/2016 on data protection.

 

Principles of Data Processing

 

The personal data collected will be:

• Processed lawfully, fairly, and transparently;

• Collected for specific, legitimate, and clearly defined purposes;

• Relevant and limited to what is necessary for the declared purposes;

• Accurate and kept up to date;

• Stored only for as long as necessary to fulfill the purpose of collection;

• Protected against unauthorized access or unlawful use.

 

Categories of Processed Personal Data

• Identification data: name, surname, address, phone number, email, national identification number (CNP), ID/passport series and number, driver’s license.

• Financial data: bank account, insurance information.

• Location and imaging data: IP address, video surveillance recordings at FIMA MOTORS premises.

 

Purposes of Data Processing

 

Personal data is used for:

• Managing inquiries and reservations;

• Concluding and executing car rental agreements;

• Improving services;

• Managing insurance processes;

• Protecting the security of the premises;

• Fraud prevention;

• Fulfilling legal obligations;

• Debt recovery (if applicable).

 

Note: We do NOT use data for statistics or later identification, except for reservations made by the user.

 

Legal Grounds for Processing

• Contract execution;

• Compliance with legal obligations;

• Legitimate interest of the data controller;

• User consent (where required by law).

 

Recipients of Personal Data

• Public authorities (tax, consumer protection, police, etc.);

• Banking service providers, insurance companies, auto service providers;

• Security and IT protection companies;

• Contractual partners providing auxiliary services.

 

Data Transfers Outside the EU

 

If data transfer outside the EU is necessary, we ensure that it is protected in accordance with European standards.

 

Data Retention Period

 

Data is stored for the duration of the contract and thereafter as long as necessary for legal obligations or legitimate interests.

 

User Rights

• Right of access – obtain information about processed data;

• Right to rectification – correct inaccurate data;

• Right to object – oppose processing;

• Right to data portability – transfer data to another controller;

• Right to be forgotten – request data deletion;

• Right to restriction of processing;

• Right not to be subject to automated decision-making;

• Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro).

 

To exercise these rights, you can contact us at [email protected] or at Calea Bucureștilor no. 291B, Otopeni, Ilfov. Responses will be provided within 30 days.

 

Changes to the Privacy Policy

 

This privacy policy may be updated periodically, and updates will be published on our website.

 

If you have any questions, please contact us at [email protected].