GPDR

GDPR Privacy Policy – otoQ Car Rental

1. Introduction
Welcome to otoQ. This GDPR Privacy Policy outlines how Drivers Innovation LTD, the
owner and operator of the otoQ Car Rental Franchise Network, collects, uses, protects, and
lawfully processes your personal data in accordance with the General Data Protection
Regulation (EU) 2016/679 (“GDPR”).
otoQ is an internationally registered trademark, fully owned by Driverse Innovation LTD, a
company established in Cyprus.
Company Information:
Legal Name: Drivers Innovation LTD
Address: 8 Stasinou, Photiades Business Center, Floor 2, Flat 202, 1060 Nicosia, Cyprus
Phone: +357 22751555
Email: hello@otoq.rent
We are committed to safeguarding your privacy and ensuring that your personal data is
handled lawfully, fairly, and transparently.

2. Categories of Personal Data We Collect
We may collect and process the following categories of personal data, either directly from
you or via GDPR-compliant third-party services:
 Identity and Contact Details: Name, email address, phone number
 Driver and Legal Data: Driver’s license number, issuing country, age, and date of
birth
 Payment and Transaction Data: Encrypted credit/debit card or other payment method
details
 Rental Preferences and Booking History
 Travel Details: Pick-up and drop-off locations, itinerary related to bookings
 Technical and Browsing Data: IP address, browser type, device details, cookies (e.g.,
Google Analytics, Meta Pixel)
 Voluntarily Provided Information via forms, messages, or surveys

3. Purposes for Processing Personal Data
Your personal data is processed for the following purposes:
 To manage, confirm, and support your rental reservations
 To process secure payments and validate legal eligibility
 To communicate with you regarding your booking or inquiry
 To send marketing offers (only with your explicit consent)

 To evaluate user behavior and improve services
 To comply with applicable legal obligations

4. Legal Bases for Processing Personal Data
We process your data under the legal bases established by the GDPR:
 Contractual necessity
 Legal obligation
 Legitimate interest
 Consent (e.g., marketing or non-essential tracking)
You may withdraw your consent at any time without affecting the legality of prior processing.

5. Your Data Protection Rights
You have the right to:
 Access your data
 Correct inaccurate or outdated information
 Request data erasure (“right to be forgotten”)
 Restrict processing in specific cases
 Receive your data in a machine-readable format
 Object to processing (e.g., marketing or profiling)
 Withdraw previously given consent
 Not be subject to automated decision-making (which we do not perform)
To exercise your rights, contact us (see Section 11).

6. Data Retention
 Rental contracts and billing records: up to 7 years
 Marketing data: until consent is withdrawn
 Customer service data: typically 12 months
Data is securely deleted or anonymized once it is no longer needed.

7. Data Security
We apply strong technical and organizational measures, including:

 Encryption (in transit and at rest)
 Role-based access controls
 Monitoring and system audits
 Trained staff and internal policies

8. International Data Transfers
If data is transferred outside the EEA, we ensure compliance by using:
 Standard Contractual Clauses (SCCs)
 Adequacy decisions by the EU
 Additional lawful safeguards

9. Cookies and Tracking Technologies
Our website uses cookies and trackers for analytics, marketing, and performance. Non-
essential cookies are only used with your explicit consent.
You can adjust your cookie settings via your browser. Refer to your browser’s help or
customer support documentation for detailed steps.

10. Data Breach Notification
If a data breach occurs that may affect your rights or freedoms, we will notify the appropriate
authorities and impacted individuals without undue delay.

11. Contact Information
To request data access or raise privacy-related questions:
Email: ask.me@otoQ.rent
Phone: +30 6973 004560
Support Office: E Street 11, Industrial Area, Heraklion, 71601, Greece

12. Supervisory Authorities
You may lodge a complaint with:
Cyprus (registered company location):

Office of the Commissioner for Personal Data Protection – www.dataprotection.gov.cy
Greece (support office location):
Hellenic Data Protection Authority – www.dpa.gr

Thank you for choosing otoQ. Your privacy matters to us.