Privacy Policy

1. Introduction and Scope

NapocaRent (hereinafter referred to as "Company", "we", "our") respects your privacy and is committed to protecting the personal data you provide to us. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and applicable Romanian legislation.

This policy applies to all our car rental services, including online bookings, payment processing, customer communications, and use of our website napocarent.ro.

2. Data Controller

The data controller for personal data is:

3. What Data We Collect

We collect the following types of personal data:

3.1. Personal Identification Information

• Full name

• Email address

• Phone number

• ID/Passport number

• Driver's license (number, validity)

3.2. Payment Information

Important: We do not store your credit card data. All online payments are processed securely through Netopia Payments, an authorized payment service provider. Netopia handles all sensitive payment information according to PCI DSS standards.

Payment information we may retain:

• Transaction history (amounts, dates, transaction IDs)

• Payment status (confirmed, cancelled, refunded)

• Selected payment method (online/offline)

3.3. Booking Information

• Pickup and return dates

• Pickup/return locations

• Selected vehicle and features

• Insurance and additional options

• Flight information (if applicable)

• Special notes or preferences

3.4. Technical Data

• IP address

• Browser type and version

• Operating system

• Cookies and identifiers

• Pages visited and browsing behavior

4. How We Use Your Data

We use your personal data for the following purposes: processing bookings, payment processing, customer communication, service improvement, legal compliance, and marketing (with consent). All processing is done in accordance with GDPR requirements.

5. Legal Basis for Processing

We process your data based on: contract execution, legal obligation, legitimate interest, and consent (for marketing). You have the right to withdraw consent at any time.

6. Data Sharing and Third Parties

We may share your data with: Netopia Payments (payment processing), insurance providers, public authorities (when legally required), and IT service providers. All third parties are contractually bound to protect your data.

7. Data Security

We implement technical and organizational security measures including SSL/TLS encryption, access controls, secure servers with firewalls, regular backups, and staff training on data protection.

8. Data Retention Period

We retain your data only as long as necessary: contracts and bookings (10 years per Romanian law), accounting documents (10 years), marketing communications (until consent withdrawal), technical data and cookies (maximum 24 months).

9. Your Rights (GDPR)

You have the right to: access your data, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, object to processing, withdraw consent, and file a complaint with the supervisory authority (ANSPDCP). Contact us at contact@napocarent.ro to exercise these rights.

10. Cookies and Tracking

We use essential cookies (required for site functionality), performance cookies (Google Analytics), and functional cookies (remembering preferences). You can manage cookies through your browser settings.

11. Policy Updates

We may update this Privacy Policy periodically. The updated version will be published on this page with the last modification date. We recommend reviewing this policy regularly.

12. Contact for Data Requests

For questions about this Privacy Policy or to exercise your GDPR rights:

We will respond to your requests within 30 days as required by GDPR.

Supervisory authority: For data protection complaints, you can contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro