Personal information covers everything that can be used to identify a person, including first and last name, age, gender, address, email, and other contact information.
This Personal Data and Security Policy (hereinafter, the “Policy”) regulates the processing of user (henceforth “you” or “your”) by Oscar Alquiler de coches S.L, a company domiciled at Plaza de solidaridad 12, 5th floor 29006 Málaga and duly registered under VAT Number: B06963516 (hereinafter, “Oscar”, “we”, “us” or “our”), through the website https://oscar.es/ (henceforth, the “Website”).
1.- Identity and contact details of the Data Controller
In accordance with the applicable data protection regulations, you are hereby informed that the Data Controller responsible for the processing of your personal data is Oscar.
In the event that you have any questions regarding the processing of your personal data, you may contact Oscar at the following email address: [email protected]
2.- Collection and processing of your information
You can access our Website without telling us who you are or provide us personal information about yourself. However, for some of the below purposes we need certain personal information (E.g. to manage a booking within our Website).
In particular, we may collect and process the following information about you:
3.- Purposes, Legitimate bases for the processing and retention periods of your personal data
Personal information is used solely for the purpose for which it was provided, including ensuring that services can be successfully provided to the customer. You are hereby informed that Oscar may process your personal data for the following purposes:
Purpose
Registering as a user in our Website also allows Oscar to process your information to save time in future bookings, for instance, by prefilling your customer information when booking a vehicle. In addition, user registration also allows you to view your booking history and to use our mobile App. |
Necessary for the performance of a contract or to take steps at your request prior to entering into a contract. Oscar will presume the above when you tick the check-box provided in the registration form and thus accept our Terms & Conditions |
Oscar may process your personal data for the duration of your condition as registered user of our Website and until you request cancellation or erasure of your personal data. Subsequently, Oscar may retain your personal data duly blocked for a period of 5 years. |
2. Manage your vehicle bookings in our Website.- This purpose allows Oscar to process your data to allow you to manage vehicle bookings with one of our partners in our Website. |
Necessary for the performance of a contract. Oscar will presume the above when you tick the check-box provided in the registration form and thus accept our Terms & Conditions. |
Oscar may process your personal data until you successfully return the vehicle and/or cancel the booking. Subsequently, if you have returned the vehicle, Oscar may retain your personal data duly blocked for a period of 5 years.
|
3. Subscribe to your newsletter and receive deals from Oscar. This purpose allows Oscar to process your data to send you its newsletters, as well as commercial communication revolving around deals that may be of interest to you. Newsletters may be sent through any electronic means. |
Consent
Oscar will deem you have provided consent in the moment you tick the consent check-box provided for such purpose. |
Oscar may process your data until you revoke your consent.
To adequately revoke your consent, please refer to the “Data Subject Rights” section below. |
4. Manage and resolve your enquiries or requests concerning our Website or our services. This purpose allows Oscar to process your data to resolve any incident (regardless of its nature) that you may have during your use of our Website and/or our services. You may contact our customer service through phone, email, live chat or post. |
Consent
Oscar will deem you have provided consent in the moment you get in touch with our customer support team. |
Oscar may process your data until settlement or resolution of the relevant incident or enquiry. Subsequently, Oscar may retain your personal data duly blocked for a maximum period of 5 years. |
5. To develop and improve our website. This purpose allows Oscar to process your data to aggregate it with the data of other users. The object of this purpose is to obtain statistical results related to how Oscar users interact and use our Website. These results are later analysed to identify actions to develop and improve our Website. Your data will be adequately anonymised to ensure we may not individually identify you after converting the collected personal data into statistical data. |
Legitimate interest in developing and improving our Website Oscar has conducted a Legitimate Interest Assessment to ensure that its legitimate interests override its users’ privacy expectations with regards to this purpose. You may request a copy of such Legitimate Interest Assessment by sending an email to: [[email protected]] |
Oscar will process your data until it has effectively anonymised the data and converted it into statistical information. After converting the data into statistical information, Oscar may process it indefinitely, insofar as such information cannot directly or indirectly identify you. |
In accordance with the applicable data protection laws, Oscar will process your data for the purposes set above. Once the above purposes become unnecessary, or are terminated, Oscar may keep your personal data duly blocked for the retention periods that are also displayed above. The blocking of personal data implies that Oscar may only process your data to address any liabilities that may arise in connection to the processing of data for the above purposes. Oscar guarantees to erase your personal data upon the statute of limitations of the above retention periods.
In addition, during the booking process, Oscar allows you to add “extra-drivers” to use the cars that are subject to booking / rental. In this respect, by filling in the details of such “extra-drivers”, you hereby acknowledge and expressly declare that you have: (i) informed the “extra-drivers” of the processing of their data by Oscar in accordance with the terms of this Policy; and (ii) that you have collected their express consent or authorisation to communicate such data to Oscar. The contents of this paragraph shall be equally applicable to companies that make booking in favour of its employees’.
4.- Personal data recipients
Your personal data may be transferred to the following third-party recipients:
In addition, some entities subcontracted by Oscar may have access to your personal data and information as Oscar Data Processors. These entities will process your personal data on behalf of Oscar to provide Oscar or its collaborators with certain services (i.e. website hosting services) and in any case, in accordance with Oscar and the collaborators instructions and in strict compliance with the applicable data protection laws.
5.- International personal data transfers to third countries
Oscar’s services do not generally rely on the performance of international data transfers to third countries. Generally, any personal data that has been collected by Oscar is stored on servers in Germany.
Nevertheless, some of our service providers may access your personal data outside the European Economic Area. In this respect Oscar guarantees to only communicate data to those service providers and/or third-parties that are capable of providing adequate safeguards or that are located in a territory that has been recognised as adequate by the European Commission.
6.- Security measures
We respect all requests for confidentiality of personal information provided online. Furthermore, we are aware of the need for appropriate protection and proper processing of all personal information we receive at Oscar. At Oscar, we’ve taken technical and organizational measures to prevent your information from being accidentally or illegally deleted, published, lost, impaired or made known to unauthorized persons, abused, or otherwise treated in violation of the law. Oscar’s security measures have been designed based on criteria such as the scope, context, purposes of the processing, the current state of the art and the existing risks to a particular processing activity.
7.- Data Subject Rights
You may exercise any of the rights set out below before Oscar. In order to exercise such rights, you must send a request to the following email address: [email protected]. You are hereby informed that under some circumstances, Oscar may request you to prove your identity. If the requests do not meet the above requirements, you are hereby informed that Oscar may ask for your request to be amended.
Right |
Description |
Right of access |
Consult what personal data is being processed by Oscar |
Right to rectification |
Modify your personal data when such data is inaccurate |
Right to object |
Request Oscar not to process your personal data for certain specific purposes |
Right to erasure |
Request Oscar to remove your personal data from its systems |
Right to restriction of the processing |
Request Oscar to limit the processing of your personal data under some circumstances. |
Right to data portability |
Request Oscar to provide you with your information in a computer readable format. |
Additionally, if you consider that Oscar has not adequately dealt with your requests, you may lodge a complaint against Oscar before the competent Supervisory Authority.[42] You m ay find a list of the different European data protection Supervisory Authorities here.
8.- Cookies
8.1 What are cookies?
Cookies are small text files that are installed in your browser. The objective of the installation of cookies depends on the type of cookie that has been installed in your browser. Some cookies record your activity on the Website while others are essential for the adequate functioning of the same. Other cookies however may be installed to offer users a more personalized navigation through the Website.
8.2 What types of cookies does this Website install?
Cookies that may be installed in your device can be classified according to the following criteria:
8.2.1 Owners of the cookies that may be installed in your browser
The cookies that may be installed in your browser may either be owned by:
8.2.2 Purpose of the cookies that may be installed in your browser
As mentioned in section 8.1 above, there are different types of cookies for different types of uses. Consequently, this Website may install the following cookies in your browser:
8.2.3 Retention periods of the cookies that may be installed in your browser
This Website may install:
Oscar uses the cookies indicated below.
NAME |
OWNER |
TYPE |
PURPOSE |
LENGTH OF TIME |
Cookie Information Consent |
Cookie Information |
Strictly necessary |
Supports the website’s restriction of cookie setting based on user set permissions |
1 year |
oscar_session |
Oscar |
Strictly necessary |
Supports the website’s technical functions. |
2 hours |
XSRF-TOKEN |
Oscar |
Strictly necessary |
Supports the website’s technical functions. |
2 hours |
_dc_gtm_UA-xxx-xxx |
Google Tag Manager |
Statistical |
Collects information about the users and their activity on the website through embedded elements with the purpose of analytics and reporting. |
1 minute |
_gid |
Google Analytics |
Statistical |
Collects information about the users and their activity on the website for analytics and reporting purposes |
1 day |
_ga_xxx |
Google Analytics |
Statistical |
Collects information about the users and their activity on the website for analytics and reporting purposes |
2 years |
_ga |
Google Analytics |
Statistical |
Collects information about the users and their activity on the website for analytics and reporting purposes |
2 years |
lang |
|
Marketing |
Supports online marketing by collecting information about the users to promote products through partners and other platforms. |
Session |
uid |
Criteo |
Marketing |
Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices. |
1 year |
IDE |
Doubleclick, Google |
Marketing |
Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices. |
1 year |
test_cookie |
Doubleclick, Google |
Marketing |
Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices. |
15 minutes |
bcookie |
|
Marketing |
Supports online marketing by collecting information about the users to promote products through partners and other platforms. |
2 years |
UserMatchHistory |
|
Marketing |
Supports online marketing by collecting information about the users to promote products through partners and other platforms. |
1 month |
AnalyticsSyncHistory |
|
Marketing |
Supports online marketing by collecting information about the users to promote products through partners and other platforms. |
1 month |
lidc |
|
Marketing |
Supports online marketing by collecting information about the users to promote products through partners and other platforms. |
1 day |
MUID |
Microsoft, Bing |
Marketing |
Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. |
1 year |
bscookie |
|
Marketing |
Supports online marketing by collecting information about the users to promote products through partners and other platforms. |
2 years |
cto_tld_test |
Doubleclick, Google |
Marketing |
Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices. |
1 hour |
_uetvid |
Microsoft, Bing |
Marketing |
Collects information about the users and their activity on the website. The information is used to track and analyze user behaviour and to deliver targeted advertising |
1 year |
_gcl_au |
|
Marketing |
Supports the integration of a third-party platform on the website to deliver targeted advertising |
3 months |
li_gc |
|
Marketing |
Supports online marketing by collecting information about the users to promote products through partners and other platforms |
2 years |
_fbp |
|
Marketing |
Identifies browsers for the purposes of providing advertising and site analytics services |
3 months |
_uetsid |
Microsoft, Bing |
Marketing |
Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes |
1 day |
_km_id |
Kommunicate |
Functional |
Supports the website’s customer service chat functionality. |
1 month |
_km_user_name |
Kommunicate |
Functional |
Supports the website’s customer service chat functionality. |
1 month |
_km_lead_collection |
Kommunicate |
Functional |
Supports the website’s customer service chat functionality. |
1 month |
8.3 How can you decide what cookies to install in your browser?
When accessing our Website, you may decide whether or not to authorize the installation of cookies in your browsers. To authorize cookies, you must click on “Accept All”. On the other hand, to reject cookies, you must click on “Decline all”. In addition, you can also decide what specific cookies may be installed in your browser by selecting the different types of cookies displayed below the above options.
In addition, you may also set your browsers and devices to reject, block and, if necessary, delete cookies. Below, we indicate the procedures to be followed in order to disable, block or erase cookies in different web browsers:
- Opera
- Safari
- Apple
- Android
Without limiting the foregoing, you are hereby informed that technical cookies must always be installed in your browser, as these types of cookies are responsible for guaranteeing the adequate functioning of the Website. You may however decide not to install technical cookies by blocking or deleting cookies through the procedure enshrined in the above paragraph. In case you voluntarily uninstall technical cookies from your browser, Oscar cannot guarantee the adequate functioning of its Website and as such, shall not be responsible for any defects or errors that may occur within the Website and/or affect you.