PRIVACY POLICY

Personal information covers everything that can be used to identify a person, including first and last name, age, gender, address, email, and other contact information.

This Personal Data and Security Policy (hereinafter, the “Policy”) regulates the processing of user (henceforth “you” or “your”) by Oscar Alquiler de coches S.L, a company domiciled at Plaza de solidaridad 12, 5th floor 29006 Malaga and duly registered under VAT Number: B06963516 (hereinafter, “Oscar”, “we”, “us” or “our”), through the website https://oscar.es/ (henceforth, the “Website”).

1.- Identity and contact details of the Data Controller

In accordance with the applicable data protection regulations, you are hereby informed that the Data Controller responsible for the processing of your personal data is Oscar.

In the event that you have any questions regarding the processing of your personal data, you may contact Oscar at the following email address: [email protected]

2.- Collection and processing of your information

You can access our Website without telling us who you are or provide us personal information about yourself. However, for some of the below purposes we need certain personal information (E.g. to manage a booking within our Website). 

In particular, we may collect and process the following information about you:

  • Personal information you provide in connection with newsletter sign-up.
  • Personal information you provide during the user registration process
  • Personal information you provide during the booking and vehicle renting processes.
  • Personal information you provide in connection with a specific inquiry.
  • Personal information you provide in connection with a specific or general complaint or feedback.

3.- Purposes, Legitimate bases for the processing and retention periods of your personal data 

Personal information is used solely for the purpose for which it was provided, including ensuring that services can be successfully provided to the customer. You are hereby informed that Oscar may process your personal data for the following purposes:

Purpose

 

Registering as a user in our Website also allows Oscar to process your information to save time in future bookings, for instance, by prefilling your customer information when booking a vehicle. In addition, user registration also allows you to view your booking history and to use our mobile App.

Necessary for the performance of a contract or to take steps at your request prior to entering into a contract.

Oscar will presume the above when you tick the check-box provided in the registration form and thus accept our Terms & Conditions

Oscar may process your personal data for the duration of your condition as registered user of our Website and until you request cancellation or erasure of your personal data.

Subsequently, Oscar may retain your personal data duly blocked for a period of 5 years.

2. Manage your vehicle bookings in our Website.- This purpose allows Oscar to process your data to allow you to manage vehicle bookings with one of our partners in our Website. 

Necessary for the performance of a contract.

Oscar will presume the above when you tick the check-box provided in the registration form and thus accept our Terms & Conditions.

Oscar may process your personal data until you successfully return the vehicle and/or cancel the booking.

Subsequently, if you have returned the vehicle, Oscar may retain your personal data duly blocked for a period of 5 years.

 

 

3. Subscribe to your newsletter and receive deals from Oscar. This purpose allows Oscar to process your data to send you its newsletters, as well as commercial communication revolving around deals that may be of interest to you. Newsletters may be sent through any electronic means.

Consent

 

Oscar will deem you have provided consent in the moment you tick the consent check-box provided for such purpose.

Oscar may process your data until you revoke your consent.

 

To adequately revoke your consent, please refer to the “Data Subject Rights” section below.

4. Manage and resolve your enquiries or requests concerning our Website or our services. This purpose allows Oscar to process your data to resolve any incident (regardless of its nature) that you may have during your use of our Website and/or our services. You may contact our customer service through phone, email, live chat or post. 

Consent

 

Oscar will deem you have provided consent in the moment you get in touch with our customer support team.

Oscar may process your data until settlement or resolution of the relevant incident or enquiry.

Subsequently, Oscar may retain your personal data duly blocked for a maximum period of 5 years.

5. To develop and improve our website. This purpose allows Oscar to process your data to aggregate it with the data of other users. The object of this purpose is to obtain statistical results related to how Oscar users interact and use our Website. These results are later analysed to identify actions to develop and improve our Website.

Your data will be adequately anonymised to ensure we may not individually identify you after converting the collected personal data into statistical data.

Legitimate interest in developing and improving our Website

Oscar has conducted a Legitimate Interest Assessment to ensure that its legitimate interests override its users’ privacy expectations with regards to this purpose.

You may request a copy of such Legitimate Interest Assessment by sending an email to: [[email protected]]

Oscar will process your data until it has effectively anonymised the data and converted it into statistical information. 

After converting the data into statistical information, Oscar may process it indefinitely, insofar as such information cannot directly or indirectly identify you.

 In accordance with the applicable data protection laws, Oscar will process your data for the purposes set above. Once the above purposes become unnecessary, or are terminated, Oscar may keep your personal data duly blocked for the retention periods that are also displayed above. The blocking of personal data implies that Oscar may only process your data to address any liabilities that may arise in connection to the processing of data for the above purposes. Oscar guarantees to erase your personal data upon the statute of limitations of the above retention periods.

In addition, during the booking process, Oscar allows you to add “extra-drivers” to use the cars that are subject to booking / rental. In this respect, by filling in the details of such “extra-drivers”, you hereby acknowledge and expressly declare that you have: (i) informed the “extra-drivers” of the processing of their data by Oscar in accordance with the terms of this Policy; and (ii) that you have collected their express consent or authorisation to communicate such data to Oscar. The contents of this paragraph shall be equally applicable to companies that make booking in favour of its employees’. 

4.- Personal data recipients

Your personal data may be transferred to the following third-party recipients:

  • Our car rental company partners, to offer you the respective vehicles you have booked. 
  • Banking entities, to validate transactions and payment for the vehicle rentals you have booked
  • To competent public administration entities and organs including local governments or city/town councils if Oscar is legally required to provide them with your data. For example, when a customer practices any kind of abuse or fraud against us.

In addition, some entities subcontracted by Oscar may have access to your personal data and information as Oscar Data Processors. These entities will process your personal data on behalf of Oscar to provide Oscar with certain services (i.e. website hosting services) and in any case, in accordance with Oscar instructions and in strict compliance with the applicable data protection laws.

5.- International personal data transfers to third countries 

Oscar’s services do not generally rely on the performance of international data transfers to third countries. Generally, any personal data that has been collected by Oscar is stored on servers in Germany.

Nevertheless, some of our service providers may access your personal data outside the European Economic Area. In this respect Oscar guarantees to only communicate data to those service providers and/or third-parties that are capable of providing adequate safeguards or that are located in a territory that has been recognised as adequate by the European Commission.

6.- Security measures

We respect all requests for confidentiality of personal information provided online. Furthermore, we are aware of the need for appropriate protection and proper processing of all personal information we receive at Oscar. At Oscar, we’ve taken technical and organizational measures to prevent your information from being accidentally or illegally deleted, published, lost, impaired or made known to unauthorized persons, abused, or otherwise treated in violation of the law. Oscar’s security measures have been designed based on criteria such as the scope, context, purposes of the processing, the current state of the art and the existing risks to a particular processing activity. 

7.- Data Subject Rights

You may exercise any of the rights set out below before Oscar. In order to exercise such rights, you must send a request to the following email address: [email protected] You are hereby informed that under some circumstances, Oscar may request you to prove your identity. If the requests do not meet the above requirements, you are hereby informed that Oscar may ask for your request to be amended.

Right

Description

Right of access

Consult what personal data is being processed by Oscar

Right to rectification

Modify your personal data when such data is inaccurate

Right to object

Request Oscar not to process your personal data for certain specific purposes

Right to erasure

Request Oscar to remove your personal data from its systems

Right to restriction of the processing

Request Oscar to limit the processing of your personal data under some circumstances.

Right to data portability

Request Oscar to provide you with your information in a computer readable format.

Additionally, if you consider that Oscar has not adequately dealt with your requests, you may lodge a complaint against Oscar before the competent Supervisory Authority.[42] You m ay find a list of the different European data protection Supervisory Authorities here

8.- Cookies

8.1 What are cookies?

Cookies are small text files that are installed in your browser. The objective of the installation of cookies depends on the type of cookie that has been installed in your browser. Some cookies record your activity on the Website while others are essential for the adequate functioning of the same. Other cookies however may be installed to offer users a more personalized navigation through the Website.

8.2 What types of cookies does this Website install?

Cookies that may be installed in your device can be classified according to the following criteria:

8.2.1 Owners of the cookies that may be installed in your browser

The cookies that may be installed in your browser may either be owned by:

  • Oscar.Cookies owned by Oscar are sent to your browser or device from a computer or domain that is managed by Oscar; or
  • Third-parties.- Cookies owned by third parties are sent to your browser or device from a computer or domain that is not managed by Oscar but by another (External) entity

8.2.2 Purpose of the cookies that may be installed in your browser

As mentioned in section 8.1 above, there are different types of cookies for different types of uses. Consequently, this Website may install the following cookies in your browser:

  • Strictly necessary cookies. Strictly necessary cookies  help make a website navigable by activating basic functions such as page navigation and access to secure website areas. Without these cookies, the website would not be able to work properly.
  • Functional cookies. Functional cookies make it possible to save information that changes the way the website appears or acts. For instance your preferred language or region.
  • Statistical cookies. Statistical cookies help the website owner understand how visitors interact with the website by collecting and reporting information.
  • Marketing. Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and interesting to the individual user and thus more valuable for publishers and third-party advertisers.

8.2.3 Retention periods of the cookies that may be installed in your browser

This Website may install:

  • Session cookies. These cookies retain your data for the time you remain in our Website. As such, data that is subject to session cookies will disappear when you leave your session and/or our Website
  • Persistent cookies. These cookies retain the data during specific periods of time

Oscar uses the cookies indicated below.

NAME

OWNER

TYPE

PURPOSE

LENGTH OF TIME

Cookie Information Consent

Cookie Information

Strictly necessary

Supports the website’s restriction of cookie setting based on user set permissions

1 year

oscar_session

Oscar

Strictly necessary

Supports the website’s technical functions.

2 hours

XSRF-TOKEN

Oscar

Strictly necessary

Supports the website’s technical functions.

2 hours

_dc_gtm_UA-xxx-xxx

Google Tag Manager

Statistical

Collects information about the users and their activity on the website through embedded elements with the purpose of analytics and reporting.

1 minute

_gid

Google Analytics

Statistical

Collects information about the users and their activity on the website for analytics and reporting purposes

1 day

_ga_xxx

Google Analytics

Statistical

Collects information about the users and their activity on the website for analytics and reporting purposes

2 years

_ga

Google Analytics

Statistical

Collects information about the users and their activity on the website for analytics and reporting purposes

2 years

lang

LinkedIn

Marketing

Supports online marketing by collecting information about the users to promote products through partners and other platforms.

Session

uid

Criteo

Marketing

Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices.

1 year

IDE

Doubleclick, Google

Marketing

Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices.

1 year

test_cookie

Doubleclick, Google

Marketing

Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices.

15 minutes

bcookie

LinkedIn

Marketing

Supports online marketing by collecting information about the users to promote products through partners and other platforms.

2 years

UserMatchHistory

LinkedIn

Marketing

Supports online marketing by collecting information about the users to promote products through partners and other platforms.

1 month

AnalyticsSyncHistory

LinkedIn

Marketing

Supports online marketing by collecting information about the users to promote products through partners and other platforms.

1 month

lidc

LinkedIn

Marketing

Supports online marketing by collecting information about the users to promote products through partners and other platforms.

1 day

MUID

Microsoft, Bing

Marketing

Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.

1 year

bscookie

LinkedIn

Marketing

Supports online marketing by collecting information about the users to promote products through partners and other platforms.

2 years

cto_tld_test

Doubleclick, Google

Marketing

Used for online marketing by collecting information about the users and their activity on the website. The information is used to target advertising to the user across different channels and devices.

1 hour

_uetvid

Microsoft, Bing

Marketing

Collects information about the users and their activity on the website. The information is used to track and analyze user behaviour and to deliver targeted advertising

1 year

_gcl_au

Google

Marketing

Supports the integration of a third-party platform on the website to deliver targeted advertising

3 months

li_gc

LinkedIn

Marketing

Supports online marketing by collecting information about the users to promote products through partners and other platforms

2 years

_fbp

Facebook

Marketing

Identifies browsers for the purposes of providing advertising and site analytics services

3 months

_uetsid

Microsoft, Bing

Marketing

Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes

1 day

_km_id

Kommunicate

Functional

Supports the website’s customer service chat functionality.

1 month

_km_user_name

Kommunicate

Functional

Supports the website’s customer service chat functionality.

1 month

_km_lead_collection

Kommunicate

Functional

Supports the website’s customer service chat functionality.

1 month

8.3 How can you decide what cookies to install in your browser?

When accessing our Website, you may decide whether or not to authorize the installation of cookies in your browsers. To authorize cookies, you must click on “Accept All”. On the other hand, to reject cookies, you must click on “Decline all”. In addition, you can also decide what specific cookies may be installed in your browser by selecting the different types of cookies displayed below the above options. 

In addition, you may also set your browsers and devices to reject, block and, if necessary, delete cookies. Below, we indicate the procedures to be followed in order to disable, block or erase cookies in different web browsers: 

-    Internet Explorer

-    Mozilla Firefox

-    Google Chrome

-    Opera

-    Safari

-    Apple

-    Android

Without limiting the foregoing, you are hereby informed that technical cookies must always be installed in your browser, as these types of cookies are responsible for guaranteeing the adequate functioning of the Website. You may however decide not to install technical cookies by blocking or deleting cookies through the procedure enshrined in the above paragraph. In case you voluntarily uninstall technical cookies from your browser, Oscar cannot guarantee the adequate functioning of its Website and as such, shall not be responsible for any defects or errors that may occur within the Website and/or affect you.