Information clause

1. The Administrator of your personal data is CAR NET Polska sp. z o. o. (further: “CAR NET”) with its seat in Kalisz 62-800, 4 Podmiejska Street.
2. CAR NET has appointed a Data Protection Officer whom you can contact by email iod@carnet.pl. or in writing to the address of CAR NET registered office. The Data Protection Inspector can be contacted in all matters concerning personal data processing and exercising rights related to data processing.

I. If you are a hirer entering into a vehicle rental agreement or a reservation agreement then:

3. Your personal data will be processed for:
   a) to conclude and perform the contract, i.e. the vehicle reservation contract, if applicable, or the vehicle rental contract, if applicable – the legal basis for the processing of your personal data is the necessity of the processing for the performance of the contracts (Art. 6(1)(b) RODO);
   b) to shorten the path to the conclusion of the vehicle hire agreement proper at the release stage – the legal basis for data processing is voluntarily given consent (Art. 6(1)(a) RODO);
   c) to conduct communication on matters related to the conclusion and execution of the agreement, i.e. vehicle reservation agreement, if applicable, or vehicle rental agreement, if applicable – the legal basis for the processing of personal data is the legitimate interest of CAR NET as a personal data controller (Art. 6(1)(f) RODO) consisting in effective management of concluded agreements;
   d) handling electronic payments, when payment is made in this form – the legal basis for the processing of Personal Data is the necessity of processing for the performance of agreements (Article 6(1)(b) RODO);
   e) to process any complaints – the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of the ability to process complaints addressed to it in relation to the agreements concluded;
   f) fulfilment of statutory obligations incumbent on CAR NET as a controller of personal data, resulting in particular from tax and accounting regulations – the legal basis for processing is a legal obligation incumbent on the Administrator (Article 6(1)(c) RODO);
   (g) analytical and statistical, including profiling involving analysis of the category of services or goods purchased by the User in order to tailor the offer to the Data Subject’s needs – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) RODO), consisting of conducting analyses of the Data Subject’s purchasing preferences in order to improve sales offers;
   (h) possible establishment and investigation of claims or defence against claims – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) RODO), consisting in the protection of his/her rights.

II. If you are the hirer entering into the relevant vehicle hire contract then:

4. Your personal data will be processed in order to:
   a) concluding and performing the vehicle rental agreement – the legal basis for the processing of personal data is the necessity of processing for the performance of agreements (Art. 6 par. 1 lit. b RODO);
   b) conducting communication on matters related to the conclusion and execution of the vehicle rental agreement – the legal basis for the processing of personal data is the legitimate interest of CAR NET as a personal data controller (art. 6 sec. 1 lit. f RODO) consisting in the effective management of concluded agreements;
   c) handling of electronic payments, when payment is made in this form – the legal basis for the processing of Personal Data is the necessity of processing for the performance of agreements (Article 6(1)(b) RODO);
   d) to process any complaints – the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of the ability to process complaints addressed to it in relation to the agreements concluded;
   e) fulfilment of statutory obligations incumbent on CAR NET as a controller of personal data, arising in particular from tax and accounting regulations or traffic law regulations – the legal basis for processing is a legal obligation incumbent on the Administrator (Article 6(1)(c) RODO);
   f) to provide insurers with details (including personal data of the data subject) concerning accidents in which the CAR NET hired vehicle was involved, for the purpose of damage settlement – the legal basis for processing is the legitimate interest of CAR NET as a personal data controller (art. 6 sec. 1 lit. f RODO) consisting in the defence of its economic interests;
   g) in the case of using an appropriately marked vehicle, equipped with a telemetric device (enabling geolocation of the vehicle and collection of data on vehicle operation) in order to ensure security of CAR NET’s property by monitoring the vehicle in the event of its actual or potential loss or theft or to recognise the vehicle’s departure beyond the limits agreed in the rental agreement – the legal basis for processing is the legitimate interest of CAR NET (Article 6(1)(f) RODO), consisting of monitoring of rented vehicles for the purposes of protecting the rented vehicles and verifying compliance with the terms and conditions of the rental agreement. In this case, personal data will be obtained from the telemetry device installed in the vehicle;
   h) analytical and statistical, including profiling consisting of analysis of the category of services or goods purchased by the Data Subject in order to tailor the offer to the Data Subject’s needs – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) RODO), consisting of conducting analyses of the Data Subject’s purchasing preferences in order to improve sales offers;
   (i) possible establishment and investigation of claims or defence against claims – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) RODO), consisting in the defence of its business interests.

III. If you are a driver/user who is not the lessee of the vehicle, then:

5. Your personal data will be processed in order to:
   a) concluding and performing a vehicle rental agreement, on the basis of which you are entitled to use a CAR NET vehicle – the legal basis for personal data processing is the legally justified interest of CAR NET as a personal data administrator (Art. 6 par. 1 letter b RODO) consisting in proper performance of agreements concluded by CAR NET with vehicle renters;
   b) to conduct communication in matters related to the conclusion and execution of a vehicle rental agreement, on the basis of which you are authorised to use a CAR NET vehicle – the legal basis for the processing of personal data is the legitimate interest of CAR NET as a personal data controller (Art. 6 ust. 1 lit. f RODO) consisting in effective management of concluded agreements;
   c) fulfilment of statutory obligations incumbent on CAR NET as a personal data controller, resulting in particular from the provisions on traffic law – the legal basis for processing is the legal obligation incumbent on the Administrator (Art. 6(1)(c) RODO);
   d) to provide insurers with details (including personal data of the data subject) concerning accidents in which the CAR NET hired vehicle was involved, for the purpose of damage settlement – the legal basis for processing is the legitimate interest of CAR NET as a personal data controller (art. 6 sec. 1 lit. f RODO) consisting in the defence of its economic interests;
   e) in the case of using an appropriately marked vehicle, equipped with a telemetric device (enabling geolocation of the vehicle and collection of data concerning vehicle operation) in order to ensure security of CAR NET’s property by monitoring the vehicle in the event of its actual or potential loss or theft or to recognise the vehicle’s departure beyond the limits agreed in the rental agreement – the legal basis for processing is the legitimate interest of CAR NET (Article 6(1)(f) RODO), consisting of monitoring of rented vehicles for the purposes of protecting the rented vehicles and verifying compliance with the terms and conditions of the rental agreement. In this case, personal data will be obtained from the telemetry device installed in the vehicle;
   (f) possible establishment and investigation of claims or defence against claims – the legal basis for the processing is the Administrator’s legitimate interest (Article 6(1)(f) RODO), consisting of the defence of its economic interests.

IV. Common information irrespective of the type of relationship with the Controller

6. your personal data will be transferred to entities providing services to CAR NET e.g. to an accounting and bookkeeping office, external advisors, IT solution providers, postal or courier service providers, entities providing legal services.

7. Your personal data will be processed for the duration of the concluded agreement or for the duration of CAR NET’s legally justified interest. The storage period of personal data can be each time prolonged by the period of claims limitation, if personal data processing is necessary for the CAR NET company to assert or defend against such claims. After this period, personal data may be stored for the period determined by legal regulations e.g. tax or accounting law.

(8) You have the right to access the content of the data, to request rectification, erasure and restriction of processing. Furthermore, you have the right to raise an objection on the grounds related to your particular situation. For the purpose of evidence, CAR NET asks you to raise an objection in writing or electronically.

(9) You also have the right to lodge a complaint with the President of the Data Protection Authority if you consider that the processing of your personal data violates the provisions of the RODO.

10. the provision of personal data for the purpose of concluding and performing the contract is voluntary, but necessary for the conclusion and performance of the contract. Failure to provide personal data in this respect will prevent the conclusion of the contract. The provision of personal data for other purposes is voluntary. Failure to provide personal data in this respect will make it impossible to take the indicated actions, including shortening the path to the conclusion of the contract, handling a complaint request, tailoring sales offers to the User’s preferences.