MAGIC ISLANDS RENT-A-CAR, UNIP., LDA. PRIVACY POLICY
This Privacy Policy is intended to inform how Magic Islands Rent-a-Car, Unip. Lda. collects, uses, discloses, and protects the personal data of its customers and users of our car rental services. This policy is drafted in accordance with the General Data Protection Regulation (RGPD) and applicable Portuguese data protection legislation.
1. Data Controller
Magic Islands Rent-a-Car, headquartered at Rua Dr. João Abel Freitas, No. 22 PI 3 BA, Machico, with tax identification number 515 417 912, is the entity responsible for processing your personal data in the context of the car rental services we provide.
2. Personal Data Collected
We collect the following personal data when you use our services:
• Identification Data: First name, last name, date of birth, identification document (Citizen Card or Passport), driver’s license number.
• Contact Data: Address, email address, phone number.
• Financial Data: Payment information, such as credit card number or other payment information.
• Vehicle Information: Data related to the rental agreement, including rental dates, chosen vehicle, mileage, among others.
• Location Data: If the rented vehicle is equipped with GPS, we may collect information about the vehicle’s location.
• Other Data: Photographs or video recordings of incidents related to the vehicle (in the case of accidents or vehicle damage).
3. Purpose of Data Processing
The personal data collected will be used for the following purposes:
• Execution of the Rental Agreement: To process and manage your car rental contract.
• Compliance with Legal Obligations: To comply with legal obligations, including tax and accounting requirements.
• Customer Communications: To provide important information related to the rental, such as schedule changes or information about the vehicle.
• Complaint and Incident Management: To manage any complaints or incidents related to the rental of the vehicle.
• Fraud Prevention and Security: To ensure the safety and integrity of the rented vehicles and to prevent fraud.
4. Legal Basis for Processing
The processing of your personal data is based on the following legal grounds:
• Contract Execution: Necessity of processing for the execution of the rental contract or for pre-contractual measures.
• Compliance with Legal Obligations: Necessity to comply with the legal obligations to which we are subject.
• Legitimate Interests: Whenever necessary for the prevention of fraud, protection of our rights and property, or to improve our services, provided that your rights and freedoms do not prevail.
• Consent: In cases where your consent is required (e.g., marketing), you have the right to withdraw it at any time.
5. Sharing Data with Third Parties
We may share your personal data with the following third parties:
• Government Authorities: When necessary to comply with a legal obligation or by order of a competent authority (e.g., law enforcement, regulatory bodies).
• Service Providers: Partner companies or subcontractors that provide services on our behalf, such as payment processors, vehicle maintenance companies, or insurance providers.
• Insurance Companies: For managing incidents related to the rented vehicle.
6. Data Retention
Personal data will be retained for a minimum period of three years or for the strictly necessary period to fulfill the purposes for which they were collected, or to comply with legal obligations. After this period, the data will be securely deleted.
7. Rights of Data Subjects
Under the RGPD and Portuguese legislation, the data subject has the following rights:
• Right of Access: To request a copy of your personal data.
• Right to Rectification: To request the correction of inaccurate or incomplete data.
• Right to Erasure: To request the deletion of your personal data, where applicable.
• Right to Restrict Processing: To request the limitation of processing of your data.
• Right to Data Portability: To receive the personal data you provided to us in a structured, commonly used, and machine-readable format, or to request that we transmit it to another entity.
• Right to Object: To object to the processing of your personal data in certain circumstances.
• Right to Withdraw Consent: When the processing of data is based on your consent, you have the right to withdraw it at any time.
To exercise any of these rights, you can contact us at info@magicislands.pt or send a letter, preferably registered, to our headquarters at Rua Dr. João Abel Freitas, No. 22 PI 3 BA, Machico, addressed to Magic Islands Rent-a-Car.
8. Data Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or unauthorized disclosure. These measures include the use of firewalls, data encryption, and strict access control to computer systems.
9. International Data Transfer
We do not transfer your personal data outside the European Economic Area (EEA). However, if such a transfer is necessary, we will ensure that appropriate safeguards are implemented in accordance with the RGPD.
10. Changes to This Privacy Policy
We reserve the right to change this Privacy Policy at any time. Any changes will be published on our website, and when appropriate, we will communicate directly with you.
11. Contacts
If you have any questions or concerns about our privacy policy or how we process your personal data, you can contact us at:
• Email: info@magicislands.pt
• Address: Rua Dr. João Abel Freitas, No. 22 PI 3 BA, Machico.
You also have the right to file a complaint with the National Data Protection Commission (CNPD) if you believe that your rights have been violated.