Política de privacidadInchiriazo.ro

1.1 The confidentiality of personal data is one of the main concerns of 360 YACHT SUPPLY SRL. As such, we wish to ensure the highest standards of confidentiality, integrity and transparency regarding the personal data we process in our activity.

1.2 Since, in carrying out our activity, it is necessary to process a series of personal data, especially in relation to the specific nature of our business, we wish to assure you that processing will take place in compliance with the principles of transparency and security of personal data. This privacy policy is intended to help you understand what data we collect, why we collect it and what we do with it.

2.1 360 YACHT SUPPLY SRL (hereinafter the "Company") is a Romanian company, registered with the Trade Register under no. J12/3182/2019 and having tax identification number: 34814275.

2.2 The Company acts as controller of the personal data collected through the website www.Inchiriazo.ro (the "Site"). The controller has the obligation to manage safely and only for the specified purposes the personal data provided by users of the Site.

Name, surname, telephone number, email address, flight number or details related to arrival/departure (place, date and time for car pick-up and drop-off).

4.1 We process this data for the purpose of providing the services you have chosen as a customer.

4.2 We also process your contact data in order to contact you in the event of a reservation cancellation and/or if any issue arises in connection with your reservation.

4.3 At the same time, we may process your data in order to send you promotional offers or commercial messages, if you have given us your consent in this regard.

4.4 In addition to the purposes mentioned above, the Company may process the collected personal data also for the following purposes:

• To fulfill the obligations incumbent on us as a result of the services provided (e.g. accounting, tax, audit obligations, etc.), these always being compatible with the main purposes for which the data was collected.
• To the extent that the data subject has given consent for the processing of their personal data for one or more specific purposes.
• For any other purpose ancillary to the above, or for any other purpose for which the personal data was provided to us, in compliance with the applicable legislation.

4.5 In situations where we use your data for purposes other than those mentioned in this Policy, we undertake to obtain your consent, except where we have a legal obligation or another legal basis for processing the data.

5.1 We process your data for one year from the moment you made a reservation with us on the site.

5.2 To the extent that you have given your consent to receive newsletters from Inchiriazo.ro, the email address will be processed by us for this purpose until consent is withdrawn.

6.1 The Company processes your data on the basis of the following legal grounds:

• With the consent of the persons concerned (Art. 6.1 letter a) of Regulation 679/2016).
• On the basis of a contractual obligation (a contract between your company/organization and a customer) (Art. 6.1 letter b) of Regulation 679/2016).
• To comply with a legal obligation (provided for in EU legislation or national legislation) (Art. 6.1 letter c) of Regulation 679/2016).
• For the purposes of the Company's legitimate interests, but only after we have ensured that this does not have an adverse impact on the rights and fundamental freedoms of the persons whose data we process.

7.1 We collect your personal data either directly from you, when you make a reservation with us on the site or give us your consent to receive newsletters from us.

7.2 We also collect your personal data automatically when you use our services on the Company's site; we collect information through cookies and by logging your activity. For more information regarding the use of cookies, please see Art. 9 of this Privacy Policy.

7.3 If you choose to provide us with the personal data of other persons, you assume responsibility for how you obtained this data and for having a legal basis for its processing; we cannot be held liable for violating the rights of those persons.

8.1 For storing the personal data you provide to us, we use a cloud service provided by Amazon Web Services EMEA SARL, and the data is stored on its servers in Ireland.

9.1 The Site contains cookies (very small files that the Company sends to the computers of Site users or to another access device).

9.2 These cookies are of two types:

• Functionality cookies: These cookies improve users' experience on the Site and allow them to benefit from various functionalities.
• Performance cookies: These cookies are used to measure and analyze how the Company's customers use the Site. Through these cookies, the operation of the Site and the users' experience can be continuously improved.

9.3 When using the Site, users' consent will be requested regarding the placement of these types of cookies on their device and access to them on the next visit to the site.

9.4 Information regarding the deletion and control of cookies is available on the website www.AboutCookies.org. Deleting cookies or blocking possible cookies could prevent access to certain areas or functionalities of the Site.

9.5 For more details, please see our Cookie Policy.

10.1 To fulfill the processing purposes, the Company discloses your personal data (i) to the rent-a-car companies from which you rent the car or (ii) to third parties or entities that support the Company in carrying out its activity, or to central/local public authorities, in the following illustrative cases:

• To our service providers and contractual partners, for example: marketing and advertising service providers; the IT service provider; courier services, payment services, banking services, etc. This data will be provided to the extent necessary and only on the basis of a confidentiality undertaking from the contractual partners, through which they guarantee that this data is kept secure and that its processing is carried out in accordance with the legislation in force.
• To accountants, auditors, lawyers, insurers or other external advisers of the Company. This data will be provided to the extent necessary and only on the basis of a confidentiality undertaking from the contractual partners, through which they guarantee that this data is kept secure and that its processing is carried out in accordance with the legislation in force.
• Authorities, public institutions and bodies, where there is a legal request from them or to the extent that we have a legal obligation.

11.1 We work hard to protect the site and our users, as well as all personal data collected under this Policy, from unauthorized access or from the unauthorized modification, disclosure or destruction of the information we hold.

11.2 In this regard:

• The Company certifies that it meets the minimum personal data security requirements; the data is processed in a manner that ensures protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by taking appropriate technical or organizational measures.
• The data storage systems used have backup mechanisms implemented to ensure redundancy of the stored data.
• We periodically review information collection, storage and processing practices, including physical practices, as well as security measures, to prevent unauthorized access to systems.
• We restrict our employees' and contractors' access to your personal information, and the contractual relationships with these persons are subject to strict rules regarding contractual confidentiality obligations, including under the sanction of contract termination.

12.1 If you have expressed your consent regarding processing activities, you may withdraw this consent at any time. This withdrawal will take effect only for the future and will not affect the lawfulness of processing before its withdrawal.

12.2 To the extent that your consent is withdrawn, the Company will prohibit the processing of your personal data and will take all actions to delete all records containing this data. However, if processing is mandatory for the provision of services by the Company and it can be carried out on the basis of other legal provisions, the Company will proceed with such processing and will notify you in this regard.

12.3 In accordance with legal provisions, you have the following rights:

• Right of access. The right to obtain from us, upon request and free of charge, confirmation as to whether or not data concerning you is processed by the company and the right of access to this data, except where such requests are repetitive or made in bad faith.
• Right to information regarding the identity of the controller, the purpose for which data processing is carried out, the recipients or categories of recipients of the data, the existence of the rights provided by the GDPR and the conditions under which they may be exercised.
• Right to rectification - you may request the rectification of inaccurate personal data.
• Right to erasure of data ("right to be forgotten"). Based on this right, you may obtain the erasure of data if its processing was not lawful or in other cases provided by law.
• Right to restriction of processing. At any time, you may request the restriction of processing if you contest the accuracy of the data, as well as in other cases provided by law.
• Right to object. The right to object, at any time, on well-founded and legitimate grounds related to data that is subject to processing, except where there are contrary legal provisions.
• Right to data portability. You may request and receive, under certain conditions, the personal data you have provided to us, in a machine-readable format, or you may request that such data be transmitted to another controller.
• Right to lodge a complaint - you may lodge a complaint regarding the manner of processing of personal data with the National Supervisory Authority for Personal Data Processing or you may address the courts.
• Right not to be subject to automated decisions or profiling. The right to request and obtain the withdrawal, annulment or reassessment of any decision that produces legal effects, adopted exclusively on the basis of personal data processing carried out by automated means, intended to evaluate certain aspects of your personality, such as professional competence, credibility, behavior or other similar aspects.

12.4 If you wish to exercise the rights mentioned above, please contact the person responsible for personal data protection using the following contact details:

Correo: office@inchiriazo.ro

12.5 You may also lodge a complaint regarding the processing of your data with the National Authority for the Processing and Supervision of Personal Data (B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania, www.dataprotection.ro, anspdcp@dataprotection.ro).

• Personal data processing will be carried out in a lawful, fair and transparent manner.
• Personal data collection will be carried out only for specified, explicit and legitimate purposes, and the data will not be further processed in a manner incompatible with those purposes.
• Personal data collection will be adequate, relevant and limited to the information necessary for the purpose of processing.
• Personal data will be accurate and, where necessary, kept up to date.
• All necessary measures will be taken to ensure that incorrect data is deleted or corrected without delay.
• Personal data will be kept in a form that allows identification of the data subject and for a period no longer than that during which the personal data is processed.
• All personal data will be kept confidential and stored in a manner that ensures the necessary security.
• Personal data will not be distributed to third parties unless necessary for the purpose of providing services in accordance with the agreements.
• Data subjects have the right to request access to personal data, rectification and deletion thereof, objection to or restriction of data processing, as well as the right to data portability.

14.1 The Company has the right to send customers marketing emails with their consent. This specific form of consent must be freely given, informed, specific and precise. These requirements are met when customers have opted to receive marketing emails (have actively approved).

14.2 Customers will always have the right to object, upon request and free of charge, to the processing of personal data for direct marketing purposes, without having to provide specific justifications. Customers can do this by clicking the "Unsubscribe" link that appears in the email messages we send you or by sending us an email at bookings@inchiriazo.ro. Once the customer has objected, that customer's personal data will no longer be processed for direct marketing.

14.3 Marketing emails contain information that we consider interesting for the customer, as well as latest news related to our products and services.

15.1 This policy will be updated periodically, depending on functional, legislative or internal changes that may occur. If material changes occur, customers will be notified by email or through the website before the changes take effect. We encourage customers to check this page periodically to stay informed about the latest news regarding our privacy practices.