Car rental management software of a new generation

G. RIGHTS

As provided in Article 15 of the Regulation, you have the right to access your personal data, request its rectification and updating if incomplete or inaccurate, request its erasure if the collection was made in violation of a law or regulation, as well as object to the processing for legitimate and specific reasons.

In particular, we hereby inform you of all your rights that you may exercise at any time against the Data Controller.

a. Right of access

You have the right, in accordance with Article 15(1) of the Regulation, to obtain from the Data Controller confirmation of whether or not your personal data is being processed and, if so, access to such personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom your personal data has been or will be disclosed, particularly recipients in third countries or international organizations; d) where possible, the envisaged retention period for the personal data or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the Data Controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You can find all this information within this Privacy Policy, which will always be available to you in the Privacy section of the Website.

b. Right to rectification

You can obtain, in accordance with Article 16 of the Regulation, the rectification of your personal data that is inaccurate. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c. Right to Erasure

You have the right, in accordance with Article 17(1) of the Regulation, to obtain the erasure of your personal data without undue delay, and the Data Controller shall have the obligation to erase your personal data if one of the following reasons applies: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) you have withdrawn your consent on which the processing is based, and there is no other legal ground for the processing; c) you have objected to the processing pursuant to Article 21(1) or (2) of the Regulation, and there are no overriding legitimate grounds for the processing; d) the personal data have been unlawfully processed; e) the erasure of personal data is required to comply with a legal obligation under EU or Member State law.

In some cases, as provided in Article 17(3) of the Regulation, the Data Controller is entitled not to proceed with the erasure of your personal data if their processing is necessary, for example, for the exercise of the right to freedom of expression and information, for the performance of a legal obligation, for reasons of public interest, for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, or for the establishment, exercise, or defense of legal claims.

d. Right to Restriction of Processing

You have the right to obtain the restriction of processing, in accordance with Article 18 of the Regulation, in the following cases: a) if you contest the accuracy of your personal data (the restriction will be in place for the period necessary for the Data Controller to verify the accuracy of the personal data); b) if the processing is unlawful, but you oppose the erasure of your personal data and request the restriction of their use instead; c) even if the Data Controller no longer needs the personal data for processing purposes, they are required for the establishment, exercise, or defense of legal claims; d) if you have objected to the processing pursuant to Article 21(1) of the Regulation, pending the verification whether the legitimate grounds of the Data Controller override yours.

In case of restriction of processing, your personal data will be processed, except for storage, only with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest. You will be informed before the restriction is lifted.

e. Right to Data Portability

You can, at any time, request and receive, in accordance with Article 20(1) of the Regulation, all your personal data processed by the Data Controller in a structured, commonly used, and machine-readable format or request their transmission to another data controller without hindrance. In this case, it is your responsibility to provide us with all the exact details of the new data controller to whom you intend to transfer your personal data, providing us with written authorization.

f. Right to Object

In accordance with Article 21(2) of the Regulation and as reiterated in Consideration 70, you can object, at any time, to the processing of your personal data when it is carried out for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.

g. Right to Lodge a Complaint with the Supervisory Authority

Without prejudice to your right to seek administrative or judicial remedies, if you believe that the processing of your personal data carried out by the Data Controller is in violation of the Regulation and/or the applicable law, you can lodge a complaint with the competent Supervisory Authority for the Protection of Personal Data.

To exercise all your rights as identified above, you simply need to contact the Data Controller using the following methods:
– Sending an

email to the email address info@toprent.app;
– Sending a registered letter to the legal address of Oxygen S.R.L.