1) Data Controller and Contacts
Controller: NOVARENT SUPER CAR K.F.T.
Registered office: 1093 Budapest, Lónyay utca 18-A (Hungary)
VAT: HU27782800
Website: www.novarentsupercar.eu
Email for privacy requests: info@novarentuspercar.eu
(No Data Protection Officer has been appointed. You can contact the Controller at the above email for any privacy-related request).
2) Categories of Data Processed
We collect and process, also through third parties:
- Identification and contact details: first name, last name, email/PEC, phone number, address, company name.
- Rental-related data: vehicle, duration, delivery/return location, preferences, additional drivers.
- Identity documents: driving license, ID card (and, if necessary, residence permits).
- Payment data: handled through secure providers (not fully stored by NovaRent).
- Browsing data and cookies: IP address, logs, online identifiers, analytics (see Cookie Policy).
Mandatory data are necessary to provide the requested services. If not provided, we may not be able to proceed.
3) Purposes and Legal Basis of Processing
A) Contractual and pre-contractual purposes
Handling requests, quotes, bookings, contracts, customer assistance, vehicle delivery/return, deposits, payments, insurance claims.
Legal basis: Art. 6(1)(b) GDPR (contract/pre-contractual measures).
Nature: mandatory.
B) Compliance with legal obligations
Tax/accounting, insurance, anti-money laundering, and requests from authorities.
Legal basis: Art. 6(1)(c) GDPR.
Nature: mandatory.
C) Security, fraud prevention, and asset protection
Identity/reliability checks, IT security, dispute management.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
D) Direct marketing (including profiling/remarketing)
Sending promotional communications on NovaRent services/products via email, SMS, phone/post; statistical analysis; user database management; advertising, remarketing, external content display; live chat interaction.
Legal basis: Art. 6(1)(a) GDPR (consent).
Nature: optional. Lack of consent does not affect the contract.
Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
4) Methods of Processing and Security
Data are processed using electronic and paper-based tools, in compliance with the principles of lawfulness, fairness, transparency, and minimization. Appropriate technical and organizational measures are adopted to prevent unauthorized access, disclosure, alteration, or destruction of personal data.
5) Data Recipients
Data may be processed by NovaRent’s staff (administrative, commercial, customer care, marketing, IT), duly authorizedand trained.
They may also be communicated to processors (e.g., IT and hosting providers, payment providers, security and anti-fraud companies, communication/marketing agencies, CRM systems, couriers, legal/accounting consultants, insurance companies). The updated list of processors is available upon request.
Data may also be disclosed to authorities in compliance with legal obligations. Data will never be disseminated.
6) Location of Processing and International Transfers
Data are processed at the Controller’s offices and at the premises of authorized processors.
If transferred outside the EEA, transfers will occur in accordance with Articles 44–49 GDPR (e.g., EU Standard Contractual Clauses or another applicable legal basis), ensuring an adequate level of protection.
7) Data Retention Period
- Contractual data: for the duration of the relationship and thereafter for the time required by law or for legal defense (generally up to 10 years after termination).
- Identity documents: for the time strictly necessary to verify/manage the contract and related obligations.
- Marketing data: up to 24 months from collection or last interaction (or, for clients, up to 24 months from contract termination), unless consent is withdrawn earlier.
Once retention periods expire, data will be deleted, anonymized, or securely archived where permitted.
8) Rights of the Data Subject
You may, at any time:
- Access your personal data;
- Request their rectification or erasure;
- Request restriction of processing;
- Object to processing based on legitimate interest;
- Obtain data portability (where applicable);
- Withdraw consent (where consent is the legal basis).
Requests should be sent to info@novarentuspercar.eu. We will respond free of charge, usually within 1 month.
You also have the right to lodge a complaint with a Supervisory Authority. For our registered office, the competent authority is the NAIH – Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungary), without prejudice to the possibility of contacting the authority in your country within the EEA.
9) Cookies and Similar Technologies
Our website uses technical cookies and, subject to consent, analytical and marketing cookies (including third-party cookies). For full details on types, purposes, legal basis, duration, and management of preferences, please refer to the Cookie Policy.
10) Changes to this Notice
NovaRent may update this Privacy Policy. Updated versions will be published on this page with the date of last update. In case of material changes, we may provide specific notifications.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.