Privacy and Data Protection Policy

The personal data provided to CARFAST Rent-a-Car, Lda. is processed automatically and used for the confirmation and execution of the car rental contract and compliance with legal obligations. They may also be used to send marketing campaigns, promotions and discounts related to our services, always based on the prior consent of the data subject.

A CARFAST Rent-a-Car, Lda. is responsible for processing the personal data collected, ensuring its correct handling from the moment it is collected until it is deleted, in accordance with the legal obligations established by the personal data protection legislation in force.

In addition to the personal data collected by filling in the forms available on our website, when browsing the CARFAST Rent-a-Car, Lda. website, additional data may be collected, such as the domain name of the ISP, the date and time of access to the website, the originating link and the number of daily visitors to each section. This data is used for statistical purposes and to improve the browsing experience.

The personal data provided is used exclusively for the purposes mentioned and, in some cases, may be shared with partner companies providing services, particularly in the event of the need to sublet. The provision of personal data is essential for drawing up the rental contract. If you do not provide the necessary data, it will not be possible to proceed with the rental process.

CARFAST Rent-a-Car, Lda. uses a subcontractor to process personal data, namely to send marketing campaigns, promotions and discounts. This entity is Brand Power – Marketing e Comunicação, Lda., registered with the Commercial Registry Office of Trofa, with VAT number 510 464 700.

Personal data will be kept for the period of time necessary to fulfill the purposes for which it was collected and/or until the data subject requests its deletion, within the applicable legal limits.

The data subject has the right to request access, rectification, erasure, restriction of processing, objection to processing and portability of their data. To exercise these rights, you can contact us by e-mail: geral@carfast.pt.

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), the rental company informs the following: a) The entity responsible for processing the personal data provided under the contract is the rental company CARFAST Rent-a-Car. Lda, with registered office at Rua das Indústrias, nº 220 4785-625 Trofa; b) The processing of personal data is for the purpose of entering into and performing this contract, pursuant to Article 6.1(b) of the GDPR: c) Personal data may be transmitted to third parties for the purpose of ensuring compliance with any legal obligations to which the lessor is subject, pursuant to Article 6.8(1)(c) of the GDPR. d) Personal data may be processed for other purposes for which the data subject has given express consent to the rental company.

CARFAST is committed to protecting the information it collects through our website. In particular, CARFAST, Rent-a-Car, Lda uses appropriate physical, technical and organizational security measures to prevent unauthorized or unlawful processing, accidental loss or destruction or damage to your personal data.

Our website uses “cookies”. Cookies are small text files that are copied from a web server to your hard disk. These files contain information that can later be read by a web server in the domain in which the cookie was assigned. Cookies do not run programs or infect your computer with viruses. The files we use do not contain personal data, nor are they linked to such data.

– 3 years from the end of the contractual relationship or until confirmation that your account has been deleted, if you so request.
– 5 years from the end of the rental
– If the user is a CARFAST client, 3 years from the end of the commercial relationship.
– If you are not a CARFAST customer, 3 years from the collection of your personal data OR from the last time you requested information from us.
– 12 months from data collection
– During the loyalty program membership period and up to 4 years after your loyalty points expire
– 3 years from your last commercial contact with us

At any time, the holder of personal data has the right to access it, as well as, within the limits of the contract and the GDPR, to change it, oppose its processing, decide on automated processing, withdraw consent, request the deletion of data and exercise other rights provided for in the legislation in force (except for data that is indispensable for the performance of the contract, and as such is mandatory, as well as for compliance with legal obligations to which the rental company is subject). If you withdraw your consent, this does not compromise the lawfulness of the processing carried out up to that date.

The data subject has the right to lodge complaints with the Data Protection Supervisory Authority, such as the National Data Protection Commission (CNPD), in the event of a breach of rights.

The privacy policy may be updated periodically and changes will be communicated through the website or other means of communication.

If, at any time, you wish to access the personal data you have provided us with, rectify it, delete it, oppose its processing or request portability, you can do so via email to geral@carfast.pt or by registered letter to Rua das Indústrias, nº 220, 4785-625 Trofa.