Privacy policy

PERSONNAL DATA

The websites available at https://www.olinid.com/ (hereinafter referred to as the “Site“), and the Olinid Application (hereinafter referred to as the “Application“), are the property of the company McEcoRental, a foreign-registered company based in Monaco with a capital of 15.000 euros, registered under number 824 617 047, with registered offices located at 30 boulevard Princesse Charlotte, 98000 Monaco (hereinafter referred to as “OLINID“).

Olinid attaches great importance to the respect of privacy and is committed to processing your data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, known as “GDPR“, relating to the protection of individuals with regard to the processing of personal data and the free movement of such data, French Law No. 78-17 of January 6, 1978, as amended, relating to information technology, files and freedoms, known as the Informatics and Freedoms law, the German data protection act, known as Bundesdatenschutzgesetz and the German telecommunications and telemedia data protection act, known as Telekommunikation-Telemedien-Datenschutzgesetz (TTDSG), which define the conditions under which the processing of personal data may be implemented.

This Privacy Policy aims to inform any person using the Site and/or the Application (referred to as “User(s)” or “you”) about OLINID’s practices regarding the collection, use, and sharing of information provided by Users. It also outlines Users’ rights while they browse the Site, use the Application, or rent a vehicle (collectively referred to as the “Services”). “Personal data” refers to any information related to an identified or easily identifiable natural person (e.g., identity, bank details, location data, IP addresses). This does not include data from which identifying information has been removed, rendering it impossible to re-identify individuals (anonymous data).

Any information collected on the Site and/or the Application that directly or indirectly identifies you is considered personal data and will be handled in accordance with this policy.

Contents table

1.Who handles your personal data and why ?

OLINID serves as the controller of your personal data. This information is necessary for you to access the services provided by OLINID and is also used to enhance these services.

Virtuo will not process any personal data beyond what is described below, except at your request or with your explicit consent and in strict accordance with your instructions.

In all cases, the personal data collected:

  • Will be obtained and processed fairly and lawfully.

  • Will be stored for specific and legitimate purposes.

  • Will be used in accordance with these purposes.

  • Will be adequate, relevant, and not excessive in relation to those purposes.

  • Will be subject to precautions to ensure the security and confidentiality of the data, preventing damage, modification, destruction, or unauthorized access.

 

2.How do we obtain your consent ?

Our privacy policy is always presented to you when you sign up for our Site and/or Application, as well as when you book a vehicle. By creating an account and using our Services, you provide your explicit, full, and complete acceptance of this Privacy Policy.

IMPORTANT: NOTICE TO USERS

BY BROWSING THE SITE AND/OR APPLICATION AND/OR USING THE SERVICES AFTER THIS PRIVACY POLICY HAS BEEN PUBLISHED, YOU FULLY ACCEPT THIS POLICY.

If you wish to withdraw your consent to the processing of your data, you can do so at any time by emailing us directly at contact@olinid.com.

Furthermore, in compliance with legal requirements and in specific situations, we will either obtain your consent or provide you with an opportunity to opt-out before any data is transmitted.

3.When do we collect your data ?

The data collected by OLINID is provided voluntarily by you during the registration process on the Site and/or Application.

Additionally, data may be automatically collected when you use the Site and/or Application, or utilize our Services, particularly in the following scenarios:

  • When you browse the Site and/or Application, even if you haven’t created an account;
  • When you create an account on the Application;
  • When you make use of OLINID Services.

4.What do we collect ?

Data that is required to be provided to Olinid is identified as such when you register and/or use the Services. In particular, the collection of location data is necessary to enable you to use the services offered by OLINID. Therefore, without this list being exhaustive, the following categories of personal data may be collected, stored, and used:

Identification Data

When you register on the Application, OLINID collects your identification data (e.g., last name, first name, email address, country of residence, telephone number, selfie, photographs of your ID card, and driver’s licence). In addition, all data entered into the Application is retained, including all photographs taken via the Application.

Financial Data

When you register on the Application, OLINID collects data relating to your means of payment (e.g., the last four digits and the expiry date of the bank card).

When you reserve a vehicle, OLINID collects information relating to the completed transaction (e.g., transaction number, invoices issued, payment execution, pre-authorizations, and security deposits).

Rental Data

When you rent a vehicle, Olinid collects information about the rented vehicle (e.g., the model of the vehicle, the times and location of the rental).

Olinid also collects and processes data relating to mechanical failures and potential damage to vehicles, such as accidents, loss, or theft of the vehicle (e.g., incident report, police or third-party report, including the nature of any physical injury and/or property damage).

Olinid also collects and processes data relating to fines for offences committed during the rental period (e.g., speeding fines, parking fines, tolls, or other fines relating to traffic legislation and/or traffic offences).

Data from Customer Service Interactions

OLINID collects and processes data from customer service interactions conducted via email, phone, or chat.

Data for Monitoring Commercial Relationships

OLINID collects and processes data related to monitoring your commercial relationship, such as billing addresses, reservation counts, and rental locations. This also includes data for implementing loyalty promotions.

Statistical Data

OLINID collects, processes, and stores statistical data related to the use of the Site and/or the Application as part of its activities. This includes data on your activity on these platforms. The usage data, which may be shared with third parties, is anonymous and cannot identify users, even indirectly.

Login Data

When you access the Site and/or the Application, cookies and other trackers may be placed and stored on your device to collect and process information about your navigation.

5.How long do we retain your data and what is the purpose ?

OLINID only uses personal data for the purposes for which it was collected.

The personal data collected on our Site and/or our Application and/or when using our Services is used for the following purposes:

Using the Application

This processing is necessary to identify you and to prepare and facilitate your future bookings and rental contracts, and is based on the implementation of contractual measures.

The data is retained for the duration of the commercial relationship. However, information that serves as evidence of a right or a lease, or that must be retained by virtue of a legal obligation, is subject to an intermediate archiving policy for a period that shall not exceed the purposes of retention.

Managing Reservations and Rentals

  • Confirm, modify, and cancel your reservations.
  • Perform identity, security, driver’s license, and credit checks.
  • Confirm and insure your rentals.
  • Communicate with you regarding your reservation and rental (e.g., send reminder notifications before you pick up or drop off the vehicle).
  • Manage your rentals (vehicle pick-up and drop-off).
  • Manage your communication (by email, phone, or chat) with customer service.
  • Manage the payment of services.
  • Manage your invoices.
  • Manage the collection of amounts due.
  • Manage potential claims.
  • Manage the potential recovery of compensation in the event of damage to the vehicle.
  • Manage your insurance.

This processing is necessary to enable the booking and execution of the rental contract, and is based on the execution of contractual measures.

The data is retained for the duration of the business relationship, i.e., until you delete your user account. However, information that serves as evidence of a right or a lease, or that must be retained by virtue of a legal obligation, is subject to an intermediate archiving policy for a period that shall not exceed the purposes of retention. Records of exchanges with customer service are kept for five (5) years from the last contact with the customer.

Managing the Location of Vehicles

The geolocation of rental vehicles is used to provide you with 24/7 vehicle access, combat theft and fraud, and determine vehicle status in emergencies. OLINID never uses this location data to track or monitor your movements during the rental.

This processing is based on the legitimate interest of OLINID.

The data is retained for a maximum of nine (9) months from the rental date of the vehicle.

Managing Requests to Exercise Rights

The processing of requests to exercise the rights listed in paragraph IX below is based on regulatory requirements.

The data is retained for one (1) year after the customer’s request.

Aggregate Personal Data with Non-Personal Data

OLINID reserves the right to publish, disclose, and use aggregated information (data about Users or specific groups or categories of Users combined in such a way that an individual User cannot be identified or referred to) and non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes, and other business purposes.

Means to purge your personal data are implemented to ensure the effective deletion of your personal data once the retention or archiving period required for the fulfillment of the determined or imposed purposes is reached.

6.Who receives the collected data ?

The recipient of your personal data collected on the Site and/or the Application, and/or when using the Services, is primarily OLINID.

Your personal data will not be shared with third parties, except for OLINID’s partners, to whom the communication of personal data is necessary for providing the services offered by OLINID.

In particular, your personal data may be shared with:

  • Employees and authorised representatives of OLINID, or any of its affiliates (as defined in Article L.233-3 of the French Commercial Code), or any other entity, if the transfer of the data is necessary for the performance of the services by OLINID.
  • Subcontractors and service providers who assist OLINID in providing the following products and services:
    • Marketing services;
    • Management of trackers and cookies;
    • Application development and management;
    • User identification;
    • Geolocation;
    • Payment management;
    • Debt collection;
    • SMS management;
    • Messaging platform;
    • Management of fines;
    • Insurance management;

OLINID requires that all its subcontractors and service providers implement necessary technical and organisational measures to keep your personal data secure and ensure a high level of personal data protection as required by OLINID. Its subcontractors and partners must strictly comply with the provisions of the Data Protection Act, the GDPR, and any future regulations.

If an entity is located outside the European Union or in a country that does not have adequate regulations as defined by the GDPR, OLINID will regulate its contractual relationship with this entity by adopting an appropriate contractual arrangement.

Your personal data may also be communicated to:

  • The Agence Nationale de Traitement Automatisé des Infractions (ANTAI) or its foreign equivalents for the processing of violations committed abroad concerning the payment of tickets.
  • The Conseil National des Professions de l’Automobile (CNPA) regarding customers considered to be “customers at risk,” as defined by CNIL Deliberation No. 2006-235 of November 9, 2006 (e.g., in the event of a payment incident, accident, deliberate accident, and/or failure to comply with general rental conditions).
  • Appropriate authorities pursuant to legal obligations, to respond to requests for information from government agencies or law enforcement.

If we transfer your personal data outside the European Union to a country that does not provide an adequate level of protection, we will ensure that appropriate safeguards are in place.

In the event of a change of control concerning OLINID, a merger, an acquisition, a collective procedure, or any other form of transfer of assets, the data collected by OLINID may be transferred to third parties. However, OLINID is committed to guaranteeing the confidentiality of the personal data collected and will inform you before they are transferred or become subject to new confidentiality rules.

Where required by law, your consent will be obtained, or an opportunity to opt out will be provided before any transmission of data.

7.How do we secure your data ?

OLINID undertakes to implement the appropriate technical and organisational measures deemed reasonably necessary with regard to the regulations applicable to the protection of personal data, including protection against unauthorised or unlawful processing, and against loss, destruction, or accidental damage, in order to guarantee a level of security appropriate to the risks incurred to the rights and freedoms of individuals within the context of the processing referred to in this privacy policy.

When personal data is transferred to third parties for processing, OLINID shall ensure that these third parties implement all appropriate technical and organisational measures to ensure the protection of the personal data in accordance with applicable laws.

These measures are defined taking into account the state of knowledge, the costs of implementation, and the nature, scope, context, and purpose of the processing, as well as the identified risks.

OLINID shall take the necessary precautions, with regard to the nature of your data, the requirements, the risks, the costs, and the purpose of the processing, to preserve the security of the data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised third parties (physical protection of the premises, authentication process for our customers with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data, etc.).

Finally, in the event of a violation of rights concerning personal data that is likely to incur a high risk to the rights and freedoms of the User, OLINID undertakes to inform the User of this violation within a maximum period of seventy-two (72) hours.

8.What rights do you have concerning the processing of your personal data ?

You can access and update your personal data or delete your account and personal information at any time through the OLINID Application, using your login and password.

In accordance with the GDPR, you have the following rights:

  • Right of access: The right to obtain confirmation as to whether or not your personal data is being processed and, if so, to access such personal data.
  • Right of rectification: The right to obtain the rectification of inaccurate personal data or to have incomplete personal data completed.
  • Right to erasure: The right to have your personal data erased under certain circumstances.
  • Right to object: The right to object, at any time, to the processing of your personal data in certain situations.
  • Right to limitation: The right to request the limitation of the processing of your personal data in certain instances.
  • Right to portability: The right to receive the personal data you have provided in a structured, commonly machine-readable format, and to share it with a third party.
  • Right to define post-mortem directives: The right to set directives regarding the handling of your personal data (retention, deletion, disclosure) after your death.

You can exercise these rights:

  • By post, addressed to McEcoRental – 30 boulevard Princesse Charlotte 98000, Monaco.
  • By email : contact@olinid.com.

Should you choose to exercise one of these rights, you will be required to send to OLINID the elements necessary for your identification: name, first name, email address, and potentially your postal address.

Additionally, in accordance with the regulations in force, your request must be signed, accompanied by a photocopy of an identity document bearing your signature, must be clear, and must specify in detail the right you wish to exercise as well as the address to which you wish to receive the response.

OLINID undertakes to respond within a maximum of one (1) month following receipt of your complete request. Due to the complexity of the request and/or the number of requests, this period may be extended to two (2) months, provided that OLINID informs you of the reasons for the postponement within one (1) month of receiving your request.

If, after contacting OLINID, you feel that your rights have not been respected, you may file a complaint in one of the ways indicated below:

For France, with the Commission Nationale de l’Informatique et des Libertés – CNIL:

  • Via the CNIL website: www.cnil.fr/fr/plaintes or www.cnil.fr.

  • By post:

    Commission Nationale de l’Informatique et des Libertés – CNIL
    3 Place de Fontenoy
    TSA 80715 – 75334 PARIS CEDEX 07

9.Third-party sites.

On the Site and/or the Application, you may encounter various links that direct you to third-party websites.

OLINID cannot be held responsible for any information that these third parties send to or collect from you.

This privacy policy does not cover third-party sites or third-party content accessed through the Site and/or the Application.

OLINID has no control over hyperlinks and other promotional formats.

Therefore, OLINID does not guarantee the data protection practices of the websites it indexes and cannot be held responsible for any disputes arising between an indexed website and a User. Any losses or damages suffered are the sole responsibility of the operators of the indexed websites concerning their data protection practices.

10.How extensively can the privacy policy be amended ?

OLINID reserves the right to modify and update this privacy policy at any time to account for legal and/or jurisprudential developments and to meet the requirements of regulations applicable to the protection of personal data.

OLINID will notify you of significant changes or updates to this policy by email.

The version that prevails is the one accessible online on the day the Site and/or the Application is consulted.

The privacy policy is available in several languages, but only the French version is binding.

Any use of the Site and/or the Application after the publication of the modified privacy policy constitutes unconditional acceptance of the new privacy policy.