Privacy policy

Olimpia Rent a Car (CIF A09208232), Travessia dels Jardins 17, 17310 Lloret de Mar (Girona), reservas@olimpiarent.com, +34 972 364 710.

Write to that address or email for anything concerning your personal data.

Identity and contact data (name, ID document, address, phone, email, language), driving licence data (number, country, dates, categories) and date of birth, required to sign the rental agreement and to verify that you are legally able to drive.

Rental data: dates, branches, vehicle, mileage and fuel at pick-up and return, photographs of the vehicle, damage, digitised handwritten signature and, where applicable, flight number and additional drivers.

Payment data processed by our payment gateway (amount, last digits and brand of the card, transaction reference). We never store the full card number.

Browsing and search data on the website (dates and branches searched, category, price shown) linked to a random session identifier, without IP address or email.

Vehicle location data during the rental, when the vehicle carries a GPS unit.

Performance of the contract (art. 6.1.b GDPR): managing the booking, the agreement, pick-up and return, deposits, charges and incidents.

Legal obligation (art. 6.1.c): invoicing and tax/commercial record keeping, driver identification for traffic fines and requests from the authorities.

Legitimate interest (art. 6.1.f): fleet security and location through GPS, fraud prevention, aggregated demand and price analysis for fleet planning, and operational messages about your rental (pick-up and return reminders).

Consent (art. 6.1.a): marketing communications and review requests after the rental. You can withdraw it at any time without affecting the agreement.

To propose the deposit amount we apply published, objective rules (vehicle category, driver age and licence seniority, rental history with the company). A member of staff always reviews the proposal at the counter before it applies; no decision with legal effects is based solely on automated processing (art. 22 GDPR). Nationality never enters these rules.

Website prices may vary by date, branch and category according to occupancy. They are the same for every user in the same search; they are not personalised.

Processors providing services on our behalf: payment gateway (Stripe Payments Europe, Ltd.), transactional email delivery, hosting and document storage in the European Union, the fleet GPS telematics provider and, for automatic reading of identity documents, an artificial-intelligence provider that does not retain the images.

Public authorities and law enforcement where the law requires it (for instance, driver identification for a traffic offence). Insurers and loss adjusters in the event of a claim.

Where a processor handles data outside the European Economic Area, the Standard Contractual Clauses approved by the European Commission apply.

Agreement and invoicing data are kept for the periods required by tax and commercial law (generally six years from the last entry). Photographs and the signature are kept while liability may arise from the rental.

Vehicle location data are kept for twelve months. Website search data are kept in aggregated form for thirty-six months and are unlinked from any booking if you exercise your right to erasure.

Data processed on the basis of consent are kept until you withdraw it.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the controller's postal or email address, enclosing proof of identity.

If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We apply appropriate technical and organisational measures: encryption in transit and at rest, role-based access for staff, an access log for identity and driving-licence documents, and backups.

The current version is always the one published on this page. When a change matters for an ongoing agreement, we will tell you by email.