The parties acknowledge that for the purposes of the Data Protection Legislation, you are the data controller and we are the data processor (where Data Controller and Data Processor have the meanings as defined in the EU GDPR).

Personal Data – This privacy statement provides information about the personal information that Surprice Car Rentals collects, and the ways in which Surprice Car Rentals uses that personal information. Surprice Car Rentals collects and uses the following kinds of personal information:

• First name, last name, age, email, phone number, country of residence, flight number, passport number or identity card number, home address, driving license details.

We hereby name these data as Personal Data.

Legitimate Use of Personal Data – You ensure that you have all necessary appropriate consents and notices in place to enable lawful transfer of the Personal Data to Surprice Car Rentals and its partners that are necessary for the provision of the car rental service, for the duration and purposes of this Agreement.

Surprice Car Rentals may use your Personal Data to:

• supply to you the car rental services that you purchase
• personalize the voucher sent to you
• send you marketing communications,

You declare your consent into

• Using your personal data for the provision of car rental service by our organization and our local partners at the pickup and drop-off locations
• Keeping your personal data into our systems for unlimited duration, unless you express your right to delete the Personal Data if not any other applicable law obliges us to keep your data permanently.

You optionally can declare your consent into

• Letting us send you marketing communications in the future through email, conveying content information about our brand name, our car rental services and corporate news

Your optional declaration is expressed through the appropriate selection box on the online booking site of Surprice Car Rentals.

Right to Object – You have the right to send us in written your objection into receiving marketing communications and Surprice Car Rentals will be obliged to stop sending such information within 5 working days after receiving your notification request,

Any other processing of Personal Data is not permitted unless, Surprice Cars is required by the laws of any Country member or not of the European Union or by the laws of the European Union applicable to process Personal Data (Applicable Laws). Where we are relying on laws of a member of the European Union or European Union law as the basis for processing Personal Data, we shall promptly notify you of this before performing the processing required by the applicable laws unless those applicable laws prohibit us from so notifying you.

Right to be Forgotten – At your written direction, Surprice Car Rentals is obliged to delete or return Personal Data and copies thereof to you on termination of the Agreement unless required by Applicable Law to store the Personal Data.

Sub-processing of Personal Data –  Where Surprice Car Rentals discloses your personal information to its partners for these purposes, the partners in question will be obligated to use that personal information in accordance with the terms of this privacy statement.

In addition to the disclosures reasonably necessary for the purposes identified elsewhere above, Surprice Car Rentals may disclose your personal information to the extent that it is required to do so by law, in connection with any legal proceedings or prospective legal proceedings, and in order to establish, exercise or defend its legal rights.

A) Securing your Data

Surprice Car Rentals will take reasonable technical and organizational precautions to prevent the loss, misuse or alteration of your personal information.

Surprice Car Rentals will store all the personal information you provide on its secure servers.

Surprice Car Rentals ensures that it has in place appropriate technical and organizational measures to protect against unauthorized or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, appropriate to the harm that might result from the unauthorized or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures (those measures may include, where appropriate, pseudonymizing and encrypting Personal Data, ensuring confidentiality, integrity, availability and resilience of our systems and services, ensuring that availability of and access to Personal Data can be restored in a timely manner after an incident, and regularly assessing and evaluating the effectiveness of the technical and organizational measures adopted by us).

Surprice Car Rentals has received all necessary assurance statements and has entered into agreement terms with all its providers (data centers, subcontractors, partners, franchisees) that impose all necessary Data Protection rules to protect Private Data and customer rights in compliance to GDPR.

Information relating to electronic transactions entered into via this website are protected by encryption technology.

Surprice Car Rentals ensures that all personnel who have access to and/or process Personal Data are obliged to keep the Personal Data confidential, according to bilateral agreements between Surprice Car Rental and each staff member.

Surprice Car Rentals is obliged to notify you without undue delay on becoming aware of a Personal Data breach.

Surprice Car Rental maintains complete and accurate records and information to demonstrate its compliance with GDPR and shall immediately inform you if, in our opinion, an instruction infringes Data Protection Legislation.

B) Cross-Border Data Transfers & Sub-processing

Information that Surprice Car Rentals collects may be stored and processed in and transferred between any of the countries in which Surprice Car Rentals operates and hosts its servers to enable the use of the information in accordance with this privacy policy.

You agree to such cross-border transfers of Personal Data

Surprice Car Rentals complies with the obligation under the Data Protection Legislation by providing an adequate level of protection to any Personal Data that is transferred.

You consent to Surprice Car Rentals appointing to third party processor of Personal Data under this Agreement, who are partners of Surprice Car Rentals and have a role into delivering the service to you. These are the

• co-operative franchisees and providers at the country and locations where the cars are picked up and returned, whether in the European Economic Area or not
• data center operators which host dedicated servers where Personal Data are stored and processed, within the European Economic Area

You do not consent to us appointing any other third party processor of Personal Data under this Agreement, apart from the ones mentioned above which are necessary to deliver the service.

C) Cookie Policy

This site uses cookies – small text files that are placed on your machine to help the site provide a better user experience. In general, cookies are used to retain user preferences, store information for things like shopping carts, and provide anonymized tracking data to third party applications like Google Analytics. As a rule, cookies will make your browsing experience better.

However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser. We suggest consulting the Help section of your browser or taking a look at the About Cookies website which offers guidance for all modern browsers.

D) Updating this Statement

Surprice Car Rentals may update this privacy policy by posting a new version on this website.

You should check this page occasionally to ensure you are familiar with any changes.

These terms and conditions govern your use of this website; by using this website, you accept these terms and conditions in full. If you disagree with these terms and conditions or any part of these terms and conditions, you must not use this website.

A) License to Use Website

Unless otherwise stated, Surprice Car Rentals and/or its licensors own the intellectual property rights in the website and material on the website. Subject to the license below, all these intellectual property rights are reserved.

You may view, download for caching purposes only, and print pages from the website for your own personal use, subject to the restrictions set out below and elsewhere in these terms and conditions. You must not:

• republish material from this website (including republication on another website)
• sell, rent or sub-license material from the website
• show any material from the website in public
• reproduce, duplicate, copy or otherwise exploit material on this website for a commercial purpose
• redistribute material from this website

B) Acceptable Use

You must not use this website in any way that causes, or may cause, damage to the website or impairment of the availability or accessibility of the website; or in any way which is unlawful, illegal, fraudulent or harmful, or in connection with any unlawful, illegal, fraudulent or harmful purpose or activity.

You must not use this website to copy, store, host, transmit, send, use, publish or distribute any material which consists of (or is linked to) any spyware, computer virus, Trojan horse, worm, keystroke logger, rootkit or other malicious computer software.

You must not conduct any systematic or automated data collection activities (including without limitation scraping, data mining, data extraction and data harvesting) on or in relation to this website without Surprice Car Rental’s express written consent.

C) No Warranties

This website is provided “as is” without any representations or warranties, express or implied. Surprice Car Rentals makes no representations or warranties in relation to this website or the information and materials provided on this website.

Without prejudice to the generality of the foregoing paragraph, Surprice Car Rentals does not warrant that:

• this website will be constantly available, or available at all
• the information on this website is complete, true, accurate or non-misleading
• nothing on this website constitutes, or is meant to constitute, advice of any kind

D) Limitations of Liability

Surprice Car Rentals will not be liable to you (whether under the law of contact, the law of torts or otherwise) in relation to the contents of, or use of, or otherwise in connection with, this website:

• to the extent that the website is provided free-of-charge, for any direct loss
• for any indirect, special or consequential loss
• for any business losses, loss of revenue, income, profits or anticipated savings, loss of contracts or business relationships, loss of reputation or goodwill, or loss or corruption of information or data

These limitations of liability apply even if Surprice Car Rentals has been expressly advised of the potential loss.

E) Exceptions

Nothing in this website disclaimer will exclude or limit any warranty implied by law that it would be unlawful to exclude or limit; and nothing in this website disclaimer will exclude or limit Surprice Car Rental’s liability in respect of any:

• death or personal injury caused by Surprice Car Rental’s negligence
• fraud or fraudulent misrepresentation on the part of Surprice Car Rentals
• matter which it would be illegal or unlawful for Surprice Car Rentals to exclude or limit, or to attempt or purport to exclude or limit, its liability

F) Reasonableness

By using this website, you agree that the exclusions and limitations of liability set out in this website disclaimer are reasonable.

If you do not think they are reasonable, you must not use this website.

G) Other Parties

You accept that, as a limited liability entity, Surprice Car Rentals has an interest in limiting the personal liability of its officers and employees. You agree that you will not bring any claim personally against Surprice Car Rental’s officers or employees in respect of any losses you suffer in connection with the website.

Without prejudice to the foregoing paragraph, you agree that the limitations of warranties and liability set out in this website disclaimer will protect Surprice Car Rental’s officers, employees, agents, subsidiaries, successors, assigns and sub-contractors as well as Surprice Car Rentals.

H) Unenforceable Provisions

If any provision of this website disclaimer is, or is found to be, unenforceable under applicable law, that will not affect the enforceability of the other provisions of this website disclaimer.

I) Indemnity

You hereby indemnify Surprice Car Rentals and undertake to keep Surprice Car Rentals indemnified against any losses, damages, costs, liabilities and expenses (including without limitation legal expenses and any amounts paid by Surprice Car Rentals to a third party in settlement of a claim or dispute on the advice of Surprice Car Rental’s legal advisers) incurred or suffered by Surprice Car Rentals arising out of any breach by you of any provision of these terms and conditions[, or arising out of any claim that you have breached any provision of these terms and conditions].

J) Breaches of these Terms and Conditions

Without prejudice to Surprice Car Rental’s other rights under these terms and conditions, if you breach these terms and conditions in any way, Surprice Car Rentals may take such action as Surprice Car Rentals deems appropriate to deal with the breach, including suspending your access to the website, prohibiting you from accessing the website, blocking computers using your IP address from accessing the website, contacting your internet service provider to request that they block your access to the website and/or bringing court proceedings against you.

K) Variation

Surprice Car Rentals may revise these terms and conditions from time-to-time. Revised terms and conditions will apply to the use of this website from the date of the publication of the revised terms and conditions on this website. Please check this page regularly to ensure you are familiar with the current version.

L) Assignment

Surprice Car Rentals may transfer, sub-contract or otherwise deal with Surprice Car Rental’s rights and/or obligations under these terms and conditions without notifying you or obtaining your consent.

You may not transfer, sub-contract or otherwise deal with your rights and/or obligations under these terms and conditions.

M) Severability

If a provision of these terms and conditions is determined by any court or other competent authority to be unlawful and/or unenforceable, the other provisions will continue in effect. If any unlawful and/or unenforceable provision would be lawful or enforceable if part of it were deleted, that part will be deemed to be deleted, and the rest of the provision will continue in effect.

N) Entire Agreement

These terms and conditions constitute the entire agreement between you and Surprice Car Rentals in relation to your use of this website, and supersede all previous agreements in respect of your use of this website.

This statement provides a framework for understanding the personal data collected by the company «SurPrice Car Rentals (CY) LTD», with the distinctive feature «SurPrice Car Rentals» (hereinafter referred to as “Controller”), based in Limassol, Cyprus, at Apostolos Varnavas 8A street, as required by the General Data Protection Regulation 2016/679 (GDPR) of the European Union, which entered into force on 25.05.2018 and concerns the above recorded information by our customers. The processing is carried out on the basis of the legal provisions of the Regulation and in particular the provision of consent and ensuring that compliance with a legal or contractual requirement or condition for signing a contract, such as the execution of transactions with our company’s customers. With this consent you give us the opportunity to process your data to improve our services, provide marketing, promotional and advertising material, communicate via e-mail, upgrade systems and prevent any kind of illegal activity.

Access to your personal data is permitted to only a limited number of the company’s employees, all of whom are bound to confidentiality. We maintain administrative, technical and physical assurances, aimed at protecting data from accidental, illegal or unauthorized destruction, loss, alteration, access, disclosure or use. For these purposes, we apply, or we are going to implement the following measures:

1. data encryptionduring transfer,
2. strong user authentication,
3. enhanced network infrastructure,
4. network monitoring applications.

We may share your personal data with suppliers and third parties, who perform services on our behalf, under our instructions. Our company guarantees that the latter may not use or disclose the information, unless it is necessary to provide services on our behalf or to comply with the legal requirements arising from the Regulation or any requests of public and/or judicial authorities. Especially regarding the collaborating users of our logo (franchisees), in Europe or elsewhere, they have access to your personal data only for the proper execution of your bookings. Our company does not authorize their use for other purposes related to the individual interests of the franchisees. All third parties, suppliers and franchisees who process your personal data as joint data controllers or as data processors are bound to confidentiality.

As data subjects, you have the following rights in accordance with Articles 15 – 22 of the General Data Protection Regulation:

1. Right of access: You can see the data concerning you as well as whether the processing is done in accordance with the GDPR.
2. Right to correction: You may request the correction of inaccurate or incomplete information concerning you.
3. Right to erasure (‘right to be forgotten’): You may ask the Controller to delete information that concerns you and is not necessary to achieve the purposes of the processing.
4. Right to restriction of processing: You may request that the processing of your data be restricted to what is strictly necessary.
5. Right to data portability: You can receive the data held by the Processor in usable stick (usb stick). In addition, you can request to transfer them to another Processor.
6. Right to object: You may at any time object to the processing of your data by revoking this consent.
7. Right to human intervention: You may request the processing of your data based on the human factor and not automated by technological means for the purpose of compiling profiles, etc.
8. Right to lodge a complaint with a supervisory authority: You may file a complaint at the Hellenic Data Protection Authority in the event that your data is processed in violation of the provisions of the Regulation.
9. Right to revoke the consent: You may at any time revoke your consent (pursuant to Article 7 of the GPPR) which allows for the processing of your data.

I declare responsibly that I have read the content of this Declaration – Notification and I provide my unconditional consent.  I consent unconditionally to the exchange of personal data between the Controller and the Collaborating Users (Franchisees) for the proper execution of the car rental services.

You can, at any time, contact us regarding your personal data protection policies and the exercise of your rights, by e-mail at legaldepartment@surpricecars.com .