UFODRIVE is committed to respecting your privacy as well as protecting your personal information, which means:
We encourage you to read this policy carefully and to contact us with any questions or concerns about our privacy practices.
UFODrive SA, registered in Luxembourg, is the legal entity responsible for processing the personal data in the meaning of the General Data Protection Regulation (EU) 2016/679 (GDPR).
When using the term “personal data” in our Privacy Notice, we mean information that relates to you and allows us to identify you, either directly or in combination with other information that we may hold.
Personal data that you provide voluntarily
To allow the execution of the rental contracts we will collect the following data when you register to our service or reserve a car using our App or the booking website:
Your personal data are collected, processed, and used only to the extent this is necessary to enable the execution of the rental agreement and its associated service (UFOBook, UFOSign, UFOFind, UFOReturn and UFOJourney). We may also use your data to manage your club membership.
Furthermore, your personal data can be used for market research or marketing purpose (including social media targeting to display adverts and posts to specific audiences on platforms such as Facebook and Google) only after we collect explicit consent from you using our App or email, consent you are free to withdraw at any time.
However, where we email or text you about a similar product or service that you bought from us in the past, we process your personal data in our legitimate interests in carrying out our business, provided those interests are not outweighed by your rights and interests.
We also use a video-surveillance system for security purposes and automated operations management. To learn more about our system, please see our Video-surveillance Privacy Notice.
Personal data that we collect automatically
Whenever you interact with our App or our booking website your activity is logged to allow our support team to help you should you encounter any issue in using them. Thus, we automatically collect certain information from your device, such as the IP address, the operating system of your device, the pages visited, and the requests made and the day and time of connection. You also collect your account password.
Furthermore, GPS trackers are installed in all our cars and used solely to prevent any criminal acts on the vehicles, enhance your customer experience and enable the execution of UFOReturn and UFOJourney services.
Cookies and other technologies
Your personal data are secured using the following measures:
All personal data except the credit card details are securely stored on our servers hosted on Amazon Web Services in the European Union.
The credit card details are not stored on our servers but securely collected and stored by Stripe a specialized payment service which saves and manages credit card details safely.
Your personal data is stored only for as long as is necessary for the purpose for which we obtained them. The retention period will depend upon several factors, such as the duration of the contract concluded with you, or legal requirements imposed to us.
The logs collected during interactions with the App or the booking website are destroyed after six (6) months.
The GPS data is stored for 3 months from the end of the rental contract. Video recordings are kept for a maximum of 7 days unless we are required to keep them for a longer period.
If you have not used the service for two (2) consecutive years, we will send you an email to ask if you want to keep your account active. If we receive no answer after two reminders we will delete your account and associated personal data (including identification and driver licence documents).
Whenever we process your personal data on the basis of your consent, you have the right to withdraw your consent to marketing at any time by contacting us as indicated below or by clicking the unsubscribe link in the email communication we send you (e.g., UFODRIVE events, product updates, etc.). Please, note that the withdrawal of your consent does not affect the lawfulness of the personal data processing based on consent prior to its withdrawal.
Your personal data can be transmitted to other third parties only under the following circumstances:
Some of the above-mentioned recipients may be based outside the EU/EEA and process your personal data outside of the EU/EEA. Where this is the case, appropriate safeguards in accordance with Chapter V of the GDPR are put in place, such as standard contractual clauses adopted and approved by the European Commission.
As a natural person, you have a number of rights regarding your personal data including:
§ the right of access: You can request access to the data concerning you at any time as well as a copy of the data;
§ the right to rectification: You can request at any time that inaccurate or incomplete data be rectified;
§ the right to request the erasure of data: You can request that your data be deleted when, for example, the data is no longer necessary for the purposes for which it was collected or processed;
§ the right to restriction of processing: You can request that we restrict the processing of data if, for example, you question the accuracy of the data concerning you or if you object to the processing of data concerning you;
§ the right to data portability: You have the right to have your data transferred to another data controller in a structured, commonly used and machine-readable format, if the processing is carried out by automated means or if it is based on prior consent;
§ the right to object to data processing: You can object to the processing of your data and can withdraw your consent if the processing is based on consent, for example if the data is used for commercial prospecting purposes.
These rights can be enforced within the limits defined by articles 15 to 23 of the RGPD.
For more information or if you wish to exercise your rights, please contact our Data Protection Officer (DPO) at email@example.com
Requests will be dealt with by the DPO and will be responded to within 1 month at the latest, starting from the moment of your identity confirmation. We may extend the time limit by a further 2 months if the request is complex or if we have received a high number of requests.
We may request additional information to help us confirm your identity and to ensure that you respect your right to access the personal data (or to exercise any other of your rights). This is a security measure to ensure the non-disclosure of your personal data to an unauthorised person.
If you are not satisfied with our response, you also have the right to lodge a complaint at any time with the National Commission for Data Protection (CNPD), the Luxembourg supervisory authority for data protection issues, or, as the case may be, any other competent supervisory authority depending on the place of your habitual residence, on the place where you used our services or on the place where you believe infringement may have happened.
Our website contains links other websites, but this Privacy Notice applies only to personal data collected via the UFODRIVE website and to how UFODRIVE processes personal data. It does not apply to specific member or correspondent firms practicing under the UFODRIVE name. We are not responsible for the privacy practices of other websites.
Enim nec dui nunc mattis enim. Vulputate eu scelerisque felis imperdiet proin fermentum leo vel. Proin sed libero enim sed faucibus turpis. At lectus urna duis convallis convallis. At tellus at urna condimentum mattis pellentesque id nibh. Nibh cras pulvinar mattis nunc sed.
Consequat mauris nunc congue nisi. Cursus metus aliquam eleifend mi in nulla. Dignissim cras tincidunt lobortis feugiat vivamus. Blandit aliquam etiam erat velit. Sapien faucibus et molestie ac. Ornare aenean euismod elementum nisi quis eleifend quam adipiscing vitae. Id cursus metus aliquam eleifend mi in nulla posuere sollicitudin.
Id cursus metus aliquam eleifend mi in nulla posuere sollicitudin. Amet facilisis magna etiam tempor. Pellentesque massa placerat duis ultricies lacus sed. Sagittis aliquam malesuada bibendum arcu vitae elementum curabitur vitae nunc. Nisl nunc mi ipsum faucibus vitae aliquet nec ullamcorper sit. Id interdum velit laoreet id donec ultrices. Aliquam malesuada bibendum arcu vitae elementum curabitur. Sapien eget mi proin sed libero. At erat pellentesque adipiscing commodo at pellentesque elit vivamus at augue eget arcu dictum varius.
eugiat vivamus at augue eget arcu dictum varius. Curabitur vitae nunc sed velit dignissim. Felis eget velit aliquet sagittis id consectetur. Sit amet consectetur adipiscing elit pellentesque habitant morbi. Mus mauris vitae ultricies leo integer malesuada. Id aliquet lectus proin nibh nisl condimentum. Dolor viverra ipsum nunc.