The controller of the personal data collected through this website is Zitauto - Automóveis de Aluguer Sem Condutor, Lda. (VAT/NIF 501 964 215), with registered office at R. Hermenegildo da Piedade, Bloco 2, Loja D, 8125-222 Quarteira, Portugal.

For any question about privacy or to exercise your rights, contact us at info@zitauto.com, by phone on +351 289 315 559 or by post to the address above.

We only collect the data needed for the purposes described in this policy:

• Quotes and online bookings: name of the main driver, email, phone number, rental dates and times, pick up and return locations, flight details (when provided), vehicle and extras chosen and any notes you send us.
• Contact, suggestions and complaints: name, email, phone number and the content of your message.
• Newsletter: email address.
• Rental contract (when the car is delivered): full name, address, driving licence details, passport or other identification document, and credit card details used as a guarantee.
• Technical data: IP address, browser type, operating system, screen resolution, pages visited and referring site, collected automatically and through cookies (see section 7).

• Handling quotes, bookings and rental contracts (confirming, changing or cancelling bookings and informing you about vehicle or equipment availability): performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Answering questions, suggestions and complaints: pre-contractual steps and our legitimate interest in replying to you (Art. 6(1)(b) and (f) GDPR).
• Legal obligations, such as invoicing, accounting and identifying the driver to authorities or road concession companies in case of fines, tolls or traffic offences: legal obligation (Art. 6(1)(c) GDPR).
• Newsletter and our annual Christmas card: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Website security and operation: our legitimate interest (Art. 6(1)(f) GDPR).
• Statistics and marketing cookies: only with your consent (Art. 6(1)(a) GDPR).

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.

Zitauto does not sell your personal data. We only share data when necessary with:

• Service providers acting on our behalf (processors), under contract and only for the purposes above: website hosting, email service, newsletter platform (Mailchimp), and, if you consent to cookies, Google (Analytics, Ads, AdSense) and Microsoft (Clarity, Microsoft Advertising).
• Public authorities, such as courts, GNR, PSP, the Judicial Police or the tax authority, when we are legally required to do so.
• Road concession and toll companies, only the data strictly necessary to identify the driver responsible for tolls or infractions, as provided in the rental contract and the law.

The website also shows a Trustpilot review widget, provided by Trustpilot A/S.

Some providers (Google, Microsoft and Mailchimp/Intuit) may process data outside the European Economic Area, namely in the United States. In these cases transfers are made under the EU-U.S. Data Privacy Framework, to which these companies are certified, and/or the European Commission's Standard Contractual Clauses.

• Bookings and rental contracts: for the period required by law, in particular tax and accounting obligations (currently 10 years).
• Quotes that do not become a booking and contact messages: for the time needed to deal with your request and up to 2 years afterwards, unless needed to defend legal claims.
• Newsletter and Christmas card: until you unsubscribe or withdraw your consent.
• Cookies: for the periods shown in section 7.

At the end of these periods the data is deleted or anonymised.

Cookies are small files stored on your device when you visit a website. We use necessary cookies, which do not require consent, and, only if you accept, statistics and marketing cookies. When you first visit the site you can accept all, reject all or choose by category. You can change or withdraw your choice at any time via the Cookie settings link at the bottom of every page. Your choice is stored for 6 months.

You can also block or delete cookies in your browser settings, but some parts of the site may not work correctly.

Under the GDPR you have the right to:

• access your personal data;
• have inaccurate data corrected;
• have your data erased, except where we must keep it by law;
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact us at info@zitauto.com. We will reply within one month and may ask you to confirm your identity. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).

We apply appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. The website uses SSL/TLS encryption and access to data is restricted to authorised staff. We do not process credit card payments online.

We may update this policy to reflect legal or operational changes. The current version is always available on this page, with the date of the last update. If changes are significant we will inform you through the website or by email.