PRIVACY POLICY – SUMMARY

We are Autohellas Tourist and Trading Societe Anonyme and its subsidiaries operating under the Hertz, Thrifty, Dollar, Firefly and Hertz Operating Lease brands (together “we”, “us”, and “our”). This policy does not cover our affiliates or other third parties through whom you may interact with us. This is a high level summary to explain how we collect, processes, store and otherwise use information about you and your rights in relation to that information. For full information, please see the full policy below.

AUTOHELLAS HERTZ GROUP OF COMPANIES
CUSTOMER PRIVACY POLICY

SCOPE & CONTROLLERS

We are the Greek Company Autohellas Tourist and Trading Societe Anonyme, official franchisee of Hertz International for Greece and other seven (7) countries in which we are running business activities through our subsidiaries, as shown in the following table. Our activities include between others:

1. Short-term car or equipment rental services (rent a car, equipment rental)
2. Long-term car or equipment leasing and fleet management (operating lease)
3. Car maintenance and repair services
4. Used cars sales (wholesale and retail)

The commercial brands that we use are Hertz, Thrifty, Dollar, Firefly and Hertz Operating Lease (together “we”, “us”, and “our”).

Together we are the data controllers for the purposes of this Privacy Policy (“the Policy”).

This Policy covers the information we collect about you in connection with the abovementioned business activities, which identifies, or can be used to identify, directly or indirectly, you as an individual (“Personal Data”). It does not apply to information that cannot reasonably identify you. For example, but without limitation, aggregated anonymous data are not Personal Data.

We respect the privacy rights of our customers and are committed to protecting your privacy. This Policy explains our data handling practices with regard to your Personal Data, as well as your rights associated with that data.

Contents

1. Collection
2. Purposes
3. Sharing
4. Retention & Security
5. Your Rights
6. Questions & Changes

1. COLLECTION

We collect Personal Data that you provide during the execution of our services, on our websites, on third-party websites, on applications that we use in order to provide our services, in connection with any inquiries, reservations, rentals or purchases you make in relation to our services. We may collect your Personal Data directly or through our service providers, our subsidiaries, our franchisor, business partners and booking channel providers. For further details, see below:

1.Α. TYPES OF INFORMATION COLLECTED may include, but are not limited to:

1.Α.1. Personal Information:

1.Α.2. Technological Information:

1.Α.3. Rental Information:

1.Α.4. Sensitive Data:

We may collect certain Personal Data that constitutes sensitive data in some countries, such as (indicatively but not limited to):

1. data related to health conditions (for instance, if there is an accident and we need to work with insurance and claims management companies relating to any injury you may incur)
2. credit scoring history data (for instance, in case of long-term car rental or car sale with installments) etc.

Please note that in case that it is needed to provide sensitive data within the framework of our provided services or purchases from us, we will use that sensitive data for our operational uses as described in this Privacy Policy, subject to your consent where required under applicable law.

1.Β. METHODS AND SOURCES OF COLLECTION may include, but are not limited to:

1.Β.1. Online collection:

1.Β.2. Cookies and online data collection

We use cookies on our websites to store information in your computer or mobile device to improve your online experience. Cookies are small text files which let you navigate between pages efficiently, help us understand how this website is performing and generally improve your browsing experience. Cookies can also help to ensure the advertising you see online is more relevant to your interests.

Generally, our cookies may perform the following functions:

1.Β.3. How you can manage the use of cookies

In case that you wish to activate or deactivate the use of cookies from your browser’s settings, depending on your web browser you can visit the following web pages in order to obtain the appropriate information:

• Microsoft Internet Explorer
• Microsoft Edge
• Mozilla Firefox
• Google Chrome
• Opera
• Safari
• Safari for iPad and iPhone

1.Β.4. Note

Our websites are not directed to individuals under the age of 13 and we do not knowingly obtain Personal Data from such individuals.

1.Β.5. Off-line collection:

Depending on the purposes for which we collect and use your Personal Data, as set out in this Policy, the Personal Data we collect from you may be required due to a statutory or contractual obligation, or provided by you on a voluntary basis, or necessary for us to enter into a contract with you and provide you with our services. If you do not provide your Personal Data to us we may not be able to provide the requested services (renting, leasing, maintenance, sales etc.).

2. PURPOSES

Below we have set out the various purposes for which we process your Personal Data. We have also set out the legal grounds for the processing of your Personal Data for each purpose:

2.1. OPERATIONS AND SERVICES: We may use your Personal Data to provide you with the services or products you request from us and to perform other activities related to such services or products, including billing and collection following a rental or leasing, or to communicate with you regarding:

1. any reservation you initiate or rental transaction you perform with us
2. issues related to the safety, maintenance and insurance coverage of the car that you rent with us
3. issues related to the safety and maintenance of the car that you have purchased from us.

Legal grounds: to perform our contract with you or to take steps at your request prior to entering into a contract with you.

2.2. OUR MARKETING: With your consent, we may use your Personal Data to provide you with marketing information, customer satisfaction or services assessment surveys, special offers and promotions via various means, including e-mail and SMS messages, in accordance with applicable law.

Legal grounds: on the basis of your consent. However, where permitted by applicable law we may lawfully use your Personal Data to send you such marketing communications (including via email) for these marketing purposes where necessary for our legitimate interests, which include promoting our products and services, special offers and promotions which may be of interest to you.

You can unsubscribe from receiving such messages at any time by contacting us at the details at Section 6 below as well as by the unsubscribe link in each e-mail message. Please note that if you exercise these choices, you will continue to receive communications concerning your account and products and services you requested, and in response to any requests for information by you. Please also note that this unsubscribe process may take some time to complete, consistent with applicable law.

2.3. THIRD PARTY MARKETING: We may also share your Personal Data with a sponsor or other third party that provides you with special offers or promotions that may be of interest to you (“Third Party Provider”) where permitted.

Legal grounds: on the basis of your consent. You may instruct us at any time not to share your Personal Data covered by this Policy with such Third Party Providers where you have previously consented.

2.4. NORMAL COURSE OF BUSINESS: We may also process your Personal Data and other information if such processing is necessary:

1. to comply with the law or in response to a subpoena, court order, law enforcement request, or other legal process;Legal grounds: where it is necessary for compliance with a legal obligation to which we are subject
2. to protect the interests, rights, safety, or property of us or others.Legal grounds: where necessary for our legitimate interests, which are to protect such interests, rights, safety and property;
3. to enforce any terms of service on our websites or the terms and conditions of any rental, purchase, or utilizationLegal grounds: for our legitimate interests, which are to protect us and enforce such terms of service or terms and conditions.
4.  as part of a business transaction where all or some of our assets are bought, sold, or otherwise transferred by act of law or contract; andLegal grounds: for our and third parties’ legitimate interests.
5.  to operate our systems properly.Legal grounds: for our legitimate interests, which are the proper running of our systems and our business in order to provide our products and services to you and other customers.

2.5. WEBSITES: If you use our websites we may process your Personal Data as follows:

1. Aggregated or anonymized information: We may share with other third parties aggregate or anonymized information about our website users, such as your use of this website or other websites, and the services provided on this website or other websites, as well as any rental, purchase or utilization information.
2. Social Media: If you participate in certain public features of our websites, apps, or social media websites/apps, please note that any information you or others voluntarily disclose through use of such features, becomes available to the public and/or other users whom you have designated.If you choose to provide access credentials to designated individuals, please be aware that any information you provide to us may be visible to such individuals. .

   We are not responsible for the information that you or others choose to disclose publicly and such information is not subject to this Policy.

3. Links to third parties: We may provide links to third-party websites or may be linked to third-party websites. Since we do not control third-party sites, and we are not responsible for any information you may provide while on such sites, we encourage you to read the privacy policies on those websites before providing applicable third-parties with your information.

3. SHARING