Last updated on: April 19, 2025
1. Introduction
This Privacy Policy describes how personal data is collected, used, and protected when using the website www.pandacar.pt (hereinafter referred to as the “Website”), in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Portuguese data protection laws.
By accessing and using this Website, the user acknowledges that they have read, understood, and agreed to this Privacy Policy.
2. Data Controller
PandaCar, Lda
Registered Address: Av. Infante D. Henrique, Edifício Oura Village, Loja 3, 8200 Albufeira, Portugal
Email: pandacar_rent@sapo.pt
Phone: +351 289 513 057
3. Categories of Personal Data Collected
- Identification data (full name)
- Contact details (email address, phone number, physical address)
- Booking and payment information
- IP address and browsing data (cookies, logs, geolocation)
4. Purposes of Data Processing
- Managing and processing car rental bookings
- Issuing invoices and fulfilling legal obligations
- Communicating with customers
- Website security and fraud prevention
- Direct marketing (with prior consent)
- Compliance with legal or judicial orders
5. Legal Basis for Processing
- Execution of a contract or pre-contractual steps
- Compliance with legal obligations
- Legitimate interest (e.g., service improvement, security)
- Consent (e.g., marketing or non-essential cookies)
6. Data Sharing and Disclosure
Personal data may be shared with:
- Trusted service providers (e.g., Stripe for payments, Google Analytics)
- Public authorities where legally required
- Other third parties with the user’s explicit consent
7. International Data Transfers
Personal data may be transferred to countries outside the European Economic Area (EEA), particularly when using third-party services (e.g., Google, Meta, Stripe). In such cases, appropriate safeguards are implemented, such as Standard Contractual Clauses approved by the European Commission.
8. Data Retention
Data will be retained only as long as necessary for the purposes stated or to comply with legal requirements. After this period, data will be securely deleted or anonymized.
9. Data Subject Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request data deletion
- Restrict or object to processing
- Withdraw consent at any time
- File a complaint with the Portuguese supervisory authority (CNPD)
To exercise your rights, contact: pandacar_rent@sapo.pt
10. Cookies
We use cookies and similar technologies for functionality, analytics, and marketing purposes. You may manage your preferences through the cookie settings panel. For details, see our Cookie Policy.
11. Security
We adopt appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of your personal data, regularly reviewed and updated according to best practices.
12. Updates to This Policy
We may update this policy to reflect changes in legal requirements or our practices. Updates will be posted on this page.
