Your details.
Clearly explained.

01

Who is responsible?

This privacy policy applies to the processing of personal data by Carsub B.V. via carsub.nl, the associated subdomains and Carsub's services. Carsub is the controller within the meaning of the General Data Protection Regulation (GDPR).

Carsub B.V. has its registered office in Almelo and is registered with the Chamber of Commerce under number 82210365. The current contact address is Hazenweg 2, 7556 BM Hengelo.

02

How does Carsub receive personal data?

Carsub may receive data when you visit the website or a subdomain, fill out a request or contact form, take out a subscription, purchase another product or service, or contact an employee.

This contact can take place via e-mail, telephone or Carsub's social media channels. In addition, technical data may be generated automatically when you visit the website.

03

Which personal data can be processed?

Which data is required depends on your contact with Carsub and the service you use. This may involve:

• Identification information, such as name and date of birth.
• Contact details, such as address, email address, and phone number.
• Identity and driver's license information, when necessary for an application or agreement.
• Financial data, which includes a bank account number.
• Account and customer information, such as customer number and order history.
• Location information, which includes data from a GPS tracker in a Carsub car.
• Website and device information, for example information about the device, the page visited or the website from which you visit Carsub.
• Other data that you provide or that Carsub lawfully obtains for the purposes described below.

If you appoint an additional driver, Carsub can process the same relevant categories of data for that driver. Therefore, please inform this person about this privacy policy.

04

On what basis and for what purposes?

Carsub processes personal data when necessary to prepare or execute an agreement, to comply with a legal obligation or to promote a legitimate interest of Carsub. For processing that requires consent, consent will be requested separately.

Personal data can be used, among other things, to:

• to deliver ordered products and services and to execute an agreement;
• answer questions and provide information about products and services;
• to check identity and financial data;
• to secure cars with a GPS tracker and help prevent theft;
• research and improve products, services and the website;
• handle and follow up complaints;
• to comply with legal obligations;
• to send newsletters and relevant offers, to the extent permitted by law;
• to promote other legitimate business interests.

05

With whom can personal data be shared?

Carsub only shares personal data when necessary for the provision of services or to comply with an obligation. Possible recipients are the website operator, marketing platforms and distribution or logistics partners. They only receive the data they need for their work.

With a subscription request, Carsub can share data with RentalCheck for a credit check and with the provider of the chosen car. The identity of that provider is stated in the order confirmation. Bank details may be shared with Online Payment Platform for payment processing.

If a party processes exclusively on behalf of Carsub, Carsub will make the required agreements in a processing agreement. Carsub does not sell personal data. When a service provider processes data outside the European Economic Area, Carsub uses a legally permitted transfer mechanism and appropriate safeguards.

06

What rights do you have?

Under the GDPR, you can exercise the following rights, depending on your situation:

• Inspection in the personal data that Carsub processes about you.
• Correction of incorrect data or addition of incomplete data.
• Removal of personal data when the conditions are met.
• Restriction of processing in certain situations.
• Objection against processing based on a legitimate interest.
• Data portability, so that appropriate data can be transferred to you or another party.

A request can only be submitted by yourself. Carsub may therefore request additional information to determine your identity. Some rights are not unlimited: for example, a request may be limited by the privacy of others, trade secrets, intellectual property rights, an agreement or a legal retention obligation.

If you are not satisfied with the processing or handling of your request, you can file a complaint with the Dutch Data Protection Authority.

07

How long is data kept?

Carsub stores personal data for as long as necessary for the purpose for which it was obtained and for as long as Carsub is legally obliged to do so. For example, for certain tax administrations a retention period of at least seven years applies.

Customer data may be required for longer in connection with an existing customer relationship, possible follow-up services, a dispute or another valid reason. When data is no longer needed and there is no valid reason to keep it, it should be deleted or anonymized.

08

How is personal data protected?

Carsub takes appropriate technical and organizational measures to protect personal data against loss, misuse, unwanted disclosure, unauthorized access and unauthorized modification.

When Cloudflare Turnstile is enabled on the contact form, Carsub uses this security service to recognize and prevent spam and automated abuse. Cloudflare may process technical data, such as the IP address and signals about the browser and connection. Read more in it privacy policy of Cloudflare Turnstile.

Do you suspect abuse or a security problem? Please report this via contact form and only include the information necessary to investigate the report.

09

Changes to this privacy policy

Carsub may adjust this privacy policy when the services, the processing of personal data or applicable rules change. The new version then replaces the previous version and applies from the moment of publication.

The date at the top of this page shows when this version was last updated.