This policy was last updated on 12 May 2016.
To identify who the data controller is in respect of your personal data, please see Data Controllers and Contact Details by Country.
You may provide us with certain information in connection with a transaction or in your interactions with our websites and at our EHI-branded locations. When you are asked to provide personal information, you may decline. If you choose not to provide the information, you may not be able to use some products or services. The personal information that we may collect includes:
With your consent we may access location-based information from your mobile device or based on your IP address. We may also use your mobile device location information to provide you with notifications with your consent. We do not use this information to specifically locate you for any reason other than to provide you the service. If you have allowed us to utilise your location information in the past and wish to revoke the permissions, please turn off location services at the device level. With your consent, our application may utilise your device's camera feature to upload photos (such as your receipts) to the application. If you have allowed the application to utilise your camera and wish to revoke the permissions to do so, please do so at the device level.
In certain areas of our sites, we provide you with the ability to enter your friend's name and contact information in order for EHI to send your friend a one-off email inviting him or her to visit the sites. We also provide you with the ability to enter a friend's or another individual's name and contact information in order to make bookings for that friend or other individual. You must have obtained the consent of your friends before making such submissions. The information that you provide will not be used for any further marketing purpose unless your friend requests services or we otherwise obtain consent from that person. Please be aware that when you use any send-to-a-friend functionality on our sites, your name and email address may be included in the communication sent to your friend.
By visiting our websites, certain information may be automatically provided to us by your computer. For each visitor to our websites, our webservers automatically recognise the visitor's domain name or IP address. An IP address is a number assigned to your computer when you connect to the Internet. As part of the protocol of the Internet, web servers can identify your computer by its IP address. In addition, we may collect your browser type and operating system as well as your Internet service provider (ISP), referring and exit pages, date and time stamp and/or click stream data. We collect similar information when visiting our websites with your mobile device, including mobile device brand, model, mobile operation system and carrier. Except as otherwise explained in this policy, we may combine the non-personal information that we collect from you (as described above and as described below, under 'Cookies & Pixel Tracking') with your personal information in order to tailor our websites and enhance your online experience by saving your preferences and/or to help identify site features, advertisements and offers that may be of interest to you.
EHI vehicles may be equipped with OnStar or another vehicle telematics system ('Telematics System'). Some or all Telematics System functionality may or may not be active during rental periods. Telematics Systems may provide use, disclosure of, or access to (1) location information, (2) crash notification and related crash data and, (3) operational condition, mileage, diagnostic and performance reporting of vehicles ('Telematics Data'), as permitted by law.
Our websites and online marketing are not directed to, and Enterprise does not knowingly collect personal information from, children under the age of 18 or your country's age of minority. If you nevertheless believe that your child has provided us with their personal information and you need to let us know to delete it, please email us at firstname.lastname@example.org.
We use the information that we collect for the following purposes:
We may combine the information that you submit to us with information related to your transactions with us, such as rental location and vehicle type. We may also combine this information with data that we receive about you from third parties who assist us in processing requests, maintaining our data and optimising our services.
Except where prohibited by law, we retain information that we collect for commercially reasonable periods of time or in accordance with specific policies. Information collected for a specified purpose will only be used for that purpose and, after a reasonable period of time, will no longer be actively stored when that purpose has been fulfilled. Inactive data may, however, continue to be used for statistical, marketing, archiving and other analytical purposes.
We may disclose the information that we collect from and about you to our subsidiaries for the purpose of providing the transactions you have requested and for marketing purposes. In addition to those stated within this Policy, Telematics Data from rental vehicles may be disclosed to, accessed by or used by EHI, our affiliates, emergency service providers, others who may assist in responding to an accident, telematics service operators or those with whom we have a legal or contractual obligation to provide such data. Our affiliates and our subsidiary employees in our IT, marketing, operations and customer service divisions may use your information, as described in this Policy. To update your marketing preferences, please see the Contacting EHI section below.
We also may disclose your information to other third parties: (1) when required by law or in response to legal process; (2) without legal process in response to a request from law enforcement relating to a criminal investigation; (3) to protect our rights, privacy, safety or property, or of the public; (4) for administrative, technical support or other business purposes to facilitate our transactions with you (i.e. for your insurance replacement, corporate rental or through one of our partners), analyse our data, conduct mobile analytics services or to maintain and improve our services (subject to confidentiality agreements as appropriate); (5) to permit us to pursue available remedies or limit damage that we may sustain; (6) to enforce the terms of any rental agreement or our websites' terms and conditions; (7) to assist with the administration of frequent flyer or other rewards programmes; (8) to process your transaction with our subsidiaries, affiliates or licensee/franchisee located in the country in which you place your reservation; (9) if the rights of another individual might be violated and (10) otherwise with your consent.
Personal information may also be subject to transfer to another company in the event of a transfer, change of ownership, reorganisation or assignment of all or part of EHI, our subsidiaries/affiliated companies or our assets. This will occur provided that the parties have entered into an agreement under which the collection, use and disclosure of the information is limited to those purposes of the business transaction, including a determination whether or not to proceed with the business transaction. You will be notified via email or a prominent notice on our websites for thirty (30) days of any such change in ownership or control of your personal information.
We may disclose your personal information to third-party service providers (such as a payment processor to bill you for goods or services, an email provider to send email communications to you on our behalf, or the provider of our live chat feature in order to offer you customer service). These service providers may be located in a country different from your country of residence, such as the United States or a European Union member country. These service providers are contractually required to maintain the confidentiality and security of your information. However, your information may be accessible to US or EU authorities in accordance with applicable laws.
We may also share aggregated or de-identified information about our customers with our advertising and marketing partners, and third-party media properties, including social media sites to allow them to send targeted advertising messages on our behalf. With your prior notice and consent, we may share your name and email address with our co-branded partners and affiliates in order to provide the services you have requested and for marketing purposes. If you wish to stop receiving promotional communications from these third parties, please contact the third party.
Throughout our websites, we provide choices about the collection, use and sharing of your information. For example, you must affirmatively request to receive email advertisements from us, our affiliates and/or business partners concerning information about special offers, promotions and new features, products and services. You may choose to opt back in to our email advertisements at any time, in which case your most recent action will prevail. We will give you an opportunity to opt out of the gathering of your personally identifiable information, specific uses of your personally identifiable information and any marketing promotions in accordance with the procedures set out in the Contacting EHI section below.
We may post customer testimonials/comments/reviews on our websites which may contain personally identifiable information. We will obtain your consent via email prior to posting the testimonial. To request the removal of your testimonial, please contact us through one of the methods listed below in the Contacting EHI section.
The security of the information that you provide is very important to us and we try to provide secure transmission of your information. For certain transactions on certain of our websites, we may use Secured Sockets Layer (SSL) technology to secure the transfer of information. Unfortunately, no data transmission over the Internet can be guaranteed to be absolutely secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information transmitted over the Internet. Once we receive your information, we take steps that we believe are reasonably appropriate to protect its security, both internally and from outsiders, from loss, misuse, unauthorised access, disclosure, alteration and destruction, and to ensure the integrity of the data we collect. We use a combination of technological, physical, administrative and policy methods as well as organisational controls and non-disclosure or confidentiality agreements that we deem appropriate to protect this data.
If you have a username and password for any of the features on our websites, you have the responsibility of keeping your password secret. You should not reveal your password to anyone. We will not ask you in an unsolicited telephone call or email for your password. In addition, you should take reasonable precautions when using a computer that is not your own or in a public setting.
We will use your information in the country in which your service and transaction occurs. Please be aware that, unless prohibited by law, your use or continued use of our websites and mobile applications signifies your express consent that information may be transferred to or stored on servers and processed outside the country of your residence, including any of the countries where we do business. Please also be aware that the privacy laws of the United States or other countries where information may be stored may not be as comprehensive or offer as much protection as the laws of other countries including your country of residence. You may request us not to make such transfers, but if you do, we may not be able to provide some or all of our products or services to you.
When transferring personal data to countries outside the European Economic Area, we comply with European Union law by transferring to recipients who abide by Safe Harbor Principles, as set forth by the US Department of Commerce, or by using standard contract clauses approved by the European Commission, or by adopting other means to ensure that adequate safeguards are applied, or by obtaining your consent.
The accuracy and completeness of the information that we collect is very important to us and we make efforts to ensure that the information we have is accurate and up-to-date. In addition to the options provided to you in this Policy, if you wish to opt-out of direct marketing or review, amend, correct, update or delete any personally identifiable information that we have collected about you or limit how we use it, contact us at the information provided below. In addition to rights to review, amend, correct, update and delete personal data, you may also have rights to object to some processing of personal data. Please also contact us if you have any questions about privacy on our websites. You may contact us via email at email@example.com, and we will attend to your request and make any necessary revisions. If you prefer, country-specific contact information is listed below. We will respond to your access request within 30 days, unless a shorter period is required. If that is the case, local legal requirements would apply.
We reserve the right not to allow access to your information if we believe in good faith that such disclosure is prohibited by law or if the rights of another individual might be violated.
|If you are making a rental, or visiting a website or mobile site, in the following countries, the data controller will be listed as below.|
|Country||Data Controller||Contract Information|
|United States of America||Enterprise Holdings, Inc.||Enterprise, Internet Privacy Questions, 600 Corporate Park Drive, St. Louis, MO 63105|
|Canada||Enterprise Rent-A-Car Canada Company||Enterprise, Internet Privacy Questions, 600 Corporate Park Drive, St. Louis, MO 63105
Canadian Customers may also seek advise from the Office of the Privacy Commissioner of Canada (on 1-800-282-1376 or firstname.lastname@example.org)
|United Kingdom||Enterprise Rent-A-Car UK Limited||Enterprise House, Melburne Park, Vicarage Road, Egham Surrey TW20 9JY.|
|Ireland||ERAC Ireland Limited||ERAC Ireland, Head Office Motokov Complex, Longmile Road, West Dublin, Dublin 12.|
|Germany||Enterprise Autovermietung Deutschland GmbH||Enterprise, Internet Privacy Questions, Mergenthaler Allee 35-37, 65760 Eschborn.|
|France||Citer, S.A.||Enterprise, Internet Privacy Questions, 165 bis, rue de Vaugirard, B.P. 36-75721 Paris Cedex 15.|
|Spain||Autotransporte Turistico Espanol, S.A.||Enterprise, Internet Privacy Questions, Avenida del Ensanche de Vallecas 37, 28051 Madrid|
|If you are visiting a website or mobile site for the countries listed below (i.e. with a country suffix relevant to these countries), then the controller for that site will be as listed below. If you make a rental in one of these countries, the controller for the rental will be the licensee identified in the rental agreement.|
|Country||Data Controller||Contract Information|
|Albania, Austria, Belgium, Bosnia. Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Greece, Hungary, Iceland, Italy, Latvia, Lithuania, Luxembourg, Macedonia, Malta, Montenegro, Moldova, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Sweden, Switzerland, Turkey||EAN Data Services UK Limited||Enterprise House, Melburne Park, Vicarage Road, Egham Surrey TW20 9JY.|
|If you are located within the European Economic Area and you use a "pre-pay" function, the controller for your payment information is listed below.|
|Country||Data Controller||Contract Information|
|European Economic Area||EAN Data Services UK Limited||Enterprise House, Melburne Park, Vicarage Road, Egham Surrey TW20 9JY.|