This Privacy Policy governs the processing of personal data carried out by Valpi Rent, S.A., legal entity no. 502650230, with registered office at Edifício Alberto Pinto, Avenida Pedro Guedes, S/Nº 4560-452 Penafiel, as the data controller, within the scope of the use of its website and the provision of vehicle rental services, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and other applicable legislation.

1. Data Controller
The controller of personal data is Valpi Rent, S.A.

For any matter related to the protection of personal data, the data subject may contact us via email at: dpo@valpi.pt.


2. Personal Data Collected
Within the scope of website use, online reservations, and the execution of rental agreements, Valpi Rent, S.A. may collect and process, in particular, the following personal data:

• Identification data: first name, last name, date of birth;


• Contact details: email address, telephone number, address;


• Civil identification and driving licence data;


• Tax and invoicing data;


• Data related to reservations and rental agreements;


• Payment data (full card details are not stored);


• Browsing data and IP address;


• Vehicle GPS location data;


• Special category data: in the event of an accident, we may process health-related data, such as information on blood alcohol levels or narcotics;


• Communications exchanged with Valpi Rent, S.A.

3. Purposes of Processing
Personal data is processed for the following purposes:

• Management and processing of online reservations;


• Execution, performance, and management of vehicle rental agreements;


• Invoicing and compliance with legal and tax obligations;


• Payment management;


• Communication with the customer;


• Management of claims, damages, accidents, and potential administrative offences;


• Compliance with legal obligations towards public authorities;


• Maintenance, customization, and statistical analysis of website usage;


• Sending commercial communications, where consent has been given.

4. Legal Grounds
The processing of personal data by Valpi Rent, S.A. is based on:

• The performance of a contract or pre-contractual steps;


• Compliance with legal obligations;


• The data subject's consent, where applicable;


• The legitimate interests of Valpi Rent, S.A., namely for security purposes, service improvement, and the defense of rights in legal proceedings.

5. Payments

Payments made through the website are processed via the PAYTEF gateway and the PAYNOPAIN acquirer, acting as payment service providers.

Valpi Rent, S.A. does not access or store full payment method details; such data is processed directly by the respective service providers, in accordance with applicable legislation.

6. Data Sharing
Personal data may be disclosed to:

• Insurance companies;


• Technology and IT service providers;


• Public or judicial authorities, when legally required;


• Payment service providers.

By clicking on the social media plugins available on our website, you will be redirected to Valpi Rent's pages on those platforms, which may process your personal data for the purposes defined by them. The entities identified below act as joint data controllers, and information regarding the processing of your personal data can be consulted on their respective websites:

• Facebook: https://pt-pt.facebook.com/legal/terms/page_controller_addendum;


• LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum;


• Instagram: https://help.instagram.com/519522125107875.

Where we are bound by legal obligations to share data or respond to requests from authorities, we may transfer personal data to third parties for the fulfillment of such obligations and in accordance with applicable legal provisions.

In all cases, Valpi Rent, S.A. ensures that data is processed only to the extent necessary and with appropriate safeguards in place.

7. International Data Transfers

Certain service providers or other third parties to whom we may transfer your data are located in third countries or international organizations outside the European Economic Area. Given that some countries may not be subject to the same data protection obligations, Valpi Rent, S.A. applies additional safeguards to ensure adequate data protection. Accordingly, such data transfers are carried out in compliance with the safeguards established by the GDPR, namely adequacy decisions or standard contractual clauses issued by the European Commission. These measures aim to ensure data transmission security, bind third parties to appropriate data protection obligations, and guarantee the confidentiality of the data received.

In particular, Valpi Rent, S.A.'s website uses Google Analytics, a service provided by Google Ireland Limited, for statistical analysis of website usage. Google Analytics uses cookies that collect information about user interaction with the website, including the IP address (processed in anonymized form), pages visited, and duration of visits. This processing is carried out exclusively based on user consent, which may be withdrawn at any time through the cookie settings available on the website. The data collected may be transferred outside the European Economic Area, namely to the United States of America, under the EU-U.S. Data Privacy Framework, as well as Standard Contractual Clauses approved by the European Commission and supplementary data protection measures.

Additionally, whenever you choose to contact Valpi Rent, S.A. through the WhatsApp application, the personal data shared in this context (such as telephone number, username, message content, and communication metadata) will be processed by WhatsApp Ireland Limited and its parent company, Meta Platforms, Inc., which implies the transfer of personal data outside the European Economic Area, namely to the United States of America. These transfers are carried out under protection mechanisms recognized by applicable legislation, including Meta Platforms, Inc.'s adherence to the EU-U.S. Data Privacy Framework and the use of Standard Contractual Clauses approved by the European Commission. For more information on the processing of personal data by WhatsApp and Meta group entities, users should consult their respective privacy policies.

8. Data Retention

Personal data will be retained only for the period necessary to fulfill the purposes for which it was collected or processed, without prejudice to applicable legal retention periods, namely for tax and accounting purposes.

9. Data Subject Rights
Under applicable legislation, the data subject has the right to:

• Access their personal data;


• Rectify inaccurate or incomplete data;


• Request erasure of data, where legally permissible;


• Request restriction of processing;


• Object to processing;


• Data portability;


• Withdraw consent, where applicable;


• Lodge a complaint with the Portuguese Data Protection Authority (CNPD).

These rights may be exercised by submitting a written request to dpo@valpi.pt, except for the right to lodge a complaint, which may be exercised directly with the CNPD at www.cnpd.pt.


10. Data Security
Valpi Rent, S.A. adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or improper disclosure.


11. Cookies
The website uses cookies. For more information on the types of cookies used, their purposes, and how to manage consent, users should consult the Cookie Policy available on the website.


12. Changes to the Privacy Policy
Valpi Rent, S.A. reserves the right to amend this Privacy Policy, and any changes will be published on the website.


13. Applicable Law
This Privacy Policy is governed by Portuguese law and Regulation (EU) 2016/679 (GDPR).

Any disputes arising from the validity, interpretation, or execution of this Privacy Policy, or related to the collection, processing, or transmission of User Data, shall be submitted exclusively to the jurisdiction of the judicial courts of the Porto Este district, without prejudice to mandatory legal provisions.