Privacy Policy

1. Data controller

Rent & Go Malta — email: privacy@rentgo-malta.com

2. Categories of data processed

• Personal and contact data (name, surname, email, phone, address).
• ID document and driving licence data (KYC).
• Date of birth, nationality, licence categories.
• Payment data (handled by PCI-DSS certified provider).
• Browsing data, technical logs, IP address.
• Images and videos uploaded for vehicle inspection and document verification.

3. Purposes and legal bases

• Contract performance (art. 6.1.b): booking, rental and payment management.
• Legal obligation (art. 6.1.c): identity verification, tax record retention.
• Legitimate interest (art. 6.1.f): fraud prevention, Platform security.
• Consent (art. 6.1.a): marketing communications and non-essential cookies.

4. Identity verification (KYC)

Identity verification is mandatory to book. Documents are stored encrypted, accessible only to authorised administrators and used exclusively to verify legal and licence requirements. Documents are automatically deleted 5 years after the last booking or upon user request.

5. Recipients

Data may be shared with: rental Partners (only as needed for the single rental), payment providers, police authorities upon legal request, technology providers (EU cloud hosting).

6. Extra-EU transfers

Data is hosted on servers within the European Economic Area. Any extra-EU transfer will only occur under Standard Contractual Clauses approved by the EU Commission.

7. Retention period

• Contract data: 10 years (tax obligations).
• KYC documents: 5 years from last booking.
• Technical logs: 12 months.
• Marketing data: until consent is withdrawn.

8. Data subject rights

Under arts. 15-22 GDPR you have the right to: access, rectify, delete, restrict, port, object. You can also lodge a complaint with the Maltese Information and Data Protection Commissioner (idpc.org.mt).

9. Contacts

To exercise your rights write to: privacy@rentgo-malta.com