This page explains the platform’s general GDPR approach. Specific controller/processor roles and obligations depend on the customer’s use and the applicable agreement.
Controller and processor roles
Rental companies generally determine why and how their customer, driver, booking, and rental data is used and therefore act as data controllers. Easy Web Rent or its provider may act as a processor when hosting and processing that data on the customer’s instructions.
Categories of personal data
Data may include names, contact details, identity and driver-license information, booking and agreement records, payment references, vehicle assignments, communications, audit information, and technical logs. Customers should configure fields and retention according to their lawful needs.
Lawful basis
Customers are responsible for identifying a lawful basis for processing, such as contract performance, legal obligations, legitimate interests, or valid consent where required.
Data-subject rights
Depending on applicable law, individuals may have rights to access, correction, deletion, restriction, objection, portability, and withdrawal of consent. Requests should normally be directed first to the rental company controlling the data.
Security measures
- Role-based access and permission controls
- Authenticated sessions and API tokens
- Audit and request logging
- Encrypted transport where HTTPS is configured
- Credential and secret protection
- Backup, validation, and controlled deployment procedures
International transfers and subprocessors
Hosting, email, payment, tracking, and other integrations may involve service providers in different jurisdictions. Appropriate contractual and technical safeguards should be established where required.
Privacy requests
For product-provider privacy questions, contact info@easywebrent.com. Rental customers should contact the rental company that collected their information.