Privacy policy Romania
PRIVACY POLICY
of the Klass Wagen website
We appreciate your interest in our products and services and would like to give you some important facts about how we handle and protect your personal data.
Klass Wagen is fully committed to protecting the privacy of the personal data of our customers, partners and suppliers. This privacy policy is designed to help you understand what information we collect, why we collect it, and how you can update, manage, export and delete your information. The policy also contains the security measures that Klass Wagen takes to protect such data and your rights in relation to it.
By "Klass Wagen Websites" we mean any web page (website, landing page, subdomain, etc.) owned, managed or under the umbrella of Klass Wagen. By using this website, you consent to the collection, processing and transfer of your data as described in this policy.
Please check this section regularly as the policy may be subject to changes or updates. Any significant changes to this policy will be notified.
In addition to this policy, please see our Terms and Conditions and Cookie Policy.
Information collected on our platform falls under the scope of the General Data Protection Regulation 2016/679 (Regulation (EU) 2016/679), also known as GDPR and the ePrivacy Directive (2002/58/EC).
If you require further information about how we use your personal data, you can email us at [email protected].
About us
Klass Wagen SRL (with the trade name Klass Wagen) has been active for more than a decade in the field of car rental, becoming the national market leader in the segment of vacation travel. Our fleet of over 3000 cars is present in Romania (main airport cities) and in Hungary (Budapest). We offer a wide range of services related to online car rental, including products and services related to this field.
Information about Klass Wagen
Klass Wagen SRL has its headquarters in Timisoara, 16 Decembrie 1989 Blvd. no. 35, Timis County, and its head office in Otopeni, 289, Calea Bucurestilor, Ilfov County, Romania. It is registered in the Trade Register under no. J35/351/2005, with fiscal code no. 17197919.
Contact data:
Phone number: +40374020002
E-mail: [email protected]
E-mail Human Resources: [email protected]
Customer Relations Department: [email protected]
Using our platform
We use a third-party server to host our website, AWS (Amazon).
Our website server automatically logs the IP address that you use to access our website, as well as other information about your visit, such as the accessed pages, the requested information, the date and time of the request, the source of the access to our website (e.g., the website or URL (link) that referred you to our website), and the version of your browser and operating system.
Our provider collects and stores server logs to ensure IT network security. This includes analyzing the log files to help identify and prevent unauthorized access to our network, distribution of malicious code, predicting DDOS and other cyber-attacks by detecting unusual or suspicious activity.
If we are not investigating suspicious or potential criminal activity, we will not make or allow our provider to make any attempt to identify you based on information collected through server logs.
By accessing or using any part/function of our website, you agree to accept and abide by the terms, conditions and policies stated and/or available via hyperlink and acknowledge that you are of legal age according to applicable national law. If you do not accept the terms, conditions and policies set out in this documentation, then you should not continue to use our website.
Intellectual Property Rights
The content of the Klass Wagen Websites: images, text, web graphics, scripts, software, design rights, model rights, patents, trademarks, constitute the entire property of Klass Wagen and are protected by copyright and related rights laws and by intellectual and industrial property laws. The use without the consent of Klass Wagen of any of the elements listed above is punishable under the laws in force.
Klass Wagen may provide the user/customer with the right to use in a described form certain content of the website by means of an agreement. This agreement applies strictly to the defined content(s), for a period of time set out in the agreement and only to the person(s) permitted to use such content(s), and may not use any other content of the Klass Wagen Websites.
The use on the Klass Wagen Websites of any trademarked name does not constitute advertising for that company. Klass Wagen assumes no responsibility and cannot be blamed for any damages arising from the use of the contents of the website.
Please report any possible copyright infringement noticed on the website to [email protected].
Where we collect data about you
In general, the personal data we collect is provided by you via email, telephone, through the Klass Wagen website (by processing bookings, adding a review, etc.), social media networks, or during meetings we may have with you.
When we have an active recruitment process, we will collect data about you from specialized online platforms (eJobs, LinkedIn, etc.) or from the CVs you send us directly, or through open recruitment projects in specialized online platforms.
Also, when you interact with us on social media (i.e. like, share, comment, review, etc.), we will inevitably have access to information about you, in particular data that you have made public on your social media profile.
How we use personal data
Please find below the purposes for which we process your personal data, who has access to your data, and how we store it.
1. We process data about you when you interact with us using the contact details available on our website, contact form or our social media accounts
When you interact with us using the contact details available on the Klass Wagen website/Contact Form or interact with us via social media messenger functions (e.g. feedback, complaints, enquiries, etc.), we will use your contact details and the data you provide to us to provide you with information and offers regarding our services and products, to resolve the situation reported, to assess our customers' satisfaction and to continuously improve the services we offer.
|
Personal data |
First name, last name, phone number, email address, Internet Protocol (IP), cookie ID, data you have made public on your social media profile and any other data you voluntarily submit to us. |
|
Lawfulness of processing |
● We process your data to take steps at your request prior to the conclusion of a contract (Art. 6/1/b of Regulation (EU) 2016/679) ● In pursuit of our legitimate interest to respond to any queries, complaints or recommendations you send us and to improve our services and the experience we provide to our customers (Art. 6/1/f of Regulation (EU) 2016/679). |
|
With whom we may share your data |
● Providers of IT services for our company (hosting and web hosting), or providers to whom we outsource certain technical support services for our website, cybersecurity monitoring and intrusion detection, or providers of customer relationship management systems ● Email provider: Microsoft - Office 365 ● Social media platforms: Facebook, Instagram, LinkedIn, Youtube. ● Regulators and other state authorities if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all reasonable steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
We will store your data in our communications database for a maximum of 12 months after the last interaction. Data transmitted via social media networks will be stored by them according to their own policies. |
|
Where the data is stored |
● Data recorded via Klass Wagen will be stored on the servers of web hosting providers who provide data storage. ● Data transmitted via email will be stored on Microsoft servers - Office 365 (Austria) and AWS (Amazon). ● Data transmitted via social media networks will be stored by them according to their own policies. ● Data we download locally will be stored on our secure, local and cloud servers. |
2. We process data about you when you interact with us using our contact forms and when you send us a data access request
When you interact with us using the contact form we will use your contact data and the data you provide to us in the course of communicating with you to deal with your subscription request, data update, data verification or your wish to be forgotten. To exercise your legal rights under the GDPR, we must first identify you and process your data.
|
Personal data |
First name, last name, telephone number, e-mail address, address, date of birth, relationship to the data subject if the application is completed on behalf of another person, other information you voluntarily submit to us. |
|
Lawfulness of processing |
● We process your data in order to comply with our legal obligations under GDPR (Art. 6/1/c of Regulation (EU) 2016/679). |
|
With whom we may share your data |
● IT service providers for our company (hosting and web hosting), or vendors to whom we outsource certain technical support services for our website, cybersecurity monitoring and intrusion detection, or customer relationship management system providers ● Email provider: Microsoft - Office 365 ● Regulators and other state authorities if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
We will store your data in our communications database for a maximum of 12 months after your last interaction. |
|
Where the data is stored |
● Data recorded through the Klass Wagen website will be stored on the servers of the web hosting providers who provide the data storage. ● Data transmitted via email will be stored Microsoft - Office 365 (Austria) and AWS (Amazon). ● Data we download locally will be stored on our secure, local and cloud servers. |
3. We process data about you when you react to content on social media or share information on the website
You can find us on Facebook, Instagram, YouTube, LinkedIn. Whenever you interact with us through our social media accounts (e.g. comments, likes, reviews, shares, etc.) we will have access to your publicly available data on your profile.
|
Personal data |
Your name, photograph, any publicly accessible information from your social media profile, or voluntarily communicated by you. |
|
Lawfulness of processing |
● We process your personal data in order to respond to your request before entering into a contract (Art. 6/1/b of Regulation (EU) 2016/679), ● Pursuing our legitimate interest (Art. 6/1/f of Regulation (EU) 2016/679) to respond to any questions, suggestions or complaints you may submit and to improve our services and the experience we provide to our customers, and in addition, pursuing our legitimate interest to keep you informed of news Ascensos publishes that may be of interest to you. |
|
With whom we may share your data |
● IT service providers for our company (hosting and web hosting), or vendors to whom we outsource certain technical support services for our website, cybersecurity monitoring and intrusion detection, or customer relationship management system providers. ● Social media platforms: Facebook, Instagram, YouTube, LinkedIn. ● Regulators and other state authorities if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all reasonable steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
Data shared with social media platforms will be stored by them in accordance with their own policies. |
|
Where is the data stored |
● Data shared with social media platforms will be stored by them in accordance with their own policies, located in the European Union or the USA. ● Data we download locally will be stored on our secure, local and cloud servers. |
4. We process your data for commercial and marketing communications
We may send you information about the services we offer if you have requested this information or if you are already our customer and this information may be of particular interest to you.
|
Personal data |
Name, surname, e-mail address, telephone. |
|
Lawfulness of processing |
● We process your data in order to take steps at the request of the data subject prior to the conclusion of a contract (Art. 6/1/b of Regulation (EU) 2016/679). ● We process data on the basis of your consent (Art. 6/1/a of Regulation (EU) 2016/679), for marketing communications. ● We will process data in the legitimate interest if you are already our customer and we consider that the information could be of great interest to you (Art. 6/1/f of Regulation (EU) 2016/679). |
|
With whom we may share your data |
● IT service providers for our company (hosting and web hosting), or vendors to whom we outsource certain technical support services for our website, cybersecurity monitoring and intrusion detection, or customer relationship management system providers. ● Regulatory and other state authorities, if required by legal or statutory requirements. We will only disclose your personal data to the extent strictly necessary to achieve the purpose for which we are collecting it. We have taken all necessary steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
● In the case of processing carried out for legitimate interest, when you are already our customer, we will process your data for the duration of the contract and will continue to do so for a further 5 years after termination of the contract. ● Commercial communications (e.g. requests for quotations, negotiations, etc.) that have not resulted in the conclusion of a contract will be retained for 12 months from the date of the last interaction. |
|
Where is the data stored |
● Data registered through the Klass Wagen website will be stored on the servers of the web hosting providers who provide the data storage. ● Data that we download locally will be stored on AWS (Amazon) Servers). |
5. We process your data when you place a reservation on the Klass Wagen website
We use this information about you for all activities relating to the processing, amendment and cancellation (if necessary) of bookings on www.klasswagen.com/ro/.
|
Personal data |
Full name, surname, date of birth, passport, ID card, driving license, data of other tourists for whom the reservation is made, including data of minors - if applicable, e-mail, telephone, billing address or information required for payments (card or bank accounts). |
|
Lawfulness of processing |
We process your data for the conclusion and performance of a contract (Art. 6/1/b of Regulation (EU) 2016/679). |
|
With whom we may share your data |
● IT service providers for our company (hosting and web hosting), or providers to whom we outsource certain technical support services for our website, cybersecurity monitoring and intrusion detection, or providers of customer relationship management systems. ● Third party payment processors: PayU and Shift4. ● Regulators and other state authorities if required by legal or statutory requirements. We will only disclose your personal data to the extent that it is strictly necessary to achieve the intended purpose. We have taken all reasonable steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
● The data recorded in your account on the www.klasswagen.com/ro platform will remain accessible until you decide to close your account. ● The data recorded when making a reservation without having an account registered in the platform will be kept for a maximum of 5 years from the moment of closing the reservation. ● The data recorded in the financial-accounting documents (e.g. invoices, card payments, reimbursement payments, etc.) will be kept in the archive for 5 years, starting from the end of the financial year during which they were drawn up, in accordance with the periods of the Accounting Law no. 82/1991 and Order 2634/2015. |
|
Where is the data stored |
● Data registered via Klasswagen.com/ro will be stored on the servers of the web hosting providers, who provide data storage. ● Data shared with other platforms (PayU and Shift4) will be stored by them according to their own policies, located in the European Union. ● Data that we download locally will be stored on AWS (Amazon) Servers). |
6. We collect information about you when you place a reservation by phone or physically with one of Klass Wagen's agencies
We use this information about you for all activities related to processing, modifying and canceling (if necessary) reservations placed by telephone or physically at one of the Klass Wagen agencies.
|
Personal data |
Full name, surname, date of birth, passport, ID card, driving license, data of other tourists for whom the reservation is made, including data of minors - if applicable, e-mail, telephone, billing address or information required for payments (card or bank accounts). |
|
Lawfulness of processing |
We process your data for the conclusion and performance of a contract (Art. 6/1/b of Regulation (EU) 2016/679). |
|
With whom we may share your data |
● IT service providers for our company (hosting and web hosting), or providers to whom we outsource certain technical support services for our website, cybersecurity monitoring and intrusion detection, or providers of customer relationship management systems. ● Third party payment processors PayU and Shift4. ● Telephone central application: Zoiper. ● Regulators and other state authorities if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
● Data recorded at the time of making a telephone or physical reservation will be kept for a maximum of 5 years from the time the reservation is finalized. ● Data recorded in financial-accounting documents (e.g. invoices, card payments, reimbursement payments, etc.) will be kept in the archive for 5 years, starting from the end of the financial year during which they were drawn up, in accordance with the periods of the Accounting Law No. 82/1991 and Order 2634/2015. |
|
Where is the data stored |
● Data recorded through klasswagen.com/ro will be stored on the servers of the web hosting providers, which provide data storage. ● Data shared with other platforms will be stored by them in accordance with their own policies, located in the European Union. ● Data we download locally will be stored on Azure (Microsoft) Servers). |
7. We process your data in order to facilitate an easy and pleasant navigation on the Klass Wagen website
When you visit our website, we collect data about you through online identifiers (cookies and IP), which are stored in log files.
We use this information so that we can design our website to better tailor it to the needs of our users. We may also use your address. IP address to help diagnose possible malfunctions of our servers and to administer our website, maintain the security of our website and prevent fraud, authorize use of the services available on our website, analyze trends, track visitors' movements, and gather broad demographic information to help identify visitors' preferences.
You can find more information about cookies, as well as how to delete cookies and disable tracking by visiting the Cookie Policy available on our website.
|
Personal data |
Internet Protocol (IP), general computer location, device (county level), website viewing history, timestamp, request/action, browser type and version, and operating system. Other information that is generated while using our website, including when, how often and under what circumstances you use it. |
|
Lawfulness of processing |
● We use cookies to make your browsing on our website easy and pleasant, in our legitimate interest (Art. 6/1/f of Regulation (EU) 2016/679). ● Non-essential cookies are not used without your consent (Art. 6/1/a of Regulation (EU) 2016/679). |
|
With whom we may share your data |
● IT service providers for our company (hosting and web hosting), or vendors to whom we outsource certain technical support services for our website, cybersecurity monitoring and intrusion detection, or customer relationship management system providers. ● Third parties that place cookies: Google, Hotjar, Facebook, AddThis. ● Regulators and other state authorities if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
There are session cookies and persistent cookies. While session cookies are deleted when you close your browser, persistent cookies may have a different lifetime, depending on the purpose they fulfill. More information about the lifetime of the cookies we use can be found in our Cookie Policy. |
|
Where is the data stored |
● Data collected through our own cookies will be stored on AWS (Amazon) servers). ● Data collected through third parties who place cookies will be stored on their servers located in the European Union, the UK or the USA. |
8. We process data about you when you make a request to schedule a discussion with us
There may also be times when we will contact you by phone, email or SMS in order to respond to your queries and requests, to carry out the rental agreements you have entered into or to finalize a booking you have started and not completed.
|
Personal data |
Full name, surname, date of birth, passport, identity card, driving license, details of other tourists for whom the reservation is made, including details of minors - if applicable, e-mail, telephone, billing address or payment information (card or bank account details). |
|
Lawfulness of processing |
● We process your data in order to respond to your request before concluding a contract (Art. 6/1/b of Regulation (EU) 2016/679), ● Pursuing our legitimate interest in responding to any questions or requests you send us in order to improve the services and experience we provide to our customers (Art. 6/1/f of Regulation (EU) 2016/679). |
|
With whom we may share your data |
● IT service providers for our company (hosting and data storage), vendors to whom we outsource certain technical support services for our website, or customer relationship management system providers. ● Regulators and other state authorities if required by legal or statutory requirements. We will only disclose your personal data to the extent strictly necessary to achieve the purpose for which we are collecting it. We have taken all necessary steps to ensure that external service providers who have access to your data have also implemented physical, electronic and managerial security measures to protect your data. |
|
How long we will store the data |
We will store your data in our communications database for a maximum of 12 months after your last interaction. |
|
Where is the data stored |
● Data recorded through our website will be stored on Azure (Microsoft) servers). ● Data transmitted by email will be stored on Azure (Microsoft) servers). ● Data we download locally will be stored on Azure (Microsoft) servers). |
Is the data collected and processed by Klass Wagen secure?
Klass Wagen pays great attention to the protection of your data and applies appropriate technical and organizational measures to ensure the protection of the processed personal data appropriate to the risks and protected data categories, in particular, it protects the data against its sharing with unauthorized persons, its acquisition by an unauthorized person, its processing in violation of applicable laws as well as against data change, loss, damage or destruction.
However, remember that unfortunately no data transmission is guaranteed to be 100% secure.
If you suspect a breach of your data privacy, please contact us immediately at: [email protected].
Important: After the data retention period has expired, your data will be deleted. If we consider that this data could help us improve the quality of our products or services, we will continue to use this data only after irreversible anonymization of this data.
LINKS TO OTHER WEBSITES
Klass Wagen websites may contain links to other websites that are not owned or controlled by Klass Wagen.
Please note that we are not responsible for the privacy practices of other websites or third parties. We encourage you to be aware when you leave our website and to read the privacy policies of each and every website that may collect personal information.
DATA PROCESSING OF MINORS
We process data of persons under the age of 18, only with the consent of their legal representative, for the proper performance of the services contracted by the minors' legal representatives.
We may receive information about persons under the age of 18 through fraud or deception of a third party. If we are notified of this, as soon as we verify the information, when required by law, we will immediately obtain the consent of the legal representative to use the information or, if we are unable to obtain such consent, we will delete the information from our servers. If you wish to notify us of our receipt of information about persons under the age of 18, please do so by sending an e-mail to [email protected].
INTERNATIONAL TRANSFERS OF PERSONAL DATA
We use a number of third parties to provide us with services that are necessary to run our business or to help us run our business and who process your information for us on our behalf, namely:
● Telephone service providers
● Email service providers
● IT service providers
● Website developers
● Web hosting service provider(s)
● Marketing service providers
● E-mail marketing service provider
These partners operate both inside and outside the European Economic Area ("EEA").
List of international partners with whom we share data:
● Third parties that place cookies: Google, Facebook, Hotjar, AddThis
● Online platforms: Facebook, Instagram, TikTok, LinkedIn
Personal data may be stored and processed in any country where we engage service providers. We may transfer Personal Data we retain about you to recipients in countries other than the country in which the Personal Data was originally collected, including to the United States. These countries may have data protection rules that are different from those in your country. However, we will take steps to ensure that any such transfers comply with applicable data protection laws and that your personal data remains protected in accordance with the standards described in this Privacy Policy. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may have the right to access your personal data.
Where applicable law requires us to ensure that an international transfer of data is governed by a data transfer mechanism, we use one or more of the following mechanisms:
● EU standard contractual clauses with a data recipient outside the EEA or UK.
● Verification that the recipient has implemented binding corporate rules.
● We will also ensure that all our international partners have taken additional steps to provide adequate safeguards, enforceable rights and effective legal remedies. The role of these measures is to provide additional safeguards to data subjects that the transfer of data under standard contractual clauses or binding corporate rules provides a level of protection equivalent to that guaranteed within the European Union.
THE RIGHTS YOU ENJOY
As a data subject you have specific legal rights in relation to your personal data that we collect and process.Klass Wagen respects your rights and ensures that we take your interests into account.
● Withdrawal of consent: If the processing is carried out on the basis of your consent, you may withdraw your consent to the processing at any time.
● Correction of data: If you notice that we hold inaccurate personal data, you may at any time ask us to rectify your personal data. We make reasonable efforts to keep personal data - which is used on an ongoing basis and in our possession or control - accurate, complete, current and relevant, based on the latest information available to us.
● Restriction of Processing: If you are in one of the situations below, you may ask us to restrict the processing of your data:
● challenge the accuracy of personal data for the period during which we need to verify the accuracy,
● processing is unlawful and you request restriction of processing rather than erasure of personal data,
● we no longer need your personal data, but you request them for the establishment, exercise or defense of a right, or
● you object to processing during the period in which we verify that our legitimate grounds override your rights.
● Access to your data: You may ask us for information about the personal data we hold about you, including information about what categories of data, what it is used for, where we collected it from, whether it is not collected directly from you, and to whom it has been disclosed, if applicable. You can obtain a copy from us, free of charge, containing the personal data we hold about you. We reserve the right to charge a reasonable fee for abusive requests.
● Right to portability: Upon request, we will transfer personal data to another controller, where technically possible, provided that the processing is necessary for the performance of a contract. Rather than receiving a copy of your personal data, you may request that we transfer your data directly to another controller specified by you.
● Right of deletion: you can obtain from us the deletion of your personal data if:
● your data is no longer necessary for us in relation to the purposes for which it was processed;
● you object to further processing of your personal data (see Right to object below);
● your personal data has been processed unlawfully;
● withdraw your consent on the basis of which the processing is taking place.
Unless the processing is necessary:
● in order to comply with a legal obligation that requires us to process that data;
● in particular for legal requirements concerning data retention periods;
● for the establishment, exercise or defense of legal claims.
● Right to object: You may object to the processing of your personal data at any time due to your particular situation. In this case, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds and compelling interest for the processing or for the establishment, exercise or defense of a right. When you object to the processing, please indicate whether you wish to have your personal data erased or the processing of such data restricted.
● The right to lodge a complaint: In case of an alleged breach of the privacy legislation in force, you can lodge a complaint with the data protection supervisory authority:
○ The National Supervisory Authority for Personal Data Processing by filling out the online form available at: ANSPDCP Complaints
Please note!
Time: We will try to resolve your request within 30 days. However, the period may be extended for reasons relating to the specific legal right or complexity of the request.
Restricting access: In certain situations, we may not be able to grant you access to all or part of your personal data due to restrictions provided by law. If we refuse your request for access, we will inform you of the reason for the refusal.
Impossibility of identification: In some cases, we may not be able to identify the personal data due to the lack of identifiers provided in the request you submit to us. In such cases, if you do not provide additional identifying information, we will not be able to fulfill your request to exercise your legal rights as described in this section.
Exercising your rights.
To exercise your legal rights, please contact our Data Protection Officer in writing at [email protected].
This version has been updated on September 6th, 2024.
