Privacy Policy
Version 1.0 · 9 September 2026
1. Data controller
The controller of personal data is GM Rent&Diggers s.r.o., Company ID (IČO): 23741392, registered office at Plovární 478/1, Jižní Předměstí, 301 00 Pilsen.
2. What data we collect
We process the following categories of personal data:
- Identification data: first name, surname, date of birth
- Contact details: email, phone, address
- Driving licence data: licence number, date of issue, validity
- ID document data: the type and number of your national ID card or passport (we do not copy or scan the documents themselves)
- Billing details: bank details for paying the deposit and balance (payment is made by bank transfer or QR payment; we do not process payment card numbers)
- Booking data: rental dates, collection location, chosen vehicle
- Second driver's data (if named in the contract): first name, surname, date of birth, driving licence number – we obtain this data from the lessee, not directly from the second driver (see point 3.1)
Providing the data listed above is a contractual requirement necessary to conclude and perform the rental contract; without it the contract cannot be concluded. We do not carry out any automated decision-making or profiling when processing your data.
3. Purposes and legal basis of processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Concluding and performing the rental contract, recording bookings | Performance of a contract (Art. 6(1)(b) GDPR) | for the duration of the contract plus the limitation period |
| Accounting, taxes, archiving of records | Compliance with a legal obligation (Art. 6(1)(c) GDPR) | 10 years from the end of the tax period |
| Protecting the lessor's property, debt recovery and recording claim events (deposit, vehicle damage, late return) | Legitimate interest of the controller (Art. 6(1)(f) GDPR) | 4 years (limitation period) |
| Sending marketing communications | Consent (Art. 6(1)(a) GDPR), may be withdrawn at any time | until consent is withdrawn |
Providing the data necessary to conclude the contract is a contractual requirement; failing to provide it means the contract cannot be concluded. No automated decision-making or profiling takes place.
3.1 Second driver's data
We obtain the second driver's data named in the contract from the lessee, not directly from the person concerned. The lessee undertakes to make the second driver aware of the content of this notice. On request, we will also provide this information directly to the second driver (Art. 14 GDPR) using the contact details given in point 10.
4. Retention period
We retain personal data for as long as necessary to fulfil the purposes of processing, for no longer than 10 years from the end of the contractual relationship for the purposes of fulfilling legal obligations (see the table in point 3).
We retain transcripts of communication with the website chatbot for 12 months to handle enquiries and improve the service.
5. Data transfers (processors and recipients)
To run the website and provide our services we use the following processors and recipients of personal data:
- Lovable and Supabase – website and database hosting
- Resend – sending emails (booking confirmations, replies to enquiries)
- Lovable AI Gateway and Google Gemini – operation of the website chatbot; this may involve part of the communication being transferred outside the European Union. Any such transfer takes place under the European Commission's standard contractual clauses; we will provide a copy of these safeguards on request at honza@frantisekdron.cz
- Insurance companies (for vehicle insurance purposes)
- Public authorities (where required by law)
6. Your rights
In connection with the processing of personal data, you have the right to:
- Access your personal data
- Have inaccurate data corrected
- Have your data erased (the "right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw your consent to processing
- Lodge a complaint with the supervisory authority (ÚOOÚ)
7. Data security
We have adopted appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Data is encrypted and stored on secure servers.
8. Cookies
Our website uses cookies to ensure functionality and improve the user experience. For more information, see our Cookie Policy.
9. Contact and out-of-court dispute resolution
If you have any questions about the processing of personal data, please contact us at:
- Email: honza@frantisekdron.cz
- Phone: +420 723 707 958
- Address: Plovární 478/1, 301 00 Pilsen
In the case of a consumer dispute, the consumer has the right to its out-of-court resolution through the Czech Trade Inspection Authority (ČOI), website: www.coi.cz.