Thank you for your request

City Auto Rent Sàrl, located at Route de Pré-Bois 20, 1215 Geneva, is the operator of this website, accessible at www.cityautorent.com.

City Auto Rent Sàrl is responsible for collecting, processing, and using your data and must ensure it complies with Swiss law and, where applicable, European law.

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with current legal provisions and this data protection statement. This document informs you about the data collected on this website and how it is used. You will also learn how to verify the accuracy of this information and how to request that we delete your data.

In cooperation with our hosting providers, we strive to protect databases from unauthorized access, loss, misuse, or falsification. Please note that data transmission over the Internet (e.g., email communication) can have security vulnerabilities. Complete protection of data against third-party access is not possible.

By using this website, you agree to the collection, processing, and use of data as described here. This website can generally be visited without registration. Data such as pages visited or file names accessed, date, and time are stored on the server for statistical purposes without these data being directly linked to your person. Personal data, including name, address, or email address, are collected voluntarily wherever possible. This data will not be transmitted to third parties without your consent.

1 SCOPE

Personal data is all information relating to an identified or identifiable person. A data subject is a person about whom personal data are processed. Processing includes any handling of personal data, regardless of the means and procedures used, particularly storage, communication, acquisition, deletion, retention, alteration, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, we process personal data according to the following legal principles in relation to Art. 6 para. 1 GDPR, insofar as the EU General Data Protection Regulation (EU-GDPR) is applicable:

• lit. a) the data subject has consented to the processing of their personal data.

• lit. b) processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at their request.

• lit. c) processing is necessary for compliance with a legal obligation to which we are subject, if applicable, according to the law of the European Union or the law of a state in which the GDPR is applicable in part or in whole.

• lit. d) processing is necessary to protect the vital interests of the data subject or another natural person.

• lit. f) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party unless the interests or fundamental rights and freedoms of the data subject, which require protection of personal data, prevail. Legitimate interests include our commercial interest in being able to operate our website, provide our services, information security, enforcement of our own legal claims, and compliance with Swiss law.

We process personal data for as long as necessary for the respective purpose or purposes. In the case of long-term storage obligations due to legal or other obligations to which we are subject, we will limit processing accordingly.

2 COLLECTION, USE, AND PROCESSING OF PERSONAL DATA

2.1 When you visit our website

When you visit this website, certain data are automatically stored on our servers or the servers of the services and products we use and/or have installed, for system administration purposes, for statistical or backup purposes, or for tracking purposes. This data may include the following:

• the name of your internet service provider

• your IP address (in certain circumstances)

• the version of your browser

• the operating system of the computer used to access this website

• the date

• the time

• the website from which you visited this site

• the search terms you used to find our website

These data may, under certain circumstances, allow conclusions to be drawn about a particular visitor. However, personal data will not be exploited in this context.

2.2 Data transmission to third parties We will only transmit your data if we are obliged to do so by law or by an official or judicial decision. Your personal data will not be transmitted to third parties for purposes other than those mentioned in this document.

2.3 Cookies

We usually use cookies on our website. These are small text files that are stored by your web browser and store certain settings and data for exchange with our web server. This technology allows us to recognize individual users as returning visitors. Generally, the use of cookies is intended to improve our services, make them more effective and secure. A cookie does not always mean that we can identify you.

You can configure your browser settings so that no cookies are stored on your computer. The complete deactivation of cookies may mean that you cannot use all the features of our website.

By continuing to use our website and/or accepting this data protection statement, you consent to our placement of cookies and therefore to the collection, storage, and use of personal usage data, even after the end of the browsing session. You can revoke this consent at any time by activating the default browser setting to refuse third-party cookies.

2.4 Newsletter

If you subscribe to our newsletter, you agree that we use the data you provide, such as your first and last names, postal address, email address, and all data voluntarily entered in your user profile, to send you the newsletter. You can revoke this consent at any time for the future by unsubscribing from the newsletter.

2.5 Analytical tools: Google Analytics

This website may use Google Analytics, a web analytics service provided by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, which are text files placed on your web browser, to help the website analyze how users use the site (see Cookies above). The information generated by the cookies (browser type/version, operating system used, referring URL of the previously visited website, IP address, time of server request) about your use of this website is generally transferred to a Google server in the United States and stored there. However, if IP anonymization is activated on our website, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transferred to a Google server in the United States and shortened there. Google will use this information for the purpose of evaluating your use of the site, compiling reports on website activity for the website operator, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

You can refuse the use of cookies by selecting the appropriate settings on your browser, but please note that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Further information on the web analytics service used can be found on the Google Analytics website. Instructions on how to prevent the processing of your data by the web analytics service can be found at https://tools.google.com/dlpage/gaoptout? hl=en.

3 YOUR RIGHTS

You can request information at any time about the data we have stored about you. To do this, please send an information request by email to the address below. The request must be accompanied by proof of identity sent to the same address.

You have the possibility to request the deletion or correction of your data at any time. Of course, you also have the right to revoke your consent to the use or processing of personal data for the future at any time.

The data recorded will be deleted by us when they are no longer necessary for the stated purpose. Regarding data deletion, it should be noted that we are subject to certain legal obligations that stipulate that certain data must be retained. We must comply with this obligation. If you wish to delete data subject to the legal obligation to retain, the data will be blocked in our system and used only for fulfilling the legal obligation to retain data. After the expiration of the retention period, your request for deletion will be fulfilled.

If your personal data is processed on the basis of legitimate interests (see above Scope), you have the right to object to the processing of your personal data for reasons arising from your particular situation or for direct marketing purposes. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

In addition, you also have the possibility to receive the personal data you have provided to us or to request that they be transferred to another responsible person. Please write to us for this purpose by email at contact@cityautorent.com. In the event of disproportionate costs, we reserve the right to require that you provide us with proof of identity and that you pay the actual costs in advance.

4 CONTACT

Here are our contact details:

City Auto Rent Sàrl, 20 Route de Pré-Bois, 1215 Genève

contact@cityautorent.com

www.cityautorent.com

5 CHANGES TO THIS DATA PROTECTION STATEMENT

We may change or modify this data protection statement at any time. The current statement can be consulted at www.cityautorent.com/mentions-legales.

Genève, le 30 novembre 2023