Privacy policy

Who we are

Arenda Car Rentals provides car hire services in Paphos, Cyprus. For any question about this policy or your personal data, you can reach us at info@arendacyprus.com, by phone at +357 97 81 82 85, or by post at Tombs of the Kings Ave 62, Paphos 8046, Cyprus.

For the purposes of the GDPR, Arenda Car Rentals is the data controller of the personal data described in this policy.

What information we collect

We only collect the information we need to provide our services. Depending on how you interact with us, this may include:

• Contact details you provide through our contact form or by email, phone, or messaging apps: your email address, phone number, country code, and the content of your message or rental preferences.
• Booking information you provide when you reserve a vehicle through our booking system: your name, contact details, pick-up and return dates and locations, chosen vehicle, and driving licence details required to complete a rental.
• Payment information when you pay for a booking. Card payments are processed directly by our payment providers (see "Payment processing" below); we do not store your full card number on our website.
• Technical and usage data collected automatically when you browse the site: IP address, browser type, device information, pages visited, and how you reached our site. This is collected through cookies and similar technologies (see "Cookies and analytics" below).
• Location data only if you choose to drop a pin on the map to request a delivery address. We use this solely to arrange your car delivery.

How and why we use your information

We process your personal data for the following purposes and on the following legal bases under the GDPR:

• To respond to your enquiries and provide quotes — based on your request and our legitimate interest in answering you.
• To manage your booking and rental — necessary for the performance of our rental contract with you.
• To process payments — necessary for the performance of the contract and to comply with accounting obligations.
• To comply with legal obligations, including tax, accounting, and any requirements relating to vehicle rental.
• To improve our website and understand how it is used — based on your consent for analytics cookies, where required.

Cookies and analytics

Our website uses cookies and similar technologies. Some are strictly necessary for the site to work (for example, caching and security cookies set by our hosting and performance tools). Others are optional and are only used with your consent.

We use Google Analytics and Google Tag Manager to understand how visitors use our site (for example, which pages are most visited) so we can improve it. These tools may set cookies and collect technical data such as your IP address and browsing behaviour. We may also use Google Ads to measure the effectiveness of our advertising.

When you first visit our site, you can choose which optional cookies to accept through our cookie banner. You can change or withdraw your choice at any time by clearing your cookies in your browser settings. Blocking optional cookies will not affect your ability to browse the site or make a booking.

Third-party services we rely on

To run our website and services, we use trusted third-party providers. When you use the related features, your data is shared with these providers only to the extent necessary, and each acts under its own privacy policy:

• Our booking system provider processes your reservation and rental details.
• Our contact form provider delivers the messages you send us through the website.
• Payment providers (PayPal and Stripe) securely process card and online payments.
• Google provides analytics, maps, and the display of our Google reviews on the site.
• Messaging providers (such as WhatsApp) if you choose to contact us through them.
• Our hosting and performance providers store and deliver the website.

Some of these providers may process data outside the European Economic Area. Where that happens, they are required to provide an adequate level of protection through approved safeguards such as Standard Contractual Clauses.

Payment processing

When you pay online, your card details are entered directly on the secure systems of our payment providers, PayPal and Stripe. We never see or store your full card number. These providers process your payment data as independent controllers under their own privacy policies.

How long we keep your data

We keep your personal data only for as long as necessary for the purposes described in this policy. Booking and payment records are kept for as long as required by Cyprus tax and accounting law. Enquiry messages are kept for as long as needed to deal with your request and a reasonable period afterwards. After that, your data is securely deleted or anonymised.

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Ask us to correct inaccurate or incomplete data;
• Ask us to delete your data, where there is no legal reason for us to keep it;
• Object to or restrict our processing of your data;
• Request a copy of your data in a portable format;
• Withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at info@arendacyprus.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus if you believe your data has been handled improperly.

How we protect your data

We use appropriate technical and organisational measures to keep your personal data secure, including secure (HTTPS) connections and access controls. While no online service can be guaranteed to be completely secure, we take reasonable steps to protect your information against loss, misuse, and unauthorised access.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The latest version will always be available on this page, with the date of the last update shown above.