Data Protection and security
Data controller and contact
For the purposes of the UK Data Protection Act 1998 (“DPA”), the data controller for personal data collected: (i) in respect of the website uk.drive-now.com; (ii) when you use our application; and (iii) in connection with the conclusion of our contract with you and your rental and use of vehicles from us, is DriveNow UK Limited, United House, 39-41 North Road, London N7 9DP (referred to below as "DriveNow"). You can contact DriveNow at any time with any queries regarding data protection. The best way is by e-mail to: firstname.lastname@example.org
When processing your personal data, DriveNow may enlist the services of DriveNow GmbH & Co. KG, Seidlstraße 26, 80335 Munich, Germany in some cases as a service provider, and in so doing it may disclose your personal data to DriveNow GmbH & Co. KG in accordance with the provisions of the DPA.
DriveNow GmbH & Co. KG and DriveNow may each also anonymise your personal data and use it (or provide it to third parties) in anonymous form for analytical and research purposes.
What constitutes personal data?
Personal data is information which can be related to you as an individual and from which you can be identified. Examples are your name, address, correspondence address, telephone number and e-mail address. For the purpose of checking your personal data with the Driver and Vehicle Licensing Agency (DVLA) (see below for further information), personal data will also include your date of birth, gender and driving licence number.
Non-personal data is information which does not identify you (either alone or in combination with other information), such as the number of users of a website.
Collection, processing and use of personal data by DriveNow
Personal data is collected via the website or our application if you make it available to us voluntarily, for example by registering for an account, completing forms, sending e-mails, and, most importantly of all, when booking a DriveNow vehicle.
We also receive personal data from third parties that we work with. In particular, we receive personal data from third parties who carry out identity verification and driver licence checks on our behalf in accordance with our General Terms and Conditions of Business. These third parties include:
(a) the DVLA (or the equivalent body if your driving licence is not a GB licence) for the purpose of checking your driving licence records (“Licence Check”);
(b) insurance companies;
(c)credit reference agencies; and
(d) other intermediaries offering identity verification services to DriveNow.
DriveNow may receive personal data about you from third parties who carry out checks of the full electoral roll on its behalf, in order to verify your identity. This check may leave a search footprint on your credit file which may be visible to lenders who undertake future credit checks on you. It should not affect your credit score.
DriveNow uses this personal data for the purposes of assessing whether the individual satisfies the requirements to use DriveNow’s services.
We also use your personal data for the purposes indicated at the time at which we collect (or the relevant third party collects) it, for performing any contracts that we enter into with you, or for purposes arising from your request (for instance, we may use personal data that you provide when making a reservation request in order to process your reservation preference).
In accordance with relevant legislation, we may create user profiles, using an alias which cannot be traced back to you personally, for advertising and marketing research purposes and to improve our Internet services.
DriveNow vehicles are fitted with telemetry technology which will collect data on the location, performance and operation of the vehicle, including driving behaviours during your rental period. This information will be used by DriveNow to maintain the vehicle, to investigate damage to or misuse of the vehicle, or to contact you in relation to your use of the vehicle. Forward facing dashboard cameras may also be fitted on certain vehicles. These cameras will only record images when the engine is turned on, and when damage to or misuse of the vehicle is detected.
Sharing of your personal data
We may use your personal data (and may send your personal data to third parties) to carry out periodic checks to ensure that you continue to satisfy all relevant requirements to use our services. We will only send your personal data to third parties: (i) in accordance with this policy or our General Terms and Conditions of Business, (ii) if expressly permitted by law (if, for example, it needs to be sent so that the service you requested can be provided), or (iii) if you have consented to this.
Where you have been the subject of a Licence Check, we may be asked to disclose your personal data by the DVLA or their agents as part of their audit or investigation process to ensure that you have consented to the licence check; but only to the extent necessary to comply with their request.
We may also share your personal data with our contractors, agents, professional advisers and service providers who provide services to us or on our behalf (Please note this does not apply to your DVLA data. We do not share DVLA data with any third parties other than those named in the consent declaration). Where we share your personal data with these parties we ensure that we have taken appropriate measures to ensure that your personal data is kept secure.
In certain circumstances, we may transfer some of your personal data to, and store your personal data at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us, one of our affiliates or one of our suppliers. Those staff may be engaged in, among other things, dealing with your rental of a vehicle, processing your payment details and providing support services. Where we transfer your personal data to a country outside the EEA, we do so in accordance with the DPA.
Data collected by DriveNow vehicles (through telemetry technology or dashboard cameras described above) will be stored by DriveNow and may be used both during or after your rental period. This data may be shared with certain third parties, such as DriveNow's insurance company and law enforcement bodies.
Please note that we do not transfer any of your personal data which we obtain from the DVLA as part of the Licence Check to any country outside the EEA.
We also use your e-mail address to offer you our own similar goods and services. You can object to having your e-mail address used in this way without incurring any costs other than the basic costs of transmission. The simplest way to do this is by clicking on the link at the bottom of our e-mail. However, you can also send your objection directly to email@example.com or send it by post to our address shown above.
Furthermore, please note that, in general, you can object to your personal data being used for advertising purposes, market research or opinion polling at any time. Objections should be sent to: DriveNow UK Limited, United House, 39-41 North Road, London N7 9DP , or by e-mail to: firstname.lastname@example.org.
Security and SSL technology
DriveNow has put in place technical and organisational measures to protect your personal data, particularly against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. These security measures are updated continuously in accordance with developments in technology. Personal data is encrypted before being transmitted between your computer and our server (using SSL, Secure Sockets Layer).
Retaining Personal Information
Personal information will not be kept any longer than is necessary to meet our legal and contractual obligations.
In the case of personal information collected for Licence Checks, we will retain the information sent to and received from the DVLA together with evidence of consent to the checks for a period of 7 years for audit purposes. Thereafter the information will be securely deleted from our systems.
We will retain personal information and documents (including electronic documents) containing personal information (i) to the extent that we are required to do so by law; (ii) if we believe that they may be relevant to any ongoing or prospective legal claim or proceedings; (iii) in order to exercise, establish or defend our legal rights and for the purposes of preventing fraud or other crimes.
What are cookies?
Cookies are small text files placed on your hard disk by a web server. Cookies contain information which can subsequently be read by a web server in the domain in which the cookie was distributed to you. Cookies cannot execute programs or put viruses on your computer. The cookies we use contain no personal information, nor are they combined with such data. There are two different types of cookie. Session cookies are deleted as soon as you end the session. Temporary and permanent cookies are stored on the data medium for a longer or unlimited period of time.
What data is stored in cookies?
No personal data is stored in the cookies used by DriveNow. To this extent, these cookies cannot be mapped to a particular person. When a cookie is activated it is allocated just an ID number. Personal data such as name, IP address, etc. are never mapped to this ID number. Cookie technology provides us only with information that is anonymised, for instance information about which pages of our website have been visited, etc.
Which cookies does DriveNow use?
What is on-site targeting?
In order to optimise the DriveNow website, we collect data from it using cookies. This data is used exclusively to conduct anonymous analysis of website usage and is never combined with the personal data held by us. We use information acquired from clickstream analysis to design our website as attractively as possible in order to meet customer requirements in the best possible way.
What is remarketing/retargeting?
We use what is known as remarketing/retargeting to make Internet services more relevant to Internet users. This technology allows us to target Internet users who have already shown an interest in our website with DriveNow advertisements on our partners’ websites. This advertising material is inserted in pages on our partners’ websites based on cookies and analysis of user behaviour on our website. Advertisements are inserted on a completely anonymous basis, and personal data is never stored, nor are user profiles combined with personal data.
Use of Google Analytics (this text is provided by Google Inc.) and the "adjust.io" analysis tool.
You can find more information on the subject at tools.google.com/dlpage/gaoptout and at https://support.google.com/analytics/answer/6004245?hl=en (general information about Google Analytics and data protection). Please note that this site has been extended with the "gat._anonymizeIp();" code in order to ensure that IP addresses are captured anonymously (known as IP masking).
This site and DriveNow's application also use, amongst other things, the "adjust.io" analysis tool from adeven GmbH ("adeven"). adeven utilises users’ IP and Mac addresses for analysis, but these are only used once anonymised. Hence, no information about an individual person can be inferred. The information captured via this tool is used only to analyse the function and use of the website/app, and as part of this, anonymised reports and graphs of the number of visits and number of pages accessed per user, etc. are created. The analysis is used exclusively for our own market research purposes and to optimise the website/app and design it to meet requirements. By using this site or DriveNow's application, you give your consent to the processing of the anonymised data thus collected in the manner and for the purposes stated above. You can object to data being collected and stored at any time with future effect by sending an e-mail to email@example.com.
How can I prevent cookies being stored?
You have the option to accept or reject cookies. The majority of browsers accept cookies automatically. It is usually possible to specify via the browser settings that cookies are to be rejected. If cookies are rejected, you may find that some website functions can no longer be used. If cookies are accepted, they can be deleted at a later date. In Internet Explorer 8, for example, cookies can be deleted under "Security" > "Delete browsing history". If cookies are deleted, all settings controlled by these cookies, including advertising preferences, are deleted, and it may not be possible to restore them.
Technologies used in our mobile application
DriveNow uses technology that allows us to track your experience and interaction with our application. These technologies do not store any personal data about you, and provide only anonymised information.
Data information, correction and deletion
Under "Customer data" in the customer area of the DriveNow website, we show you the most important data you have stored on our site. You can have a look at this data yourself and correct it as necessary.
Please send any other requests concerning information, corrections or deletions to firstname.lastname@example.org or by post to the data protection officer at DriveNow UK Limited, United House, 39-41 North Road, London N7 9DP giving your name and contact address. Under the UK Data Protection Act 1998, you have the right to access any personal data that we hold relating to you. We reserve the right to charge a fee of £ 10 to cover costs incurred by us in providing you with the personal data.
Please note that your right to have data deleted may be restricted by statutory retention obligations which we must observe. In addition, courts, law enforcement agencies and other statutory bodies may be legally empowered to access data or request information.
Use of Google Maps
Social plugins (e.g. the "Like" button) from the Facebook social network operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") are integrated into this website. Whenever you interact with the plugins, e.g. by clicking on the "Like" button, as a registered Facebook user, you can automatically leave a note in your Facebook profile to inform your network that you like the content. In this respect, our website allows regular exchange of data with Facebook. Please be aware that exchange of data and connection takes place as soon as our website is accessed, and is not dependent on the activation of social plugins/"Like" buttons or logging into Facebook. If you do not want Facebook to be able to create a personal movement profile of you, then please log out of Facebook. Just closing the Facebook page is not enough to prevent this. You can find details about the purpose and scope of data collection and further processing and use of data by Facebook, as well as your associated rights and settings to protect your privacy, at: http://www.facebook.com/policy.php.
If a Facebook Connect button has been placed on this website, you can log in to our website with your Facebook user data. Furthermore, information about your activity on our website can be added to your Facebook profile automatically via Facebook Connect. As such, when the button is activated, you are provided with the option to give both your express consent to the access of your Facebook user data and your consent to the publication of information and activity in your Facebook profile. Further data is utilised (e.g. initiating contact via your e-mail address) only if there is prior express consent to do so. Please be aware that, via Facebook Connect, Facebook receives information about the application and website, including which activities you carry out. So that the process of establishing connections can be customised, there is a possibility that Facebook might receive a limited amount of information in some cases before authorisation from the application or website. You can find details about the purpose and scope of data collection and further processing and use of data by Facebook, as well as your associated rights and settings to protect your privacy, at: http://www.facebook.com/policy.php
Facebook Custom Audience
Within our website we use “Facebook pixels” of Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This enables us to keep track of the behaviour of users after they have seen or clicked on a Facebook ad. This procedure is intended to evaluate the effectiveness of the Facebook ad for statistical and market research purposes and may contribute to optimising advertising campaigns.
We collect the data anonymously so it gives us no indication of the identity of the users. However, the data is stored and processed by Facebook so a link to the respective user profile is possible and Facebook may use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. You can allow Facebook and its partners to run ads on and outside Facebook. Moreover, a cookie can be stored on your computer for this purpose.
Twitter functions are integrated into our site. These functions are provided by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "retweet"” function, the websites you visit are linked to your Twitter account and made known to other users. At the same time, data is also transmitted to Twitter.
Please note that, as provider of the site, we receive no information about the content of the data transmitted or how Twitter uses it. You can find further information in Twitter’s data protection policy:
You can amend your privacy settings on Twitter in the service’s account settings.
Our site uses the "+1" button from the Google+ social network operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
If you access our website, your browser creates a direct connection to Google’s servers. The +1 button content is transmitted directly by Google to your browser and from there it is integrated into the website. We therefore have no influence over the volume of data that Google collects via the button. According to Google, no personal data is collected unless the button is clicked. Such data, including the IP address, is collected and processed only for members who are logged in.
You can find details about the purpose and scope of data collection and further processing and use of data by Google, as well as your associated rights and settings to protect your privacy, from the Google data protection information for the "+1" button at: https://developers.google.com/+/web/buttons-policy
If you are a member of Google+ and do not want Google to collect data about you via our website or connect to your membership data stored on Google, you need to log out of Google+ before visiting our website.
Plugins from the social network Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA are integrated into our website. You can recognise the Pinterest plugin on our site by the "Pin It" button.
If you click on the "Pin It" button while you are logged into your Pinterest account, you can link the content of our web pages to your Pinterest profile. This allows Pinterest to relate the visit to our web pages to your user account. Please note that, as provider of the web pages, we receive no information about the content of the data transmitted or how Pinterest uses it. For further information about Pinterest’s data protection policy, see https://about.pinterest.<wbr />com/en-gb/terms-service-0.
Content of the declarations of consent provided
In addition, if you choose to pay using your debit card, you agree to have your personal data sent to relevant third parties for identity and credit checking. In this case, your consent reads as follows: "I agree to the data (including my personal data) required for payment processing and identity and credit checking being sent to DriveNow UK Limited’s selected third party payment provider”.
You can, of course, withdraw your consent at any time by sending a declaration to email@example.com or by post to the data protection officer at DriveNow UK Limited, United House, 39-41 North Road, London N7 9DP .