Privacy Policy
This Privacy Policy describes how we collect, use, store and protect the personal data of users of our website, including during the online booking process and when subscribing to our newsletter.
1. Data Controller
The data controller is
Epi – Aluguer de Automóveis Sem Condutor, Lda.
Rua Diogo Cão, S/N
8900-440 Monte Gordo
Algarve – Portugal
Phone: (+351) 281 542 131
E-mail: info@epirentacar.com
2. Personal Data Collected
Epi Rent a Car may collect and process the following personal data via its website:
- First name and surname
- Email address
- Telephone number
- Personal details required for the booking (e.g. country of residence, driver’s age)
- Driving licence details, where required for the conclusion of the contract
- Data provided via contact forms
- Information required to make online bookings
- Data provided for newsletter subscription
- IP address, approximate location data, device type, browser and browsing data
Payment details are processed by certified third-party providers and are not stored directly by Epi Rent a Car.
3. Purposes of Data Processing
The personal data collected is processed for the following purposes:
- Management of contact and information requests
- Processing and management of online vehicle bookings
- Execution of contracts for the hire of vehicles without a driver
- Customer relationship management and customer support
- Sending communications relating to bookings and services booked
- Sending newsletters and marketing communications, where express consent has been given
- Compliance with legal and regulatory obligations
- Improving the browsing experience and website performance
4. Legal basis for processing
Epi Rent a Car’s processing of personal data is based on the following legal grounds:
- Performance of a contract or pre-contractual steps
- Consent of the data subject
- Compliance with legal obligations
- The company’s legitimate interests, in particular to improve services and website security
5. Newsletter and Marketing Communications
Subscription to the Epi Rent a Car newsletter is optional and requires the user’s express consent.
You may withdraw your consent and unsubscribe at any time by clicking the link provided in each communication or by contacting us directly at the addresses listed in this policy.
6. Data Retention
Personal data is retained only for as long as is necessary to:
- Performance of the tenancy agreement
- Compliance with legal, tax and accounting obligations (in particular for the applicable statutory period, up to 10 years)
- Management of commercial communications, provided consent remains in place
Once these periods have expired, the data will be deleted or anonymised.
7. Sharing Data with Third Parties
Epi Rent a Car may share personal data with third parties only where this is necessary to:
- Compliance with legal obligations
- Provision of essential services (e.g. IT services, website hosting, booking platforms)
Whenever data is transferred outside the European Union, Epi Rent a Car ensures that this is done in accordance with the GDPR, through appropriate safeguards.
8. Rights of Data Subjects
The data subject has the right to:
- Access to your personal data
- Correction of inaccurate or incomplete data
- Deletion of data, where applicable
- Limitations of treatment
- Objection to treatment
- Data portability
- Withdraw consent at any time
You may exercise these rights by writing to the addresses set out in this policy.
9. Data Security
Epi Rent a Car implements appropriate technical and organisational measures to ensure the security of personal data and to prevent its unauthorised access, use or disclosure.
10. Cookies
The Epi Rent a Car website uses cookies. For further information, please refer to the Cookie Policy, available on the website.
11. Complaints
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the National Data Protection Commission (CNPD).
12. Changes to the Privacy Policy
Epi Rent a Car reserves the right to amend this Privacy Policy at any time. Any changes will be published on the website.
Last updated: February 2026