Privacy and Cookie Policy

1. Data controller. Polo - Aluguer de Automóveis, Lda. (tax number 501788913), with registered offices at Rossio Grande, Lote B, Loja C, 8500 Alvor, Portimão, Portugal. For any question about personal data, or to exercise your rights, write to reservas@polorentacar.com or call +351 964 017 703.

2. Data we collect. When you book, we collect identification and contact data (name, email, phone), booking data (dates, locations, driver age, flight number and accommodation address, where applicable) and, if you choose to speed up pick-up, the identification document number, driving licence and address.

3. Purposes. We use the data exclusively to manage the booking and the rental contract, prepare the contract before pick-up, send communications related to the booking and comply with legal and tax obligations. The legal basis is the performance of the contract and compliance with legal obligations. To protect the site's administration area against password guessing, we record each sign-in attempt with the IP address and the email stored only as a code, never in readable form, and delete them after 2 days; here the legal basis is our legitimate interest in the security of the service (article 6(1)(f) GDPR).

4. Payments. Online payments are processed by Stripe. Card details are entered directly with Stripe and never pass through our servers.

5. Processors. We use providers that process data on our behalf, with adequate contractual safeguards: site hosting (Vercel), database (Supabase), payments (Stripe) and email delivery. We do not sell or share data with third parties for marketing. Some of these providers may process data outside the European Economic Area; where that happens, the transfer relies on standard contractual clauses approved by the European Commission or on an adequacy decision.

6. Retention. Contract data is kept for the applicable legal periods. The optional fast pick-up data (identification document, driving licence and address) is deleted automatically 30 days after the vehicle is returned.

7. Your rights. You can request access, rectification, erasure, restriction or portability of your data, or object to processing, through the contacts on this site. You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (www.cnpd.pt).

8. Cookies. The site uses necessary cookies, which do not need your permission because the site cannot work without them, and, if you accept them, statistics cookies, which help us understand how the site is used and where visits come from, so we can improve it. We never use these cookies to store your name, email, phone, address or booking reference. The legal basis is your consent (article 6(1)(a) GDPR), which you can withdraw at any time. The list of cookies, with the purpose and duration of each, and the button to change your choice are in the "Cookies" section, just below on this page.

9. Updates. This policy may be updated; the version in force is the one published on this page. Version of 11 October 2026.