Privacy Policy

This Privacy Policy describes how your personal data is collected, used and protected when you use the services of Kartel Scoot and Vroom Car (hereinafter "the Company").

It supplements the General Terms and Conditions of Service and Rental.

1. Data Controller

The data controller is Kartel Scoot, a limited liability company with a share capital of €1,000, whose registered office is located at 413 avenue du Beau Pays, Résidence Calice, Local C4 – Bâtiment B, ZAC Beauséjour, 97438 Sainte-Marie (Reunion Island), registered with the Saint-Denis Trade and Companies Register under number 919 954 305.

Email: contact@kartelscoot.com

The Company has not appointed a Data Protection Officer (DPO).

2. Data Collected

In the course of its activities, the Company collects the following categories of data:

• Identity data: surname, first name, date and place of birth, copy of driving licence.
• Contact details: postal address, email address, telephone number.
• Payment data: information required for payment and the security deposit (processed via secure, PCI-DSS-certified service providers).
• Contractual data: booking history, rental agreements, inventory reports, photographs, activity logs, timestamps.
• Technical and on-board data: data from the vehicle's electronic systems: geolocation, speed, impacts, vehicle usage and condition.

The Company undertakes to collect only the data strictly necessary for its purposes.

3. Purposes and Legal Bases

The processing is based on the following grounds:

• Performance of a contract (Art. 6(1)(b) GDPR): managing bookings; verifying eligibility criteria; providing the vehicle; inventory checks, invoicing, security deposit.
• Legal obligation (Art. 6(1)(c) GDPR): retention of accounting documents; reporting to the authorities in the event of an offence.
• Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention; protection of property; claims and dispute management; use of on-board and geolocation data.
• Consent (Art. 6(1)(a) GDPR): sending of commercial offers.

This processing is carried out in accordance with your rights and freedoms. You may withdraw your consent at any time.

4. On-Board Data and Geo-Location

Vehicles may be fitted with devices that collect technical data (geo-location, speed, impacts, usage, condition). This data is used to:

• ensure the safety of people and the vehicle;
• prevent and detect fraud or abnormal usage;
• locate a vehicle in the event of theft, non-return or an incident;
• analyse the circumstances of a claim;
• provide evidence of the performance of the contract.

This processing is based on the Company's legitimate interest. The Customer is informed of the existence of these devices prior to the conclusion of the contract. This data may be used as evidence in the event of a dispute, including in legal proceedings. No continuous monitoring for the purposes of personal surveillance is carried out.

5. Recipients of the Data

The data is accessible only to:

• authorised internal departments;
• technical service providers (payment, booking, hosting, fleet management), acting on behalf of the Company;
• insurers in the event of a claim;
• administrative or judicial authorities where there is a legal obligation (in particular regarding traffic offences).

The data is neither sold nor transferred to third parties for commercial purposes.

6. Transfers Outside the European Union

Certain tools may involve data transfers outside the European Union. In such cases, the Company ensures that these transfers are subject to appropriate safeguards, in particular the European Commission's standard contractual clauses.

7. Retention Periods

Data is retained for the following periods:

• duration of the contract + 5 years (contractual obligations and limitation periods);
• claims-related data: until the case is closed + statutory time limits;
• accounting data: 10 years;
• identity data: duration of the contract + necessary checks;
• embedded data: retained only where necessary (incident, dispute, security).

8. Data Security

The Company implements appropriate technical and organisational measures to ensure the security, confidentiality and integrity of personal data.

9. Your Rights

In accordance with the GDPR, you have the following rights:

• access to your data;
• rectification;
• erasure;
• restriction of processing;
• data portability;
• objection, in particular to marketing communications;
• withdrawal of consent at any time.

You may exercise your rights by contacting: contact@kartelscoot.com. You will receive a response within a maximum of one (1) month. In the event of any difficulties, you may lodge a complaint with the CNIL.

10. Cookies and Trackers

The website may use cookies to:

• ensure it functions properly;
• measure audience figures;
• improve services.

Certain cookies require your prior consent. A cookie management tool allows you to accept, refuse or configure them at any time.

11. Amendments to the Policy

The Company may amend this Policy at any time. The applicable version is that published on the website on the date of consultation.