6. PERSONAL DATA OF THE LESSEE
6.1. Under the terms of personal data protection legislation, TURISCAR, in its capacity as the data controller, shall duly process the personal data of the LESSEE (identification and contact data for the purposes of vehicle payment and geolocation) for the following purposes, based on the grounds stated:
6.1.1. Based on the performance of the hire agreement: management of the contractual relationship, for administrative management purposes, billing management, collection and payments, including the recovery of litigious credit, the response to contact and clarification requests, and claims management.
6.1.2. Based on compliance with legal duties, namely the provisions of the Regulations for the Access and Exercising of the Activity of Self-Drive Passenger Vehicles and the Legal Framework on the Self-Drive Goods Vehicle Hire Industry, as well as for management of motor civil liability insurance.
6.1.3. Based on the legitimate interest of TURISCAR: geolocation data of the vehicle, in the event of the misuse, theft or robbery thereof and its use outside the authorized geographic limits.
6.2. The provision of the personal data required for the performance of the present Agreement and compliance with the legal duties constitutes a prerequisite for the performance of the present Agreement. If the LESSEE does not provide the same, the Agreement cannot be concluded.
6.3. The personal data of the Data Subject shall be stored for the period required to carry out each of the purposes identified in paragraphs 1 and 2 of the present Clause.
6.4. LESSEE’s personal data may be transmitted to the following entities for the purposes stated:
6.4.1. Administrative, judicial, police and/or other competent authorities for the purposes of complying with his/her legal obligations, such as Courts and criminal police bodies, motorway concessionaires and parking management companies;
6.4.2. Court representatives, courts and any judicial or administrative authority, based on their legitimate interest and for the purposes of representation, declaration, the exercising or defence of rights in court or administrative procedures;
6.4.3. The Tax Authority for the purposes of complying with tax obligations;
6.4.4. Third party service providers for carrying out data processing on behalf and in the name of TURISCAR (e.g. maintenance of IT platforms and information systems, telecommunications operators, vehicle recovery in the event of misuse, theft or robbery) and only when the latter offer sufficient security assurance and in strict compliance with the General Data Protection Regulation (EU no. 2016/679, 27/04) and other applicable laws;
6.5. The LESSEE is entitled, under the terms of the legislation, to request from TURISCAR access to the personal data pertaining to him/her, as well as their rectification or erasure, and the restriction of processing as regards the data subject, or the right to object to processing, as well as the right to data portability by e-mail to dpo@abg.com or by recorded delivery to Av. Severiano Falcão, n.º 9, 2685-379 Prior Velho. The data subject is entitled to file a complaint with the National Data Protection Commission.
6.6. For the purposes of complying with the request to exercise rights set out in the previous number above, the Lessor, in the event of any reasonable doubt as to the identity of the individual who makes the request, may ask to be provided with any additional information which proves necessary to confirm the identity of the data subject.
