OK RENT A CAR TERMS AND CONDITIONS RELATING TO DATA PROTECTION

OK RENT A CAR complies with the current legislation in Spain and the European Union through the application of European Regulation 2016/679 (RGPD) in its processing of the personal data of its clients. To do this it has adopted technical and organisational measures to avoid the loss, misuse, alteration, unauthorised access and theft of any personal data provided, taking into account the current state of technology, the nature of the data and the risks to which it is exposed.

Below, in accordance with the provisions of data protection legislation, are the terms and conditions relating to the processing of data carried out by OK.

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The company responsible is OTHMAN KTIRI RENT A CAR (OK Rent a Car) - NIF (TAX ID): B57334757 Postal address: AVDA GRAN VÍA ASIMA, 36-A, Palma de Mallorca, Islas Baleares, Spain, Email: [email protected]

2. FOR WHAT PURPOSE DO WE PROCESS YOUR DATA AND WHICH LAWS PERMIT THIS?

We will process your data for the following purposes:

Purpose 1: Provision of the contracted service, the information you provide is processed for the provision of the service requested and related invoicing. The data provided will be kept for the duration of the commercial relationship or for as many years as necessary to comply with legal and contractual obligations.

Purpose 2: Sending you publicity relating to new OK RENT A CAR tariffs, promotions and offers or other brands linked to the OK company group, that are relevant or similar to the contracted service.

This purpose involves the use of your personal data to send you communications relating to the provision, improvement and updating of services, as well as publicity information about promotions applicable to your Service and other services - including value-added services - that may be of interest.

This publicity information will be sent by email and may be generic or personalised, with the latter being based on prior processing of your data for the purposes of data profiling and customer segmentation, determining your tastes, preferences and requirements and, based on this, identifying the offers that may be of most interest to you. The client may object at any time to the sending of our marketing communications, and may exercise this right either by post to the address above or by email to the following [email protected]

Purpose 3: Promotional activity relating to products and services offered by other OK Group companies

If you give your consent, OK RENT A CAR may carry out promotional activities with the aim of making you aware, using any communication method, of offers and promotions for products and services of other OK Group companies. You can view the list of these companies on our corporate website www.okgroup.es.

Purpose 4: Promotional activity for products and services offered by third parties belonging to the leisure, culture, insurance, financial services, tourism, health or automotive sectors.

If you give your consent, OK RENT A CAR may carry out promotional activities with the aim of making you aware, using any communication method, of offers and promotions offered by third parties belonging to the leisure, culture, insurance, financial services, tourism, health or automotive sectors.

Purpose 5: Sharing of your data with Group companies

If you give your consent, OK RENT A CAR will share your data with the other Group companies for the following purposes: 1. To share information and, by studying the aggregate information, carry out statistical studies that will allow us to conduct promotional activity of greater value to both parties (e.g. identify the offices from which you rent most frequently); 2. So that the other companies in the Group can contact you directly, using any communication method, to conduct marketing activities for their goods and services.

Purpose 6: Keeping data once the contract has ended

If you give your consent, OK RENT A CAR will keep your data once your contract has ended, until you request its deletion or until its deletion is legally required, to be used for the following purposes: 1. Undertake promotional activity to make you aware, by any communication method, of offers and promotions of the other companies in the OK Group and of third parties belonging to the aforementioned sectors; 2. To be able carry out statistical studies allowing us to undertake promotional activity that will benefit both parties.

3. WHAT TYPE OF DATA DO WE PROCESS?

Data provided directly by the client, either at the time of requesting the service by completing forms for this purpose or on forms provided throughout the contractual relationship via different formats, such as complaints or requests for information sent to the customer service department. The client is responsible for their accuracy and for updating them.

4. WITH WHOM DO WE SHARE YOUR DATA?

Personal data processed by OK for the purposes listed above may be shared with the following recipients:

National, regional and local public administrations.

National security forces and bodies.

Courts and Tribunals.

Public Prosecutor.

Banking entities, in cases of financing.

With the consent of the data subject

With the other companies of the OK Group.

With third parties from the leisure, culture, insurance, financial services, tourism, health and automotive sectors, all of whom may have international servers.

5. HOW LONG DO WE KEEP YOUR DATA?

Personal data will be kept for the duration of the contractual relationship with the client and after the contract has ended, until you request its deletion or until its deletion is legally required, if you have given your consent. On termination of the contractual relationship, if you decide to request its deletion, your data will be removed in accordance with the provisions of the data protection legislation relating to data blocking, and will only be available at the request of Judges and Tribunals, the Public Prosecutor or the competent Public Administrations during the limitation period for any action that may arise.

In any case, if on termination of the contractual relationship there is any litigation arising from the exercise of invoice appeal actions or with the aim of attaining payment of the same, your data may be kept while this is being processed, until there is a definitive resolution – at which time the blocking and subsequent deletion of your data will continue - although they may only be used for evidentiary purposes.

6. WHAT ARE YOUR RIGHTS?

Our data protection regulations confer on you a series of rights in relation to the data processing involved in our services, that can be summed up as follows:

You can exercise your rights by post to the following address: AVDA GRAN VÍA ASIMA, 36-A, OTHMAN KTIRI RENT A CAR (OK Rent a Car) - NIF (TAX ID): B57334757, Palma de Mallorca, Islas Baleares, Spain, Email: [email protected] indicating the right you wish to exercise and providing the required documentation. You will find a series of model documents on the Spanish Data Protection Agency (AEPD) website that will help you to exercise these rights.

7. Cookies Policy

"Cookies" are small text files sent and stored on users' computers that allow the website to recognize repeat users, facilitate user access to the page, and allow the page to collect information that can improve content. "Cookies" do not harm users' computers or their files. We use "cookies" to be able to offer you information and services tailored to your interests and needs. If users do not want "cookies" to be accessible on this website, most browsers allow users to decline or block the use of "cookies". Keep in mind, however, that "cookies" may be necessary to properly operate certain functions of the page.

Our website has the following Cookies.

We have Plugins from www.youtube.com, containing the following cookies related to this plugin are the following: • PREF, VISITOR_INFO1_LIVE, YSC, GEUP: YouTube cookies used in the reproduction of your videos through a third party's website. - PREF: cookie that stores configuration preferences, such as preferred language, number of search results displayed per page or activation of Google's SafeSearch filter. - VISITOR_INFO1_LIVE: cookie that tracks the visited videos that are embedded in the web. -YSC: cookie that measures the video reproductions made by the user and registers the "Like" or "Share video" events. -GEUP: cookie that measures YouTube video reproductions.

Use of social links

www.okrentacar.es uses the so-called social links of the social networks Facebook.com, Twitter.com and Google+. These links are indicated by buttons with the Facebook, Twitter and Google+ logos.

These buttons are disabled by default during your visit to our website; that is, they do not send data to the corresponding social networks without your active intervention. In order to use these buttons you have to enable them by clicking on them. The button remains enabled until you disable it again or until you delete your cookies. You will find a more detailed description of cookies in our cookie information.

If you do not want Facebook, Twitter and Google+ to collect data about you through our presence on the Internet, you must log out of your account before visiting OK RENT A CAR in the domain www.okrentacar.es, and refer to the privacy policy of Facebook, Twitter and Google+.