Privacy Policy

1. Purpose of this Privacy Policy

This Privacy Policy explains how the companies operating vehicle rental services under the Jumbo Car brand collect, use, protect, retain, and share your personal data when you use www.jumbocar.com, its different language versions, territory-specific sections, and the services made available through the Website.

At Jumbo Car, protecting your privacy and safeguarding your personal data are among our highest priorities. We are committed to processing your personal data fairly, transparently, and in compliance with applicable data protection laws, including Regulation (EU) 2016/679 of April 27, 2016 (General Data Protection Regulation – GDPR), as well as any national laws applicable in the territory concerned.

This Privacy Policy explains, in particular:

• what personal data we collect;

• why we process your personal data;

• the legal bases on which such processing is carried out;

• with whom your personal data may be shared;

• how long we retain your personal data; and

• your rights and how to exercise them.

This Privacy Policy should be read together with:

• the Website's Legal Notice;

• the Cookie Policy;

• the General Rental Terms and Conditions applicable to the selected destination.

2. Who is the Data Controller?

The www.jumbocar.com website provides access to vehicle rental services operated by several companies under the Jumbo Car brand across different countries and territories.

Depending on the destination selected, the services you use, and, where applicable, the location where your rental vehicle is collected, the Data Controller responsible for processing your personal data is the Jumbo Car company operating the relevant business.

Throughout this Privacy Policy, the terms "Jumbo Car," "we," "our," and "us" refer, depending on the context, to that Data Controller.

Data Controllers

3. What Personal Data Do We Collect?

Depending on the services you use, we may collect different categories of personal data.

Identification Information

• First and last name;

• Title;

• Date of birth, where required;

• Nationality, where necessary for the rental.

Contact Information

• Postal address;

• Email address;

• Telephone number.

Booking and Rental Information

When you make a reservation or rent a vehicle, we may process information including:

• rental dates;

• vehicle pick-up and return locations;

• reserved vehicle;

• selected options;

• information relating to the main driver and any additional drivers;

• driver's license information where required to perform the rental agreement;

• reservation number;

• rental history.

Payment Information

To process your reservation, we may collect and process the information required to complete your payment.

Payment information is processed by secure payment service providers. Jumbo Car never stores your full payment card number.

Customer Support Information

When you contact us, we may retain:

• your requests;

• email correspondence;

• messages submitted through our contact forms;

• conversations with our Customer Support team or our online assistant when you use these services;

• complaints and their follow-up.

Claims and Traffic Offense Information

Where necessary to perform the rental agreement or comply with legal obligations, we may process information relating to:

• road accidents;

• vehicle damage;

• traffic tickets;

• traffic violations;

• insurance claims.

Browsing Information

When you browse our Website, certain technical information may be collected automatically, including:

• your IP address;

• browser type;

• device information;

• operating system;

• pages visited;

• interactions with the Website.

These data are processed under the conditions described in our Cookie Policy.

4. How Do We Collect Your Personal Data?

We collect your personal data directly from you when you:

• make a reservation;

• enter into a vehicle rental agreement;

• contact our Customer Support team;

• complete a form on our Website;

• subscribe to our newsletter;

• use our online chat service;

• submit a review about our services.

We may also receive certain information from:

• booking partners, including brokers, travel agencies, tour operators, or hotel partners, when you make a reservation through one of their services;

• insurance companies or roadside assistance providers involved in connection with your rental;

• competent authorities where required by applicable law.

Finally, certain technical information is collected automatically when you browse our Website, in accordance with our Cookie Policy.

5. Why Do We Process Your Personal Data?

We process your personal data only when necessary to provide our services, comply with our legal obligations, or pursue our legitimate interests.

Depending on the purpose of the processing, we rely on one of the legal bases provided for under the General Data Protection Regulation (GDPR).

We never process your personal data for purposes that are incompatible with those described in this Privacy Policy.

6. Who Do We Share Your Personal Data With?

Your personal data is accessible only to individuals who require it to perform their duties.

Depending on the processing concerned, your personal data may be shared with the following categories of recipients:

• authorized employees of the relevant Jumbo Car companies;

• service providers involved in operating the Website and booking engine;

• payment service providers;

• insurance companies and roadside assistance providers involved in your rental;

• the booking partner through which you made your reservation, where necessary to perform the rental agreement;

• administrative or judicial authorities where disclosure is required by applicable law;

• our legal advisors, statutory auditors, and other professional service providers acting within the scope of their assignments.

Where you have given your consent, certain technical information may also be shared with our analytics and advertising partners under the conditions described in our Cookie Policy.

We ensure that all of our service providers offer appropriate guarantees regarding security and confidentiality and process your personal data only in accordance with our instructions.

7. Are Your Personal Data Transferred Outside Your Country or the European Union?

Depending on the destination concerned, the organization of our services, or the service providers we use, certain personal data may be processed in a country other than the one in which they were originally collected.

Where personal data are transferred outside the European Economic Area (EEA), Jumbo Car ensures that such transfers are carried out in compliance with applicable data protection laws through appropriate safeguards, including, where applicable:

• an adequacy decision adopted by the European Commission;

• the European Commission's Standard Contractual Clauses (SCCs);

• or any other transfer mechanism recognized under applicable law.

8. How Long Do We Retain Your Personal Data?

We retain your personal data only for as long as necessary to fulfill the purposes for which they were collected, together with any additional retention periods required by applicable laws or limitation periods.

The following retention periods are provided for information purposes only.

Once the applicable retention period has expired, your personal data are deleted, anonymized, or archived where required by law.

9. How Do We Protect Your Personal Data?

Protecting your personal data is a priority for Jumbo Car.

We implement appropriate technical, organizational, and physical security measures designed to ensure the confidentiality, integrity, and availability of the personal data we process.

These measures include, among others:

• securing our IT infrastructure and information systems;

• restricting access to personal data on a need-to-know basis;

• authenticating authorized users;

• encrypting data transmissions where appropriate;

• providing regular data protection awareness training to our employees;

• selecting service providers that offer appropriate security and confidentiality guarantees.

Although we implement appropriate safeguards, no information system can be guaranteed to be completely secure.

Nevertheless, Jumbo Car undertakes to take all reasonable measures to protect your personal data against unauthorized access, loss, destruction, disclosure, alteration, or any other unlawful processing.

10. Cookies and Tracking Technologies

When you browse our Website, cookies and similar tracking technologies may be used to ensure the proper operation of the Website, measure its performance, personalize your browsing experience, or display content and advertising tailored to your interests.

These processing activities are carried out in accordance with your consent preferences.

For detailed information about the cookies and tracking technologies used on the Website, their purposes, retention periods, and how to manage or withdraw your consent, please refer to our Cookie Policy.

Tracking of Our Electronic Communications

When you receive our emails and newsletters, we may use tracking pixels or similar technologies to measure whether these communications are opened, the links clicked within them and, more generally, to assess their performance and keep our mailing lists up to date.

This tracking is only carried out with your consent, obtained when you subscribe to our communications or, for contacts who are already subscribed, in accordance with the information provided to you.

You may object to this tracking at any time, independently of your subscription to our communications, by using the “Opt out of email tracking” link at the bottom of our emails or by contacting us using the contact details provided in Section “12. How to Exercise Your Rights”.

The data collected in this way is retained for a period of 3 years and is used solely for the purposes described above.

Telephone Marketing

When we contact you by telephone for marketing purposes, we do so only with your prior consent, obtained in particular when your telephone number is collected or when you make a reservation, in accordance with the regulations applicable in the relevant territory and, for processing activities subject to French law, Decree No. 2026-662 of July 23, 2026.

You may withdraw your consent or object to such marketing at any time, including by informing us during a call or by exercising your rights as described in Section “12. How to Exercise Your Rights”.

11. What Are Your Rights?

Under applicable data protection laws, you may have the following rights with respect to your personal data:

• the right to access your personal data;

• the right to correct inaccurate or incomplete personal data;

• the right to request the deletion of your personal data, where permitted by law;

• the right to restrict the processing of your personal data;

• the right to object to the processing of your personal data where such processing is based on our legitimate interests;

• the right to withdraw your consent at any time where processing is based on your consent;

• the right to data portability, where the applicable legal requirements are met;

• where provided by applicable law, the right to provide instructions regarding the handling of your personal data after your death.

The exercise of certain rights may be restricted where processing is necessary to comply with a legal obligation, perform a contract, or establish, exercise, or defend legal claims.

12. How Can You Exercise Your Rights?

You may exercise your rights at any time by contacting the Data Protection Officer (DPO) or the appropriate department of the Jumbo Car company responsible for the relevant processing activity.

You may contact us by email at: dpo@gbh.fr

To process your request, we may ask you to provide additional information where necessary to verify your identity.

We will respond to your request as soon as reasonably possible and within the time limit required by applicable law.

If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the competent data protection authority in your country of residence or in the country where you believe the alleged infringement occurred.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes in applicable laws or regulations;

• recommendations issued by data protection authorities;

• changes to our services or tools;

• the addition of new processing activities or partners.

The version in effect is the version published on the Website on the date of your visit.

We encourage you to review this Privacy Policy regularly to stay informed about any updates.