Privacy policy

Who is responsible

Casterson Limited, registration number HE 369724, Georgiou A' 75, 4047 Potamos Germasogeia, Limassol, Cyprus. For questions about your data, email info@sun-cars.com.

What data we receive

• Contacts: name, phone, email, and Telegram if you sign in with it.
• Rental details: dates, car, delivery place, your address in Cyprus.
• Documents: photos of your passport or ID card and driving licence and the details on them, including date of birth and nationality.
• Rental and payments: the agreement, your signature, payments, messages with us.
• The car during the rental: GPS tracker and telematics data.
• Callback requests from the website: name, phone and how you’d like us to contact you.

Why

To check your documents, prepare and perform the rental agreement, contact you, take payments, meet legal duties (accounting, tax, insurance, police requests) and protect the cars from theft and damage. Legal bases: performing the contract, legal obligations and our legitimate interests.

Who sees it

SunCars staff who handle your rental. We never sell data. We share it only with those who help us provide the service, and only as much as they need:

• the hosting and email services that run the website, the app and our system;
• Telegram, if you sign in or message us through it;
• an automatic document reading service, which fills in the details from your photos so you don’t have to type them;
• the payment service, if you pay by card online;
• the insurer, the police and public authorities, where the agreement or the law requires it.

Transfers outside the EU

Some services may process data outside the European Union. In those cases we rely on the safeguards the GDPR provides, such as standard contractual clauses.

How long we keep it

Requests that did not lead to an agreement are deleted after 12 months. Agreement and payment records are kept as long as Cyprus law requires.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict its use or object to it. Email info@sun-cars.com. You can also complain to the Cyprus Commissioner for Personal Data Protection.

Cookies

With your consent, the website and app use analytics services to see which pages and cars people look at and where booking stops. Currently these are Google Analytics (Google Ireland Limited) and Amplitude (Amplitude, Inc., data stored in the EU). Google sets the _ga and _ga_* cookies and Amplitude the AMP_* cookies, for up to 2 years. Google Analytics does not store IP addresses; Google data may be processed outside the EU under standard contractual clauses. Amplitude uses the IP address to find your country and city, and links what you do on the site and in the app to your SunCars client record when you are signed in. Without consent no analytics cookies are set, and there are no advertising cookies. You can change your choice at any time: «Cookie settings» at the bottom of the site.

The app keeps on your device only what it needs to keep you signed in and to save an unfinished request.