Privacy Policy

SunCars Rent a Car

Last updated: May 2026

SunCars (“we”, “us”, “our”) operates a car rental service based in Lagos, Portugal. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

SunCars Rent a Car

Rua Belchior Moreira Barbudo, Rossio de S. João, 8600-680 Lagos, Portugal
Email: info@suncars.pt
Phone: +351 911 831 330

SunCars is the data controller responsible for your personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Booking & Rental Information

  • Full name
  • Email address
  • Phone number
  • Address
  • Driving licence details
  • Identification document (ID card or passport)
  • Date of birth
  • Rental history and booking details

Payment Information

  • Payment transactions (processed securely via our payment provider Reduniq)
  • Billing information

We do not store full card details on our systems.

Technical & Website Data

  • IP address
  • Browser type and device information
  • Website usage behaviour
  • Collected via analytics tools such as Google Analytics.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To manage and confirm car rental bookings
  • To create and execute rental agreements
  • To verify identity and driving eligibility
  • To process payments and security deposits
  • To provide customer support
  • To comply with legal and insurance obligations
  • To improve our website and services

4. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

  • Contractual necessity – to provide car rental services
  • Legal obligation – compliance with Portuguese and EU law (including insurance and tax requirements)
  • Legitimate interest – fraud prevention, service improvement, and operational management
  • Consent – for analytics and optional cookies

5. Data Sharing and Third Parties

We may share your personal data with trusted third parties only when necessary:

  • Payment processing: Reduniq (secure payment provider)
  • Booking system: Way2Rentals (reservation and fleet management system)
  • Analytics: Google Analytics (website usage analysis)
  • Insurance companies (in case of claims or incidents)
  • Legal or government authorities if required by law

All third parties are required to comply with GDPR and protect your data.

6. International Data Transfers

Some service providers (such as Google) may process data outside the European Economic Area (EEA). In such cases, appropriate safeguards (such as Standard Contractual Clauses) are applied to ensure your data remains protected.

7. Data Retention

We retain personal data only for as long as necessary:

  • Rental and contract data: up to 5 years (legal and tax obligations)
  • Payment records: up to 5–10 years (accounting requirements)
  • Identity and driving licence data: for the duration of the rental process and a short retention period afterwards for legal protection
  • Analytics data: typically 14–26 months (Google Analytics default settings)

8. Cookies

Our website uses cookies to:

  • Ensure proper website functionality
  • Analyse website traffic via Google Analytics
  • Improve user experience

You can manage or disable cookies through your browser settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against:

  • Loss or destruction
  • Unauthorized access
  • Misuse or alteration

This includes secure servers, encrypted connections, and restricted access systems.

10. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where applicable)

To exercise your rights, contact us at: info@suncars.pt

11. Supervisory Authority

If you believe your data protection rights have been violated, you may lodge a complaint with the Portuguese Data Protection Authority:

CNPD – Comissão Nacional de Proteção de Dados

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

HAVE QUESTIONS? TALK WITH US...