Privacy Policy

1. Responsible party information

In compliance with the General Data Protection Regulation (GDPR) and the Organic Law on Personal Data Protection and guarantee of digital rights (LOPDGDD), Zentia Labs LLC is responsible for the processing of personal data you provide to us.

Important: Important: To use our services you must be of legal age or have authorization from your legal representatives.

2. Data we collect

2.1 Registration data

• Name and surname
• Email address
• Phone number
• Company information (name, address, CIF/NIF)
• Password (encrypted)

2.2 Usage data

• Booking and transaction information
• Vehicle and fleet data
• Customer information (name, email, phone, ID document)
• Payment and billing data
• Platform activity logs

2.3 Technical data

• IP address
• Browser and device type
• Cookies and similar technologies
• Geolocation data (when necessary for the service)

3. Processing purposes

We process your personal data for the following purposes:

3.1 Service provision

• Account management and platform access
• Booking and contract processing
• Payment and billing management
• Technical support and customer service

3.2 Legal compliance

• Compliance with tax and accounting obligations
• Fraud and money laundering prevention
• Compliance with transportation and tourism regulations

3.3 Service improvement

• Platform usage analysis (with your consent)
• Development of new features
• User experience optimization

4. Legal basis for processing

The processing of your data is based on:

• Contract execution: For the provision of Rent-a-Car management services
• Legal obligation: To comply with tax, accounting and transportation regulations
• Legitimate interest: For platform security and fraud prevention
• Consent: For non-essential cookies and commercial communications

5. Data retention

We retain your data for the following periods:

• Account data: While you maintain an active account
• Transaction data: 6 years (legal tax obligation)
• Customer data: 3 years after the last transaction
• Security logs: 2 years
• Cookies: As specified in our cookie policy

6. Data origin

The personal data we process comes from:

• The data subject: Information provided directly when registering or using the platform
• Devices and systems: Technical data collected automatically during use
• Service providers: Information necessary for the provision of integrated services
• Public sources: Publicly available information when relevant to the service

7. Recipients and data sharing

We may share your data with the following recipients:

7.1 Service providers

• Stripe: For payment processing and billing
• Hosting providers: For platform storage and operation
• Email services: For communications and notifications
• Support services: For customer service and incident resolution

7.2 Competent authorities

When required by law, court order or to comply with legal obligations, including fraud prevention and compliance with tax regulations.

7.3 Commercial partners

Only with your explicit consent for additional services or specific integrations.

Important: Important: We do not sell or rent your personal data to third parties for commercial purposes unrelated to service provision.

8. International transfers

Data may be hosted or processed in the United States. In these cases, Standard Contractual Clauses (SCCs) and additional measures will be applied to ensure an adequate level of data protection.

International transfers are only made when necessary for service provision and appropriate safeguards are applied, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Additional technical and organizational measures
• Recognized privacy certifications
• Data protection impact assessments when necessary

9. Data security

We implement appropriate technical and organizational security measures:

• Encryption of data in transit and at rest
• Restricted access to personal data
• Continuous security monitoring
• Regular backups
• Staff training on data protection

10. Your rights

You have the following rights regarding your personal data:

• Access: Know what data we have about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restriction: Restrict processing in certain circumstances
• Portability: Receive your data in structured format
• Objection: Object to processing for legitimate reasons

To exercise these rights, contact us at info@raxmobility.com

11. Cookies

We use cookies and similar technologies to improve your experience. You can manage your cookie preferences on our cookie management page.

12. Minors

Our services are aimed at businesses and professionals. We do not intentionally collect data from minors under 16 years of age. If you know that we have collected data from a minor, contact us immediately.

13. Policy modifications

RaX reserves the right to modify this privacy policy to adapt it to legislative, jurisprudential or technological developments, always taking into account the legitimate interests of users.

We will notify you of significant changes through the platform or by email with at least 30 days' notice. We recommend reviewing this policy periodically.

Continued use of our services after modification constitutes acceptance of the new policy.

14. Supervisory authority

You have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your data does not comply with regulations.