ITC Tropicar – Protection of Your Personal Data
Last policy version: November 2020
At ITC Tropicar, protecting your personal data is important to us.
This Privacy Policy explains what information we collect, why we use it, how we protect it, and what rights you have.
It applies to our website, online services, customer communications, and vehicle rental activities.
ITC Tropicar is responsible for processing the personal data collected through its services.
We are committed to protecting your privacy and handling your information securely.
We follow these key principles:
Transparency: We explain how and why we collect your data.
Security: We take measures to prevent unauthorized access, loss, or misuse.
Confidentiality: Only authorized people can access your information.
Limited retention: We keep data only for as long as necessary.
Your rights: You can request access to, correction of, or deletion of your personal data, subject to applicable legal requirements.
We use technical and organizational safeguards to comply with applicable data protection laws.
We may collect personal information when you:
Contact us through our website.
Request or book a vehicle rental.
Create an online customer account.
Join a loyalty program.
Subscribe to our newsletter.
Contact our customer service team.
Visit our website and interact with its features.
Interact with us on social media.
Participate in a competition or promotional activity.
Submit a request concerning your personal data.
Some information may also be collected through cookies or similar technologies, depending on your preferences.
Depending on the services you use, we may collect:
First and last name.
Postal address.
Email address.
Telephone number.
Customer account information.
Loyalty program details.
Vehicle rental and booking information.
Order and invoice details.
Information provided during customer service interactions.
Information relating to your use of our website and online services.
Mandatory information is identified when you complete a form.
We collect information needed to manage your requests, provide our services, and maintain our customer relationship.
We do not intentionally collect sensitive personal data, such as information about your health, political opinions, religious beliefs, or ethnic origin.
We use personal information for specific purposes related to our activities.
These purposes include providing our services, managing bookings, processing payments, communicating with customers, and improving their experience.
Website Browsing
We process technical information to enable you to access and use our website.
Website: https://www.itctropicar.fr/
The processing of information that requires your consent is subject to your choices.
Vehicle Rental and Booking Management
We use your personal information to:
Process vehicle rental requests.
Manage bookings and customer accounts.
Provide requested services.
Prepare and manage invoices.
Follow up on customer requests.
Handle customer service enquiries.
Manage our contractual relationship.
The legal basis for this processing is generally the performance of a contract or steps taken before entering into a contract.
Payments and Fraud Prevention
We process information to:
Secure payment transactions.
Detect and prevent fraudulent activity.
Manage unpaid amounts.
Recover outstanding payments when necessary.
The applicable legal basis depends on the purpose of the processing and the relevant legal obligations.
Advertising and Marketing Activities
With your consent where required, we may use your information to:
Send promotional communications.
Inform you about products and services.
Organize promotional campaigns or competitions.
Conduct customer satisfaction surveys.
Measure advertising performance.
Improve the relevance of our marketing campaigns.
For certain communications concerning similar products or services, we may rely on our legitimate interests where permitted by law.
You can object to commercial communications at any time.
Customer Communications
We use your contact details to communicate about:
Booking confirmations.
Rental information.
Invoices and payments.
Customer service requests.
Complaints and claims.
Changes affecting our services.
These communications are necessary to manage our relationship with you.
Improving Your Customer Experience
We may analyze information about how customers use our services.
This helps us:
Understand customer needs.
Improve our website.
Develop new services.
Make our booking process easier.
Improve customer support.
Where consent is required, this processing takes place only after you have given it.
Personalized Advertising
We may work with specialized service providers to deliver advertising that is relevant to your interests.
This may involve creating profiles based on information about your interactions with our services.
Where required, this processing is based on your consent.
You can withdraw your consent or object to personalized advertising using the available privacy settings.
Legal and Regulatory Requirements
We may process or disclose personal information when required by law.
This may include requests from authorized public authorities, fraud prevention measures, legal proceedings, or compliance obligations.
Supplier and Administrative Management
We may share necessary information with:
Authorized accounting and administrative staff.
Auditors and accountants.
Contracted service providers.
Financial institutions.
Legal advisers.
Public authorities when required by law.
Access is limited to information needed for the relevant purpose.
Recruitment
If you apply for a position with ITC Tropicar, the information you provide may be used to assess your application.
Only authorized recruitment staff and relevant managers may access it.
Other Uses
If we need to process your information for another purpose, we will provide the required information before doing so.
Your personal data is accessible only to authorized individuals who need it for their work.
Depending on the service, recipients may include:
ITC Tropicar employees.
Customer service and agency teams.
Payment providers.
IT and website service providers.
Marketing and advertising service providers.
Professional advisers.
Public authorities where required.
Our service providers must handle personal data in accordance with their contractual and legal obligations.
We handle personal data in accordance with applicable French and European data protection requirements.
Some service providers may process information outside the European Union.
When required, we use appropriate safeguards, such as contractual clauses approved by the European Commission.
We keep personal data only for the period needed to meet the purpose for which it was collected, subject to applicable legal obligations.
The retention periods stated in our existing policy are:
Customer account data: 3 years after the last customer contact.
Loyalty program data: 3 years after the last customer contact.
Website login data: 6 months to 1 year.
Cookie validity: Up to 13 months, depending on the cookie.
Invoices: 5 years.
Prospect data: 3 years after the last contact.
Identification data: Up to 1 year.
Anonymized behavioral data: May be retained without a fixed limit when it is no longer personal data.
Anonymized segmentation data: May be retained without a fixed limit when it is no longer personal data.
Some information may be archived for longer periods when required by law or necessary to establish, exercise, or defend legal claims.
Our website uses cookies and similar technologies.
Cookies are small files or identifiers used by websites to remember information, enable features, or understand how visitors interact with online services.
This section explains the categories of cookies described in our policy and how you can manage them.
Essential Cookies
These cookies are necessary for the website to function correctly.
They may support:
Website navigation.
Booking sessions.
Security features.
Storage of your cookie preferences.
Essential cookies do not generally require consent when they are strictly necessary to provide the requested service.
Analytics and Performance Cookies
These cookies help us understand how visitors use our website.
They may measure:
Website visits.
Pages viewed.
Navigation patterns.
Technical performance.
User experience.
Your consent may be required, depending on the technology and the conditions under which it is used.
Advertising Cookies
These cookies may help us:
Display relevant advertisements.
Measure advertising campaigns.
Limit repeated advertisements.
Understand interactions with promotional content.
They require your consent where applicable.
Essential and Functional Cookies
Tarteaucitron: Stores your cookie preferences. Listed duration: 12 months.
SessionID: Maintains information required during a vehicle rental search or booking. Listed duration: the browsing session.
atuvc: Associated with social sharing features. Listed duration: 13 months.
Analytics Cookies
hjSessionResumed: Associated with Hotjar session analysis. Listed duration: the browsing session.
hjIncludedInSample: Associated with Hotjar visitor sampling. Listed duration: the browsing session.
hjid: Associated with Hotjar visitor recognition. Listed duration: 365 days.
gid: Associated with Google Analytics. Listed duration: 1 day.
ga: Associated with Google Analytics. Listed duration: 24 months.
Advertising Cookies
fbp: Associated with Facebook advertising. Listed duration: 3 months.
Bing: Associated with advertising services. Duration not specified in the previous policy.
These names and durations reflect the existing policy and must be checked against the cookies currently used by the website.
Our website may contain features provided by external services.
These may include:
Social media sharing buttons.
Social media content.
Embedded videos.
Analytics services.
Advertising services.
Some services may use their own cookies or similar technologies.
Where consent is required, these technologies should not be activated before you have made your choice.
You can accept, refuse, or change your cookie preferences using the website's cookie management tool.
You can also manage cookies through your browser settings.
Useful resources include:
Google Chrome: https://support.google.com/accounts/answer/61416
Mozilla Firefox: https://support.mozilla.org/
Microsoft Edge: https://support.microsoft.com/
Opera: https://help.opera.com/
Most browsers allow you to delete existing cookies or block new ones.
Disabling some cookies may affect features that depend on them.
Refusing optional cookies does not prevent you from accessing the main website services.
Under applicable data protection laws, you have several rights concerning your personal information.
You can ask whether ITC Tropicar processes your personal data.
You can also request access to the information we hold about you.
You can ask us to correct inaccurate personal information.
You may also request that incomplete information be updated.
You can request the deletion of your personal data when the legal conditions are met.
Some information may need to be retained to comply with legal obligations.
In certain circumstances, you can request your data in a structured, commonly used, machine-readable format.
You may also ask for that information to be transferred to another organization when technically feasible.
You can object to certain uses of your personal data.
You can object to direct marketing at any time.
For other processing activities, your right to object depends on the applicable legal basis and your circumstances.
You may request that we restrict the use of your personal information in certain situations.
For example:
You dispute the accuracy of your data.
You object to certain processing activities.
The processing is unlawful, but you prefer restriction rather than deletion.
You need the data to establish or defend a legal claim.
When processing is based on your consent, you can withdraw it at any time.
This does not affect the lawfulness of processing carried out before withdrawal.
French law allows you to provide instructions about the retention, deletion, and communication of your personal data after your death.
You may change or withdraw these instructions.
If you believe your personal data rights have not been respected, you can lodge a complaint with the French data protection authority.
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de FontenoyTSA 8071575334 Paris Cedex 07France
Website: https://www.cnil.fr/
You can contact ITC Tropicar's Data Protection Officer.
By email: dpo@gbh.fr
By post:
ITC Tropicar27 avenue de Bourbon97434 Saint-Gilles-Les-BainsLa Réunion, France
Please explain your request clearly.
We may ask for proof of identity if we have reasonable doubts about your identity.
We will respond as soon as possible and generally within one month, subject to the conditions and extensions permitted by law.
ITC Tropicar implements security measures designed to protect personal information.
These measures aim to reduce the risks of:
Unauthorized access.
Accidental loss.
Data alteration.
Unauthorized disclosure.
Misuse of personal information.
We apply technical and organizational measures appropriate to the information we process.
These may include:
Restricting access to authorized personnel.
Protecting data against unauthorized use.
Applying confidentiality obligations.
Securing relationships with service providers.
Using pseudonymization or anonymization where appropriate.
Considering data protection when developing services.
We also encourage customers to protect their account credentials and devices.
If you use a shared device, remember to sign out after using your account.
If you have questions about this policy or the protection of your personal data, contact our Data Protection Officer.
Email: dpo@gbh.fr
Postal address:
ITC Tropicar27 avenue de Bourbon97434 Saint-Gilles-Les-BainsLa Réunion, France
Any information relating to an identified or identifiable person.
Examples include a name, email address, telephone number, or online identifier.
The organization that decides why and how personal data is processed.
An organization that processes personal information on behalf of a data controller.
Any operation performed on personal data.
This includes collecting, storing, using, sharing, updating, or deleting information.
A freely given, specific, informed, and unambiguous agreement to the processing of personal data.
A process that prevents a person from being identified through the information.
A process that replaces identifying information with other identifiers.
Pseudonymized information may still be personal data.
The principle of collecting and using only the personal information needed for a specific purpose.
Automated processing that evaluates or predicts certain personal characteristics or behaviors.
For example, profiling may involve analyzing interests or preferences.
Activities designed to contact potential customers or promote products and services.
A person or organization other than the data subject, controller, processor, or persons authorized to process the data under their direct authority.
Interactions between ITC Tropicar and its customers.
These may include bookings, purchases, customer support, complaints, or loyalty programs.
Digital services provided by ITC Tropicar.
These include websites, applications, booking tools, and related online features.
A measure that limits how stored personal information may be used.
The right, under certain conditions, to receive personal information in a structured and machine-readable format or have it transferred to another organization.
This policy refers to:
Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
The amended French Data Protection Act of 6 January 1978.
Applicable guidance from the French Data Protection Authority (CNIL).
For more information about personal data protection, visit https://www.cnil.fr/.