Data privacy policy
01/03/2021 version
Article 1: preamble
This privacy policy applies to the Toosla website and mobile applications (iOS and Android).
The confidentiality and security of your data is a priority at Toosla. The goal is to provide the user with a safe and transparent car rental experience.
Toosla provides access to a rental service which is defined in the general conditions of use.
The purpose of this privacy policy is to expose users of the Toosla site and applications to:
- The way in which personal data is collected, i.e. all data allowing a user to be identified, such as his name, first name, date of birth, postal address, email address, geo -location or its IP address.
- What are the rights of users regarding this data
- Who is responsible for the processing of personal data collected and processed
- To whom are these data transmitted
- Cookies policy.
This privacy policy supplements the legal notices and the General Rental Conditions that users can consult elsewhere.
Article 2: Personal data collected in connection with the use of Toosla services.
Personal information is collected through several channels:
2.1 Data provided directly by the user for registration
When creating an account with Toosla, the user provides at least his name, first name, an email address and a password. If the user chooses to authenticate through Facebook, the user agrees to provide access to their email address, public profile and friend list.
To access a Toosla car, the user must enter his address, mobile phone number, payment information, information relating to his driving license (license number, date of issue, date of obtaining the license, one photo of the licence), one piece of identification (one copy).
These data are collected and stored in order to verify the identity of the tenant to allow him to access the service, for security needs, denunciation in the event of traffic violations, for insurance in the event of accident and in the event of non-solvency.
2.2 Communication data
This concerns all electronic exchanges between the user and Toosla and whatever the medium (email, SMS, Facebook message, telephone, etc.).
This data is kept for statistical purposes and to provide better service to the user.
2.3 Data relating to navigation on the website
We collect browsing information through cookies to evaluate our marketing campaigns and maintain our website. Information on the use of cookies is available in our Cookie Policy.
2.4 Data related to the use of mobile applications
When the user uses our mobile application, we record browsing data. This includes the unique identifier, the identifier of your Android device or IDFA iOS, the language code, the type of device, the name and version of the operating system, the way you use our services such as a request search, your IP address, data relating to events related to the device used (crash), connection data to the car and phone geolocation data (provided if the user has authorized the sharing of this information).
Toosla uses this data only for statistical evaluation of marketing campaigns, security and optimization of the Services. Toosla reserves the right to use this data for any illegal use of our services.
2.5 Payment data
Payment data is collected and stored by the payment provider Stripe in accordance with the strictest banking security rules. The information accessible to Toosla is the information of the means of payment (last 4 digits of the PAN, expiration date and name of the bearer) as well as the transaction data (amount, authentication, means of payment, etc.).
2.6 The data recorded by the Toosla telematics box:
To provide a vehicle rental service with a 100% digital journey, Toosla installs a connected telematics box in each of its vehicles. Toosla recovers data related to case events (opening / closing, activation / deactivation of a circuit breaker, vehicle starting / stopping, voltage drop) and geo-location.
2.6.1: Geolocation
Toosla vehicles are equipped with telematics boxes with a geolocation device to provide you with its services 24 hours a day, but also to strengthen the fight against theft. This information may be used during or after the end of your rental period.
2.6.2: Data related to sudden braking:
The telematics boxes installed in Toosla vehicles are equipped with sensors to detect sudden braking likely to endanger the physical integrity of the driver, passengers or vehicle. This information can be, according to their degree of seriousness transmitted to the security service of Toosla who will be able in the event of an accident to notify the emergency services.
Furthermore, in the event of repeated alerts, demonstrating "sporty" and/or inappropriate driving behavior, Toosla may either inform the customer that his behavior is likely to call into question his contractual franchise, or terminate without notice a its rental period. See Protection, Deposit and Excess
2.6.3 Speed and fuel consumption data:
Toosla campaigns for eco-responsible driving allowing a substantial reduction in CO2 emissions. Data related to speed and fuel consumption allow CO2 emissions to be calculated during the rental period or after the end of the rental period. This data can be compared to the theoretical CO2 emissions on the customer's journey, allowing Toosla to reward the drivers most attentive to the protection of the planet.
Article 3: Processing of personal data collected
Personal data is collected for the following purposes:
- Use of the Toosla Car Rental Application and Services
- To operate the commercial relationship with its users (order, access to the service, invoicing)
- For verification, identification and authentication of data transmitted by the user.
- To operate a support service in the event of a problem.
- To improve the service and the user experience
- For statistical purposes to optimize its marketing campaigns.
- For security purposes
- To manage disputes (unpaid bills, claims, etc.)
Article 4: Duration of storage of personal data
Registration and user account data are kept for the period necessary for the performance of services and for the duration of the user's membership.
We archive personal data from closed accounts in accordance with applicable data protection rules in order to comply with the law, prevent fraud, recover unpaid debts, report the driver of traffic offenses and settle disputes.
Article 5: Sharing of personal data with third parties
Personal data may be shared with third-party companies exclusively in the European Union in the following cases:
- when the user authorizes the website or applications to access their data
- when Toosla uses the services of contractors for marketing campaigns, payment services, support services, authentication services and rental service fulfillment. These service providers have limited access to user data as part of the performance of their service and have a contractual obligation to use them in accordance with the applicable regulations on the protection of personal data.
- If required by law, Toosla may perform data transmission to respond to complaints and comply with administrative and legal procedures.
Article 6: User rights
In application of the regulations applicable to personal data, users have the following rights:
- Right of access: the user can exercise his right of access to know his personal data.
- Right of rectification: the user can request the updating of his information if it is inaccurate.
- Right to delete data: the user can request the deletion of their personal data in accordance with applicable data protection laws.
- Right to restriction of processing: users can request Toosla to limit the processing of personal data in accordance with GDPR rules.
- Right to object to data processing: users can object to their data being processed in accordance with GDPR rules.
- Right to portability: the user can request that Toosla provide them with all the personal data he has provided.
You can exercise this right by contacting us at the following email address: aide@toosla.fr.
All requests must be accompanied by a photocopy of a valid signed identity document. The response will be sent within one month of receipt of the request. This one-month period may be extended by two months if the complexity of the request and / or the number of requests so require.
Article 7: Data security
We use technical and architectural measures to protect your data against theft, modification, deletion or access.
All data transfers are secure and encrypted using SSL protocol.
Access to your account is only possible after entering your email address and password or by Facebook connect or not Apple connect. Regardless of your access method, this information must be kept confidential.
Toosla stores your data in France with the host OVH.
Contact us
For any questions relating to the privacy and data protection policy, you can contact us at aide@toosla.fr.