RosCar Porto » Privacy Policy

Privacy Policy

With RosCar Porto, you can rent a car in Porto with no deposit and no credit card. Choose your car online and add insurance, unlimited mileage, or any extras you need. Pick up your car at Porto Airport or have it delivered to your hotel, and pay the remaining balance in cash or by debit card.

No Deposit Book a car without a security deposit and keep more money available for your trip. No Credit Card Rent a car without a credit card by choosing a suitable offer. Debit Card or Cash Pay the remaining balance at pickup with a debit card or cash. Porto Airport Pickup Collect your car at Porto Airport and start your journey upon arrival.

Last updated: 30.10.2026

This Privacy Policy explains how personal data is collected, used and shared when you visit https://roscarporto.com/, make a booking or contact us.

1. About Us

RosCar Porto is a car rental aggregator that helps customers compare and book vehicles from international and local car rental companies. The selected rental company provides the vehicle and performs the rental service under its own rental agreement.

The operator of this website and the data controller for the processing described in this policy is:

2. Personal Data We Collect

Depending on how you use our services, we may process the following information:

  • Contact details, including your name, email address and telephone number.
  • Booking details, including pickup and return locations, rental dates, vehicle selection, flight information if provided, and additional services requested.
  • Driver information required for your selected offer, such as age or date of birth.
  • Payment-related information, including payment status, transaction references and refund records.
  • Messages, booking enquiries, complaints and other information you send to us.
  • Technical information, such as your IP address, browser type, device information and website access logs.
  • Cookie and usage information, where the relevant technologies are used and any required consent has been obtained.

The rental company may request your driving licence, passport or identity document and other information necessary to provide the vehicle. Where you provide these documents directly to that company, its privacy policy applies to that processing.

3. How We Obtain Your Data

We receive personal data when you complete a booking form, contact us or otherwise provide information through the website. We may also receive booking updates, payment confirmations and rental-related information from booking partners, payment providers and the selected rental company.

Some technical information is collected automatically when you access the website.

4. Purposes and Legal Bases

Where the General Data Protection Regulation applies, we rely on the following legal bases:

  • Contractual necessity: to take steps at your request before a booking, arrange reservations, send confirmations and provide booking-related support.
  • Legal obligations: to maintain records and respond to lawful requests where required by applicable law.
  • Legitimate interests: to protect the website, prevent fraud, resolve disputes and manage our business. We consider the impact on your rights before relying on this basis.
  • Consent: for optional cookies and marketing communications where consent is required.

Information marked as mandatory during booking is necessary to arrange the requested service. If you do not provide it, we may be unable to complete your reservation. Optional information is identified separately.

5. Sharing Personal Data

We share personal data where necessary for the purposes described in this policy with:

  • The selected rental company, to confirm and fulfil your reservation and manage rental-related enquiries.
  • Booking technology providers that support vehicle searches, reservations and booking management.
  • Payment providers that process payments and refunds.
  • Hosting, IT, security and communication providers that support the operation of the website and customer service.
  • Professional advisers and public authorities where disclosure is legally required or necessary to establish, exercise or defend legal claims.

Service providers acting on our behalf process personal data under appropriate contractual arrangements. Rental companies and certain booking or payment providers may act as independent data controllers for their own activities. Their privacy policies explain how they process your information.

6. Payments

When you make an online payment, the payment provider processes the information needed to complete the transaction under its own privacy and security terms. We may receive transaction references, payment status and other information needed to manage your booking or refund.

Please do not send payment card details or card security codes by email.

7. Cookies and Similar Technologies

The website may use cookies and similar technologies to support essential functions, remember preferences and, where enabled, measure website use or support advertising.

Where consent is required, optional technologies should only be activated after you have given consent. You can withdraw or change your choices through the website’s cookie settings, where available. You can also manage cookies through your browser, although blocking essential cookies may affect booking functionality.

8. International Data Transfers

Some service providers or rental partners may process personal data outside the European Economic Area. Where the GDPR applies, such transfers must be supported by an applicable legal mechanism, such as an adequacy decision or Standard Contractual Clauses, together with additional safeguards where necessary.

You can contact us to request information about applicable transfer safeguards and how to obtain a copy.

9. Data Retention

We retain personal data for the period necessary to fulfil the purpose for which it was collected, subject to applicable legal requirements.

  • Booking and transaction records are retained to manage reservations, meet applicable accounting obligations and handle claims within relevant limitation periods.
  • Customer correspondence is retained for as long as needed to resolve the enquiry and any related dispute.
  • Security logs are retained for the period needed to investigate incidents and protect the website.
  • Consent records are retained as needed to demonstrate compliance. Marketing preferences are retained until withdrawal or objection, with limited suppression records where necessary to respect your choice.
  • Cookie retention periods depend on the individual cookie and are described in the cookie information.

When data is no longer required, it is deleted or anonymised.

10. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure. These measures are selected according to the nature of the information and the risks involved. No online service can guarantee absolute security.

11. Your Rights

Subject to the conditions and exceptions in applicable data protection law, you may have the right to:

  • Access your personal data and receive a copy.
  • Correct inaccurate or incomplete information.
  • Request deletion of your personal data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests.
  • Receive eligible data in a portable format.
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
  • Object to the use of your personal data for direct marketing at any time.
  • Lodge a complaint with a competent data protection authority.

To exercise your rights, email [email protected]. We may request information reasonably necessary to verify your identity.

Where the GDPR applies, we normally respond within one month. If an extension is permitted because of the complexity or number of requests, we will explain the reason within that initial period.

You may complain to the supervisory authority in the EU country where you habitually reside, work or believe an infringement occurred. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

12. Third-Party Websites and Services

The website may include external links or embedded booking and payment services. Other providers may collect personal data when you interact with their services. Please review their privacy notices before submitting information.

13. Updates to This Policy

We may update this Privacy Policy to reflect changes in our services, data processing practices or legal requirements. The current version will be published on this page with an updated revision date. Where required, we will provide additional notice of material changes.

14. Contact Us

If you have questions about this Privacy Policy or the handling of your personal data, contact us:

RosCar Porto