Privacy Policy

By using DiscoverCars.com services (“Services”, “Website”), you entrust DISCOVERCARS (hereinafter – DISCOVERCARS or “We”) with your personal data and grant us the right to process it in accordance with our Privacy Policy (hereinafter – Policy) and the Terms and Conditions (hereinafter – Terms).

If you don’t agree to the Terms, this Policy or any of its provisions in particular, you will unfortunately not have the option to use DISCOVERCARS’ services, as we will be unable to provide you the service.

In this Policy you will find all the information about which of your personal data we collect and process, for what purposes we use them, how long we store them and other information about the processing of your data. Please read the Policy carefully and, if you have any further questions, please contact us using the contact information in this Policy.

We draw your attention to the fact that both the Policy and the Terms may be amended, supplemented or renewed, and that DISCOVERCARS will inform you about this using the contact information you have provided.

Personal data: Any information that can be used to identify a person, as well as any information about a person who has already been identified.

1. WHO WE ARE

Our Services are operated by Discover Car Hire AS (the “Data Controller”). Please find more details in the CONTACT US section below.

We have appointed a Data Protection Officer (“DPO”) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise YOUR LEGAL RIGHTS, please contact the DPO using the details set out in the CONTACT US section down below.

2. WHEN YOU ACCEPT THIS PRIVACY POLICY

By using our Services, you are accepting the conditions set out in this Privacy Policy and Terms of Service.

3. AGE RESTRICTION

Persons under 18 years of age are not allowed to use our Website or any of our Services, as they are not targeted at persons under the age of 18. Any personal data we receive from users we believe to be aged 18 or under will be removed from our database.

If you believe that we have collected, used or disclosed personal data of a person under the age of 18 (or the age of majority in your jurisdiction), please contact our support team via the CONTACT US section down below so that we can take appropriate action.

Purpose/Activity	Type of personal data	Legal grounds for processing personal data
To register your account: in order for you to more conveniently use the features of our website, manage existing and future bookings, use our special offers, accumulate bonuses, and set personal settings, we have created the possibility for you to create an account on our website and app.	Contact Data such as name, age and location, date of birth, place of birth (if applies), email address, phone number Technical Data, such as device ID or IP Address, including timestamps Extended Data	Performance of a contract with you
To provide the Services to you, including: Maintaining a profile, answering questions, and providing information about the Service; Enabling you to make a booking with a car rental. To send you a confirmation of your booking in the form of a voucher. To offer you the localization of the service (language, currency, local benefits)	Contact Data, such as name, age, location, date of birth, place of birth (if applies), email address, phone number Transaction Data, including, if applicable depending on your payment mechanism, your credit card, expiration date, name, address, transaction ID, timestamps, email address, bank account, and routing number Technical Data Extended Data Location Data	Performance of a contract with you Legitimate interest relating to your interaction with the Services.
To enable payment for the Service, specifically: block available funds (amount for the service and, if the lessee has chosen, for the prepayment and security fee protection) until the specific booking has been confirmed; collect the available funds (amount for the service and, if the lessee has chosen, for the prepayment and security fee protection) after the booking has been confirmed; withhold/block the rental costs on behalf of the car rental supplier if an agreement has been reached between the renter and the company; collect available funds in the event of price increases (for example, when a higher class car is offered) after the booking has been confirmed; cover, on behalf of the car rental supplier, a possible no-show fee if, according to the Terms, the lessee does not arrive on time to pick up the car.	Contact Data, such as name, age, location, date of birth, place of birth (if applies), email address, phone number Transaction Data, including, if applicable depending on your payment mechanism, your credit card, expiration date, name, address, transaction ID, timestamps, email address, bank account, and routing number	Performance of a contract with you to which you are a contracting party (vehicle rental agreement), or to take measures upon your request prior to concluding the contract (reservation / booking). Legitimate interest relating to your interaction with linked services.
To manage our relationship with you which will include: Notifying you about changes to our terms or Privacy Policy or Terms and Conditions Communicating with you and providing customer support	Contact Data Transaction Data Extended Data Communications Data	Performance of a contract with you Necessary to comply with a legal obligation
To administer and protect our business, our Services, contravention or unauthorized use of our Services and your personal data (including security, fraud, court proceedings, troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). For any legal proceedings these rights may be exercised by the Data controller and any of its affiliates, subsidiaries, directors, etc.	Transaction Data Contact Data Technical Data Communications Data Extended Data	Necessary for our legitimate interests (for running our business, provision of administration and IT services, cybersecurity, to prevent fraud and in the context of a business reorganization or group restructuring exercise) Necessary to comply with a legal obligation.
To deliver relevant content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	Email address Device ID IP Address Location (at country, state, city, or postal code level) Gender Age Technical Data Cookies, pixels, or advertising tags	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) With your consent for targeted advertising and profiling to serve more accurate advertising content to you.
To use data analytics to improve our Services and products, marketing, customer relationships and experiences	Contact Data Technical Data Communications Data	Necessary for our legitimate interests, such as: to define types of customers for our products and services, to keep our Services updated and relevant, to develop our business and to inform our marketing strategy.
To respond to requests from law enforcement, including banks, card processing companies and investigation authorities	Contact Data Transaction Data Communications Data Location Data (at country, state, city, or postal code level) Technical Data Extended Data Any other information we are compelled to provide by law or by terms of use of the respective organization.	Necessary to comply with our legal obligations.
Booking Credit: in order to thank you for your loyalty to our services, to congratulate you on important events in your life, or for any other reason to express our gratitude to you, the Company has developed a system for awarding Booking Credit.	Contact Data	Performance of a contract with you Legitimate interest relating to your interaction with the Services.

6. AGGREGATED DATA

We may create aggregated data for internal use or for improving Services and creating new features. Aggregated data is anonymous and is not linked to any personal data. Aggregated information helps understand trends and customer needs so that new products and services can be considered and so existing products and services can be tailored to customer desires. We may share such aggregated data with our partners, without restriction, on commercial terms that we can determine in our sole discretion.

7. AI FUNCTIONS

Our Service may offer you different AI-based functions, like suggesting possible travel location tips and guides and an introductory conversation in live support chat. This list may be enlarged in the future. For that purpose, we may transfer your respective data to the relevant AI model provided to us by the trusted partner. Your data are safe and will be processed only for the purposes of providing the respective services to you.

8. MARKETING

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. Where you have interacted with us, we will send you marketing communications from time to time. Such marketing communications are usually sent by email or text (SMS). If you do not want to receive marketing communications, please refer to HOW TO OPT-OUT FROM SMS MESSAGES or HOW TO OPT-OUT FROM E-MAIL MESSAGES down below. You may also select the “unsubscribe” link in the communication we send to you.

When you receive communications from us, including marketing communications, we may share your personal data with third-party companies who help us conduct marketing activities. For example, we may use a third party to help us send email messages to you and help us understand how you have interacted with that email.
Depending on how you are using our Services, your needs and preferences, with the purpose of providing you with optimal possibilities, you may use our Linked Services, operated by the Data Controller or its affiliated companies (“Linked Services”). You may receive marketing information from these Linked Services depending on your profile settings and our matching algorithm. To stop receiving correspondence from the Linked Services you can click the unsubscribe link found at the bottom of each email you receive, or reach out to our support team via the CONTACT US link below.

You hereby agree that we may, at our own discretion, use any available channels of communication (including, but not limited to, email, phone, sms, push notifications, Whatsapp, Facebook, Wechat, QQ and any other messengers) for customer support and/or marketing purposes if you have provided us with such. You may at any time withdraw your consent to such communication by contacting our support team via the CONTACT US link below.

9. CHANGE OF PURPOSE

We will generally only use your personal data for the purposes for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis that allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

10. DISCLOSURES OF YOUR PERSONAL DATA

10.1 CAR RENTAL SUPPLIERS

In order to provide you with car rental services, we may transfer your personal data to third-party car rental suppliers. This transfer is necessary so that they can:

Evaluate your eligibility and fitness to rent a vehicle (e.g., based on driving license validity, age, or other legal requirements),
Communicate with you directly where needed, and
Prepare, conclude, and manage a legal agreement for the provision of car rental services.

These suppliers act as independent data controllers and will process your data in accordance with their own privacy policies. We recommend reviewing their privacy terms before completing your booking.

10.2. OUR SERVICE PROVIDERS AND STAFF

The personal data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data controller, in some cases, the personal data may be accessible to certain types of persons in charge, involved with the operation of our Services (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Data controller.

We may share your personal data you provide to us with specially selected service providers who assist us in delivering the products and services we offer for the sole purpose of providing the services or when we consider their services or products to be of interest to you. These service providers must adhere to strict confidentiality and data transfer obligations in a way that is consistent with this Privacy Policy and the agreements we enter into with them. We may cooperate with external service providers to:

oversee a customer personal data database;
help us in sending out emails, sms (message and data rates may apply) and presents;
help us with direct marketing;
assist us with storage and data analysis;
prevent fraudulent activities;
help us in maintaining, developing and improving our systems, websites, applications, and services;
collect payments;
provide you with an insurance product;

10.3 PARTNERSHIPS, AFFILIATES AND AUDIT

We may disclose your personal data to other third parties such as our partners, consultors, group companies and affiliates, external audit and assessment providers, provided they ensure the required level of confidentiality and privacy according to the applicable laws.

10.4. MARKETING AND PROMOTION PARTNERS

We may share limited personal data with trusted marketing and advertising partners, such as Meta (Facebook/Instagram) and Google, in order to:

Deliver relevant promotions and advertising,
Measure the effectiveness of our marketing campaigns,
Improve our services and tailor content to your interests.

The types of data shared may include device information, browsing activity on our website, anonymized identifiers, or contact details (e.g., email address, if you have consented to marketing).

Our partners process this data in accordance with their own privacy and data protection policies. We only work with platforms that maintain a high standard of security and data protection.

For more information about how Google protects business and user data, you can visit the Google Business Data Responsibility Site and Google Privacy Policy.

For more information about how Meta protects business and user data, you can visit Meta's Privacy Policy.

These partners act as independent data controllers or joint controllers, depending on the context of the processing. Where legally required, we will seek your explicit consent before sharing your data for marketing purposes.

The legal basis for this processing is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time, and/or our legitimate interests in promoting our services (Article 6(1)(f) GDPR), where applicable.

10.5. PAYMENT SERVICE PROVIDERS

To process your payments securely and efficiently, we may transfer your personal data to third-party payment service providers, such as those handling credit/debit card transactions, Apple Pay and Google Pay.

These providers require certain personal and payment-related data (e.g., name, payment method, transaction details) to:

Authorize and process your payment,
Prevent fraud and ensure transaction security, and
Fulfill their legal and regulatory obligations as licensed financial institutions.

These entities act as independent data controllers and will process your data in accordance with their own privacy policies. We encourage you to review the relevant provider’s terms and privacy policy prior to completing your payment.

10.6. TRANSFER OF BUSINESS

We may transfer or share a copy of your personal data in cases where the Data Controller or one of its properties, affiliates, or subsidiaries is part of a business transition, such as a merger, being acquired by another company, or selling part of its assets, or in the event of bankruptcy, dissolution, divestiture or any related or similar proceedings.

10.7. LEGAL DEFENSE

We may share your personal data to, in our discretion, (i) satisfy any applicable law, regulation, subpoena/court order, legal process or other government request, (ii) enforce our Terms of Use Agreement, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third party claims or allegations, (iv) protect against harm to the rights, our property or safety, our users or the public as required or permitted by law and (v) detect, prevent or otherwise address criminal (including fraud or stalking), security or technical issues.

10.8 INTERNATIONAL TRANSFERS

We may share personal data internally within the Data Controller’s subsidiary, affiliated and partner companies or with third parties for purposes described in this Privacy Policy. Personal data collected within the European Economic Area (“EEA”) may, for example, be transferred to countries outside of the EEA for the purposes as described in this Privacy Policy. We utilize standard contractual clauses approved by the European Commission, adopt other means under European Union law (such as, where applicable, corporate binding rules), and obtain your consent to legitimize data transfers from the EEA to the United States and other countries.

11. HOW LONG WILL WE KEEP YOUR PERSONAL DATA

We will retain your personal data for as long as necessary to fulfill the purposes we collected and/or processed it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

The Personal data is processed at the Data controller’s operating offices and in any other place where the parties involved with the processing are located. We also retain backups of the Services, including your personal data, on a rolling basis according to our internal data retention, disaster recovery, and business continuity policies. Our backups are stored off-site in the European Union, in secure facilities, in order to help ensure the protection of your personal data, and the Services.

11.1. EXCEPTIONS

We retain blacklists of fraudulent activity or security threats indefinitely in order to protect the security of our Services and your personal data. We share these blacklists with third-party service providers in order to continue to improve the security of our Services and your personal data.
In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research, statistical or other purposes, in which case we may use this information indefinitely without further notice to you.

11.2. DATA DELETION REQUESTS

If you wish to delete personal data we have collected during your use of our Services, You should send a request to our support team via the CONTACT US link below. Processing of your request will take some time to take effect. Thank you for your patience.

Please note that changing or deleting your personal data will only change or delete the data in our database for the purposes of future activities and for managing future communications. These changes and deletions may not entirely change or delete emails or personal data our Services may have already forwarded to other users or credit card companies or any other third parties, as they might still retain part of the data for their legitimate or lawful purposes.

Further, if you delete your personal data from our Services, but continue to use other Linked Services, you may receive emails from us regarding those Linked Services. Please refer to the MARKETING section above for further details.

We may keep your personal data, subject to the requirements of the law and the legitimate interests of the Data Controller. Please refer to the section PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA above for further details. In case of your request to delete all your personal data, you agree that your email will be stored in our database to avoid the creation of duplicate accounts and for identification purposes. The email will not be used in marketing activities, nor forwarded to any Linked Services or third parties.

Please note that, even after termination of Services and deletion of any personal data, as well as termination of any license granted hereunder, some content may continue to exist because of cached internet pages beyond our control.

12. CHANGES TO YOUR PROFILE AND OPT-OUT FROM COMMUNICATION

You define which information you store with us and how we communicate with you. The tips below will help you to tune that properly.

12.1. HOW TO MAKE CHANGES IN YOUR PROFILE

You have the right, at any time, to change or delete your personal data in your profile. Please follow these instructions:

Log in to your account;
Click the profile thumbnail at the top right-hand corner of the Website;
Select “Account”;
Click the pencil thumbnail in the section you would like to edit;
Edit your personal data;
Click Save.

12.2. HOW TO OPT OUT OF SMS MESSAGES

At the time you are in opting into the Service, we will send you an SMS message to confirm your registration. Depending on your profile settings, we may send you notifications about updates, alerts, information, promotions, specials, and other marketing offers.

If you wish to stop receiving SMS messages, you can cancel the SMS service at any time:

Just text "STOP" to the short code.
After you send the SMS message "STOP" to us, we will send you an SMS message to confirm that you have been unsubscribed.
After this, you will no longer receive SMS messages from us.

If you want to join again, just sign up as you did the first time, and we will start sending SMS messages to you again.

If you are experiencing issues with the messaging program, you can reply with the keyword HELP for more assistance, or you can get help directly via the CONTACT US section down below.

Please note that both SMS messages from us to you and from you to us may be subject to interruption due to various events of technical, governmental, weather or other nature. We bear no liability for delayed or undelivered messages.

As always, message and data rates may apply for any messages sent to you from us and to us from you. Depending on your profile settings, you should receive no more than 2 messages a week. If you have any questions about your text plan or data plan, it is best to contact your mobile provider.

12.3. HOW TO OPT OUT OF E-MAIL MESSAGES

You can decide which correspondence to receive from us. To stop receiving correspondence, you can:

Click the unsubscribe link found at the bottom of each email you receive or
by emailing your request to us at support@discovercarhire.com or
by changing the settings in your profile.

If you still have questions, please visit our Help Center page or contact our support team via the CONTACT US section below, and they will guide you through the process.

12.4. HOW TO DELETE YOUR PROFILE

You can delete your profile at any time. Please follow these instructions:

Log into your account;
Go to “Account”;
Click on the link “Delete Account” and confirm further steps.

13. YOUR LEGAL RIGHTS

13.1. RIGHTS OF EU USERS

If you are located in the European Union, as a data subject (a person whose personal information is collected, stored and processed), you have several rights under the General Data Protection Regulation (“GDPR”):

You have the right to obtain confirmation if your personal information is being processed by us. If that is the case, you can access your personal information and the following information:
- the purposes of the processing;
- the categories of personal information;
- to whom the personal information have been or will be disclosed
- the envisaged period for which the personal information will be stored, or the criteria used to determine that period.
If you would like to have a copy of your personal information from us, we will provide it only in case: (1) you prove your identity, (2) it will not adversely affect the rights and freedoms of others.
You have the right to demand that we erase your personal information, and we shall erase it without undue delay where one of the following grounds applies:
- this personal information is no longer necessary in relation to the purposes for which they were processed;
- you withdraw consent if the processing was based on your consent, and where there is no other legal ground for the processing;
- you object to the processing and there are no overriding legitimate grounds;
- your personal information has been unlawfully processed;
- your personal information has to be erased for compliance with a legal obligation.
You have the right to receive your personal information which you provided us with in a structured, commonly used and machine-readable format and have the right to transmit those data to another company, where: (a) the processing is based on your consent or on a contract; and (b) the processing is carried out by automated means.
You have the right to withdraw your consent for the processing of your personal information at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal information infringes GDPR.
You can exercise the above rights by contacting our support team via the CONTACT US section down below

13.2. RIGHTS OF US USERS

If you are located in the United States, the local Data Privacy Acts give you the right to exercise the following rights:

Right to know and access. You may submit a verifiable request for information regarding the:
categories of personal data we collect, use or share;
purposes for which categories of personal data are collected or used by us;
categories of sources from which we collect personal data; and
specific pieces of personal data we have collected about you.

You can find this information in the section WHAT DATA WE COLLECT AND HOW of this Privacy Policy.

Right to correct. You may submit a verifiable request to rectify inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data;
Right to delete. You may submit a verifiable request to close your account, and we will delete personal data about you that we have collected.
Right to prohibit the sale of your personal data. Please note that we do not sell your personal data.
Right to object to profiling and targeted advertising. You may submit a verifiable request to opt out of each of the above actions. Please note that these measures may negatively affect your customer experience with our website, app and third-party services.

You can exercise the above rights by contacting our support team via the CONTACT US section of this Privacy Policy.

Please note that the Privacy Acts vary from state to state. If you are based in the US, please consult your local certified legal advisor for more detailed regulations.

13.3. CITIZENS OF OTHER COUNTRIES

Please note that if you are not a citizen of the EU or the USA, you still have rights in relation to your personal data, and we would be happy to assist you with any queries in this regard. Please refer to the CONTACT US section below.

14. CONTACT US

Your Data Controller’s contact information is: AS Discover Car Hire, located at Kārļa Ulmaņa gatve 2, Rīga, LV-1004, registration number 40103690968.
Please send all the requests, including exercise of rights for EU, US and other users regarding personal data, as well as communications, inquiries, clarifications and provision of information to our support team via email at legal@discovercarhire.com. Please note that our customer support service may not work outside business hours in your area.

15. MISCELLANEOUS

15.1. OUR WEBSITE

We use industry-standard SSL (Secure Sockets Layer) technology, which encrypts all your personal data. The Website has a security certificate from PositivSSL that shows the Website is approved, fully tested, and certified by these two expert security systems. This means that you are safe from any viruses, identity theft, spyware, fraudulent credit card activity, spam, and internet scams while you are visiting the Website.

15.2. LINKS TO OTHER WEBSITES AND APPS

If you click on a link that takes you away from our Services to another website or application, you should remember that the Terms of Use Agreement and Privacy Policy of our Services no longer apply to the new website or application you visit. All your activity on any other website or application, including those with a link on the Services, is subject to the rules and regulations of that other website or application. Therefore, we recommend that you read all the policies of new websites and applications you visit to fully understand their rules and regulations for collecting, using, and sharing your personal data.

15.3. YOUR LIABILITY

You hereby confirm and guarantee that you will never generate any databases, websites, software, legal entities and services that compete with our Services. Such behavior will be fully investigated, and necessary legal action will be carried out, including, without limitation, civil, criminal, and injunctive redress.

We reserve the right to replace, modify or amend this Privacy Policy at our own discretion. It is your responsibility to review this page and check for any Privacy Policy updates. Please note the latest modification date at the bottom of the Privacy Policy.

The English version of this Privacy Policy prevails over any other language.

Last modified 27/10/2025