Last Modified: 28/08/2025
Introduction
Carsmaster Ltd (hereinafter “we”, “us” or “our”), operating under the trade names Carmaster Cyprus and Carmaster, are committed to the lawful and transparent processing of personal data for our customers, potential customers, and business partners.
We collect and process personal data strictly in accordance with the EU General Data Protection Regulation (GDPR – Regulation 2016/679) and the applicable legislation of the Republic of Cyprus.
This Privacy Policy explains how we collect, use, disclose, transfer, and store personal data, specifically in relation to our activities in vehicle rentals, vehicle sales, financing arrangements, and related services.
Our Role Under the Regulation
As Data Controllers, we are responsible for deciding how your personal data is collected, used, and safeguarded.
How Personal Data Are Collected
We collect personal data:
- Directly from you, when you submit forms on our website, request a quotation, sign a rental or sales agreement, or contact us directly.
- Through third parties, such as insurance providers, financing institutions, or credit reference agencies where required.
Via our website and lead forms, including data entered voluntarily when requesting information.
Types of Personal Data Collected
Depending on the nature of your interaction with us (rental, purchase, financing), we may collect the following categories of data:
- Identification Data: Full name, ID/passport number, driving licence details.
- Contact Data: Email address, telephone number, physical address.
- Financial Data: Bank account details, payment information, credit history where relevant.
- Transaction Data: Rental agreements, purchase contracts, service records.
- Digital Data: Data submitted via online forms, cookies, or IP addresses.
Insurance & Compliance Data: Proof of insurance, accident reports, or regulatory documentation.
Purposes of Processing
We process personal data strictly for legitimate business purposes, including:
- Provision of services: to conclude and execute vehicle rental, sales, or financing agreements.
- Customer management: to maintain accounts, provide support, and send important notices.
- Legal compliance: to meet regulatory requirements, including driving licence and insurance checks.
- Security & risk management: to detect fraud, misuse, or illegal activity.
Marketing: to inform you about new services or promotions, only with your explicit consent.
Disclosure of Personal Data
We do not sell personal data. We may share data only with:
- Affiliates and subsidiaries within Carmaster Cyprus, for service provision.
- Authorized service providers, including insurers, banks, IT and payment processors, acting strictly on our instructions.
- Regulatory authorities or courts, where disclosure is legally required.
Legal successors, in the event of merger, acquisition, or restructuring.
Data Retention
- Rental and sales agreement data: retained for the duration of the agreement and for a statutory period thereafter, as required under Cypriot law.
- Financial and transactional records: retained in line with tax and accounting obligations.
- Marketing data: retained until you withdraw consent.
Legal Bases for Processing
We rely on the following legal grounds under GDPR:
- Contractual necessity: processing necessary for the performance of agreements (rentals, sales, financing).
- Legal obligation: compliance with applicable laws.
- Consent: for marketing communications or optional data uses.
Legitimate interests: ensuring service quality, risk management, and operational efficiency.
Data Security
We implement strict technical and organizational measures to prevent unauthorized access, alteration, or disclosure of personal data. Only authorized personnel may access such data, and solely for legitimate business purposes.
Your Rights
As a data subject, you are entitled to:
- Access your personal data.
- Rectification of inaccurate or incomplete data.
- Erasure of data, under conditions set by law.
- Restriction of processing.
- Data portability.
- Objection to processing, including profiling.
- Withdraw consent at any time, where processing is based on consent.
Requests should be made in writing to: info@carmastercyprus.com.
Automated Decision-Making
We do not rely on fully automated decision-making that produces legal or significant effects on you, unless expressly consented and subject to safeguards.
Changes to This Policy
We may update this Privacy Policy. Updates will be posted on www.carmastercyprus.com with a revised “last modified” date. Continued use of our website or services after changes constitutes acceptance.
Contact Information
For any questions, concerns, or to exercise your data rights, please contact:
Carsmaster Ltd
Email: info@carmastercyprus.com
Address: 268 Strovolos Avenue, 2048 Strovolos, Nicosia, Cyprus
Telephone: (+357) 7000 2212
If you believe your rights are not respected, you may also lodge a complaint with the Office of the Commissioner for Personal Data Protection (http://www.dataprotection.gov.cy).