Common use of Data Protection Notice Clause in Contracts

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the Privacy Policy available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy Policy, Owner, its subsidiaries or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental related communications through personal references. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR and/or UK Data Protection Act 2018 (as amended) (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-identity- related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive and/or The Privacy and Electronic Communications (EC Directive: ) Regulations 2003 (as amended) (or equivalent legislation as implemented in local law): Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. Such withdrawal applies with future effect only and does not affect the lawfulness of processing before your withdrawal. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire tyre pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection usage of data from Vehicle Telematics Systems from the Vehicle Systems, does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost lost, stolen or stolenfor providing roadside or emergency services. Please refer to our Privacy Policy Notice (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s OEMs we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy notice and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries affiliates (see Owner’s Privacy Policy Notice for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement/regulatory body; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party (e.g. your employer where business rentals are concerned) which assists the Owner to execute its rights and obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) Where personal data is transferred to the United States, Owner enters into Standard Contractual Clauses or another approved mechanism (e.g. EU-US Data Privacy Framework, UK Extension to the EU-US Data Privacy Framework) for cross-border transfers. (e) Owner retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) access and port their personal data;

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR and/or UK Data Protection Act 2018(as amended) (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive and/or The Privacy and Electronic Communications (EC Directive: ) Regulations 2003 (as amended) (or equivalent legislation as implemented in local law): Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy Notice (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy notice and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries affiliates (see Owner’s Privacy Policy Notice for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party which assists the Owner to execute its obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) Personal data to the United States from the European Union, the United Kingdom and/or Switzerland, Enterprise Holdings, Inc. and its wholly owned subsidiaries is transferred in accordance with EU and UK approved Standard Contractual Clauses. (e) Owner retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) access and port their personal data; (ii) ask for their personal data to be rectified (where it is inaccurate or incomplete), or to have it erased where Owner no longer has a legitimate reasons to process it; (iii) ask for processing to be restricted; (iv) object to Owner's processing of their personal data; and (v) lodge a complaint with the applicable supervisory authority. (g) If Renter has any queries in relation to this Notice, Xxxxxx can contact Owner by post at the address stated in Section 1 or through the Contact Us form located at xxxxx://xxxxxxx.xxx.xxx. (h) Additional information about Owner's processing of personal data may be provided as and when required and / or applicable.

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the Privacy Policy available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy Policy, Owner, its subsidiaries or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental related communications through personal references. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party which assists the Owner to execute its obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) Personal data to the United States from the European Union, the United Kingdom and/or Switzerland, Enterprise Holdings, Inc. and its wholly owned subsidiaries is transferred in accordance with EU and UK approved Standard Contractual Clauses. For more information or if Renter has an unresolved privacy or data use concern that Owner has not addressed to Xxxxxx's satisfaction, see Owner’s Privacy Policy for information on how to contact Owner's third-party dispute resolution provider. (e) Owner retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) access and port their personal data; (ii) ask for their personal data to be rectified (where it is inaccurate or incomplete), or to have it erased where Owner no longer has a legitimate reasons to process it; (iii) ask for processing to be restricted; (iv) object to Owner's processing of their personal data; and (v) lodge a complaint with the applicable supervisory authority. (g) If Renter has any queries in relation to this Notice, Xxxxxx can contact Owner by post at the address stated in Section 1 or through the Contact Us form located at xxx.xxxxxxx.xxx.xxx. (h) Additional information about Owner's processing of personal data may be provided as and when required and / or applicable.

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the Privacy Policy available at xxxxx://xxxxxxx.xxx.xxxPolicy. In addition to Owner’s Privacy Policy, Owner, its subsidiaries or Enterprise Holdings, Inc. representatives may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law):GDPR: a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior behaviour towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen, or in the event the vehicle has not been returned at the specified date and time. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposespurposes (Please note any data or information requested or made by the police for any investigation whatsoever will be complied with); i. For fraud prevention purposes, to verify identity and authenticate identity-identity- related documentation as well as additional points of contact for rental related communications through personal references. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with and notify them of your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and XxxxxxRenter’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-identity- related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. Such withdrawal applies with future effect only and does not affect the lawfulness of processing before your withdrawal. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire tyre pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection usage of data from Vehicle Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost lost, stolen or stolenfor providing roadside or emergency services. Please refer to our Privacy Policy Notice (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s OEMs we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy notice and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries affiliates (see Owner’s Privacy Policy Notice for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement/regulatory body; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party (e.g. your employer where business rentals are concerned) which assists the Owner to execute its rights and obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) Where personal data is transferred to the United States, Owner enters into Standard Contractual Clauses or another approved mechanism (e.g. EU-US Data Privacy Framework) for cross-border transfers. (e) Owner retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) access and port their personal data; (ii) ask for their personal data to be rectified (where it is inaccurate or incomplete), or to have it erased where Owner no longer has a legitimate reasons to process it; (iii) ask for processing to be restricted; (iv) object to Owner's processing of their personal data; and (v) lodge a complaint with the applicable supervisory authority. (g) If Renter has any queries in relation to this Notice, Xxxxxx can contact Owner by post at the address stated in Section 1 or through the Contact Us form located at xxxxx://xxxxxxx.xxx.xxx.

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. iv. For loss prevention, maintain a record of individuals whose past interactions indicate they may present a non-payment or safety risk. v. Use, share and receive information with other market participants for fraud prevention and security purposes. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“"OEM”") to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” OEM or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;and

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the Privacy Policy available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy Policy, Owner, its subsidiaries or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental related communications through personal references. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party which assists the Owner to execute its obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) Personal data to the United States from the European Union, the United Kingdom and/or Switzerland, Enterprise Holdings, Inc. and its wholly owned subsidiaries is transferred in accordance with EU and UK approved Standard Contractual Clauses. For more information or if Renter has an unresolved privacy or data use concern that Owner has not addressed to Xxxxxx's satisfaction, see Owner’s Privacy Policy for information on how to contact Owner's third-party dispute resolution provider. (e) Owner retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) access and port their personal data; (ii) ask for their personal data to be rectified (where it is inaccurate or incomplete), or to have it erased where Owner no longer has a legitimate reasons to process it; (iii) ask for processing to be restricted; (iv) object to Owner's processing of their personal data; and (v) lodge a complaint with the applicable supervisory authority. (g) If Renter has any queries in relation to this Notice, Xxxxxx can contact Owner by post at the address stated in Section 1 or through the Contact Us form located at xxx.xxxxxxx.xxx.xxx. (h) Additional information about Owner's processing of personal data may be provided as and when required and / or applicable.

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the Privacy Policy available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy Policy, Owner, its subsidiaries or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. iv. For loss prevention, maintain a record of individuals whose past interactions indicate they may present a non-payment or safety risk. v. Use, share and receive information with other market participants for fraud prevention and security purposes. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental related communications through personal references. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported as lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party which assists the Owner to execute its obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) Personal data to the United States from the European Union, the United Kingdom and/or Switzerland, Enterprise Holdings, Inc. and its wholly owned subsidiaries is transferred in accordance with EU and UK approved Standard Contractual Clauses. For more information or if Renter has an unresolved privacy or data use concern that Owner has not addressed to Xxxxxx's satisfaction, see Owner’s Privacy Policy for information on how to contact Owner's third-party dispute resolution provider. (e) Owner retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) access and port their personal data; (ii) ask for their personal data to be rectified (where it is inaccurate or incomplete), or to have it erased where Owner no longer has a legitimate reasons to process it; (iii) ask for processing to be restricted; (iv) object to Owner's processing of their personal data; and (v) lodge a complaint with the applicable supervisory authority. (g) If Renter has any queries in relation to this Notice, Xxxxxx can contact Owner by post at the address stated in Section 1 or through the Contact Us form located at xxx.xxxxxxx.xxx.xxx. (h) Additional information about Owner's processing of personal data may be provided as and when required and / or applicable.

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-identity- related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For On the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. Such withdrawal applies with future effect only and does not affect the lawfulness of processing before your withdrawal. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire tyre pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection usage of data from Vehicle Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost as lost, stolen or stolenfor providing roadside or emergency services. Please refer to our Privacy Policy Notice (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s OEMs we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. . (c) Owner may disclose personal data to: (i) its affiliates (see Owner’s Privacy Notice for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement/regulatory body; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party (e.g. your employer where business rentals are concerned) which assists the Owner to execute its rights and obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy notice and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. Where Personal Data is transferred to the United States, Owner enters into Standard Contractual Clauses or another approved mechanism (e.g. EU-US Data Privacy Framework) for cross-border transfers. (ce) Owner may disclose retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcementaccess and port their personal data;

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. iv. For loss prevention, maintain a record of individuals whose past interactions indicate they may present a non-payment or safety risk. v. Use, share and receive information with other market participants for fraud prevention and security purposes. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. Such withdrawal applies with future effect only and does not affect the lawfulness of processing before your withdrawal. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“"OEM”") to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” OEM or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;and

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-identity- related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and XxxxxxRenter’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy Notice (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, RenterXxxxxx’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy notice and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries affiliates (see Owner’s Privacy Policy Notice for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the latest Privacy Policy Notice available at xxxxx://xxxxxxx.xxx.xxx. In addition to Owner’s Privacy PolicyNotice, Owner, its subsidiaries affiliates or Enterprise Holdings, Inc. may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law): a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-identity- related documentation as well as additional points of contact for rental related communications through personal referencescommunications. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy Notice (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy notice and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries affiliates (see Owner’s Privacy Policy Notice for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement; (iii) to meet legal compliance requirements such as anti-money laundering laws; (iv) any necessary third party which assists the Owner to execute its obligations under or enforcement of the Rental Agreement; or (v) as part of a sale or merger of Owner's business assets or any related due diligence process. (d) Personal data to the United States from the European Union, the United Kingdom and/or Switzerland, Enterprise Holdings, Inc. and its wholly owned subsidiaries is transferred in accordance with EU and UK approved Standard Contractual Clauses. (e) Owner retains personal data for commercially reasonable periods of time or in accordance with specific laws or policies. (f) In some circumstances the Renter has the right to: (i) access and port their personal data; (ii) ask for their personal data to be rectified (where it is inaccurate or incomplete), or to have it erased where Owner no longer has a legitimate reasons to process it; (iii) ask for processing to be restricted; (iv) object to Owner's processing of their personal data; and (v) lodge a complaint with the applicable supervisory authority. (g) If Renter has any queries in relation to this Notice, Xxxxxx can contact Owner by post at the address stated in Section 1 or through the Contact Us form located at xxxxx://xxxxxxx.xxx.xxx. (h) Additional information about Owner's processing of personal data may be provided as and when required and / or applicable.

Data Protection Notice. (a) Owner, as data controller, collects personal data about the Renter and any Authorised Driver in connection with the Rental Agreement or any related agreement or service and uses it as described below and in accordance with the Privacy Policy available at xxxxx://xxxxxxx.xxx.xxxPolicy. In addition to Owner’s Privacy Policy, Owner, its subsidiaries or Enterprise Holdings, Inc. representatives may: (i) For the legal basis under GDPR (or equivalent legislation as implemented in local law):GDPR: a. On the basis of contractual necessity: i. Process personal data (including where applicable Vehicle Data) to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement; and to manage: the rental, the commercial relationship and Owner's loyalty program, with the Renter. ii. To communicate important information regarding your rental. These communications are transactional in nature and will be sent to you via email, text or calls. b. On the basis of the Owner's legitimate business interests, where such interests are not overridden by Xxxxxx and Authorised Driver's rights: i. To assist us in providing better products and services: for example, to evaluate the performance of our staff, to assess the quality of products and services received and to help us improve our websites, facilities and services. ii. Store information indicating that the Renter or Authorised Driver could be a risk for future rentals, such as recording information about traffic or criminal offences or abusive behavior behaviour towards Owner's staff. This may mean that future rental requests may not proceed. iii. To locate our Vehicle when it is reported as lost or stolen, or in the event the vehicle has not been returned at the specified date and time. c. Use and share your information with third parties to prevent fraud and protect our business interests and rights, privacy, safety and property, or that of individuals and the public. We will do this to respond to law enforcement requests, collect unpaid bills, to avoid liability for penalties you incur (e.g. traffic citations) and for claims processing purposes; i. For fraud prevention purposes, to verify identity and authenticate identity-identity- related documentation as well as additional points of contact for rental related communications through personal references. ii. Compile statistics and analysis about Xxxxxx's and Authorised Driver's use of Owner's products and services. d. On the basis of Xxxxxx's consent: i. Send Renter marketing information in situations where consent is required. e. To establish, exercise or defend legal claims: i. Provide details of any accidents in which Renter or any Authorised Drivers are involved to relevant insurance databases. (ii) For the legal basis under the ePrivacy Directive: Link Vehicle Data with Renter information with consent where required, to fulfil both Owner’s and Xxxxxx’s obligations under the Rental Agreement save for in instances where Owner’s Vehicle is reported as lost or stolen where no consent will be required. To withdraw your consent at any time please contact your local branch to re-issue your rental ticket with and notify them of your revised consent preferences. (b) The Vehicle may be equipped with emergency notification functionalities ("eCall System"), which is provided by the manufacturer of Renter Vehicle (“OEM”) to ensure appropriate assistance is provided in the case of an emergency. The Vehicle may also be equipped with technology that collects and transmits data, including information collected from event data recorders, global positioning devices, or any other similar technology, which may be controlled by the “OEM” or Owner ("Telematics Systems"). When installed and where permissible, the Telematics Systems will enable Owner to collect and use information on the basis of Owner’s legitimate interest, performance of the Rental Agreement or where required with your consent, including but not limited to: (1) location information; (2) collision information; and (3) vehicle operation information, such as operational condition, mileage, tire pressure, fuel status, and other diagnostic and performance information. This information may be combined with information Renter has provided Owner and used to fulfil both Owner’s and Renter’s obligations under the Rental Agreement. Owner’s use of the information may also include storage of this information after the expiration of the Rental Agreement. If a Vehicle has been reported as potentially or actually lost or stolen, Owner may access Vehicle location data or request access to it from the relevant OEM or system. Renter not consenting to the collection of data from Telematics Systems from the Vehicle does not prohibit Owner from obtaining and using data collected from Vehicle in the event the Vehicle is reported lost or stolen. Please refer to our Privacy Policy (available at xxxxx://xxxxxxx.xxx.xxx) for a complete description of our privacy practices, who we share information with (including the OEM which manufactures your Rental Vehicle) and a list of OEM’s we currently use. Where the hire is fulfilled by a Car Club/Car Share Vehicle the Owner uses these capabilities enabled by these telematics systems to (i) issue commands to the Vehicle, such as unlocking and locking the Vehicle, for the purpose of facilitating your trip, (ii) gather information regarding the beginning and end of your trip for billing purposes, (iii) track location information and/or immobilize the Vehicle in the event of an overdue, lost, or stolen Vehicle and (iv) monitor location information should we be directly alerted by you with regards to issues with the Vehicle. If Renter or any occupant pairs a mobile device with the Vehicle’s navigation or infotainment systems, personal information may be transferred to and stored on these systems. You should note, this personal information is shared by you directly with the OEM. OEMs' contact details and information about their data protection practices and terms can be found on their respective websites. Owner cannot guarantee the privacy or confidentiality of such information and it is Xxxxxx’s responsibility to delete all personal information from these systems before returning Vehicle to avoid subsequent occupants or users of Vehicle accessing this information. If Renter downloads a mobile application made available by the OEM and Renter registers the Vehicle in that application, Renter’s use of the application may result in the sharing of personal data, vehicle information, location information and driving characteristics with the vehicle manufacturer. Xxxxxx’s use of these applications is strictly governed by the OEM’s terms and conditions and privacy policy and Owner is not in any way responsible for, and Renter releases Owner from, any claim or cause of action which may arise from Xxxxxx’s use of these applications. Prior to returning the Vehicle, it is Xxxxxx’s responsibility to either remove the application or delete the Vehicle from the application. (c) Owner may disclose personal data to: (i) its subsidiaries (see Owner’s Privacy Policy for details) or Enterprise Holdings, Inc. for the purposes listed above, (ii) to law enforcement;