BCS AUTO OÜ Privacy Policy 

BCS AUTO OÜ values your privacy. We aim to ensure that you feel secure when providing your personal data.

Personal data refers to any information that can be used to identify an individual. BCS AUTO OÜ collects and processes personal data for the provision of services, conclusion of contracts, identification of individuals, communication with clients, and for other purposes set out in this policy. Processing personal data is necessary for the provision of BCS AUTO OÜ services. Services cannot be used without providing personal data.

We have implemented technical and organizational measures to protect your data against loss, alteration, theft, or unauthorized access. Access to personal data is limited to authorized personnel only.

Note: These principles do not apply to the processing of data of legal entities. The representative of a legal entity acts as the authorized person submitting data on behalf of the company.

Our website may contain links to third-party websites. When visiting such sites, their privacy policies apply. BCS AUTO OÜ’s privacy policy does not cover the processing of data on third-party websites accessed via external links.

Below we describe how and for what purposes personal data is processed.

Purposes of Data Collection and Processing

Personal data is collected for the following purposes:

  • Preparation of offers for classic cars;

  • Preparation of offers for vehicle storage services;

  • Processing inquiries related to the online store;

  • Responding to customer inquiries and providing necessary information;

  • Provision of services;

  • Providing the best possible customer support;

  • Issuing invoices;

  • Organizing campaigns and competitions;

  • Preparing reports and statistical analyses for monitoring and

  • evaluating services;

  • Protecting company property (e.g., GPS-based monitoring devices in rental cars). Note: The purpose is not to track your movements unless necessary for determining the expected return time of a rental car or locating a vehicle that has not been returned or has been stolen.

Direct Marketing

If you have given consent, we may use your personal data for direct marketing, including invitations to participate in campaigns and contests, and sending newsletters and offers via your selected communication channels (post, SMS, email, social networks).

Direct marketing contact information (name, email, mobile phone) will only be used with your consent. You may withdraw your consent for direct marketing at any time.

Personal Data Collected

Depending on the service and the information you provide, the following data may be processed:

  • First and last name

  • Personal identification code and date of birth

  • Address, residence, postal address

  • Telephone, mobile phone

  • Email address

  • Age and gender

  • Driver’s license number, issuing country, validity

  • Copy of driver’s license

  • Payment method details

  • Data included in the rental agreement and additional service information

  • Amounts paid

  • Rental vehicle location and movement (GPS-based monitoring)

Automatically Collected Information

When visiting the website, anonymous general information is collected, including:

  • Name of internet service provider

  • Websites visited prior to visiting BCS AUTO OÜ’s website

  • Information searched/downloaded from the BCS AUTO OÜ website

  • Date and time of visit

  • Operating system and browser version

These data are used to improve the website’s attractiveness and functionality. They are not linked to any individual and are not shared with third parties.

Cookies

Cookies are small text files stored on a user’s device. They facilitate website navigation and allow for personalized settings. You can disable cookies via your browser settings.

Sources of Personal Data

  • From you: personal data you provide when making a booking via www.bcsauto.ee or when participating in campaigns and contests;

  • From rental car GPS monitoring devices: data automatically collected regarding vehicle location and movements.

Sharing of Personal Data

  • Service providers: Personal data may be shared with service providers (e.g., IT companies, GPS fleet management service providers) who process data according to our instructions and are required to protect it.

  • Law enforcement and authorities: Personal data may be disclosed to law enforcement, national, or local authorities to fulfill legal obligations or protect our legal rights.

Data Processing Location

Personal data is processed exclusively within the European Union (EU) and the European Economic Area (EEA). Data is not transferred outside these regions.

Data Retention

  • Customers who have signed a rental agreement: up to 7 years (according to Estonian Accounting Act § 12).

  • Data of clients without a rental agreement: up to 2 years, but at least until the rental end date indicated during booking.

  • Complaints, claims, and inquiries: 1 month to 2 years, longer if legal disputes or settlements require.

  • Campaigns and competitions: up to 6 months, longer if complaints arise.

  • GPS monitoring device recordings: up to 1 year, longer if required for problem resolution.

Data is deleted securely so that it can no longer be associated with an individual.

Your Rights

  • Access: the right to request information on personal data processing and receive copies securely.

  • Rectification: the right to request correction of inaccurate or incomplete data.

  • Withdrawal of Consent: the right to withdraw consent for direct marketing.

  • Objection: the right to object to processing based on legitimate interests (processing may continue if there are overriding legitimate reasons).

  • Erasure: the right to request deletion of personal data unless legally required to retain it.

  • Restriction: the right to request the restriction of data processing in certain circumstances.

  • Data Portability: the right to receive or transfer personal data to another controller for data provided under consent or contract, processed automatically.

All rights may be exercised by submitting a written request to BCS AUTO OÜ. 

Updates and Changes

BCS AUTO OÜ may update the privacy policy. Changes will be communicated at least 1 month before taking effect on www.bcsauto.ee.

Contact Information

BCS AUTO OÜ
Reg. No.: 11371248
Address: Türi 6/2, Tallinn 11313, Estonia
Email: info@bcsauto.ee

If you are not satisfied with the response, you have the right to submit a complaint to the Estonian Data Protection Inspectorate: www.aki.ee