By using VerusCars.com services (“Services”, “Website”), you entrust Jolorenta, UAB (operating as VerusCars) with your personal data and authorize us to process it in accordance with this Privacy Policy (“Policy”) and our Terms & Conditions (“Terms”).
Because VerusCars operates as a car rental marketplace and intermediary, the processing of your personal data is required to match you with appropriate suppliers, facilitate reservations, prevent fraud, and ensure safe and transparent service.
If you do not agree to this Policy, the Terms, or any specific provision contained within them, you will unfortunately be unable to use our Services, as VerusCars cannot technically or legally provide brokerage and reservation functionality without processing essential personal data.
This Policy describes in detail:
- which categories of your personal data we collect,
- how, when, and why this data is processed,
- how long your data is retained,
- circumstances under which data is shared with partners (Suppliers),
- the legal grounds for processing,
- your GDPR rights and how to exercise them,
- how to contact our Data Protection Officer (DPO),
- how updates to this Policy will be communicated.
We strongly encourage you to read this Policy carefully before using our Website or Services. If you have any questions, you may contact us using the information provided in the Contact Us section.
Please note that this Policy and the Terms may be updated, amended, or supplemented periodically to reflect legislative changes, industry best practices, or improvements to our Services. VerusCars will inform you of significant changes by notifying you through the contact information you have provided or by publishing an updated version on the Website.
Personal data means any information relating to an identified or identifiable natural person, processed in accordance with the GDPR and applicable privacy laws.
1. WHO WE ARE
The VerusCars platform and all related Services are operated by:
Jolorenta, UAB
Company code: 304557074
VAT code: LT100018169217
Registered address: Baltijos pr. 43-77, LT-94129 Klaipėda, Lithuania
For all matters related to personal data, Jolorenta, UAB acts as the Data Controller.
This means we determine which personal data is processed, the purposes of processing, and the legal basis upon which this processing occurs.
Because VerusCars operates internationally and cooperates with multiple independent car rental suppliers worldwide, we process personal data necessary to facilitate bookings, verify data accuracy, prevent fraudulent activity, and ensure that Suppliers can fulfill the reservation you select.
Data Protection Officer (DPO)
We have appointed a Data Protection Officer responsible for overseeing data protection compliance, addressing privacy-related inquiries, responding to GDPR requests, and ensuring the lawful handling of personal data.
For any questions related to this Privacy Policy, including requests to exercise your GDPR rights, please contact our DPO at:
Full contact details are listed in the Contact Us section of this Policy.
2. WHEN YOU ACCEPT THIS PRIVACY POLICY
By accessing or using our Website, creating a booking, submitting personal information, contacting customer support, or otherwise engaging with VerusCars Services, you acknowledge and confirm that:
- you have read this Privacy Policy in full,
- you understand the purposes and legal bases of processing,
- you agree to the processing of your personal data as outlined herein,
- you accept our Terms & Conditions, which form an integral part of using our Services.
If you disagree with any part of this Policy, you must refrain from using the Website or Services, as VerusCars cannot perform reservation brokerage functions without processing the personal data necessary for contract execution, fraud prevention, and customer communication.
Your continued use of VerusCars after any updates or amendments to this Policy constitutes acceptance of the revised version.
3. AGE RESTRICTION
VerusCars Services are not intended for individuals under the age of 18.
Because the VerusCars platform is used to enter legally binding vehicle rental agreements with independent Suppliers, we require all users to be adults and capable of entering into contractual obligations.
Accordingly:
- Persons under 18 years old are strictly prohibited from using our Website, submitting personal data, creating bookings, or engaging with our Services in any form.
- If we determine that personal data belonging to a minor has been collected, we will delete it immediately and take reasonable measures to prevent further processing.
- We may request age verification when necessary to protect user privacy and ensure proper contract formation.
If you believe that we may have inadvertently collected personal data from someone under 18 (or under the applicable age of majority in your jurisdiction), please notify us immediately via the Contact Us section so that we may take appropriate corrective actions.
1. To create and manage your VerusCars account
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| Creating a user account to allow you to access reservations, manage bookings, save preferences, receive bonuses, and use VerusCars features. | • Contact Data (name, surname, email, phone, age, country)
• Technical Data (IP address, device info, login timestamps) • Extended Data (language preferences, settings) |
Performance of a contract | No data shared with suppliers at this stage |
2. To provide the VerusCars Services (reservation, communication, voucher issuance)
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Maintaining your profile
• Answering questions • Allowing you to make a booking • Sending booking confirmations and vouchers • Localizing content (language, currency, local offers) |
• Contact Data
• Transaction Data (if applicable) • Technical Data • Extended Data • Location Data |
• Performance of a contract
• Legitimate interest to provide efficient services |
Yes — only the data needed to create/confirm your reservation with the chosen Supplier |
3. To process payments and secure your booking
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Pre-authorizing or collecting prepayment amounts
• Transferring funds related to the booking (deposit, prepayment, upgrades, no-show fees) • Supporting payment operations through Stripe or other PSPs |
• Contact Data
• Transaction Data (card token, payment history, timestamps) |
• Performance of a contract
• Legitimate interest in preventing fraud |
Supplier receives only information required to confirm and secure the rental (no full card data is ever shared) |
4. To communicate with you and manage our relationship
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Notifying you about changes to Terms/Privacy Policy
• Sending service-related messages • Providing customer support via email or phone |
• Contact Data
• Communications Data (emails, chat logs, call notes) |
• Performance of a contract
• Legal obligation (consumer rights laws) |
Only if your support request requires coordination with a Supplier (e.g., dispute, modification) |
5. To ensure security, prevent fraud, and protect VerusCars and users
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • System monitoring and protection
• Detecting fraudulent or unauthorized activity • Technical troubleshooting • Security logging, server maintenance |
• Technical Data
• Transaction Data • Contact Data • Extended Data |
Legitimate interest (ensuring platform security, fraud prevention) | Generally no — unless fraud investigation involves a Supplier or law enforcement |
6. To deliver localized content & improve your experience
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Showing local language, currency, relevant offers
• Providing region-specific supplier options |
• Location Data (country, region, city)
• Technical Data • Cookies/analytics data (via Cookie Policy link) |
Legitimate interest (improving user experience) | No direct Supplier sharing at this stage |
7. To provide personalized content and marketing (with your consent)
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Showing relevant ads
• Measuring ad effectiveness • Sending newsletters or promotions (if subscribed) |
• Email address
• Device ID • IP address • Location Data • Technical Data • Cookies, pixels, advertising identifiers |
• Consent (for marketing & profiling)
• Legitimate interest (analytics) |
No — Suppliers do not receive marketing or behavioral data |
8. To analyze usage data and develop/improve VerusCars
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Analytics, testing, reporting
• Improving platform functionality • Developing new features • Understanding customer behavior |
• Contact Data (minimal)
• Technical Data • Communications Data |
Legitimate interest (platform improvement) | No Supplier access — aggregated data only |
9. To comply with legal obligations
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Responding to law enforcement requests
• Handling disputes, complaints, legal claims • Preventing financial crime |
• Contact Data
• Transaction Data • Communications Data • Technical Data • Any legally required information |
Legal obligation | Possibly — only when required by law or as part of dispute resolution |
10. To operate loyalty programs, bonuses, or VerusCars Credit
| Purpose / Activity | Types of Personal Data | Legal Basis | Shared with Suppliers? |
| • Awarding bonus credit
• Applying loyalty discounts • Managing user rewards |
• Contact Data
• Account Data |
• Performance of a contract
• Legitimate interest (customer retention) |
No Supplier sharing — unless credit is applied toward a Supplier booking |
4. AGGREGATED DATA
We may create aggregated data for internal use or for improving Services and creating new features. Aggregated data is anonymous and is not linked to any personal data. Aggregated information helps understand trends and customer needs so that new products and services can be considered and so existing products and services can be tailored to customer desires. We may share such aggregated data with our partners, without restriction, on commercial terms that we can determine in our sole discretion.
5. AI FUNCTIONS
Our Service may offer you different AI-based functions, like suggesting possible travel location tips and guides and an introductory conversation in live support chat. This list may be enlarged in the future. For that purpose, we may transfer your respective data to the relevant AI model provided to us by the trusted partner. Your data are safe and will be processed only for the purposes of providing the respective services to you.
6. MARKETING
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. Where you have interacted with us, we will send you marketing communications from time to time. Such marketing communications are usually sent by email or text (SMS). If you do not want to receive marketing communications, please refer to HOW TO OPT-OUT FROM SMS MESSAGES or HOW TO OPT-OUT FROM E-MAIL MESSAGES down below. You may also select the “unsubscribe” link in the communication we send to you.
When you receive communications from us, including marketing communications, we may share your personal data with third-party companies who help us conduct marketing activities. For example, we may use a third party to help us send email messages to you and help us understand how you have interacted with that email.
Depending on how you are using our Services, your needs and preferences, with the purpose of providing you with optimal possibilities, you may use our Linked Services, operated by the Data Controller or its affiliated companies (“Linked Services”). You may receive marketing information from these Linked Services depending on your profile settings and our matching algorithm. To stop receiving correspondence from the Linked Services you can click the unsubscribe link found at the bottom of each email you receive, or reach out to our support team via the CONTACT US link below.
You hereby agree that we may, at our own discretion, use any available channels of communication (including, but not limited to, email, phone, sms, push notifications, Whatsapp, Facebook, Wechat, QQ and any other messengers) for customer support and/or marketing purposes if you have provided us with such. You may at any time withdraw your consent to such communication by contacting our support team via the CONTACT US link below.
7. DISCLOSURES OF YOUR PERSONAL DATA
VerusCars operates as a car rental marketplace platform, which means that in order to deliver our Services, we must collaborate with multiple independent entities. Below we outline cases in which your personal data may be shared.
7.1. CAR RENTAL SUPPLIERS
To facilitate and complete your booking, VerusCars must transfer certain personal data to the independent car rental supplier you have selected. This transfer is required for the supplier to:
evaluate eligibility to rent a vehicle (e.g., driver age, driver’s license validity, mandatory legal requirements),
verify booking details such as pick-up time, location, and vehicle category,
prepare, conclude, and manage the rental agreement directly with you,
communicate with you (when necessary) regarding booking changes, issues, or local requirements.
Car rental suppliers act as independent Data Controllers.
Once your personal data is transferred for the purpose of completing the booking, the Supplier processes your data under its own privacy policy and rental agreement.
We strongly recommend reviewing the Supplier’s terms, privacy notices, and rental requirements before completing your booking on VerusCars.
7.2. OUR SERVICE PROVIDERS AND STAFF
Certain personal data may be accessed and processed by VerusCars personnel or by trusted external service providers who act as Data Processors on behalf of Jolorenta, UAB. These entities process personal data only under our documented instructions and for strictly limited purposes, such as:
- customer support and communication,
- email / SMS / push notification delivery,
- hosting, infrastructure, and cloud services,
- website and platform maintenance,
- user database management,
- fraud detection and prevention,
- data storage, backup, archiving, and recovery,
- insurance or protection products provided through our platform,
- analytics and platform performance optimization.
All such providers must comply with:
- strict confidentiality agreements,
- GDPR-compliant data processing agreements (DPAs),
- technical and organizational security measures,
- VerusCars’ internal data handling policies.
Only those VerusCars employees who require access for operational purposes—such as customer service, technical support, risk and fraud specialists, finance, or complaint handling—may view limited personal data.
7.3. PARTNERSHIPS, AFFILIATES, GROUP COMPANIES & AUDITORS
We may share your personal data with:
- affiliated companies within our corporate structure,
- business consultants, legal advisors, or auditors,
- external assessment or compliance entities,
- partners participating in jointly offered services or promotions.These third parties are permitted access only to the extent required to perform their contracted functions, and must ensure confidentiality and GDPR-level protection.Such transfers support:
- financial auditing,
- legal compliance,
- internal reporting,
- corporate governance,
- partnership-based service improvements.
None of these third parties may use your personal data for independent marketing purposes without your explicit consent.
7.4. MARKETING AND PROMOTION PARTNERS
VerusCars may share limited personal or pseudonymized data with trusted marketing and advertising partners such as:
- Google (Ads, Analytics, Tag Manager),
- Meta (Facebook, Instagram),
TikTok, - email campaign automation partners,
- remarketing and personalization platforms.These partners help us:
- display relevant promotions,
- measure campaign effectiveness,
- analyze customer interactions,
- tailor VerusCars content and offers.Depending on your settings and provided consent, shared data may include:
- device and browser information,
- website browsing activity,
- hashed or pseudonymized identifiers,
- email address (with explicit consent),
- approximate location derived from technical signals.These partners act either as:
- Independent Data Controllers (e.g., Google, Meta), or
- Joint Controllers, depending on the processing context.We share such data only when:
- the user has provided consent (Art. 6(1)(a) GDPR), OR
- we have a legitimate interest in promoting our services (where legally permitted).You may withdraw consent at any time through your account settings, browser tools, cookie preferences, or by contacting us.For transparency, we encourage you to review:
- Google’s Privacy Policy and Business Data Responsibility documentation,
- Meta’s Privacy Policy and Data Handling Practices.
7.5. PAYMENT SERVICE PROVIDERS
To authorize, process, and secure your payment, VerusCars may share personal data with trusted and licensed Payment Service Providers (PSPs), including:
- Stripe,
- Apple Pay,
- Google Pay,
- local acquiring banks,
- fraud-prevention services.
These providers require certain information, such as:
- your name,
- payment method details (tokenized card info),
- billing data,
- transaction history,
- security attributes (IP, device, attempt logs).
Payment providers act as independent data controllers because they are subject to financial regulations, AML rules, and card industry standards (PCI DSS).
We recommend reviewing their privacy policies before confirming payment.
VerusCars never receives or stores full credit card numbers, only secure tokens.
7.6. TRANSFER OF BUSINESS
If VerusCars or Jolorenta, UAB undergoes any business transition, such as:
- a merger,
- acquisition,
- restructuring,
- sale of assets,
- bankruptcy, insolvency, or reorganization,
- your personal data may be transferred as part of that transaction to the acquiring or successor entity.
Any such transfer will occur in accordance with applicable data protection laws and with continued protection of your privacy rights.
7.7. LEGAL DEFENSE AND COMPLIANCE
VerusCars may disclose your personal data when required or permitted by law to:
- comply with a subpoena, court order, regulatory request, or other legal process,
- cooperate with law enforcement or governmental authorities,
- enforce or investigate violations of our Terms,
- defend against legal claims or disputes,
- prevent, detect, or address fraud, security breaches, or technical issues,
- protect the rights, safety, and property of VerusCars, our users, Suppliers, or the public.Such disclosures will always be limited to the minimum amount of information necessary.
7.8. INTERNATIONAL TRANSFERS
VerusCars operates internationally and may transfer personal data outside the European Economic Area (EEA) in order to:
facilitate bookings with Suppliers based in non-EEA countries,
work with global service providers (hosting, support, marketing, analytics),
support cross-border operational processes.
Where such transfers occur, VerusCars ensures that they comply with GDPR Chapter V requirements through:
- EU Standard Contractual Clauses (SCCs) approved by the European Commission,
- Binding Corporate Rules (BCRs) where applicable,
- data processing agreements ensuring adequate safeguards,
- transferring data only to jurisdictions with an adequacy decision,
- OR obtaining your explicit consent, if no other safeguard applies.
We ensure that international recipients apply security standards equivalent to GDPR.
8. HOW LONG WE KEEP YOUR PERSONAL DATA
VerusCars retains your personal data only for as long as it is necessary to fulfill the purposes for which the data was collected, including for:
- providing Services,
- enabling and administering bookings,
- maintaining our contractual obligations,
- resolving disputes,
- preventing fraud,
- complying with legal, accounting, tax, and regulatory requirements.
We apply internal data retention schedules that ensure personal data is not stored longer than needed. When determining the appropriate retention period, VerusCars considers:
the amount, nature, and sensitivity of the personal data,
the potential risk of harm in the event of unauthorized access or disclosure,
the purposes for which data is processed and whether these goals can be achieved by other means,
applicable statutory requirements (e.g., accounting and financial law),
limitation periods for legal claims,
operational needs (e.g., resolving booking-related disputes with Suppliers).
Your personal data may be stored in VerusCars operational systems, secure cloud infrastructure, encrypted databases, and in certain cases, backup and disaster recovery systems.
Backups are retained for limited periods and stored off-site within the European Union, in secure and access-controlled environments that comply with industry-leading standards.
Backup storage serves the purpose of:
- business continuity,
- disaster recovery,
- safeguarding the integrity and availability of the Services.Backups are not used for active processing and are automatically overwritten according to strict retention cycles.
8.1 EXCEPTIONS
Fraud Prevention and Security Blacklists
To maintain a safe and trustworthy marketplace environment, VerusCars may retain certain personal data indefinitely in cases involving:
- suspected or confirmed fraudulent activity,
- abuse of our platform,
- chargeback abuse,
- security threats,
- behavior that may cause harm to VerusCars, our users, or Suppliers.
Such records are kept solely to:
- prevent repeated fraud attempts,
- protect the integrity of the VerusCars platform,
- ensure Supplier and user safety,
- comply with legal obligations where applicable.
We may share this information with fraud prevention partners or service providers under strict confidentiality and GDPR-compliant agreements.
Anonymised and Aggregated Data
In some circumstances, VerusCars may anonymise your personal data in a manner that irreversibly de-identifies it. Once anonymised, the data is no longer considered personal data under GDPR and may be used:
- for research,
- statistical modeling,
- product development,
- long-term analytics,
- improving service quality.
Anonymised data may be retained indefinitely because it cannot be linked to you.
8.2 DATA DELETION REQUESTS
You may request deletion of your personal data processed by VerusCars at any time by contacting us via the CONTACT US section or writing directly to:
dpo@veruscars.com
Upon receiving your request, VerusCars will:
- verify your identity (to prevent unauthorized deletion),
- assess which data can be erased immediately,
- inform you if certain data must be retained due to legal, regulatory, or fraud-prevention obligations.
Deletion requests may take some time to process due to:
- internal verification procedures,
- technical limitations associated with backup systems,
- ongoing disputes, chargebacks, or Supplier inquiries,
- legal obligations requiring retention for accounting or audit purposes.
- Important Notes About Deletion
Data shared externally cannot always be deleted instantly.
Personal data previously shared with:
- Suppliers,
- payment processors,
- third-party service providers,
- fraud prevention agencies,
- may be retained by them under their own legal obligations.
VerusCars cannot force external entities to delete data when they act as independent controllers.
2. Deleting your data does not erase data stored in backups immediately
Backups operate on a rolling overwrite cycle.
Your data will be permanently removed once the backup retention window expires.
3. Linked Services
If you delete your personal data from VerusCars but continue using other Linked Services provided by Jolorenta or affiliated companies, you may still receive communications related to those services.
4. Minimal data may be preserved to prevent account recreation
If you request “full deletion,” VerusCars may retain your email address in a hashed or suppressed form solely to:
prevent accidental duplicate account creation,
comply with suppression lists for marketing opt-outs,
fulfill legal record-keeping obligations.
This minimized email record:
- will not be used for marketing,
- will not be shared with third parties,
- will not be used to contact you.
5. Cached pages outside VerusCars control
Some data may continue to exist temporarily due to:
- cached webpages,
- search engine indexing,
- third-party archiving tools,
which VerusCars does not control.
9. CHANGES TO YOUR PROFILE AND OPT-OUT FROM COMMUNICATION
At VerusCars, we believe in transparency and in giving you full control over the information you share with us and the way we communicate with you.
This section explains how you can manage, modify, restrict, or remove your personal data and how you can control the types of messages you receive through different communication channels (email, SMS, push notifications, and in-platform alerts).
We encourage all users to review these settings regularly to ensure they reflect your preferences.
9.1. HOW TO MAKE CHANGES IN YOUR PROFILE
You have the right — at any time and without limitation — to modify, update, correct, or delete certain personal data stored in your VerusCars profile.
Your online account allows you to update important aspects of your profile, including:
- contact information (name, email, phone number),
- saved search preferences,
- language and communication preferences,
- primary payment method (tokenized),
- country of residence,
- marketing preferences,
- consent settings (e.g., cookies, analytics, offers),
- account security information.
How to update your information
To make changes:
Log in to your VerusCars account.
Click the profile icon located in the top right corner of the Website.
Select “Account” from the drop-down menu.
Navigate to the section you wish to edit and click the “pencil” (edit) icon.
Update any information you wish to modify.
Click Save to confirm.
Additional information about profile edits:
Email changes may require re-verification for security purposes.
Phone number updates may require SMS confirmation.
Some fields, such as booking-related information, cannot be changed retrospectively due to Supplier requirements.
Any change may take several minutes to propagate across all VerusCars internal systems.
If you need assistance, our Customer Support team is available to guide you through the process.
9.2. HOW TO OPT OUT OF SMS MESSAGES
By opting in to receive SMS messages from VerusCars, you may receive communications such as:
- booking confirmations and updates,
- reminders about pick-ups, drop-offs, or required documents,
- service alerts during your rental period,
- urgent notifications related to your active reservation,
- promotional or informational messages (depending on your consent).
We respect your right to decide how you want to be contacted.
How to stop receiving SMS messages
You may opt out at any time by:
Sending the word “STOP” to the short code or number from which you received our SMS.
You will receive a confirmation message indicating that you have been unsubscribed.
After confirmation, you will no longer receive SMS messages from us unless you opt in again.
How to rejoin SMS messaging
If you wish to resume receiving messages, simply:
opt in again during a booking process, or
update your communication settings in your VerusCars profile.
Technical limitations
SMS services may, from time to time, experience disruptions due to:
carrier limitations,
system load,
geographical restrictions,
governmental or regulatory interference,
weather conditions, or
other factors outside VerusCars’ control.
Therefore, we cannot guarantee 100% message delivery reliability.
Costs
Standard messaging and data rates set by your mobile provider may apply.
Marketing SMS messages are limited (typically no more than 2 per week), unless you expressly request more frequent updates.
If you need additional help, you may text “HELP” or contact our support via the CONTACT US section.
9.3. HOW TO OPT OUT OF EMAIL MESSAGES
VerusCars uses email to communicate a wide variety of information, including:
- booking confirmations, vouchers, receipts,
- reminders and important updates,
- support messages related to your trip,
- marketing offers, promotions, and travel-related content (based on your preferences),
- account security notifications (mandatory),
- policy updates and legal notices (mandatory).
How to stop receiving marketing emails
You may opt out at any time using any of the following methods:
- Click the unsubscribe link located at the bottom of any marketing email.
- Log in to your VerusCars account and update your communication preferences.
- Send an email to support@veruscars.com with a request to opt out.
Important notes
Opting out of marketing emails does not unsubscribe you from essential operational messages (e.g., booking confirmations, pick-up instructions, payment receipts, legal notices).
Changes may take up to 72 hours to take effect due to email system synchronization.
If you continue to receive emails after opting out, please contact our support team so we can investigate and assist.
9.4. HOW TO DELETE YOUR PROFILE
You may delete your VerusCars profile at any time if you no longer wish to use our Services.
How to delete your account
Log in to your VerusCars account.
Go to “Account”.
Select “Delete Account”.
Follow the on-screen steps to confirm your request.
Once confirmed, your profile will be deactivated and scheduled for deletion according to our internal data retention rules.
Before deleting your account, please note:
Deleting your account does not automatically cancel active bookings. You must cancel them separately according to the cancellation policy.
We may retain certain information where legally required (e.g., accounting, fraud prevention, dispute resolution).
Data already shared with Suppliers, payment processors, and other independent controllers cannot be deleted by VerusCars; deletion must be requested directly from those entities.
Your email address may remain in our suppression list to prevent creating duplicate accounts and to ensure marketing opt-outs remain respected.
Some data may persist temporarily in encrypted backups until they automatically expire.
If you need assistance with the deletion process, please contact our Data Protection Officer at:
dpo@veruscars.com
10. YOUR LEGAL RIGHTS
Depending on where you reside, you may have specific legal rights related to the personal data VerusCars collects and processes about you.
We respect these rights fully and provide simple mechanisms to exercise them.
Below is an overview of your rights as a user, grouped by legal jurisdiction.
10.1. RIGHTS OF EU USERS (GDPR)
If you are located in the European Union, the General Data Protection Regulation (“GDPR”) grants you a number of rights regarding your personal data. These rights apply regardless of whether you have an active VerusCars account or have only interacted with our Services.
• Right of Access (Article 15 GDPR)
You have the right to obtain confirmation as to whether VerusCars processes your personal data.
If your data is being processed, you may request access to:
- the purposes of the processing;
- the categories of personal data involved;
- the recipients or categories of recipients who have received or will receive your data (including Suppliers, payment processors, marketing partners);
- the envisaged retention period or the criteria used to determine how long the data is stored;
- your rights under GDPR;
- the source of data if not provided directly by you;
- the existence of automated decision-making, if applicable.
You may also request a copy of the personal data we hold.
To protect all users, we may require:
identity verification, and
confirmation that providing the data will not adversely affect the rights or freedoms of others.
• Right to Erasure (“Right to Be Forgotten”) — Article 17 GDPR
You have the right to request deletion of your personal data if one of the following grounds applies:
the data is no longer needed for the purposes for which it was collected;
you withdraw consent and no other legal basis applies;
you object to processing and there are no overriding legitimate grounds;
the data was processed unlawfully;
deletion is required by EU or Member State law.
Please note:
We may retain certain information where required for legal obligations (e.g., accounting rules), fraud prevention, dispute resolution with Suppliers, or compliance purposes.
• Right to Rectification (Article 16 GDPR)
You may request correction of inaccurate or incomplete personal data at any time.
Most corrections can be made directly in your VerusCars profile.
• Right to Data Portability (Article 20 GDPR)
You may receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller when:
the processing is based on consent or contract, and
the processing is carried out by automated means.
• Right to Withdraw Consent (Article 7 GDPR)
If your data is processed based on consent (e.g., marketing), you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of prior processing.
• Right to Object (Article 21 GDPR)
You may object at any time to processing based on our legitimate interests, including:
profiling for personalization,
marketing activities,
analytics or product improvement.
If you object to marketing, we will stop immediately.
If you object to other processing, we will stop unless we demonstrate compelling legitimate grounds.
• Right to Restrict Processing (Article 18 GDPR)
You may request that we limit processing of your data when:
the accuracy is contested,
processing is unlawful but you oppose erasure,
data is no longer needed but required for legal claims,
you have objected and verification is pending.
• Right to Lodge a Complaint (Article 77 GDPR)
You may file a complaint with your national supervisory authority.
You may choose the authority:
- in your country of residence,
- in your country of employment, or
- where you believe the infringement occurred.
We recommend contacting us first — we will gladly assist in resolving any concerns.
You may exercise all GDPR rights by contacting us via the CONTACT US section or writing to:
dpo@veruscars.com
10.2. RIGHTS OF U.S. USERS
If you reside in the United States, your privacy rights depend on your state’s applicable laws, including:
CCPA / CPRA (California),
VCDPA (Virginia),
CPA (Colorado),
CTDPA (Connecticut),
UCPA (Utah),
and other emerging U.S. state privacy statutes.
While these laws differ, they commonly provide the following rights:
• Right to Know / Access
You may request details regarding:
categories of personal data collected;
categories of personal data shared or disclosed;
the purposes for processing;
categories of sources of personal data;
third parties receiving your data;
specific pieces of personal data we hold about you.
Much of this information appears in the section WHAT DATA WE COLLECT AND HOW.
• Right to Correct
You may request correction of inaccurate or incomplete personal data.
• Right to Delete
You may request deletion of personal data we hold about you, subject to legal, contractual, or security exceptions.
• Right to Opt Out of “Sale” or “Sharing” of Personal Data
VerusCars does not sell personal data as defined by U.S. laws.
Some states treat certain types of online advertising as “sharing.”
Where applicable, you may opt out.
• Right to Opt Out of Profiling / Targeted Advertising
You may request to disable:
behavioral profiling,
targeted advertising,
certain types of automated decision-making.
Opting out may impact personalization features.
• Right to Non-Discrimination
You will not be denied service or charged differently for exercising your rights.
To exercise your U.S. privacy rights, contact us through the CONTACT US section or email:
dpo@veruscars.com
Because U.S. state laws differ, we recommend consulting a legal professional if you have detailed questions about your state’s specific rights.
10.3. RIGHTS OF USERS FROM OTHER COUNTRIES
Even if you are not a resident of the EU or the United States, you may still benefit from privacy rights under local laws in your country.
Depending on your jurisdiction, these rights may include:
- the right to access personal data,
- the right to correction or deletion,
- the right to restrict processing,
- the right to withdraw consent,
- the right to be informed about processing purposes,
- the right to object to marketing or profiling,
- the right to lodge a complaint with a supervisory authority.
VerusCars is committed to respecting applicable privacy laws globally and will make reasonable efforts to support all users regardless of their country of residence.
If you have questions about how your rights apply, please contact us through the CONTACT US section or email our DPO:
dpo@veruscars.com
11. MISCELLANEOUS
11.1. Website Security
VerusCars is committed to maintaining the highest security standards to protect your personal data and payment information.
We use industry-standard SSL (Secure Sockets Layer) and TLS encryption, ensuring that all data transmitted between your browser and our servers is securely protected from interception, unauthorized access, or alteration.
Additional technical and organizational safeguards include:
- secure hosting in the European Union,
- firewalls and intrusion detection systems,
- continuous security monitoring,
- restricted access to personal data based on role and authorization,
- encryption of sensitive information,
- regular penetration testing and vulnerability assessments,
- compliance with PCI-DSS requirements for payment processing partners.
These measures help protect you against:
- identity theft,
- fraudulent credit card activity,
- phishing or spoofing attacks,
- spyware or malware targeting user information,
- unauthorized access to your account.While no system is entirely immune to security risks, VerusCars employs industry-leading practices to minimize such risks and protect your data.
11.2. Links to Third-Party Websites and Applications
Our Services may contain links to third-party websites, platforms, apps, or services operated by partners, Suppliers, affiliates, or independent entities. When you click a link that directs you away from VerusCars, please note:
This Privacy Policy and our Terms & Conditions no longer apply once you leave our platform.
We do not control, endorse, or accept responsibility for the content, security, privacy practices, or data handling policies of third-party websites or applications.
Any personal data you provide to such external websites or apps will be processed in accordance with their own privacy policies and terms.
We strongly recommend reviewing all privacy policies and terms of service of any external website or application before submitting personal data or engaging with the service.
11.3. Your Liability and Acceptable Use
By using the VerusCars platform, you confirm and guarantee that you will not:
- use our Services for unlawful, fraudulent, or harmful purposes,
- attempt to reverse-engineer, scrape, extract, or copy data or functionality from the platform,
- build, assist in building, or attempt to build competing databases, marketplaces, aggregators, rental-comparison engines, or similar services,
- create automated systems (bots, scrapers, crawlers) to access or interact with our Services,
- misuse any information made available through the platform.
Any violation of these commitments may result in:
- suspension or termination of your account,
- reporting to relevant authorities,
- civil, administrative, or criminal liability,
- injunctive relief measures.
VerusCars reserves all legal rights necessary to protect its intellectual property, platform integrity, database structure, Supplier relationships, and technological infrastructure.
11.4. Updates to This Privacy Policy
We may update, amend, or modify this Privacy Policy from time to time to reflect:
- changes in legal or regulatory requirements,
- improvements to our Services or technology,
- updates in data processing practices,
- new features, products, or partnerships,
- evolving security standards.
All changes will be posted on this page with an updated “Last modified” date.
We encourage you to review this Privacy Policy periodically to stay informed about how your personal data is protected.
If the changes materially affect your rights or how we process your personal data, we will notify you using the contact information you have provided or via a notice on our Website.
11.5. Language
This Privacy Policy may be translated into multiple languages for convenience.
However, in the event of discrepancies or inconsistencies, the English version shall prevail and be considered the authoritative legal version.