Below we inform you about data types processed by VING, processing purposes, legal bases, recipients, storage periods, and your rights.

This notice applies to data processing connected to VING rental services.

A. Controller

Data controller: VING (address).

Privacy contact: adatvedelem@ving.hu

B. Categories of personal data

VING may process master data, communication data, contract data, financial data, voluntary data, special categories in claims/accidents, third-party data, and telematics location data.

C. Legal bases

GDPR Art. 6(1)(a) consent, 6(1)(b) contract, 6(1)(c) legal obligation, 6(1)(f) legitimate interests, and Art. 9(2)(f) for legal claims regarding special data.

D/1. Booking and rental

Data is processed to perform bookings/contracts, customer service, partner settlements, fraud prevention, document checks, credit assessments (where applicable), and legally required retention.

Recipients may include IT providers, call centers, financial providers, credit institutions, group entities, agencies, and franchise partners.

D/2. Marketing

Data may be used for loyalty, bonus programs, research, and direct marketing where permitted.

You can object at any time to direct marketing: adatvedelem@ving.hu

D/3. Corporate rentals / third-party payment

If your employer or a third party pays for rental, relevant rental and billing records may be shared with that payer for settlement and accountability purposes.

D/4. Claims, accidents, violations

Data is processed for claim handling, incident support, legal compliance, and claim enforcement. This can include health data where strictly necessary for legal claims.

D/5. Connected vehicles

Telematics/location data may be processed to prevent property crime, handle overdue returns, investigate territorial breaches, and assess damages/accidents.

D/6. Statutory processing

Data processing may be required by law for authority requests, accounting and tax obligations.

D/7. Process and offer improvement

Data may be used for analytics, quality improvement, planning, service optimization, and address quality checks, including algorithmic profiling where lawful.

D/8. Events and donations

Data may be used for invitations, customer care activities, and charitable initiatives.

D/9. Cookies

Cookies are used on our sites for functionality and optimization. Cookie details and opt-out options are available in the cookie policy.

E. Transfers to third countries

Transfers may occur for international rentals, partner programs, or incidents, based on adequacy decisions or GDPR Art. 46 safeguards.

F. Retention

Data is stored as long as needed for purpose and legal obligations. Inactive customer accounts may be deleted after extended inactivity. Some accounting records can be retained up to 10 years.

G. Your rights

You have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to supervisory authority.

Hungarian SA: NAIH, H-1125 Budapest, Szilágyi Erzsébet fasor 22/c., ugyfelszolgalat@naih.hu