Last updated: 16 October 2026
We respect your privacy. This policy explains plainly what personal data we collect on this site and at our branches, why, for how long, and what rights you have, under the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and Portuguese Law 58/2019.
1. Data controller
Casavant, Lda. (which operates the FBCrent brand), tax ID (NIF) 508 083 508, with registered office at Estrada da Papanata 215 4900-470 Viana do Castelo. For any question about personal data, write to reservas@fbcrent.com or call +351 258 817 287.
2. What data we collect
| Situation | Data |
|---|---|
| Booking request | Name, email, mobile, address (street, postcode, town, country), tax ID (optional), driver age, dates and locations, chosen vehicle and extras, message or notes, language. |
| Vehicle pick-up (branch) | ID document, driving licence, credit card details for the deposit (processed by the payment terminal; we do not keep the full card number), contract signature. |
| Contact form | Name, company, tax ID, email, phone, subject and message. |
| Monthly proposal request | Company, tax ID, contact person, email, phone, desired start date and duration, vehicle. |
| Review request after the rental | Name, email and booking reference; we record whether the request was sent and whether the link was opened. |
| Unfinished requests (only with your consent) | Email, name (if already filled in) and, for bookings, the search details (vehicle, dates, locations and price). |
| Site statistics | Anonymous data: page visited, time, device type, origin and language. We do not store your IP address or identify people. |
We do not collect special categories of data (such as health or religion) and the site is not intended for people under 18.
3. Why and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handle your booking request, confirm availability, contact you and perform the rental contract | Performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Invoicing, accounting and tax obligations; reporting the driver to the authorities for offences | Compliance with legal obligations (point c) |
| Reply to messages and proposal requests | Pre-contractual steps at your request (b) and our legitimate interest in replying (f) |
| Fraud prevention and protecting our rights (for example, recovering damage or fines) | Legitimate interest (f) |
| Send a single reminder about a request you left unfinished | Your consent (a), given in the cookie notice |
| Review request after the rental (a single email, with opt-out) | Legitimate interest (point (f)) |
| Anonymous site usage statistics, to improve the service | Legitimate interest (anonymous data, no cookies) |
4. Unfinished requests and review request
If you accept in the cookie notice, we save the email you enter in the booking, contact or monthly proposal form in case you do not send it, so we can send you a single email to help you finish. The data is kept for at most 30 days and is deleted immediately if you complete the request. Every email contains a link to cancel the reminder; if you do, we delete the search details and keep only the email, so we do not contact you again. You can withdraw consent at any time under "Cookie preferences" in the site footer. Without consent, none of this is stored.
Review request. A few days after a rental ends, we may send you a single email asking for your opinion of the service, based on our legitimate interest in improving it (you are our customer and the email concerns the service you bought). Every email contains a link to stop receiving this request. We do not send advertising this way without your consent.
5. Who receives your data
- Service providers processing data on our behalf: website and database hosting, email service and payment services (Multibanco/bank). They are contractually bound to protect the data.
- Insurers and workshops, when needed to handle accidents, breakdowns or theft.
- Authorities (tax, police, judicial, traffic) when the law requires it, including identifying the driver for offences.
- We do not sell or give your data to third parties for marketing.
We do not intentionally transfer data outside the European Economic Area. If a provider does, we require adequate safeguards under the GDPR.
6. How long we keep it
- Bookings and contracts: for the duration of the relationship and the applicable limitation period; invoicing documents for 10 years, as tax law requires.
- Messages and proposal requests: as long as needed to reply and, if no contract follows, up to 24 months.
- Unfinished requests: at most 30 days (section 4).
- Review request: the sending record stays with the booking.
- Statistics: only in anonymous form.
7. Your rights
At any time you can: access your data; rectify it; ask for erasure; ask to restrict processing; object to processing based on legitimate interest; ask for portability of the data you gave us; and withdraw consent without affecting earlier processing. To exercise your rights write to reservas@fbcrent.com. We reply within one month and may ask for proof of identity.
You also have the right to lodge a complaint with the supervisory authority, the Portuguese Data Protection Authority (CNPD), at cnpd.pt.
8. Security
We use appropriate technical and organisational measures: encrypted connection (HTTPS), password-protected back office with per-user permissions, an action log on bookings and backups. No system is completely secure; in case of a data breach that puts you at risk we will notify as required by law.
9. Cookies
The site uses only the essential cookie and, if you choose, the cookie that stores your choice. See the Cookie Policy.
10. Changes
We may update this policy. The date of the last update is at the top. If a change is significant we will tell you on the site.
Marketing communications
If you tick the relevant box, we keep your email and name to send you news and promotions from FBCrent. This consent is separate and optional: it does not affect your booking or contact request. We record the date and the text you accepted, and you can withdraw at any time through the link in every email or by contacting us. Data is kept until you unsubscribe or, at most, 24 months without interaction.