Last updated: July 10, 2026

This Privacy Policy explains how RosCar Czech Republic collects, uses, stores, shares, and protects personal data when you visit https://roscar.cz/, search for a rental vehicle, submit a booking request, contact us, or otherwise use our services.

RosCar Czech Republic operates as a car rental aggregator. We provide access to rental vehicle offers from local and international car rental companies. Depending on the selected offer, your booking may be processed by RosCar Czech Republic, the relevant rental company, or both parties.

1. Data Controller

For personal data processed through this website, the data controller is:

Name: RosCar Czech Republic
Website: https://roscar.cz/
Email: [email protected]

For certain booking-related processing activities, the selected car rental company may act as an independent data controller. Its own privacy policy and rental terms may therefore also apply.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification data: first name, last name, date of birth, age, nationality, passport or identification document details, and driver’s license information where required for a booking.
Contact data: email address, telephone number, residential address, and preferred contact method.
Booking data: pick-up and return locations, rental dates and times, selected vehicle, flight number, hotel details, requested extras, additional driver information, and booking reference.
Payment data: payment status, payment method, transaction reference, billing information, currency, and the amount paid. Complete payment card details are normally processed directly by the relevant payment service provider and are not stored by us.
Communication data: messages, emails, support requests, complaints, feedback, and other information you provide when communicating with us.
Technical data: IP address, browser type, device type, operating system, language settings, referring website, pages visited, session information, and approximate location based on your IP address.
Usage data: information about how you search for vehicles, interact with filters, use the website, and respond to website content.
Marketing preferences: your choices regarding promotional emails, cookies, analytics, and similar technologies.
Review data: your name, booking number, rating, review text, and any other information submitted with a customer review.

Please do not send sensitive personal data unless it is specifically requested and necessary for the rental service.

3. How We Collect Personal Data

We may collect personal data:

directly from you when you complete a booking form, contact us, submit a review, or use our website;
automatically through cookies, server logs, analytics tools, and similar technologies;
from the local or international car rental company involved in your booking;
from payment service providers;
from customer support, communication, fraud prevention, or technical service providers;
from another person making a booking on your behalf.

If you provide personal data relating to another driver, passenger, or customer, you must ensure that you have the right to provide that information and that the person has been informed about this Privacy Policy.

4. Purposes and Legal Bases for Processing

We process personal data only when we have a valid legal basis under applicable data protection law.

4.1 Processing a Booking

We use your personal data to search for available vehicles, submit and confirm booking requests, communicate booking details, arrange vehicle pick-up or delivery, and provide requested rental extras.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

4.2 Sharing Booking Information with Rental Companies

We share the information necessary to process your booking with the local or international rental company providing the selected vehicle.

Legal basis: performance of a contract or taking steps before entering into a contract.

4.3 Payments and Fraud Prevention

We process relevant transaction and booking information to collect payments, issue refunds, prevent fraudulent bookings, verify transactions, and protect our website and customers.

Legal basis: performance of a contract, compliance with legal obligations, and our legitimate interests in preventing fraud and protecting our services.

4.4 Customer Support

We use your contact, booking, and communication data to answer questions, resolve problems, process changes or cancellations, and handle complaints.

Legal basis: performance of a contract and our legitimate interests in providing effective customer support.

4.5 Legal and Accounting Requirements

We may process and retain information required for tax, accounting, consumer protection, dispute resolution, law enforcement, regulatory, and other legal purposes.

Legal basis: compliance with legal obligations and our legitimate interests in establishing, exercising, or defending legal claims.

4.6 Website Security and Improvement

We use technical and usage data to secure the website, diagnose errors, prevent misuse, analyse website performance, and improve our content and booking services.

Legal basis: our legitimate interests in operating, maintaining, securing, and improving our website. Where legally required, analytics and similar technologies are used only with your consent.

4.7 Marketing Communications

We may send promotional messages about rental offers, destinations, or related services when you have given consent or when another lawful basis permits such communication.

Legal basis: your consent or our legitimate interests where permitted by applicable law.

You may unsubscribe at any time by using the unsubscribe option included in a marketing message or by contacting us at [email protected].

4.8 Customer Reviews

We may verify, moderate, and publish reviews submitted by customers. We may use booking information to confirm that a review relates to a genuine rental experience.

Legal basis: your consent and our legitimate interests in presenting genuine customer feedback and maintaining the reliability of our platform.

5. Information Required for a Booking

Certain personal data is necessary to search for a vehicle, process a booking, communicate with the rental company, or meet legal and rental requirements. If you do not provide the required information, we may be unable to complete or confirm your booking.

6. Car Rental Companies

RosCar Czech Republic is an aggregator and does not necessarily own or operate the vehicles displayed on the website. Rental services are provided by independent local and international car rental companies.

When you select an offer or submit a booking, we may transfer your personal data to the relevant rental company. The rental company may use your information to:

confirm vehicle availability;
prepare and perform the rental agreement;
verify your identity and driving eligibility;
collect payment or a security deposit;
arrange vehicle delivery and return;
provide insurance or optional rental services;
manage fines, tolls, damage claims, accidents, or disputes;
comply with legal and regulatory obligations.

The rental company may process your personal data as an independent controller according to its own privacy policy. You should review the rental conditions and privacy information associated with your selected offer.

7. Service Providers and Other Recipients

We may share personal data with trusted third parties where necessary to operate the website and provide our services, including:

local and international car rental companies;
booking and reservation technology providers;
website hosting and cloud service providers;
payment processors, banks, and financial institutions;
email, messaging, and customer support providers;
analytics, advertising, and cookie technology providers, subject to your consent where required;
fraud prevention, cybersecurity, and identity verification providers;
accountants, auditors, insurers, legal advisers, and professional consultants;
public authorities, courts, regulators, police, or law enforcement bodies where disclosure is legally required;
potential buyers, investors, or successors in connection with a merger, acquisition, restructuring, or transfer of business assets.

Service providers acting on our behalf may process personal data only according to our instructions, contractual requirements, and applicable data protection law.

8. International Data Transfers

Some rental companies or service providers may be located outside the Czech Republic or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we use appropriate safeguards where required. These may include:

a European Commission adequacy decision;
European Commission Standard Contractual Clauses;
additional contractual, organisational, or technical safeguards;
another legally recognised transfer mechanism;
your explicit consent in specific circumstances where permitted by law.

You may contact us for more information about the safeguards applicable to a particular international transfer.

9. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, and similar technologies to operate correctly, remember preferences, analyse traffic, improve performance, and support advertising or marketing activities.

Cookies may be divided into the following categories:

Strictly necessary cookies: required for core website functions, security, booking forms, and user preferences.
Functional cookies: used to remember settings and provide enhanced website features.
Analytics cookies: used to understand website traffic, visitor behaviour, and website performance.
Advertising cookies: used to measure campaigns and display relevant advertising.

Non-essential cookies are used only after you provide consent where consent is legally required. You can accept, reject, or manage cookies through the cookie consent tool available on the website.

You may also control cookies through your browser settings. Disabling certain cookies may affect the availability or performance of some website functions.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including the provision of services, compliance with legal obligations, resolution of disputes, prevention of fraud, and enforcement of agreements.

Retention periods may depend on the type of information and the reason for processing. In general:

booking and transaction information may be retained for the period required by tax, accounting, consumer protection, and limitation laws;
customer support communications may be retained while a request, complaint, or dispute remains relevant;
marketing information is retained until you withdraw consent, object to processing, or unsubscribe;
cookie and analytics data is retained according to the duration stated in the cookie consent tool or the relevant provider’s settings;
information needed for legal claims may be retained until the applicable limitation period has expired.

When personal data is no longer required, it will be deleted, anonymised, or securely restricted from further use unless continued retention is required by law.

11. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, and other unlawful processing.

These measures may include encrypted connections, access controls, secure hosting, backups, monitoring, staff confidentiality requirements, and restricted access to booking information.

No method of transmitting or storing data is completely secure. Although we take reasonable measures to protect personal data, we cannot guarantee absolute security.

12. Your Data Protection Rights

Subject to the conditions and limitations established by the GDPR and other applicable laws, you may have the following rights:

Right to be informed: you have the right to receive clear information about how your personal data is processed.
Right of access: you may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to rectification: you may request correction of inaccurate or incomplete personal data.
Right to erasure: you may request deletion of personal data when there is no longer a valid reason to process it.
Right to restriction: you may request that the processing of your personal data be limited in certain circumstances.
Right to data portability: where applicable, you may receive personal data you provided in a structured, commonly used, and machine-readable format or request its transfer to another controller.
Right to object: you may object to processing based on legitimate interests, including profiling related to those interests.
Right to object to direct marketing: you may object at any time to the use of your personal data for direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights relating to automated decisions: you may have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
Right to lodge a complaint: you may submit a complaint to the competent data protection supervisory authority.

These rights are not absolute. We may refuse or limit a request where permitted or required by law. We may also request information necessary to verify your identity before processing a request.

13. How to Exercise Your Rights

To exercise your data protection rights, contact us at:

Email: [email protected]
Website: https://roscar.cz/

Please include sufficient information to identify your booking or account and clearly describe your request. We will respond without undue delay and generally within one month, subject to any extension permitted by applicable law.

14. Complaints to the Supervisory Authority

You have the right to lodge a complaint with the Czech supervisory authority:

Office for Personal Data Protection
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Website: https://uoou.gov.cz/en
Email: [email protected]

You may also contact the data protection authority in the EU or EEA country where you live, work, or believe an infringement occurred.

15. Automated Decision-Making

We may use automated systems to sort offers, detect suspicious activity, prevent fraud, personalise search results, or support booking management. However, we do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless such processing is permitted by law and appropriate safeguards are provided.

16. Children’s Privacy

Our booking services are intended for adults who are legally permitted to enter into a vehicle rental agreement. We do not knowingly collect personal data directly from children for the purpose of allowing them to book rental vehicles.

Information about a child may be processed when an adult requests a child seat or provides passenger information necessary for the rental service. Such information should be provided only by a parent, legal guardian, or another authorised adult.

17. Third-Party Websites

Our website may contain links to rental companies, payment providers, social networks, maps, travel services, or other third-party websites.

We do not control the privacy practices of independent third parties. When you visit another website or use a third-party service, its own privacy policy and terms will apply. We recommend reviewing those documents before providing personal data.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technologies, business operations, legal requirements, or data protection practices.

The updated version will be published on this page with a revised “Last updated” date. Material changes may also be communicated through the website, by email, or through another appropriate method.

19. Contact Us

For questions about this Privacy Policy, the processing of your personal data, or your data protection rights, please contact:

RosCar Czech Republic
Website: https://roscar.cz/
Email: [email protected]