Auto Europe Privacy Notice

Last Updated: September 2025

Auto Europe, LLC and its affiliates and subsidiaries ("Auto Europe," "we," "us," or "our") respect your privacy. This Privacy Notice ("Notice") describes the processing of Personal Information (defined below) that is provided, collected, or disclosed while providing our products or services to you, whether online or in person ("Services") and on the websites, applications, and online platforms that link to this Notice (collectively, "Site"), including when you apply for a job with us. It also describes rights you may have under applicable laws. Please read this Notice carefully to understand our policies and practices regarding your Personal Information and how we will treat it. To access this Notice in an alternative downloadable format, please click here.

Personal Information We Collect

We collect several categories of Personal Information from and about users of our Site and Services. "Personal Information" means information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you. The categories of Personal Information we collect may include:

• Contact Information - If you submit an inquiry, register for an account, or provide information on or through our Site or Services, we may collect your contact information including your name, mailing address, email address, company name and related company information, and phone number.
• Commercial Information - If you submit an inquiry or customer service ticket, provide information on our Site, or submit information through our Services, we may collect commercial information including information about your purchases, subscriptions, and Services you have shown interest in. This information may include vehicle preferences, pick up and drop off locations and times, number of drivers and passengers, voucher and discount codes and IDs, ancillary product/service purchases, and any membership/association affiliations.
• Claim/Dispute Information - If there is damage to a vehicle or you have a complaint about our Services, we may collect information related to such events such as copies of credit card statements and invoices showing any charges incurred or owed, copy of police reports, accident/damage report, details of events regarding the damage to any vehicle, the nature and extent of the damage, and the names of any involved parties.
• Travel Information - If your vehicle rental is associated with travel plans or you are reserving customized travel packages, we may collect flight information (including flight number, airline, and arrival time), destinations, travel agent and association details (including travel agent name, agency code, agent email and telephone number, agency IATA, ARC, CLIA, or true ID number, association/group name, and association/group ID number), passport information, and frequent flyer or travel partner information
• Usage Information - When you use our Site, we may automatically record information, including your Internet Protocol address (IP Address), geolocation of your device, browser type, referring URLs (e.g., the website you visited before coming to our Site), domain names associated with your internet service provider, and any other information regarding your interaction with our Site.
• Employment Information - If you apply for employment with us, we will collect Personal Information related to your potential employment, including your education and employment history, address and contact information, demographic information, and any other information included in your resume or application.
• Communication Information - We may collect Personal Information contained within your communications with us via email, chat functionality, social media, telephone, or otherwise, and in certain cases we may use third-party service providers to do so. Where permitted by applicable law, we may collect and maintain records of calls and chats with our agents, representatives, or employees via message, chat, post, or similar functionality.
• Financial Information - If you create an account or register for our Services, we may collect financial information such as credit card details via our third-party payment processor to facilitate online payments.

How We Collect Personal Information

• Directly From You - We collect Personal Information that you provide to us directly, for example, if you choose to contact us, register for an account, book a car rental, process a claim, look up/inquire about a reservation, request information from us, sign up to receive updates, or otherwise utilize our Site or Services.
• From Third Parties - We may collect Personal Information from third parties, including but not limited to our affiliates, business partners, law enforcement, travel agencies, your employer, referral partners, advertising networks, social networks, data analytics providers, mobile device providers, Internet or mobile service providers, recruiters and job application portals, and background check providers.
• Through Online Tracking Technologies - We use cookies and similar technologies to collect Personal Information automatically as you navigate our Site. For additional information regarding our use of these technologies, see the Cookies and Tracking Technologies section below.

How We Use Personal Information

To the extent permitted by applicable law, we use Personal Information:

• To provide and personalize our Site and Services, such as administering and managing vehicle rentals, processing or fulfilling orders and transactions, providing and personalizing our Services, processing payments, providing customer service, maintaining or servicing accounts, verifying customer information, creating and maintaining business records, verifying eligibility, and undertaking or providing similar services.
• To optimize, improve, and maintain our Services, including understanding how users interact with our Services, maintaining our vehicles, gauging user interest in certain Services or Site functionality, and troubleshooting problems.
• For internal research and development, such as testing, verifying, and improving the quality of our Services or developing new ones.
• For marketing and advertising, including using your information to send you messages, notices, newsletters, surveys, promotions, or event invitations about our own or third parties' goods and services that may be of interest to you. We also use Personal Information to conduct interest-based advertising as discussed in the Cookies and Other Tracking Technologies section below. You can also unsubscribe from any marketing emails or text messages that we may send you by following the instructions included in the email or text correspondence or emailing us at privacy-manager@autoeurope.com.
• For communicating with you, such as responding to your questions and comments, updating you regarding your rental, or notifying you of changes to our Site or Services.
• For legal, security, or safety reasons, such as protecting our and our users' safety, property, or rights; complying with legal requirements; enforcing our terms, conditions, and policies; managing claims and disputes made against us or involving our vehicles, detecting, preventing, and responding to security incidents; and protecting against malicious, deceptive, fraudulent, or illegal activity.
• As part of a corporate transaction, such as in connection with the sale of part or all of our assets or business, the acquisition of part or all of another business or another business' assets, or another corporate transaction, including bankruptcy.
• To fulfill any other purpose for which you provide it, including purposes described when you provide the information or give your consent.

If you are applying for employment with us, we also use Personal Information to process your job application, to verify the information you have provided in your application, conduct interviews, perform background and reference checks, to communicate with you and answer your questions, to confirm your eligibility for employment, and improve our recruiting processes. We may also save your Personal Information for future employment opportunities with us.

How We Disclose Personal Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose your Personal Information with your consent or in the following circumstances:

• Affiliates and Subsidiaries - We may share Personal Information within our family of companies for their and our business and marketing purposes, including providing you with information about the Services we think may be of interest to you.
• Service Providers - We disclose your Personal Information with the service providers that we use to support our business, including but not limited to, customer support platforms, fraud protection providers, third-party payment processors, data analytics providers, website hosting providers, and other technology providers. If you are applying for a job with us, this may include service providers such as background check providers and human resource providers.
• Business Partners - We may disclose Personal Information with trusted business partners. For example, we may disclose your Personal Information with a company whose products or services we think may be of interest to you or who we co-sponsor a promotion or service with.
• Ad Tech Companies and Other Providers - We may share or make available limited Personal Information (such as a mobile device identifiers) with ad tech companies and other online service providers. When we share your Personal Information in this context, we follow applicable legal requirements, which may require that we provide opt-out rights or other individual rights.
• Legal Obligation or Safety Reasons - We may disclose Personal Information to a third party when we have a good faith belief that such disclosure of Personal Information is reasonably necessary to (a) satisfy or comply with any requirement of law, regulation, legal process, or enforceable governmental request, (b) enforce or investigate a potential violation of any agreement you have with us, (c) detect, prevent, or otherwise respond to fraud, security or technical concerns, (d) support auditing and compliance functions, or (e) protect the rights, property, or safety of Auto Europe, its employees and clients, or the public against harm.
• Merger or Change of Control - We may disclose Personal Information to third parties as necessary if we are involved in a merger, acquisition, or any other transaction involving a change of control in our business, including but not limited to, a bankruptcy or similar proceeding. Where legally required, we will give you notice prior to such disclosure.
• Other - We may disclose Personal Information to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).

Cookies and Other Tracking Technologies

We and our service providers may use cookies and similar technologies to collect usage and browser information about how you use our Site. The technologies we use for this automatic data collection may include cookies and web beacons that permit us to verify system and server integrity and generate statistics around the popularity of certain content. We process the information collected through such technologies, which may include or be combined with Personal Information, to help operate certain features of our Site, to enhance your experience through personalization, and to help us better understand the features of our Site that you and other users are most interested in.

Website Delivery and Appearance - We may use third party providers to enable certain customer interaction opportunities, content delivery (like audio or video), or other service capabilities. Examples include, but are not limited to, the following functionality:

• Customer Interaction: We enhance our customer interactions by offering features like Google Maps to locate our Service locations, payment processors to facilitate online payments. Each of these offerings are governed by the privacy policies of the underlying service provider. For example, please see Google's Privacy Policy for more information on how that feature operates.

Website Analytics and Session Replay - We use analytics and session replay services, that use cookies and other technologies that collect your Personal Information, to assist us with analyzing our Site traffic and site usage to optimize, maintain, and secure our Site and inform subsequent business decisions (including, e.g., advertising). These include, but are not limited to, the following third-party services:

• Google Analytics: To learn more about how Google uses data, visit Google's Privacy Policy and Google's page on "How Google uses data from sites or apps that use our services." You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.
• Meta Pixels: We use Meta pixels to track user activity on our Site and improve downstream offerings, including interest-based advertising for our services and those of our partners and service providers. Meta may track your activity over time and across websites. For more information about the data Meta collects, please visit Meta's Privacy Policy. For specific information about Meta Pixel, please visit About Meta Pixel.

Interest-Based Advertising - We may also allow or enable third parties to collect Personal Information to provide their interest-based advertising on behalf of our products and services, or their own. Interest-based advertising occurs when advertisements are shown to you based on information collected from your online interactions over time and across multiple websites, devices, or online services that you visit or use. Some companies may engage in cross-context behavioral advertising to predict your preferences and show you advertisements that are most likely to be of interest or relevant to you. We do not control these third parties' collection or use of your information for these purposes, or the opt-out options they may individually offer you via their terms, conditions, and privacy policies. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. Examples of the third-party service providers we engage to serve interest-based advertisements include Google Ads (including Google Dynamic Remarketing and DoubleClick), Meta Ads (including Meta Pixels and Facebook advertising services), and Microsoft Advertising.

Selling or Sharing Personal Information - While we do not sell Personal Information in exchange for monetary consideration, we do share Personal Information for other benefits that could be deemed a "sale" or "sharing" under various data protection laws, because they are sometimes broadly defined to include activities such as the delivery of interest-based advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior. We similarly engage in interest-based advertising when we use data about your activities on our Site to serve you ads on websites owned or controlled by third parties. It is in this context that we have provided advertising networks, data analytics providers, social networks, and video sharing platforms with Personal Information such as your IP address, device information, Internet and other electronic network activity information, and geolocation information in the last twelve months.

Cookie Choices - To manage your preferences with respect to these technologies, you can:

• Visit our preferences page, or customize your browser settings to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable certain cookies, please note that some parts of our Site may not function properly. These settings may be lost and require reconfiguration if you delete your cookies.
• Block the collection and use of your information by online platforms and ad tech companies for the purpose of serving interest-based advertising by visiting the opt out pages of the self-regulatory programs of which those companies are members: National Advertising Initiative and Digital Advertising Alliance (or the European Interactive Digital Advertising Alliance, if you are located in the European Economic Area). Please note that even if you opt out of interest-based advertising, you may still see "contextual" ads which are based on the context of what you are looking at on the websites and pages you visit.
• Review and execute any provider-specific instructions to customize your preferences or opt-out of certain processing, including interest-based advertising, by third party service providers. For example, to opt-out of this type of advertising by Google, customize your ad preferences, or limit Google's collection or use of your data, visit Google's Safety Center and Google's Ad Settings and follow Google's personalized ad opt-out instructions.

How Long We Keep Your Personal Information

We retain your information for as long as needed: (a) to conduct business with you; (b) fulfill the purposes outlined in this policy; and (c) to comply with our legal obligations, resolve disputes, and enforce any agreements.

Criteria we will use to determine how long to retain your Personal Information include the nature and length of our business relationship with you; our legal rights, obligations, and retention requirements; and if we have an ongoing business purpose for retaining your Personal Information, such as communicating with you about ongoing or prospective Services you requested.

Links to Third-Party Websites

We are not responsible for the practices employed by any websites or services linked to or from our Site, including the information or content contained within them. We encourage you to investigate and ask questions before disclosing Personal Information to third parties, since any Personal Information disclosed will be handled in accordance with the applicable third party's privacy policy.

In some cases, we offer links to social media platforms (like Facebook, Instagram, Pinterest, X (formerly known as Twitter) and YouTube) that enable you to easily connect with us or share information on social media. Any content you post via these social media pages is subject to the Terms of Use and Privacy Policies for those platforms. For more information about how YouTube collects and processes Personal Information, for example, please see Google's Privacy Policy.

We may also integrate with other websites to provide enhanced services, technological capabilities, or resources for you. These plug-in services and capabilities are governed by the terms, conditions, and policies of the underlying companies.

International Use and Cross-Border Data Transfers

If you are visiting our Site from outside of the United States, please note that our Site may be hosted in a location that is not where you reside. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Policy.

For individuals in applicable international jurisdictions: When required by law, Auto Europe will only transfer Personal Data to third parties located outside of your specific region when it has ensured appropriate safeguards for such Personal Information through use of the standard contractual clauses or other lawful and approved methods. To request a copy of applicable cross-border data transfer agreements, please reach out using the information in the Contact Us section.

How We Protect Personal Information

We have implemented commercially reasonable measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. Unfortunately, the transmission of information via the internet is not completely secure. despite these efforts to store Personal Information in a secure environment, we cannot guarantee the security of Personal Information during its transmission or its storage on our systems.

Exercising Your Privacy Rights

Depending on where you live, you may have the following rights with respect to your Personal Information under applicable data protection laws:

• Access - The right to request access to and obtain a copy of any Personal Information we may have about you.
• Deletion - The right to delete your Personal Information that we have collected or obtained, subject to certain exceptions.
• Correction - The right to request that we correct any inaccuracies in your Personal Information, subject to certain exceptions.
• Opt Out of Certain Processing - The right to: (a) opt out of the processing of your Personal Information for purposes of targeted advertising, (b) opt out of the sale or sharing of your Personal Information; (c) limit the use of your sensitive Personal Information (if applicable), and (c) opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not collect or process sensitive Personal Information outside of purposes permitted by law (such as section 7027(m) under the California Consumer Privacy Act Regulations), so we do not offer the option to limit its use. We also do not profile you or other individuals in a manner that would result in legal or similarly significant effects, so we do not offer an opt out.
• Objection/Restriction of Processing - The right to object or restrict us from processing your Personal Information in certain circumstances.
• Withdraw Consent - The right to withdraw your consent where we are relying on your consent to process your Personal Information.
• Automated Decision-Making - The right to know when you are subject to automated decision-making, the Personal Information used to render the decision, the principal factors and parameters involved in the decision, and human review or correction of the decision (or its underlying data, where appropriate). You may also have the right to consent or opt out of this automated decision-making, depending on your location.
• Lodge a Complaint - The right to lodge a complaint with a supervisory authority or other regulatory agency if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so.

To exercise any of the privacy rights afforded to you under applicable data protection laws, e-mail us at privacy-manager@autoeurope.com. You can also log into your account to access, correct, or delete Personal Information that you have provided to us.

You may also exercise your opt out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.

You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice. However, should you withdraw your consent or object to processing of your Personal Information, or if you choose not to provide certain Personal Information, we may be unable to provide some, or all, of our Services to you.

Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your Personal Information. [You may also make a request on behalf of your minor child.] We must verify your identity before fulfilling your requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making a request on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of a power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.

We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

Notice of Financial Incentives

We may offer various financial incentives in relation to our Services. For example, we may provide discounts, coupons and other benefits for customers who join our loyalty program or sign up for a coupon. When you participate in a financial incentive, we collect Personal Information from you, which may include name and email address. Depending on where you reside, you have the ability to opt out of the financial incentive, or our subsequent use of your Personal Information in connection with a financial incentive, at any time by emailing us at privacy-manager@autoeurope.com. While we do not assign a monetary value to the personal information that we collect, based on our reasonable estimate, the value received from the collection and retention of your Personal Information is reasonably equal to or greater than the value we receive from the use of this information. Please note, you will no longer be able to participate in a certain promotion if you make a request to delete your Personal Information. This is because we need your Personal Information in order to administer the promotion. In some instances, or for some programs, we may provide you with additional terms or conditions relating to a financial incentive.

Children's Privacy

We do not knowingly collect or solicit any Personal Information from children, as defined under applicable law, without verified written parental consent, and we have no actual knowledge of selling such Personal Information of minors under 16 years of age. If we learn that we have collected Personal Information from a child, we will promptly take steps to delete that information. If you believe we might have any information from or about a child, please contact us at privacy-manager@autoeurope.com.

Individuals in the International Jurisdictions

This section provides additional information regarding Auto Europe's processing of personal data of people located in the European Union (EU), European Economic Area (EEA), Switzerland, the United Kingdom (UK), Brazil, and Australia in accordance with the EU Data Protection Regulation, UK Data Protection Regulation, the Swiss Federal Data Protection Act, the Brazilian General Personal Data Protection Law, and Australia's Privacy Act and Privacy Principles .

Legal Bases for Processing

Our legal basis for processing Personal Information depends on the Personal Information involved and the context in which we process it. Where Auto Europe acts as a controller and when Auto Europe must rely on a legal basis, we process your Personal Information: with your consent; where necessary to perform a contract; to comply with our legal obligations; and where doing so is in our legitimate interests (including the purposes described in this Notice) and such interests are not outweighed by your rights and freedoms.

Special Category Data

Auto Europe does not intend to collect any Special Category Data, which is any data that reveals your racial or ethnic origin, political opinions, religious, moral or philosophical beliefs, trade union membership, political views, the processing of genetic data, biometric data for the purpose of identifying a person, and data concerning health or a person's sex life and/or sexual orientation. Please refrain from sending us any Special Category Data.

Individuals in Canada

We comply with applicable Canadian data protection laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Your provision of Personal Information to us means that you agree that we may collect, use and disclose such Personal Information for the purposes described in this Privacy Notice. Should you choose not to provide us with required Personal Information, we may not be able to provide certain services. You acknowledge that we may retain service providers to perform certain services, and that such service providers may be located in the United States or another jurisdiction. You further acknowledge and agree that Personal Information may be processed and stored in such jurisdiction, and that foreign courts or law enforcement or regulatory agencies may be able to obtain disclosure of such Personal Information in such jurisdictions.

Depending in which province you reside, you may have the privacy rights set forth above in Exercising Your Privacy Rights, including the rights to access, delete, and request correction of your Personal Information.

When we rely on your consent, you may have the right to refuse to provide or to withdraw your consent to processing of your Personal Information at any time. This would not affect processing where applicable law allows us to process Personal Information without consent.

We will not collect, use or disclose your Personal Information for any other purpose than those outlined above, except with your consent. We will respond to your requests regarding your Personal Information as promptly as possible.

California Residents

This section provides additional information regarding Auto Europe's practices pursuant to the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act ("CCPA"), where "Personal Information" has the definition set forth in the CCPA.

Please see the below chart for detailed information about the categories of Personal Information we have collected from California residents during the twelve months preceding the date on which this Notice was last updated and the categories of third parties to whom we sell or share Personal Information. For each category of Personal Information set forth in the chart below, the categories of third parties to whom we disclose it for a business or commercial purpose are set forth in the How We Disclose Personal Information section above.

California Shine the Light - Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of Personal Information to third parties for the third parties' direct marketing purposes, if any. To make such a request, please contact us at privacy-manager@autoeurope.com. Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.

Changes to this Notice

Please note that we may modify or update this Notice from time to time, so please review it periodically. If we make material changes to how we treat Personal Information, we will notify you according to applicable law. Unless otherwise indicated, any changes to this Notice will apply immediately upon posting to our Site. You are responsible for periodically visiting our Site and this Notice to check for any changes.

Contact Us

Data Protection Officer (EU/EEA/UK)

Auto Europe has appointed a Data Protection Officer (DPO) as required under Article 37 of the EU General Data Protection Regulation (GDPR). You may contact our DPO regarding all matters related to the processing of your personal data and the exercise of your rights under GDPR or UK Data Protection Act by mail at DPO@autoeurope.com.

If you have any questions about our practices or this Notice, please contact us at privacy-manager@autoeurope.com.