1. INTRODUCTION
Welcome to the Privacy Notice of Al Mana Leasing W.L.L .Qatar
This Privacy Notice covers the personal information we collect, use and disclose through your use of our websites, mobile applications (each an “App” and collectively, “Apps“), products and services (collectively, “Services“), either online or offline.
This Privacy Notice and our processing of your personal information will be subject to applicable data protection laws (Law no. 13 of 2016 “Personal Data Privacy Protection” in Qatar.)
Definition of Personal Data
“Personal Data” in this Policy shall have the meaning that is granted to such term or any equivalent term under the Personal Data Privacy Protection Law in the state of Qatar (“PDPP Law”).
Changes to this Policy
We reserve the right to modify this Policy at any time. We will notify you of substantive changes at an appropriate time. Any changes to this Policy become effective upon the date which we separately indicate as an effective date.
Updates to this Privacy Notice
If we make a change that significantly affects your rights or, to the extent we are permitted to do so, significantly changes how we use personal information or the purpose for which we use it, we will notify you by way of a prominent posting on our Services, prior to the change becoming effective. If you have an account with us, we may also notify you about such changes to this Privacy Notice by e-mail (sent to the e-mail address provided in your account), through our Services, or as otherwise required or permitted by applicable law. Any changes to this Privacy Notice will become effective upon uploading or posting of the revised Privacy Notice. As such, we encourage you to review this website from time to time for the latest information on our privacy practices.
PLEASE NOTE THAT WHEN YOU USE ANY OF OUR SERVICES, WE WILL COLLECT, USE AND DISCLOSE YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS PRIVACY NOTICE. If you have questions, comments, or suggestions, you can always contact us using any of the ways described in the Contact Us section.
2. PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT
We collect personal information from you, directly and through third parties, in accordance with this Privacy Notice any time you contact us, interact with us, rent a vehicle (whether through us or a third party), join one of our loyalty programs or use any of our Services.
Please be aware that if you do not provide us with personal information that we need, we may not be able to provide certain Services under our contract with you or comply with our legal obligations. For example, when you rent a vehicle from us, we need your name, address, payment information, and driver’s license, which is personal information. If you refuse to provide us with any of this personal information, we may not be able to rent a vehicle to you. We will let you know when we need personal information from you and the consequences of failing to provide us with that personal information.
Collection of Personal Data
The categories of Personal Data we collect, the purposes of processing and the lawful basis for collection are detailed below. · Personal Data collected through automated means like electronic activity, such as data gathered by technology when you visit our website (such as IP address, browser information, device type, operating services, app versions, what functions or pages you use or click on, the frequency of use, the links you clink on). We use this information to operate, evaluate and improve our business, including developing new products and services; enhancing and improving our services; analyzing your interaction with our services; and to perform data analytics. For quality improvement goals we customize our service to make your experience smooth and efficient using necessary cookies and similar technologies. We also have a legitimate interest in having a functioning website and improving the functionality and maintaining the security of our website using necessary cookies and similar technologies, all of which is not outweighed by the privacy impacts on you. Personal Data submitted by you voluntarily, all categories of data. We may need to use these Data to: establish and enforce our legal rights and obligations; to comply with binding requests made by you when exercising your legal rights (such as those set out in this Policy) to comply with binding requests or instructions from applicable regulators, law enforcement agencies, any court or otherwise as required by law; resolve complaints or disputes with you; manage any proposed sale, restructure, or merger of any or all part(s) of our business, including in response to enquiries from prospective buyers or merging organizations; for our own general record keeping and customer relationship management (e.g. to comply with laws relating to consumer, tax, accounting, data protection and/or money laundering. Where the Data is required for legal or regulatory matters in connection with a lawsuit, complaint, legal requirement, or regulatory proceeding, as well as other situations with which we may comply, we have a legal obligation to use it. As detailed in the section below titled “Cookies,” you can reject our collection of your Personal Data on our websites through automated means, but such rejection may affect our website performance and functionality. Regarding the Personal Data that you voluntarily provide to us, you can always stop providing it, but it may prevent us from providing our services to you.
3. HOW WE USE PERSONAL INFORMATION
We use personal information for a number of purposes relating to (i) fulfilling your rental booking with us, (ii) providing other products or Services requested by you, (iii) administrating our relationship with you, (iv) managing incidents such as vehicle damage or theft, and (v) marketing the products and services of ours and our business partners to you.
The Company shall implement safety measures in a suitable manner to prevent any and all Personal Information from being accessed in an unauthorized manner, from being lost, damaged, altered, or leaked, etc. In addition to protect Personal Information, the Company will endeavor to promote activities including regular training and education to its employees, who should handle any Personal Information.
4. LEGAL BASIS OF PROCESSING
We rely on one of a number of grounds under applicable data protection law to permit us to process your personal information. These include as is necessary to perform our contract with you; for the purposes of our legitimate interests; and where we have collected your consent.
5. HOW WE USE COOKIES AND OTHER SIMILAR TECHNOLOGIES
When you access our websites and Apps, we use cookies and similar technologies to help us understand how you use our websites and Apps and ensure that they function as intended, to optimize user experience, for analytics and to show tailored offers on our website and third-party sites.
6. HOW WE SHARE PERSONAL INFORMATION
The nature of our business and operations requires us to share personal information within Al Mana Leasing W.L.L and with our third-party service providers and business partners so that we are able to provide you with your rental booking and other products and services you request (such as insurance and our loyalty reward programs) and customer assistance, as well as to verify your identity and complete fraud checks, support our IT infrastructure, and market products and services that we and our business partners offer or to comply with applicable laws.
Sharing of Personal Data
Sometimes we need to disclose your Personal Data to other parties.
(1) Inside our organization · We may need to share your Personal Data with other companies in our organization, for our general business management purposes and, in some cases, to meet our customer needs where providing services across different group entities/locations. For authorizations/approvals with relevant decision makers, for reporting and where systems and services are provided on a shared basis. Access rights between members of our organization are limited and granted only on a need-to-know basis, depending on job functions and roles. Where any party of our organization processes your Personal Data on our behalf (as our processor), we will do our best endeavor to make sure that they have appropriate security standards in place to make sure your Personal Data is protected.
(2) Outside our organization from time to time, we may ask third parties to carry out certain business functions for us, such as for IT support, data hosting and customer relationship management (CRM) tool providers. These third parties will process your Personal Data on our behalf (as our processor). We will disclose your Personal Data to these parties so that they can perform those functions. Before we disclose your Personal Data to these third parties, we will do our best endeavor to ensure that they have appropriate security standards in place to protect your Personal Data.
In certain circumstances, we will also disclose your Personal Data to third parties who will receive it as controllers of your Personal Data for the purposes set out above, where the relevant disclosure is in relation to:
• services provided to you or us by a third party acting independently to us, but which has a relationship with us, for example legal advisors, accountants, and auditors.
• the purchase or sale of our business (or part of it) in connection with a share or asset sale, for which we may disclose or transfer your Personal Data to the prospective seller or buyer and their advisors.
• the disclosure of your Personal Data to comply with a regulator or law enforcement request, legal obligation, to enforce a contract or to protect the rights, property or safety of our employees, customers or others; and
• a disclosure you have asked us to make or given us permission to make. Our website may provide links or access to services or Data offered by other members of our organization, or by third parties. These parties will have their own privacy notices, and any Personal Data collected by other organization members, or third parties will be subject to their individual privacy policies.
7. HOW LONG WE KEEP PERSONAL INFORMATION
We keep personal information for no longer than is reasonably necessary or required by applicable law. How long we keep personal information depends on the type of personal information and the purpose(s) for which we collected it and the applicable legal requirements.
Retention of Personal Data
We also ensure that, in compliance with applicable law, we do not retain Personal Data longer than necessary. We will keep your Personal Data for as long as we have a relationship with you, for example as long as you are a customer, or you wish to keep receiving marketing messages from us (and for a reasonable period thereafter). When determining how long to retain Personal Data after we no longer have a relationship with you, we take into account how long our customers usually want to continue hearing from us, our legal obligations and the expectations of regulators, as well as the length of time Data is needed for internal audit purposes and to exercise or defend our legal rights. We also consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
This includes the following:
• Retention in case of queries – We may retain your Personal Data for a reasonable period in case of follow-up queries from you.
• Retention in case of claims – We may retain your Personal Data for the period in which you might legally bring claims against us, if and to the extent this is relevant.
• Retention in accordance with legal and regulatory requirements – We will consider whether we need to retain your Personal Data after the period of retention in the case of queries or claims because of a legal or regulatory requirement.
• Retention permitted under applicable law – We will continue to retain Personal Data where necessary to provide our services to you and the retention of such Personal Data is necessary for the purposes of pursuing our legitimate interests or where it is necessary for public interest purposes.
We review our retention periods for Personal Data on a regular basis, and all Personal Data is retained in compliance with applicable data protection law. We will only permanently retain certain basic Personal Data, for limited purposes. This is in relation to retaining basic contact details, to keep a record that you were a customer, in case you return in the future, or where you have asked us not to contact you again.
8. HOW WE PROTECT PERSONAL INFORMATION
We take reasonable steps aimed to ensure personal information is protected from unauthorized use, access, disclosure, alteration, destruction, or loss.
Safeguarding of Personal Data
We implement and maintain reasonable and appropriate security measures against unauthorized or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data. This includes limiting access to your Personal Data to those employees, agents and other authorized parties who need to know the Data to enable us to provide products or services.
9. YOUR RIGHTS AND CHOICES
You may have certain rights and choices that you can make regarding the personal data not to be collected any longer.
10. THIRD PARTY WEBSITES
Our Services may include links to and from the websites of our affiliates and business partners. We do not control how personal information is collected or used on those websites, so please review the privacy policy of any website you visit as a result of following any links to or from the websites of our affiliates and business partners.
Proper control of Personal Information
The Company shall implement safety measures in a suitable manner to prevent any and all Personal Information from being accessed in an unauthorized manner, from being lost, damaged, altered, or leaked, etc. In addition to protect Personal Information, the Company will endeavor to promote activities including regular training and education to its employees, who should handle any Personal Information.
Cookies
A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. The cookie allows our website to “remember” your actions or preferences over time. Cookies are widely used in order to make websites work, or to work more efficiently, as well as to provide reporting data. Some cookies are strictly necessary for the functioning of our website.
Why do we use cookies?
We use cookies to learn how you interact with our content and to improve your experience when visiting our website. For example, some cookies remember your preferences and where you left off so that you do not have to repeatedly make these choices when you visit one of our websites.
11. CHILDREN’S PRIVACY
Our Services are not for children under the age of 16. We do not knowingly collect personal information from children. If you think we have received personal information from children under the age of 16, please contact us immediately.
12. CONTACT US
If you have questions, comments, or suggestions, you can always contact us. For your protection, we may need to verify your identity before we assist with your request by verifying that you can provide us with information about you that we have previously collected.
Customer Services
Please check the website for details of your customer service contacts.