1. Who we are
Keflavik Car Hub ("we", "us") is a car rental company located at Keflavíkurflugvöllur, 235 Keflavík, Iceland, operating the website keflavikcarhub.com. We are the controller of the personal data described in this policy. You can contact us at book@keflavikcarhub.com.
2. Data we collect
- Booking data: name, e-mail, phone number, flight number, pickup and return place and dates.
- Driver data: date of birth, driving licence and passport or ID details, checked at pickup.
- Payment data: amounts and payment method. Card payments are processed by certified payment providers; we do not store full card numbers.
- Vehicle data: mileage, fuel level, damage reports, and traffic fines or toll charges related to the rental.
- Website data: IP address, browser type, pages visited and cookies.
3. How we use your data
- To process and manage your car rental booking and send your voucher.
- To verify the driver's identity and right to drive.
- To handle payments, refunds, damage claims, fines and tolls.
- To answer your questions and provide customer support.
- To improve our website and services through anonymous statistics.
- To meet our legal and accounting obligations under Icelandic law.
4. Legal basis
We process personal data to perform the rental contract, to comply with legal obligations, on the basis of our legitimate interests (for example, protecting our vehicles and improving our services) and, where required, with your consent, which you can withdraw at any time.
5. Sharing your data
We share data only when needed: with payment providers, the booking platform that powers our reservation form, insurance companies in case of an incident, and public authorities such as the police or the road administration for traffic fines. We never sell your personal data.
6. Cookies and analytics
Our website uses necessary cookies for the booking form and analytics cookies (Yandex Metrica) to understand how visitors use the site. You can disable cookies in your browser settings; some functions of the booking form may then not work properly.
7. Data retention
Booking and rental data are kept for as long as necessary for the rental and for claims related to it, and accounting records for 7 years as required by Icelandic law. Analytics data is kept in aggregated form.
8. Data security
We use HTTPS encryption, access control and trusted service providers to protect your data against loss, misuse and unauthorized access.
9. Your rights
Under the GDPR and Icelandic Act No. 90/2018 you have the right to access, correct, delete or restrict the processing of your data, to object to processing, and to data portability. You may also lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd). To exercise your rights, write to book@keflavikcarhub.com.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always published on this page with the date of the last update.