Platform legal

Data Processing Agreement

AvelisseRent generally acts as processor or service provider for personal data that agencies collect from rental customers through their booking websites and dashboards.

Subject matter

AvelisseRent provides hosted car-rental SaaS, public booking websites, dashboards, storage, communications, and payment integration support for rental agencies.

Duration

Processing continues for the term of the agency's subscription or platform use, plus any limited period needed for backups, security, legal, accounting, dispute, or deletion lifecycle obligations.

Nature and purpose

AvelisseRent processes agency customer information to operate booking workflows, rental records, customer management, documents, transactional emails, security controls, support, and platform maintenance.

Data subjects

Agency owners and users, agency employees entered into the dashboard, rental customers, drivers, website visitors, and support contacts.

Types of personal data

Names, contact details, booking details, driver and identity references when configured by the agency, rental history, payment metadata, uploaded document metadata, support messages, device and security logs, and cookie choices.

Controller instructions

For agency customer data, the agency determines the purposes and instructions. AvelisseRent processes that data to provide the service and does not use it as the rental company.

Confidentiality and security

AvelisseRent uses access controls, tenant isolation, secure authentication, HTTPS, role-based permissions, logging, and operational safeguards appropriate to the platform.

Data subject assistance

AvelisseRent provides tools for agency-scoped requests, exports, deletion review, anonymization, and audit records so agencies can respond to verified privacy requests.

Subprocessors

AvelisseRent uses subprocessors only where needed to operate infrastructure, storage, payments, email, analytics, security, and support. The active register is published separately.

Incident assistance

AvelisseRent assesses security incidents, preserves incident records, identifies affected tenant data where possible, and notifies affected agencies without undue delay where required. Regulatory notifications require human and legal review.

Deletion or return

At the end of service, agency deletion uses the existing scheduled lifecycle. Some records may be retained or anonymized where legally, operationally, or security-wise required.

International transfers

Processing may involve providers or infrastructure outside the agency's country. Transfer mechanisms depend on the relevant provider terms and must be reviewed for production legal sign-off.

Manual review

This page is an operational template and must be reviewed against signed customer contracts, provider DPAs, production hosting regions, and local legal requirements before being treated as a final legal agreement.