Version dated 21/10/2026
The General Data Protection Regulation (GDPR) came into force on 25 May 2018 and supplements existing legislation on the protection of personal data.
For your information, personal data means any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or to one or more factors specific to that person (surname, first name, address, email, telephone number, contract number, credit card number, etc.).
Processing of personal data means any operation performed on such data (collection, storage, transmission, deletion, etc., whether on paper or electronically). The data controller is the person who determines the purposes of each processing operation and the means of achieving those purposes.
For REMIREX (THRIFTY RÉUNION), the protection of your data is a priority. Therefore, in the interest of transparency, the purpose of this Privacy Policy is, in particular, to explain why your personal data is collected and processed by REMIREX, in its capacity as data controller, how it is processed, what rights you have over your data and how you can exercise them.
REMIREX reserves the right to modify this Privacy Policy at any time. Any modification will take effect immediately.
We therefore invite you to regularly consult our Policy, accessible from all pages of the Site (rentacar-reunion.fr), in order to stay informed of the latest applicable online version. For changes that we consider most significant, a notification will be posted on the Site. We also invite you to check the date shown on this Policy to find out when it was last updated.
The data that REMIREX collects is necessary for it to fulfil the following purposes:
Responding to requests received via the online contact form;
Contract management (management of vehicle bookings, invoices and payments);
Carrying out satisfaction surveys and customer studies, including polls and rental statistics;
Handling complaints;
Carrying out commercial prospecting and marketing actions (sending advertising messages by email and SMS);
Selecting suppliers;
Claims management;
Management of traffic offences and other offences under the criminal code.
In general, REMIREX does not process any of your data for purposes incompatible with those for which it was collected, unless you have given your prior consent.
REMIREX collects different types of personal data about you:
When you fill in a contact form,
When you submit a booking request,
When you wish to enter into a rental contract,
When you contact customer service to ask a question or submit a complaint,
In general, when you communicate with REMIREX in any other way.
Providing your personal data is voluntary. However, certain information, identified by an asterisk, is essential for REMIREX to process your request. Without this information, REMIREX will not be able to process your request.
As part of our business partnerships:
Tour operators (turnkey travel organisers),
Brokers (comparison websites),
Assistance providers (insurance companies),
Hotel partners (hotels, guesthouses, etc.),
The car rental franchises with which we have partnerships.
We automatically collect certain information about you when you access the REMIREX website, in particular information about your browsing. REMIREX uses cookies and other tracking technologies to collect information about you when you interact with the REMIREX website.
To learn more about cookies and how to disable them, please see the Cookie Policy.
When we send you communications by email, some messages may contain technical devices, also known as "tracking pixels", which make it possible to know whether an email has been opened.
Depending on the nature of the communications concerned, this information may be used to:
Ensure the proper delivery of our emails;
Manage our mailing lists and reduce or stop sending to inactive recipients;
Measure the effectiveness of our communications;
Adapt or personalise the communications sent to you;
Identify your areas of interest;
Trigger follow-ups or marketing actions.
Where open tracking requires your consent, it is obtained when your email address is collected or, where applicable, at a later stage by means of an email sent without tracking that requests consent.
You are free to accept or refuse this tracking. Your refusal does not prevent your request from being validated or, where we are authorised to send them to you, you from receiving our communications.
You may at any time:
Unsubscribe from our commercial communications;
Withdraw your consent or object to open tracking.
These two choices are independent. Objecting to tracking does not automatically unsubscribe you from our commercial communications.
In this case, you may continue to receive the communications that we are authorised to send you, but the relevant future emails will be sent without the tracking to which you have objected.
You can exercise these choices using the separate links in our emails: "Unsubscribe from our commercial communications" and "Object to the tracking of my emails". You may also contact us using the contact details provided in this privacy policy.
Information about your choices is kept in order to comply with your request and to demonstrate that it has been taken into account.
REMIREX collects your personal data for the purposes described in section 1 of this Policy. In all cases, REMIREX collects your data only where its collection and processing rest on a legal basis.
Your data is necessary for the performance of the contract to which you have subscribed or wish to subscribe. On this contractual legal basis, any refusal to provide your personal data will prevent the conclusion and performance of the contract.
Some of your data is processed by REMIREX to meet its legal obligations, in particular:
Meeting its legal obligations, notably the applicable accounting rules, in relation to the management of customer accounts as well as supplier accounts,
Identifying the natural persons who commit offences while driving rental vehicles (Article L.121-6 of the French Highway Code),
Reporting motor vehicle claims,
Handling requests for access, rectification and objection,
Maintaining a telephone canvassing opt-out list.
Subject to having obtained your prior consent, REMIREX may process your data to:
Send you commercial offers for its products and services,
Offer you its partners' offers,
Place cookies under the conditions described in the Cookie Policy,
Track the opening of your emails by means of tracking pixels.
You may at any time change your mind and withdraw your consent, as described in section 5.2 of this Policy, without affecting the lawfulness of processing based on consent and carried out before the withdrawal.
REMIREX may process your personal data in pursuit of its legitimate interest, in particular for the management of business relationships:
Responding to your requests sent via the online form,
Selecting its suppliers.
Your data is kept by REMIREX for the time necessary to fulfil the purposes set out in section 1 hereof, plus the statutory limitation periods.
Cookies:
REMIREX may keep the data for 13 months.
Commercial management and commercial prospecting:
REMIREX may keep the data for 3 years from the last contact between you and REMIREX (Simplified Standard No. 48).
Retention of banking data:
REMIREX may keep banking data for a maximum of 13 months after the end of the contract, in intermediate archive, for evidential purposes. The data may only be used in the event of a dispute over the transaction.
Satisfaction surveys and customer studies, including polls and rental statistics:
REMIREX may keep the data for 2 years in order to track changes in indicators.
Management of traffic offences:
REMIREX may keep the data for a maximum of 45 days from receipt of the offence notice. At the end of this period, the data may be archived for a maximum of the limitation period for minor offences, namely twelve months.
Invoicing:
REMIREX may keep the data for 10 years (Art. L123-22 para. 2 of the French Commercial Code; Simplified Standard No. 48).
Accounting:
REMIREX may keep the data for 10 years (Art. L123-22 para. 2 of the French Commercial Code; Simplified Standard No. 48).
For further information on how long your data is kept, you can contact REMIREX's DPO: dpo@gbh.fr.
Right of access to your data You may obtain from REMIREX confirmation as to whether or not your data is being processed and, where it is, access to all the data and information held by REMIREX.
Right to rectification of your data You may obtain from REMIREX, without undue delay, the rectification of data concerning you that is inaccurate or erroneous. You may also request that your data be completed, where applicable.
Right to erasure of your data Subject to legal exceptions, you may ask REMIREX to erase your data without undue delay, in particular if you consider that the processing carried out by REMIREX on your data is no longer necessary in relation to the purposes for which it was collected.
Right to data portability You may retrieve part of your data in an open, machine-readable format or ask REMIREX to transmit it to another organisation. This right applies only to data that you have actively and knowingly provided to REMIREX (for example, data you entered in an online form) or data generated through the use of a service or device in connection with the conclusion or management of your contract, and which is processed by automated means, on the basis of consent or the performance of a contract.
Right to object Where your data is processed for prospecting purposes, you may object at any time (see section 5.2 of this Policy). Likewise, you may object to the display of targeted advertising (Cookies). You may also object to the tracking of the opening of our emails by clicking on the "Object to the tracking of my emails" link in the footer of our emails.
Right to restriction of processing of your data You may ask REMIREX to keep your data without using it in any of the following cases:
You contest the accuracy of the data used by REMIREX,
You object to your data being processed,
The use is unlawful but you object to its erasure,
You need it for the establishment, exercise or defence of legal claims.
Right to withdraw your consent to the processing of your data Where the processing of your personal data is based on your consent (sending of our electronic commercial offers, for example), you may withdraw your consent at any time (see section 5.2 of this Policy).
Likewise, to withdraw your consent to cookies, you may do so as described in the Cookie Policy.
Likewise, you may object at any time to the tracking of the opening of our emails by clicking on the "Object to the tracking of my emails" link in the footer of our emails.
Right to give post-mortem directives You may define directives regarding the retention, erasure and disclosure of your data after your death. These directives set out how you wish your rights over your data to be exercised after your death. You may send us these directives by writing to us, stating "Post-mortem directives" in the subject line, at the following address: dpo@gbh.fr. You may modify or revoke your directives at any time.
Right to lodge a complaint with the CNIL If you consider that your rights are not being respected or that the protection of your data is not ensured in accordance with the GDPR, you may at any time lodge a complaint with a competent supervisory authority (in France, the CNIL), directly on the CNIL website or by post to: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
You may exercise your rights over your personal data by sending your request by email or by post to: dpo@gbh.fr or SAS REMIREX - 7 Rue de la Pépinière - 97438 SAINTE-MARIE, marked "For the attention of the DPO".
Any request must state, in the subject line, the reason for the request (exercise of the right of access, objection, etc.) and the company concerned by the request. The request must specify the address to which the reply should be sent.
REMIREX will send you its reply within a maximum of one (1) month from the date of receipt of your request. This period may, however, be extended by two (2) months due to the complexity and number of requests.
If, after contacting REMIREX, you consider that your data protection rights are not being respected, you may lodge a complaint with the CNIL.
Once you have agreed to receive commercial offers from REMIREX, you may at any time change your mind by clicking on the unsubscribe link.
In general, for any question relating to this data protection policy or any request relating to REMIREX's management of your personal data, you may send your request by email or by post, as indicated above.
REMIREX may also pass your data on to the following entities where necessary to fulfil any of the purposes set out in section 1 hereof:
For the management of commercial activities, your data may be passed on to:
Authorised REMIREX staff (sales, accounting department and management),
Departments responsible for oversight (statutory auditor, departments responsible for internal procedures).
For the management of commercial prospecting actions, your data is shared with communication service providers operating on behalf of REMIREX.
For the management of insurance and claims, your data may be passed on to insurers (or assistance providers).
For the management of traffic offences, your data is passed on to the Agence Nationale de Traitement Automatisé des Infractions (ANTAI, the French national agency for the automated processing of offences).
For criminal offences, REMIREX may pass your information on to the competent authorities.
In general, your personal data may be accessible to REMIREX's subcontractors in the context of outsourced services (e.g. IT service providers, software publishers, etc.).
REMIREX does not share your data with these commercial partners.
Your data is hosted on secure servers located in France. Should your data be transferred outside the EU, notably through our subcontractors, we would pay particular attention to ensuring that they process your data in strict compliance with the regulations in force on the protection of personal data.
REMIREX implements all technical, physical and organisational measures to ensure the security and confidentiality of your data during its collection, processing and transfer.
REMIREX's infrastructure is protected against malicious software (viruses, spyware, etc.); the security of your device is your responsibility.
Where we may use service providers to process part of your data, we undertake to verify that they provide sufficient guarantees to ensure the protection of the personal data entrusted to them and to have them sign confidentiality clauses compliant with Article 28 of the GDPR.
In the event of a personal data breach, that is, a security incident, whether malicious or not and occurring intentionally or not, resulting in the compromise of the integrity, confidentiality or availability of your personal data, we undertake to comply with the following obligations:
The "breach register" contains the following information:
The nature of the breach;
The categories and approximate number of persons concerned;
The categories and approximate number of files concerned;
The likely consequences of the breach;
The measures taken to remedy the breach and, where applicable, to limit its negative consequences;
Where applicable, the justification for not notifying the CNIL or informing the persons concerned.
However, in accordance with the regulations in force, we are not required to inform you of a breach in the following cases:
Your personal data is protected by measures that render it unintelligible to any person who is not authorised to access it;
Measures have been taken so that the risk is no longer likely to materialise;
Such communication would require disproportionate effort on our part, in particular where we have no means of contacting you to inform you.
The fields marked with an asterisk in our forms are mandatory. The only consequence of failing to respond is that your request will not be processed. The obligation to provide the requested data is contractual, as it is necessary for the performance of the contract to which you are a party or for pre-contractual measures taken at your request, in particular in the case of a request for information or a quote regarding our products and services.
We undertake to integrate the protection of personal data from the design stage of any project, service or other tool involving the handling of personal data, in particular through data minimisation, limitation of the purposes of data collection, respect for the integrity and confidentiality of data, and limitation of retention periods.
In order to comply with the principle of Accountability, our company:
Adopts internal procedures to ensure compliance with the regulation (IT charter, personal data protection charter);
Keeps documentary records of all processing carried out under its responsibility or that of the processor (maintaining the register of processing activities, confidentiality agreements with employees and service providers, company security policy, procedures for handling requests for access, rectification, objection, etc.);
Carries out impact assessments (PIAs) for processing operations presenting particular risks to rights and freedoms.
The objective is to provide extensive documentation making it possible to demonstrate compliance with data protection rules at any time.
Advantages and novelties in preview !
SUBSCRIBE TO OUR NEWSLETTER
Register
Your data will not be shared with any third party.