Document
Privacy policy
Compliant with Regulation (EU) 2016/679 — GDPR. Last updated: 18 August 2026.
Who we are
RNC Solutions SRL, operator of driveXplore. Tax ID RO48120320, J2023008485400, registered office at Ciprian Porumbescu 1, Sector 1, București.
What data we collect
To rent a car, you give us:
- First name and last name
- Phone number and email
- Identity details (ID card, CNP)
- Driving licence
- Card payment details (processed by a payment provider; we do not store your card details)
- Special requests and preferences (car type, options)
Vehicle location data — the cars in our fleet are fitted with a GPS system and an engine immobiliser. We process location data on the basis of our legitimate interest (Art. 6.1.f GDPR), to protect the asset, prevent theft and recover the vehicle. We do not use it to assess your driving style and we do not pass it to third parties, except to the police on request. We keep it for 2 years.
Additional driver data. If you add a second driver to the contract, we collect the same identity and licence details about them. Whoever gives us another person’s data is responsible for informing them about this policy.
Why we use your data
- To deliver the service (performance of a contract, Art. 6.1.b GDPR).
- To communicate with you about the booking, delays and return.
- To comply with legal obligations (tax, accounting, reporting to authorities).
- To protect the vehicle through the GPS system (legitimate interest, Art. 6.1.f GDPR).
- To send you offers and news, only if you have given your consent (Art. 6.1.a GDPR). You can unsubscribe at any time by writing to contact@drivexplore.ro or through the link in every email.
How long we keep your data
- 5 years for invoiced bookings (a requirement of the Romanian Fiscal Code). After 5 years we anonymise the personal data — we keep only the accounting record of the transaction.
- 2 years for vehicle GPS location data.
- Until consent is withdrawn for data used to send offers.
Who we share data with
We do not sell your data to anyone. We share it only with the partners we need in order to deliver the service, each acting as a processor under contract:
- Oblio — invoicing and e-Factura.
- esemneaza.ro — electronic signing of the rental contract.
- Stripe and PlatiOnline — card payment processing. Card details never reach us.
- LocalizareAuto.ro — the GPS system fitted to the vehicles.
- Resend — delivery of confirmation emails and the invoice.
- Cloudflare — hosting for the site and the database, under European Union jurisdiction.
We also disclose data to authorities where the law requires it (police, tax authorities).
International transfers
Data is stored on servers in the European Union. Some of our providers — the payment processor and the transactional email provider — are companies outside the European Economic Area, or may process data through infrastructure located outside it. In those cases the transfer relies solely on the safeguards in Chapter V of the GDPR: the standard contractual clauses adopted by the European Commission, or an adequacy decision. You can ask us for details at contact@drivexplore.ro.
Your rights
- Right of access — to see what data we have about you.
- Right to rectification — to correct inaccurate data.
- Right to erasure — within the limits allowed by tax obligations.
- Right to restriction — to stop processing in certain cases.
- Right to object — to processing based on legitimate interest.
- The right to portability — receive your data in a reusable format.
- Right to withdraw consent — for processing based on consent (email offers, for instance), you can withdraw it at any time, without affecting the lawfulness of processing before that point.
How to exercise your rights
Send a written request to contact@drivexplore.ro, for the attention of the person responsible for data protection. We reply within 30 days. If you are not satisfied with the answer, you have the right to complain to the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (the National Supervisory Authority for Personal Data Processing), known as ANSPDCP.
Complaint to ANSPDCP
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
- Bd G-ral Gheorghe Magheru 28-30, Sector 1, București, 010336
- Phone: +40 318 059 211
- Email: anspdcp@dataprotection.ro
Contact for privacy questions
For any question about your data, write to us at contact@drivexplore.ro or call +40 755 761 608.