1. Who processes your personal data collected through this website?
GOCAR CARSHARING LIMITED t/a GoCar Ireland, whose registered office is located at 35 Northwood Court, Northwood Business Park, Santry, Dublin 9, Ireland, (hereinafter referred to as “GoCar” or as “us”) is the “Data Controller” of your (“User(s)” or “You”) “Personal Data” collected and processed via this website, our mobile applications, or our rental agencies in order to offer you mobility solutions.
2. Which type of personal data is collected?
Usage Data
The navigation on GoCar’s sites and applications (as well as the use of any third party’s application embedded and/or available therein), implies the communication to GoCar of usage data, which is implicitly acquired during the navigation of the user through internet communication protocols (“Usage Data”).
Usage data includes, among other details, IP addresses or domain names of the devices utilized by Users, URI addresses (Uniform Resource Identifier), request timestamp, method utilized to submit the request to the server, file size received in response, numerical server status code (success, error, etc.), country of origin, browser/operating system features, visit duration details per page, and navigation path sequence.
Usage data is not collected for the purpose of identifying the User. However, identification may be possible through further elaboration and association with information held by third parties.
Data Communicated by the User
Users are free to navigate GoCar sites or applications. However, to use the service, Users must register and disclose the information requested in the relevant forms completely and truthfully.
Fields described as “optional” or not marked with an asterisk (“*”) indicate that the User is free not to communicate the requested data without affecting the completion of registration. Personal Data collected for registration includes: first name, last name, gender, date of birth, driving licence details, mobile phone number, email address, and physical address.
Personal data is processed upon the User’s prior, free, and informed consent, solely for the purposes outlined in this Privacy Policy.
The explicit, optional, and voluntary sharing of email addresses in GoCar contact forms implies that the address and included details are acquired to satisfy the contact request. Users are requested not to share third-party data unless strictly necessary and confirm they have obtained the necessary third-party consent.
3. For what purposes does GoCar collect your personal data?
Through our website and mobile applications, GoCar provides carsharing rental services. Personal data voluntarily provided is processed for the following specific purposes:
a. User Registration & Member Account Creation
Necessary to identify you and facilitate future carsharing rental bookings with GoCar.
- Identity & Licence Verification: We utilize a third-party provider (Onfido, acquired by Entrust) to digitally verify your driving licence and identity. This process utilizes AI and machine learning for: (i) licence verification and fraud detection, and (ii) liveness matching evaluation where facial features are mapped against the licence portrait photo to prevent impersonation. By utilizing the GoCar remote verification platform, you explicitly consent to this biometric processing for account registration. Biometric data is not retained beyond the immediate verification process.
b. Processing & Management of Bookings
Necessary for entering into and performing the Carsharing Agreement. Includes:
- Confirming, modifying, or cancelling carsharing rental bookings.
- Customer communications (reminders, check-in/out notices, support queries).
- Vehicle delivery, return management, invoicing, and arrears recovery.
- Managing claims, insurance, and vehicle damage recovery.
c. Payment Purposes
Necessary for the performance of the Carsharing Agreement. Credit card information is retained in tokenized format during our commercial relationship to facilitate subscription and booking payments.
d. Vehicle Monitoring via Connected Devices
GoCar’s fleet features onboard telematics connected to software platform tools. Devices collect operational telemetry to:
- Monitor vehicle state, functionality, battery levels, and fuel status.
- Detect breaches of the Carsharing Agreement (fuel levels, distance limits, designated return spots).
- Legitimate Interest: Required to protect fleet integrity and ensure vehicle availability.
e. Geolocation Systems & Location Tracking
Embedded geolocation tracks vehicle departure/return locations and protects fleet assets under Legitimate Interest to:
- Verify proper vehicle arrival and departure at designated stations.
- Prevent fraud/theft and locate stolen vehicles.
- Assist in medical emergencies or accident investigations.
- Mobile Device Location: Location services must be enabled on your mobile device while using the app to facilitate bluetooth/remote vehicle connectivity.
f. Improvement of Navigation & User Experience
Usage Data is processed to adapt website language/region settings and optimize performance.
- Behavioral Analytics: We partner with Microsoft Clarity and Microsoft Advertising to capture user behavior via cookies and tracking technologies (heatmaps, session replays, fraud prevention). Processing is based on your explicit consent via the cookie banner.
g. Service Enhancement & Personalization
Based on Legitimate Interest, GoCar analyzes customer surveys and rental history to suggest pre-selected options and tailor service features.
h. Promotional & Marketing Activities
Subject to express consent, GoCar sends special promotions, newsletters, incomplete booking reminders, and contest entries.
- Exceptions: Existing customers may receive commercial communications for similar services based on Legitimate Interest (with opt-out option at any time). Transactional emails (e.g., booking confirmations, T&C updates) are contractual.
i. Statistical Analyses
Carrying out anonymous and aggregated statistical analyses of customer usage data.
j. Fine Management
Required by law to process traffic/parking violations and transfer driver identities to competent legal authorities. This includes the use of geoloction data.
k. Risk & Watchlist Management
Based on Legitimate Interest to manage contractual risks regarding payment litigation, repeated or voluntary vehicle damage, or serious terms breaches.
l. Law Enforcement & Regulatory Obligations
Personal data may be disclosed to public authorities (including the Garda) to investigate misconduct, fraud, or criminal acts, or to fulfill statutory legal duties.
4. Who are the data recipients of your personal information?
4.1 Categories of Recipients
Data is disclosed on a strict need-to-know basis to authorized personnel of GoCar, Europcar group entities, franchise partners, competent legal authorities (for fine processing), and primary sub-processors:
| Provider / Vendor | Service Provided & Processing Purpose |
|---|---|
| Google Inc. | Hosting infrastructure, enterprise applications, and advertising. |
| Rentalmatics | Vehicle telematics data collection and management services. |
| Onfido (Entrust) | Digital driving licence verification and biometric identity verification. |
| Salesforce | Customer relationship management (CRM) and communications. |
| Braze, Sendgrid, Zendesk | Email communications, customer messaging, and live web chat support. |
| Microsoft / Clarity | Email productivity systems, user behavioral metrics, and session analysis. |
| Meta | Targeted marketing services and ad measurement. |
| CarValoo | Automated vehicle damage handling and incident analytics. |
| Capricorn Ventis | Business Intelligence application development. |
| Trilogy Technologies | IT Managed Services and Helpdesk support escalation. |
| Matrix Internet | Application development and maintenance. |
| SurveyMonkey | Customer experience feedback and survey processing. |
| Track Global Security Solutions | Vehicle security tracking |
4.2 International Transfers
GoCar may transfer personal data outside the EU to recipients in third countries. Where recipients reside in countries without an EU Commission adequacy decision, GoCar ensures appropriate safeguards (including Standard Contractual Clauses) are executed in accordance with GDPR (EU 2016/679).
5. For what period will GoCar retain your personal data?
| Processing Purpose | Data Retention Period & Archiving Policy |
|---|---|
| Member Registration & Rental Bookings | Retained for the duration of the commercial relationship. Archiving: Registration details and booking history are archived for 6 to 9 months following account cancellation to protect against fraud/criminal activity. Statutory Records: Transaction proofs and invoices are kept per legal statutory limitation periods. |
| Payment Information | GoCar only accesses tokenized card details. Payment evidence is archived for 13 months (credit cards) or 15 months (deferred debit) for chargeback disputes. |
| Vehicle Telematics & Geolocation Systems | Up to 4 years following the end of your commercial relationship with GoCar. |
| Navigation & Service Preference Improvement | Up to 9 months following the end of your commercial relationship. |
| Promotional & Marketing Activities | Customers: Up to 3 years from commercial relationship end. Prospects: Up to 3 years from data collection or last enquiry. |
| Statistical Analysis | Up to 9 months following the end of your commercial relationship. |
| Cookies & Online Trackers | Refer to the GoCar Cookie Policy for detailed retention periods per cookie type. |
| Fines & Infractions Management | Retained for the time necessary to identify the driver, up to 12 months after fine receipt. Competent authority requests are deleted once fulfilled. |
| Watchlist & Risk Management | Legal/Payment Incidents & Accidents: 3 years from event occurrence. Terms & Conditions Breach: 5 years from event occurrence. |
6. What rights can you exercise with respect to your personal data?
You can view and update your registration, driver details, phone number, address, and rental preferences directly via the “My Profile” section on the GoCar website.
Under EU Regulation 2016/679 (GDPR), you possess the following data protection rights:
- Right of Access: Obtain confirmation as to whether your personal data is being processed, and access details regarding processing operations.
- Right to Rectification: Obtain completion or correction of inaccurate/incomplete personal data.
- Right to Erasure (‘Right to be Forgotten’): Request deletion of your personal data under specific legal conditions.
- Right to Object: Object at any time to data processing based on Legitimate Interest or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing relies on consent.
- Right to Data Portability: Receive data provided to GoCar in a structured, machine-readable format (e.g., CSV/Excel) to transmit to another controller.
To exercise any of these rights, contact info@gocar.ie. You may also lodge a complaint with your local Supervisory Authority under Article 77 GDPR if you believe processing infringes regulation.
7. How does GoCar protect your personal data?
GoCar implements physical, technical, and organizational security measures to protect data against unauthorized access, loss, or damage. Systems use standard firewalls and SSL (Secure Sockets Layer) encryption for internet data transmissions.
Payment transactions are processed through Secure Server Technology to ensure connection authenticity, payload encryption, and data integrity.
8. Who to contact when you have a query?
For general queries or to exercise your GDPR rights, please submit a support ticket via our portal or write to our Data Protection Team:
Data Protection Officer
GoCar Ireland
24 Northwood Court, Northwood Business Park, Santry, Dublin 9, Ireland
Email: info@gocar.ie
9. Changes to this Privacy Policy
This Privacy Policy was last updated on 21.08.2026. GoCar reserves the right to modify this policy at any time.
