API MARKETPLACE PRIVACY POLICY

This policy was last updated on February 23, 2023

At Enterprise Holdings, Inc., through our independent regional subsidiaries ("subsidiaries") operating the Enterprise Rent-A-Car, National Car Rental, Alamo Rent-A-Car, and Discount Car and Truck Rental brands as well as Truck Rental, Car Sales, CarShare and Car Club, and Subscribe with Enterprise, as well as other subsidiaries providing various programs, features and services (collectively, "Enterprise Holdings", "we", "our" or "us"), we respect your privacy. We have implemented this privacy policy ("Privacy Policy") and cookie policy ("Cookie Policy") to explain our data collection, use, disclosure, and transfer practices, as well as individual access rights you may have when you use our sites and services. You can learn more in the sections below.

Please note: this Privacy Policy covers the collection and use of personal data for users of the API Marketplace. Use of personal information for providing car rental services is governed by our Global Privacy Policy at: https://privacy.ehi.com

Information We Collect from You

To provide you access to the API Marketplace, we collect:

Name
Phone numbers
Email addresses
Username
Password
Employer

To enhance your user experience and troubleshoot technical issues, we collect:

Browser Type
Operating System
Unique device identifiers
IP address or Domain Name
Operating system

To respond to inquiries and requests for information, we collect:

Name
Phone number
Email
Comments
Company name
Business area and role

How We Use Information About You

We use the information we collect from you or about you to provide you with our services and for the following purposes:

Where it is necessary for the performance of a contract which governs the services we provide to you, including

To provide access to the API Marketplace
To facilitate access to APIs
To use APIs
To service your account with us, respond to your questions, and contact you when necessary

Where necessary for us to comply with a legal obligation, including

To use and share information with government and regulatory authorities when required by law or in response to legal process, obligation, or request, including checking appropriate sanction lists.

Where it is necessary for our legitimate interests, as listed below, and where our interests are not overridden by your data protection rights, including

To verify your eligibility to access the API Marketplace and associated APIs
To assist us in providing better products and services
To compile statistics and analysis about the API Marketplace that are used to enable us to provide better service, products, features, and functionality to you and other users in the future
To protect our rights and property

Retention of Your Personal Information

We retain your personal information for as long as we need to fulfill our business purposes and legal obligations. We keep the data associated with a user for five years, or the length of the relationship, whichever is longer.

We keep general queries for three years, unless you make a complaint, in which case, we keep complaint data for seven years.

Disputes & Law Enforcement

If we are involved in litigation or a governmental or regulatory investigation, then we keep data throughout the period of litigation or investigation and for five years after that. If a settlement means that we must keep data for longer, then we keep data for the period required to administer the settlement. If we provide data to law enforcement agencies, then we keep a record of this for one year beyond the end of the investigation.

Who We Share Information With

Subsidiaries

We share your information with our subsidiaries for providing the transactions you have requested. See the Subsidiaries page for a list. The list is subject to change from time to time and you should periodically review it for changes. Our subsidiaries’ employees in our IT, marketing, operations, and customer service divisions will use your information, as described in this Privacy Policy, including, if required by applicable law, to send you information about products and services or respond to your inquiry.

Our Service Providers and Business Partners

We will share your information:

Administrative and technical support providers
Analytics and technology providers to analyze, enhance and manage our data in order to provide, maintain, and improve our services

Information may be shared with your employer concerning your usage of the API Marketplace or associated APIs.

Government Authorities

Your personal information may also be shared with government authorities as outlined above.

Sale, Merger or Change in Control

Your information may also be transferred to another company in the event of a transfer, change of ownership, reorganization or assignment of all or part of Enterprise Holdings' businesses or assets. This will occur if the parties have entered into an agreement under which the collection, use and disclosure of the information is limited to those purposes of the business transaction, including a determination whether or not to proceed with the business transaction. You will be notified via email or prominent notice on our websites for thirty (30) days of any such change in ownership or control of your personal information or as otherwise may be required or permitted by law.

Selling Your Information

Enterprise does not sell your personal information to third parties. While we do not sell your data, under Nevada law residents still may submit a request to not have their data sold. If you are a Nevada resident you can exercise this right by accessing our Global Privacy Portal on our Contact Us page.

Under the California Consumer Protection Act, California residents have the right to opt out from sales of their personal information. California residents can exercise that right by visiting www.privacyrights.info to opt out from sales of this type of personal information by businesses that participate in the opt-out tool.

Enterprise Global Information Systems Based in the United States

Enterprise maintains its global information systems in the United States. If you provide us or if we collect personal information about you outside the United States, we will transfer and maintain your personal information in the United States.

When we transfer your personal information and process it in the United States, we do so in accordance with European Commission-approved standard contractual clauses (or other similar standards as applicable to your country) and maintain our certification status with the U.S. Privacy Shield Framework (described below).

Third Party Service Providers

We utilize third party service providers who are located outside the countries where we have corporate-owned locations, such as call center support, claims processors and IT providers. When we transfer your personal information to our third-party service providers who are located outside the European Economic Area (EEA), we use European Commission-approved standard contractual clauses.

Your Rights

EU General Data Protection Regulation (GDPR) and UK Data Protection

If GDPR or UK Data Protection is applicable to your transaction in the European Economic Area, United Kingdom, or Switzerland, you have the right to:

Opt out of some collection or uses of your personal information, including the use of cookies and similar technologies and the use of your personal information for marketing purposes, and the anonymization of your personal information for data analyses;
Access your personal information, rectify it, restrict or object to its processing or subject to exemptions under law, request its deletion;
Receive the personal information you provided to us to transmit it to another company;
Withdraw any consent provided; and
Where applicable, lodge a complaint with your supervisory authority.
Contact our Data Protection Officer (DPO@ehi.com) or submit a privacy complaint through our Global Privacy Portal form.

California

Under the California Consumer Privacy Act (CCPA), California residents have certain rights with respect to personal information about them we have collected.  If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

Right to access the personal information we have collected about you and learn how we collect this information, our purpose in collecting it, and the types of parties we may have disclosed it to;
Right to correct inaccurate personal information
Right to delete the personal information we have collected from you;
Right to opt out of our sale(s) of your personal information; and
The right not to receive discriminatory treatment for the exercise of [the relevant] privacy rights conferred by the CCPA.

Virginia

Under the Virginia Consumer Data Protection Act (CDPA), Virginia residents have certain rights with respect to personal information about them we have collected. If you are a Virginia resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

Right to confirm the processing of and access to your personal information;
Right to correct inaccurate personal information we have collected from you;
Right to delete the personal information we have collected from you; and

Right to opt out of targeted advertising. You also have the right to appeal the decision we have made in connection with your privacy rights request. Please submit all appeal requests by replying to the communication resolving your original request or emailing us at privacyrequests@ehi.com

Canada

If you are a resident of Canada, you have the right to:

Access your personal information and rectify it;
Withdraw any consent provided; and
Where applicable, lodge a complaint with your supervisory authority.

Exercising Your Rights

You may exercise any applicable rights described above by accessing our Global Privacy Portal on our Contact Us page. If you wish to lodge a complaint with a supervisory authority, in Europe you may contact the necessary supervisory authority. In Canada, you may contact the Privacy Commissioner of Canada by visiting https://www.priv.gc.ca/cu-cn/index_e.asp or at Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec, K1A 1H3.

We may require additional information from you to verify your identity and residence before we can process your request.  For California and Virginia residents wishing to exercise rights under their state's privacy law,  you may be required to provide your driving license or official state identification document in order to provide proof of residence.  Please make sure that you redact your photograph and all identifying information, other than your name, address, and driving license number.  We also reserve the right to restrict access to your information or to limit your rights (e.g. if such disclosure is prohibited by law or if the rights of another individual might be violated).  In some instances, this may mean that we are able to retain your personal information even if you withdraw your consent.

California residents may designate an authorized agent to make a CCPA request on your behalf by completing and signing the form available here.

If you live in British Columbia, Alberta, or Quebec, please refer to the following resources. In British Columbia, you may find information on how to exercise your rights at the British Columbia Office of the Information and Privacy Commissioner website. In Alberta, you may find information on access requests here and making complaints here. In Quebec, you may find information on your privacy rights here at the Commission d'accès à l'information Quebec website.

Changes To These Policies

As necessary, we will update our Privacy Policy and Cookie Policy to reflect changes in our privacy practices. If we make any material changes, we will notify you by email (sent to the email address specified in your account) or by means of a notice on this site or as otherwise may be required or permitted by law, prior to the change becoming effective. We encourage you to periodically review this site for the latest information on our privacy practices.

Contact Us

For questions or inquiries related to privacy and data protection, please visit our Contact Us page and submit your request through our Global Privacy Portal.

Account

Search

Filter Results (0)