Privacy Policy

We only collect the data we need to provide you with our car rental service: your booking, the contract and our communication with you. We do not sell your data and we do not use it for advertising. You will find all the details below.

Last updated: June 11, 2026.

Eco Start Electric Rent SRL (brand: Simple Rent Cluj-Napoca), CUI 46738163, Trade Register No. J2022005439124, registered office: Str. Mehedinți, nr. 41, Bl. M1, Sc. 2, Ap. 21, Cluj-Napoca, jud. Cluj.

Data protection contact: [email protected], phone +40 753 402 330. Full company details are available on the Company Details page.

• When you book: first name, last name, phone number, email, rental period and the car you choose.
• When you sign the contract: personal identification number (CNP), ID card series and number, driving licence number, home address. These are required by law for the rental contract.
• When you create an account: name, email, phone number and password (stored encrypted).
• Technical: IP address and server log data, for security and abuse prevention.

• Performance of the contract (GDPR art. 6 (1) (b)): your booking, the rental contract, handing over and returning the car, and communication related to your booking.
• Legal obligations (GDPR art. 6 (1) (c)): invoicing, accounting and tax records, and identifying the driver at the request of the authorities.
• Legitimate interest (GDPR art. 6 (1) (f)): website security, fraud prevention and recovering any damages.
• Consent (GDPR art. 6 (1) (a)): the invitation to leave a review after your rental. You can withdraw it at any time.

• IT service providers that help us run the website (hosting, Cloudflare traffic protection, Google calendar sync). They process data only on our instructions.
• The company's accountant, for invoicing and tax obligations.
• Public authorities (the Police, the Romanian tax authority ANAF), only upon request and as required by law, for example to identify the driver in case of fines.
• We do not sell or rent your data to any third party. We do not profile you and we do not send unsolicited marketing communications.

Some providers (Cloudflare, Google) may process data on servers outside the European Economic Area. These transfers are based on the Standard Contractual Clauses approved by the European Commission and the EU-US Data Privacy Framework.

• Rental contracts and accounting documents: 10 years, as required by tax legislation.
• Your user account: until you ask us to delete it.
• Contact requests: up to 2 years from the last communication.
• Technical server logs: up to 12 months.

Under the GDPR, you have the right to access your data, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and the right to withdraw your consent at any time.

To exercise any of these rights, write to us at [email protected]. We will reply within 30 days at the latest.

If you are not satisfied with our reply, you can lodge a complaint with the Romanian data protection authority (ANSPDCP): dataprotection.ro, B-dul G-ral Gheorghe Magheru 28-30, București.

The website uses HTTPS encryption on all pages, passwords are stored encrypted, access to customer data is restricted to authorised staff, and our servers are protected and updated regularly.

The website only uses cookies that are strictly necessary for it to work. Full details in our Cookie Policy.

We may update this policy when our services or the legislation change. The current version, with the date of the last update, is always published on this page.