This policy describes how BX Cars processes your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Moroccan law 09-08.
1. Data controller
BX CARS SARL AU, represented by Mr Fateh Yassine. Contact: contact@bxcars.be — +32 491 76 89 74.
2. Data collected
- Identity: surname, first name, date of birth, driving licence number, ID card/passport.
- Contact details: email, phone, address.
- Booking: dates, vehicle, pickup location, payment.
- Browsing: cookies, IP address (see cookie policy).
- Tracking of the rented vehicle: position, speed, mileage and technical status recorded by the on-board unit, for the duration of the rental only (see article 11 of the rental terms).
3. Purposes
Performance of the rental contract, invoicing, communication with the client, legal security, fraud prevention and, with your consent, marketing.
For tracking data, the following purposes also apply: protection of the vehicle against theft and failure to return, assistance and breakdown recovery, verification of the mileage charged and of compliance with the authorised area, recording of speed limit overruns and handling of insurance claims. No commercial exploitation.
4. Legal basis (art. 6 GDPR)
- Performance of the contract
- Legal obligation (accounting, identification)
- Legitimate interest (fraud prevention, security)
- Consent (marketing, non-essential cookies)
5. Retention periods
| Data | Period |
|---|---|
| Active client | Contract duration + 5 years (accounting obligation) |
| Prospect | 3 years after last contact |
| Connection logs | 12 months |
| Cookies | Variable (see cookie policy) |
| Real-time position | Not retained (display only) |
| Speed limit overrun records | 12 months |
| Incidents in the customer file | 3 years after the last agreement |
6. Recipients
Authorised BX Cars staff and its processors (hosting provider, payment platforms, insurance, tracking provider). No resale of data. Tracking data is disclosed only to the insurer in the event of a claim and to the judicial or police authorities upon a duly issued request.
7. Transfers outside the EU
Transfers take place between Belgium and Morocco, governed by the European Commission's standard contractual clauses (SCC). Tracking data is hosted on a server located within the European Union.
8. Your rights
In accordance with the GDPR and law 09-08, you have the rights of access, rectification, erasure, objection, restriction, portability, as well as the option to set post-mortem instructions.
To exercise them: email contact@bxcars.be. Reply within 30 days. You may lodge a complaint with the Belgian authority (APD) or the Moroccan authority (CNDP).