This policy explains what personal data Elos processes, why, on what basis, who it is shared with, how long it is kept and what rights you have over it.
1. Who is responsible for your data
Elos Technologies, Sociedade Unipessoal (“Elos”), Cidadela Palmarejo, Praia, Santiago, Cabo Verde, is the controller of the data of your account, your bookings on the platform, the online payment, customer support and Elos's communications. The Partner you rent from is the controller of the data of the rental contract, the inspection and the vehicle during the rental; Elos and the Partner share with each other only what the booking requires. For companies that use Elos as software to manage their fleet, the company is the controller of its drivers' data and Elos processes it on the company's behalf, under a separate data processing agreement.
2. What data we process and why
- Name, email, mobile number, tax number, address, date of birth and language. To create the account, confirm and manage the booking, issue the invoice and talk to you about the booking. Basis: performance of the contract; legal obligation, for the invoice.
- Driving licence and identity document, when you send them before pick-up, and inspection photographs and signature. To prepare the pick-up and document the condition of the vehicle. Basis: performance of the rental contract with the Partner.
- Online payment data. To charge for the booking. Basis: performance of the contract. Card details are processed by the payment operator, not by Elos.
- Bookings you started and did not complete, when you left your email. To remind you of the booking by email. Basis: legitimate interest; you can object in any email.
- Email for the newsletter. To send news. Basis: consent, confirmed by email; unsubscribe whenever you want.
- Browsing data: pages viewed, where visits come from and site usage (clicks and navigation), with the IP address truncated. We do not record your session or your screen. To understand how the site is used and fix errors. Basis: consent, given in the cookie notice; off by default.
- Technical error logs. To keep the site running. Basis: legitimate interest, without identifiable personal data.
3. Who we share with
With the Partner of your booking: name, contact details, documents you sent and booking details. With providers working for Elos, under contract and only for the stated purpose: the payment operator Vinti4 (SISP, Cabo Verde); hosting of the application and database (Laravel Cloud) and of the website (Vercel); email delivery (Resend) and WhatsApp messages (Meta); real-time notifications (Pusher); and usage analytics (Google Analytics and PostHog, only with your consent). With public authorities, when the law requires it. We do not sell data to anyone.
Some of these providers are in the European Union or the United States. Transfers outside Cabo Verde and the European Union are made with the contractual safeguards provided by law, such as the European Commission's standard contractual clauses.
4. For how long
Account data, for as long as the account exists. Booking and invoice data, ten years, as a tax obligation; when you delete the account, those records are stripped of personal data. Documents and photographs sent for pick-up, for as long as the account exists; they are deleted when you delete it. Uncompleted bookings, until you delete the account or ask us to delete them. Browsing data, at most two years, or until you withdraw consent.
5. Your rights
You can access your data, correct it, ask for its deletion, object to a processing, ask for restriction, receive your data in a commonly used format and withdraw a consent you have given. In your personal area you export your data and delete the account without needing to ask us. For everything else, write to info@elos.cv; we reply within thirty days. If you are not satisfied, you can complain to the National Data Protection Commission of Cabo Verde and, if you are in the European Union, to the data protection authority of your country.
6. Which law applies
We process your data in accordance with Cabo Verdean personal data protection law. If you are in the European Union when you use Elos, the General Data Protection Regulation also applies to you, and these rights and safeguards are granted to you on those terms.
7. Security
The connection to the site is encrypted. The documents you send are kept in private storage, with no public address. Access to data is restricted to those who need it for their work.
8. Minors
Elos is intended for adults. We do not create accounts or accept bookings from anyone under 18.
* This legal document governs the platform's terms of use. The car rental contract will be entered into directly with the selected Partner.