Privacy Policy and Personal Data Treatment

1. Identification of the Data Controller

This Privacy Policy and Personal Data Treatment regulates the collection, storage, use, circulation, transmission, transfer and deletion of personal data processed by GLOBAL CAR RENTAL identified with NIT 1193201949-9, commercially operating under the brand Global Car Rental.

• Main office: Medellin, Antioquia, Colombia.
• Address: Calle 10 No. 43E-36, El Poblado, Medellin.
• Phone: (+57) 310 400 2360 / (604) 448 8082.
• Data protection email: admon@globalcarental.com
• Habeas data channel: admon@globalcarental.com

2. Purpose

This policy aims to inform personal data holders about how Global Car Rental collects, stores, uses, transmits, transfers, updates, rectifies, preserves and deletes their personal data, as well as about their rights and the procedures to exercise them.

3. Scope

This policy applies to personal data collected through:

• The website globalcarental.com.
• Quote, booking, contact and comment forms.
• Phone, WhatsApp, email and social media support channels.
• Pre-contractual, contractual and post-contractual processes related to vehicle rental.
• Commercial, advertising, administrative, accounting, customer service and regulatory compliance activities.

4. Definitions

• Personal data: any information linked to or that may be associated with an identifiable natural person.
• Sensitive data: data that affects the holder's privacy or whose misuse may generate discrimination, such as health or biometric data.
• Holder: natural person whose personal data is subject to processing.
• Processing: any operation on personal data, such as collection, storage, use, circulation or deletion.
• Data controller: person who decides on the database and/or the processing.
• Data processor: who performs the processing on behalf of the controller.

5. Applicable Principles

Global Car Rental will apply the principles of legality, purpose, freedom, veracity or quality, transparency, restricted access and circulation, security, confidentiality and demonstrated responsibility, in accordance with current Colombian regulations.

6. Personal Data We May Collect

a. Identification and contact data

Full name, ID type and number, city, address, phone, email.

b. Booking-related data

Pick-up/return city and date, vehicle type, additional information, quote/booking/service history.

c. Service formalization data

ID/passport copy, driver's license, validation info, references, payment/billing/damage data.

d. Browsing data

IP address, technical cookies, session and navigation data.

7. Processing Purposes

• Respond to information requests, quotes, bookings and requirements.
• Contact the holder to confirm, manage or modify bookings.
• Verify vehicle rental requirements and validate identity.
• Prepare, execute and control rental contracts.
• Manage deliveries, returns, assistance, support and claims.
• Manage billing, portfolio, guarantees, deposits, claims and contractual obligations.
• Comply with legal, regulatory, accounting, commercial and tax obligations.
• Prevent fraud, impersonation and other illegal activities.
• Send commercial information and promotions with prior authorization.
• Improve navigation experience, usability and website security.

11. Holder's Rights

• Know, update and rectify personal data.
• Request proof of the authorization granted.
• Be informed about the use given to personal data.
• File complaints with the Superintendence of Industry and Commerce.
• Revoke authorization and/or request data deletion.
• Free access to personal data subject to processing.

12. Procedure for Inquiries and Claims

Inquiries, requests or claims related to personal data should be sent to:

• Email: admon@globalcarental.com
• Subject: "Personal data protection"
• Physical address: Calle 10 No. 43E-36, El Poblado, Medellin.

Inquiries: will be answered within ten (10) business days. Claims: will be addressed within fifteen (15) business days.

18. Effective Date

This Privacy Policy and Personal Data Treatment is effective as of March 26, 2026.