Privacy policy

The data controller for the processing of your personal data is:

• Ilulissat Car Rental (VVS & El Firmaet A/S)
• Konrad Chemnitzip Aqq. 28, 3952 Ilulissat, Greenland
• CVR no.: 12411510
• Phone: +299 94 60 23
• E-mail: ilulissatcar-rental@vvs.gl

Note: Greenland is not directly covered by the EU General Data Protection Regulation (GDPR), but we follow the principles of the GDPR to give you the same protection as if you were an EU citizen.

We only collect the information necessary to:

• Create and administer your booking
• Identify you at pick-up of the car
• Contact you regarding your booking
• Receive payment and make any refunds
• Comply with legal requirements (bookkeeping, insurance claims etc.)

The specific data:

• Identification: first and last name, date of birth, driving licence number
• Contact: e-mail, phone number
• Payment details: card numbers are never processed directly by us — they go through our payment providers (S5 / Frisbii). We only receive a reference ID and payment status
• Booking history: which cars you have rented, when, and any damage or remarks
• GPS data: all our cars are fitted with a GPS tracker. Location data is used in case of damage, breach of contract or suspected misuse — not for continuous monitoring
• Technical data: IP address, browser, language, and cookies as described in our cookie policy

We process your personal data on the following bases:

• Contract: most information is necessary to fulfil the rental agreement between you and us
• Legal obligation: the bookkeeping act (5 years' retention of accounting records), any enforcement by authorities
• Legitimate interests: GPS data, fraud prevention, and blacklisting of customers after repeated breaches
• Consent: statistics cookies (Google Analytics) and similar — managed via the cookie policy

• Bookings + customer details: up to 5 years after your last booking, cf. the bookkeeping act
• Damage and insurance data: until the case is finally closed, then 5 years
• GPS tracking: raw data from the vehicle for up to 90 days; data linked to a specific case is stored for as long as the case is active
• Marketing consent (newsletters): until you withdraw it
• Cookies: see our cookie policy for the exact duration per cookie

We only share your data with:

• Payment providers: S5 and Frisbii (to process the payment securely)
• Hosting: Supabase (database) and Vercel (website hosting) — data processing agreements in place
• Insurance company: in case of damage, where a claim is filed
• Public authorities: police, tax authorities, Nævnenes Hus etc., where required by law

We never sell or rent your personal data to third parties for marketing purposes.

Some of our subcontractors (e.g. Supabase, Vercel) also operate server infrastructure in the US. Transfers take place on the basis of the EU Commission's standard contractual clauses (SCC) or other approved mechanisms that ensure an adequate level of protection.

You have the right at any time to:

• Access the data we process about you
• Have corrected incorrect or outdated information
• Have deleted your data when we no longer have a legal basis for storing it
• Restrict or object to the processing
• Receive your data in a structured, commonly used format (data portability)
• Withdraw consent at any time (e.g. by changing your cookie preferences)

Requests regarding your rights should be sent to ilulissatcar-rental@vvs.gl. We generally respond within 30 days.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. This includes encrypted connections (HTTPS), access control, audit logs and regular updates of our systems.

If you believe we are processing your data incorrectly, we ask you to first contact us directly at ilulissatcar-rental@vvs.gl so we can find a solution together.

If you are a consumer residing in another EU country and have a data protection complaint, you can submit it via the EU Commission's online complaint portal: consumer-redress.ec.europa.eu. You can also contact the supervisory authority in your home country.

We may update this policy from time to time. The date of the most recent update is shown at the top of the page. Significant changes will be communicated by e-mail to registered customers.