By using Flo!’s services, you entrust the company (hereinafter, “Flo!” or “we”) with your personal data and grant us the right to process them in accordance with our Privacy Policy (hereinafter, “Policy”) and the Reservation Terms and Conditions (hereinafter, “Terms”). If you do not agree with the Terms, this Policy or any of its particular provisions, unfortunately you will not have the option to use Flo!’s services as we will not be able to provide you with the service. In this Policy, you will find all the information about which of your personal data we collect and process, for what purposes we use them, how long we store them, and other information about the processing of your data. Please read the Policy carefully, and if you have further questions, contact us using the contact information provided in this Policy. We draw your attention to the fact that both the Policy and the Terms may be modified, supplemented or renewed, and that Flo! will inform you about this using the contact information you have provided. Personal data: Any information that can be used to identify a person, as well as any information about a person that has already been identified.

What personal data do we process and why?

Reservations

In order to offer you car rental services, we need to verify your personal data (name, last name, date of birth, phone number, email address, country of residence) and reservation-related information in order to provide you with the rental services you have requested. We will use your email address to send you a confirmation of your reservation. We will use your phone number and email address to clarify any issues related to your reservation and to communicate with you in the manner you choose before making the reservation if you have questions about our services. We will use your email address to send you a confirmation of your reservation. We will use your phone number and email address to clarify any issues related to your reservation and to communicate with you in the manner you choose before making the reservation if you have questions about our services. We will use your payment data to do the following:

• Block the available funds (amount for the service and (if the renter has chosen) for prepayment and security fee protection) until the specific reservation has been confirmed
• Charge the available funds (amount for the service and (if the renter has chosen) for prepayment and security fee protection) after the reservation has been confirmed
• Hold/block the lease payment on behalf of the car rental provider if an agreement has been reached between the renter and the company
• Collect available funds in case of price increases (for example, when a higher-class car is offered) after the reservation has been confirmed
• Cover, on behalf of the car rental provider, a possible no-show fee if, according to the Terms, the renter fails to arrive on time to pick up the car.

Legal basis for data processing for reservations: processing is necessary for the contract in which you are a contracting party (vehicle rental agreement), or to take steps at your request before entering into the contract. Data processing period: the entire period of time during which the services are provided to you, and a longer period of time if necessary to protect our interests and rights in relation to claims made against us. Commercial Communications From time to time, we will communicate with you by email with information about car rental promotions and offers. You will have the option to accept or decline such marketing communications by indicating your choice on the booking page when entering driver details. You will also be given the opportunity at the bottom of each marketing email to unsubscribe/opt-out. The legal basis for data processing is consent. The data processing period is the entire period of time during which your consent is in force. Statistics and Market Research and Customer Behavior We strive to periodically improve the services we offer, so we use your personal data (name, surname, date of birth, information related to your reservation, reservation history) to collect statistics and conduct research on the market and customer behavior. The legal basis for data processing is our legitimate interest in analyzing data to evaluate our business and improve the quality of the services we provide. Data processing period: no more than 10 years. Website Visits Our web server automatically recognizes each website visitor based on a domain or email address. We retain email addresses of those who contact us. We may also save the name, address, and phone number if the user registers in our system. We do not store information about customers who only view our site. What sources do we use to collect your personal data? All of your personal data is collected only from you. You provide us with data directly, for example, when you complete the required data for the reservation and when you complete other contact forms on our website.

What cases and to whom do we disclose your personal data?

We will transfer your personal data to the rental service provider so they can provide you with the requested rental services. We may transfer your data to data recipients who help us provide you with the services. These persons may be database software providers, database management services, data center maintenance, cloud computing service providers, direct marketing service providers, or market research or business intelligence service providers. In each case, we only provide the data controllers with the amount of data necessary to perform a specific task or provide specific services. Our data controllers can only process your personal data in accordance with our instructions and cannot use them for any other purpose or transfer them to others without our consent. In addition, they have an obligation to ensure the protection of your data in accordance with the requirements of applicable laws and regulations and the written agreement with us, which, among other things, Data may also be transmitted to competent authorities or police authorities, such as the police or control authorities, but only in response to their requests and only if necessary in accordance with applicable law and regulations, in cases and in accordance with the procedure specified. by regulatory acts.

In which territories and jurisdictions do we process your personal data?

We only process your personal data in the United States where our service is based, and in Colombia where we have advertising operations centers. We may transfer your data to countries outside of the United States solely for the purpose of implementing measures to enter into a contract with a rental service provider at your request.

How secure are your data?

We respect your privacy, therefore the security of your personal data is our priority. We use appropriate organizational and technical means to ensure the ongoing security of your personal data and compliance with data processing requirements in accordance with our data protection laws, as well as our internal rules, which include Flo’s commitment to ensuring the confidentiality of customers’ personal data and payment card information so that when transmitted over the internet, it cannot be read. Booking through our website is a completely secure process. We use industry standard Secure Socket Layer (SSL) technology, which encrypts all of your personal data. We comply with the requirements of personal data protection laws and in each instance of data processing, we take care to collect only the information necessary to achieve the objectives set out in this Policy and the Terms.

What are your rights under data protection laws and how can you use them?

Data protection laws give you rights that you can freely exercise by contacting us. We are committed to providing you with the opportunity to exercise your rights. The right to obtain information about whether we process your personal data and, if we do, what data. You have the right to receive our confirmation about whether or not we process your personal data and you have the right to access your personal data that we process, information about the purposes of data processing, the category of data to be processed, the category of data recipients, the period of data processing, and the sources of data extraction. Most of this information is provided in this Policy and we believe you will find it useful. Right to request the correction of personal data If your data has changed, or you see that our information about you is inaccurate or incorrect, you have the right to request that this information be changed, clarified, or corrected. Right to withdraw consent In all cases where we process your data based on your consent, you have the right to revoke your consent at any time and processing based on your consent will be terminated. At any time, you can withdraw your consent to receive commercial communications. Revoking this consent will not limit your ability to use Flo! services. If your consent expires or is withdrawn or cancelled, we will delete the data processed based on your consent, unless there is another basis for processing them to achieve other data processing objectives described in this Policy. In any situation, we may also store your consent and evidence thereof for a longer period of time if necessary to protect our rights in relation to claims or claims made against us. Right to lodge a complaint If you believe we are processing your data in violation of data protection laws and regulations, we encourage you to contact us directly. We believe that we will be able to successfully resolve all your doubts, satisfy requests, and correct our errors, if any. Right to request data erasure (right to be forgotten) With existing personal data processing in accordance with the legislation, if, for example, personal data is processed unlawfully, the legal basis for data processing is lost and you have the right to request that we delete your personal data. In the event that the processed personal data can be used for other purposes mentioned in this Policy, for example, to ensure the proof of existence in the event of a claim, we may retain the relevant data to ensure that other objectives are achieved. Right to request data processing restriction With the respective data processing in accordance with the legislation, if, for example, personal data is processed unlawfully, you question the accuracy of the data or object to data processing on the basis of our legitimate interests, you have the right to restrict the processing of your data. However, please note that due to the restriction of data processing and during such restriction period, we may not be able to provide you with Flo! services. Right to data portability You have the right to request the portability of the data you sent us in electronic format. Upon receiving your data portability request, we will ensure that your rights are exercised by providing you with the data in a widely used and machine-readable format, or we will electronically send the requested data to the recipient of your choice, following the information specified in your request.

How can you contact us?

The owner and administrator of this website and the administrator of personal data is Flo! (with registration number 86-3204539), a specialist in car rental distribution in the United States. Our financial center and marketing office are located at 5799 SW 25th St, West Park, FL 33023. For any issues related to personal data processing, you can contact us in the following ways:

• By writing to the email address: cmurcia@flocarrental.com

Cookies

We use cookies, which are small pieces of information sent to your computer or other device, such as a mobile phone, when you visit our website. They are stored on your web browser to save data so that we can recognize you as a Flo! customer when you return to a particular website. By using cookies, we can also link your booking history and other data we process while browsing the Internet. The information obtained through cookies allows you to navigate our website comfortably and enables us to offer attractive offers and learn more about the behavior of users of our website, analyze trends and improve both the website and the service provided to you, as well as the services provided by Flo! Our website also uses third-party cookies. These are used to create a browsing history so that each visitor is shown specifically targeted ads and provide the best experience when visiting our website. If your browser allows third-party cookies, our chosen partner can set their cookies on your browser.