Privacy Policy

Privacy policy
December 2023

1. General

Who is responsible for processing your personal information?
Entity Ofran Intl and its group of companies (together referred to as "Company", "we", "us")
Address: Yarkon 3, Bnei Brak, Israel
Email: [email protected] 

This Privacy explains our practices with regard to personal information collected for our own business purposes from people who visit our website: www.ofran.travel (the "Website") and use our car rental booking services (the "Services").

"Personal information" is any information that can be used to identify, locate or contact you. Personal information also includes other information that may be associated with your personal information.

for the purposes of this Policy your data controller is Ofran, having its seat and registered address at Yarkon 3, Bnei Brak, Israel.

Please read the following carefully to understand our practices regarding your personal information and how we will treat it. You should read this Policy before you access or use our Services, technologies or other functions offered on our Website and all related applications, and Services.

You are not obligated by law to provide us with any personal information. However, without providing it you will not be able to receive the Services, which require a booking process and provision of details as stated. You hereby acknowledge and agree that you are providing us with personal information at your own free will and for the purposes described in this Policy, and that we may retain such personal information in accordance with this Policy and any applicable laws and regulations. Providing your details when signing up to the Services constitutes a declaration on your part regarding their correctness, truthfulness and completeness.

Please note that this Policy is governed by the applicable Israeli laws.

2. Types of information collected and how we use it

(a) Information you give us - We may collect and process the following types of personal information that you voluntarily provide us on your requested booking through the Website or through other means, for the following purposes:

(1) Your contact information, such as name, username, telephone number, email address or other addresses - such information allows us to identify you, to facilitate your future booking and to communicate with you, for customer service, account management, support and training purposes.

(2) Your booking details - such as driver information, car rental preferences information, booking dates and location; this processing is necessary for the management of your booking, including:
o to handle your booking;
o to exchange with you in relation to your booking (e.g. to provide you with information on your booking, to respond to your questions etc.);
o to manage your payment and invoices;
o to manage the administrative procedures and communications that could derive from the contractual relationship.
o to manage potential claims;
o for reporting and legal compliance;
o to ensure the safety and integrity of the requested transaction and prevent illegal conduct.

(3) Your payment details - this processing is necessary for the performance of the purchase of the Services. The clearing of credit cards of customers placing orders through the Website is carried out through a clearing verified supplier. We do not store credit card details provided by the Website's users.

(4) Information you may provide when you communicate with us - We may monitor and record phone calls, e-mails, live chats, or other communications between you and our Customer Service representatives or other Company's representatives. Such information allows us to communicate with you for customer service purposes, and for the performance of the Services.

(5) Operation of web chat to provide you with online assistance - the chats and the information you provide us therein are used to communicate with you for customer service purposes, aiming to provide a better and faster service.

(6) Improving our services: We analyze personal information to help us improve the functionality and quality of our Website and Services and enhance the whole user experience.

(7) Customer surveys and reviews you have completed - you may voluntarily fill in our surveys, used for the improvement of our Services, for statistical research and analysis, aiming at having a better understanding of our customers' needs to enhance your experience of our Services.

(8) Promotional and marketing activities, used for business marketing purposes, namely:
o sending email and SMS notifications for updates, special offers and deals from us and, in some cases, our partners;
o using your booking history for suggesting you preferred services based on your booking history;
o sending other commercial messages and personalized advertisements from us and our partners, via any other online communications;
o developing promotional activities by companies within our group;
o sending emails about a booking you did not complete;
Direct marketing processing activities, i.e. any commercial message from us aiming at promoting our Services and our partner's services, are subject to your express consent.
In addition, we also use third party websites like social networks to display targeted advertising to which you might be exposed when visiting these third party websites.

By exception, if you are already an existing customer and the message concerns services similar to those you have already purchased, the underlying processing aiming at promoting these services will not be based on your consent but on our "legitimate interest".
You may tell us at any time if you do not wish to receive marketing messages from us by contacting us at [email protected] or by choosing to opt out of receiving additional promotional e-mails from us by clicking on the 'unsubscribe' link in any such e-mail, or by following any instructions we may include in the message sent to you (the "Opt-out request" or "Request"). Please note that, once we receive your request, it may take an additional period of time for the Opt-Out Request to become effective. Note that, if you opt-out of our promotional communications, we may still e-mail or communicate with you from time-to-time, if we need to provide you with information or for other commercially, non-marketing reasons related to the Services.

The above processing aiming at promoting our Services is based on our "legitimate interest".

(b) Information we receive about you from your travel agent - in some cases, your booking is executed on your behalf by your travel agent, through the Website. In such case, we receive your personal information, as mentioned on section (a) above, from your agent.
If you are an agent, please make sure that that person knows you're giving us their details and has accepted our practices with regard to personal information (as described in this policy). This is your responsibility.

(c) Information we collect automatically - we carry out certain processing of your personal information through "cookies" and other tracers collected every time you visit the Website, when you make a booking, and even if you don't end up making a booking, we may automatically collect some information when you visit our Website. Such data is collected in order to manage our everyday business needs, such as Website and Service development and administration, analytics and security. These processing are governed by our Cookies Clause below, which we encourage you to review.

(d) We may also collect the following information: anonymized demographic information, which is not unique to you or identifying you, such as your age, gender, preferences, interests and favorites.

3. Legal basis for processing
We will only process your personal information on the basis of the following:
• Processing mentioned in sub-sections (1)-(5) in section 2(a) above is based on the execution and performance of our contract with you;
• Processing mentioned in sub-sections (2),(6), (7) in section 2(a) is based on our legitimate interest (e.g. of managing our internal administration and improving our Website and Services), provided that such processing is not overriding Data Subjects' rights and freedoms in objecting to such processing;
• In limited circumstances, further to your consent (or provided you have not objected, or opted-out, as may be appropriate under applicable law, for instance in order to provide you with marketing communications) as stated in sub-section (7) in section 2(a) above;
• Exceptionally, when necessary in the public interest, for example when law enforcement agencies request information to investigate a crime.

4. Disclosing of information to third parties
We will not disclose to third parties the personal information gathered about you via the Website and Services, inasmuch as this Information identifies you personally, except in the cases set forth hereinafter:

• to the car rental agency from which you requested to execute your booking;
• to the authorized personnel of the Company and of entities of the same group and agents appointed by us, for the purposes described in this Policy;
• to our trusted vendors where we will ensure that the necessary safeguards are in place to protect your personal information, as follows:
  o our trusted vendor for processing and handling your booking through the Website and providing customer support; our main service provider for this purpose is Ofran Services Ltd., which operates in Israel and which is within our group of companies.
  o our trusted IT service providers, cloud computing platform and hosting services provider (including their sub-contractors) for technical purposes and assistance in providing you with access to the Website and our Services;
• to our trusted billing providers; This includes sending you emails, invoices, receipts, payment vendors;
• marketing agencies for the preparation and conduct of marketing campaigns, including for sending communications, administrative e-mails, promotional e-mails messages and/or reaching you via social media platforms;
• external consultants in the course of Company's business activities.
• In the event that the Company goes through a business transition, including by way of a merger, transfer of business activity or other strategic cooperation, your personal information may be among the assets transferred, subject to restrictions similar to those contained herein or as otherwise required by applicable law.
• to the extent required by law and/or by competent authorities, or to comply with a judicial proceeding, court order, or other legal process.

5. International transfers
As necessary to provide you with the Services, we will, to the extent necessary for the purposes set forth herein and depending on the location of the rental vehicle, transfer your personal data outside the EU to third parties.

Depending on the case, certain recipients may be located in countries which have been recognized by the European Commission as ensuring an adequate level of data protection or in countries which has not been recognized as ensuring such a level of protection. In any case, we have put in place appropriate safeguards to protect your personal data, in compliance with the EU General Data Protection Regulation no. 2016/679 ("GDPR").

To have more information about the transfer of your personal data outside the European union, please refer to the contact information provided at the end of this Policy.

6. Cookies and other data collection technologies
• When you visit our Website, we may collect certain transaction information by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs and web beacons.
• For example, when you visit our Website, we place cookies on your computer. Cookies are small text files that websites send to your computer or other internet-connected device to uniquely identify your browser or to store information or settings in your browser. Cookies allow us to recognize you when you return. They also help us provide a customized experience and enable us to detect certain kinds of fraud. In many cases, you can manage cookie preferences and opt-out of having cookies and other data collection technologies used by adjusting the settings on your browser. All browsers are different, so visit the "help" section of your browser to learn about cookie preferences and other privacy settings that may be available.

• Pixel tags and web beacons are tiny graphic images placed on website pages or in our emails that allow us to determine whether you have performed a specific action. When you access these pages, open, or click an email, the pixel tags and web beacons generate a notice of that action. These tools allow us to measure response to our communications and improve our web pages and promotions.

• We collect many different types of information from cookies and other technologies. For example, we may collect information from the device you use to access our website, your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. Our server logs also record the imp address assigned to the device you use to connect to the internet. An imp address is a unique number that devices used to identify and communicate with each other on the internet. We may also collect information about the website you were visiting before you came to and the website you visit after you leave our site.

• In many cases, the information we collect using cookies and other tools is only used in a non-identifiable way, without any reference to personal information. For example, we use information we collect about all website users to optimize our websites and to understand website traffic patterns.
• In some cases, we do associate the information we collect using cookies and other technology with your personal information. This policy applies to the information when we associate it with your personal information
• You can manage your cookies' settings in your web browser. For more information on how to manage your Cookies via your browser, please refer to the specific browser 'Help' section or click on the relevant link: Google Chrome , Mozilla Firefox , Apple Safari .

7. Data retention period
We would like to inform you that your data will be kept as long as it is needed for the delivery of Services or contractual relationship, to resolve disputes with any parties and otherwise as necessary to allow us to conduct our business, including to detect and prevent fraud or other illegal activities, and as well as the necessary time to comply with the legal obligations that correspond to each type of information. All personal data we retain will be subject to this policy.

8. How do we protect your personal information?
We are committed to protecting the information we collect through the Website. In particular, we use appropriate physical, technical and organizational security measures to prevent unauthorized or unlawful processing, accidental loss of or destruction of or damage to your personal information.
Wherever we collect personal information, that information is encrypted and transmitted to us in a secure way. While we use encryption to protect personal information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.

Any credit card transaction you make through our Websites is done through our Secure Server Technology. This technology notably:
a) assures your browser that your data is being sent to the correct computer server, and that the server is secure;
b) encodes the data, so that it cannot be read by anyone other than the secure server;
c) checks the data being transferred to ensure it has not been altered.

9. What rights can you exercise with respect to the processing of your personal data?
As per EU GDPR, if applicable, you can also benefit from the following rights:

a) right of "access": right to obtain confirmation as to whether or not your personal information are being processed by us, and, where that is the case, to access to these personal information and to obtain further information on the characteristics of our processing;

b) right "to rectification": right to obtain the rectification of inaccurate personal information or the right to have incomplete personal data completed;

c) right to "erasure" (or the so-called "right to be forgotten"): right to obtain the deletion of your personal information in certain circumstances; right to "object":, a right to prevent us from continuing to carry out processing of your personal information, in certain circumstances;

f) right to "withdraw your consent": where the processing of your personal information is based on your consent, a right to withdraw your consent to the processing of your personal information at any time and to prevent us from continuing to carry out such processing;

g) right to "data portability": where the processing of your personal information is based on your consent and carried out by automated means, the right to receive your personal information provided to Company, in a structured, commonly used, and machine readable format and to transmit it to a designated third party.

If you wish to exercise any of these rights, please contact: [email protected]  .
To protect your privacy and security, we will take reasonable steps to verify your identity before exercising any of the above rights.

In addition, you can lodge a complaint about the processing of your personal information with the body regulating data protection in your country if you consider that the processing of your personal information infringes the GDPR.

Lastly, we would like to inform you that you can contact the Spanish Data Protection Agency and other competent public entities for any claim derived from processing of your personal data.

10. Third party links
This policy only addresses the use and disclosure of information by us. You may find various links to our partners websites or other third party websites (e.g. for travel services) on this Website. Other websites have their own privacy policies and data collection, use and disclosure practices. Our affiliates, suppliers and business partners have their own privacy policies too.
We encourage you to review the privacy policies of Company's partners and other third parties to further understand the rules applicable to the processing of your personal information carried out by the same, prior to providing them with information or taking advantage of an offer or promotion.

11. Changes to this Privacy Policy
From time to time, we may update this policy to reflect new or different privacy practices. We will place a notice online when we make material changes to this policy. Additionally, if the changes will materially affect the way we use or disclose previously collected personal information, we will notify you about the change by sending a notice to the primary email address associated with your account.
When a change materially impacts a processing carried out on the basis of your consent, we will contact you to obtain a new consent.

12. Contact us
For general query regarding the processing of personal information carried out by us please contact:
Data protection Officer: Eddie Adouk, +972-3-7951010, [email protected]