Privacy Policy

The Vehado service is published and operated by Espero-Soft Informatiques SRL. Vehado is a peer-to-peer and agency car rental marketplace that connects renters wishing to book a vehicle with hosts who offer it for rent. We attach great importance to the protection of your personal data. This privacy policy describes how we collect, use, store and protect your data in accordance with the General Data Protection Regulation (GDPR) and French law no. 78-17 of 6 January 1978 « Informatique et Libertés » (as amended).

The data controller is Espero-Soft Informatiques SRL, Rue de la Colonne 1A, 1080 Molenbeek-Saint-Jean, Belgium, Numéro d'entreprise (BCE) 1033.022.383, VAT number BE 1033.022.383, publisher and operator of the Vehado service.

Data Protection Officer (DPO): you may reach our DPO at dpo@vehado.com for any request concerning your personal data.

For general inquiries, you can contact us at info@vehado.com or by phone at +32 484 71 17 19. For inquiries to the publisher: info@espero-soft.com.

Identification data: name, first name, email address, phone number, address. For hosts, where applicable, driving licence and identity document.

Company data (agency or fleet hosts): company name, legal form, SIREN number, VAT number, registered office.

Financial data: rental payment information and host payout details (processed by our secure payment provider).

Technical data: IP address, approximate location (country, region, city) derived from the IP address, browser type, device information, visitor identifier, cookies.

Usage data: browsing history on the Platform, pages viewed and buttons clicked, booking and rental history.

Review data: name or pseudonym, email address and the content of the review when you publish an evaluation of a vehicle or a host.

We process your data for the following purposes: connecting renters and hosts (managing vehicle bookings), managing your account, publishing and moderating reviews, processing rental payments, paying out amounts due to hosts and collecting our commission, improving our services and complying with our legal obligations.

The processing of your data is based on: the execution of a contract (when you order a service), your consent (for marketing communications), our legitimate interests (improvement of our services) and legal obligations (accounting and tax obligations).

Your data is retained for the time necessary for the purposes for which it was collected. Customer data is retained for the duration of the contractual relationship and up to 10 years thereafter in accordance with French accounting obligations.

Bookings are retained for the time it takes to process them and for the duration of the rental, and are then archived; reviews are retained for as long as they remain published.

Audience measurement data (navigation events: page views, clicks) is retained for a maximum of 12 months and then automatically deleted.

Your data may be shared with: the hosts (vehicle owners) concerned by your bookings, and the relevant renters on the host side (in order to enable the rental); our payment provider Stripe (processing of rental payments and payouts to hosts via Stripe Connect); our storage provider Amazon Web Services (EU region — Ireland); our hosting provider OVHcloud (Roubaix, France — European Union); and Google (display of Google Maps maps and, where applicable, authentication). We never sell your data to third parties.

Transfers outside the European Union: certain sub-processors, in particular Stripe Inc. and Google LLC, are located in the United States. These transfers are governed by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework. You may obtain a copy of these safeguards upon simple request at dpo@vehado.com.

In accordance with the GDPR, you have the right to: access your data, rectify inaccurate data, delete your data ("right to be forgotten"), restrict processing, data portability and object to processing.

To exercise your rights, contact us via the contact form. We will process your request within one month (in accordance with Article 12 of the GDPR), extendable by two months for complex requests.

Our Platform uses cookies. Essential cookies are necessary for it to function and do not require consent. Non-essential cookies (audience measurement, Google Maps mapping, etc.) are only placed with your prior consent, collected via our cookie management banner, which you can modify or withdraw at any time. For details of the cookies used, please consult our Cookie Policy.

We carry out in-house audience measurement (hosted on our own infrastructure, without any third-party advertising tool) in order to understand how our Platform is used and to improve our services. To this end, we record navigation events: pages viewed (in particular vehicle listings and the Pricing page), buttons clicked (vehicle search, listing a vehicle for rent, booking, etc.) and the steps of the booking journey up to payment.

These events are associated with your IP address, an approximate location derived from it (country, region, city), your browser's technical information, and a random visitor identifier stored locally in your browser. When you are logged in, the event may be linked to your account.

The legal basis for this processing is our legitimate interest in measuring and improving the performance of our service (Article 6.1.f of the GDPR). We never resell this data and do not use it for targeted advertising. You can object to this audience measurement by contacting us at dpo@vehado.com.

Audience measurement events are retained for a maximum of 12 months, then automatically deleted.

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss or destruction. Your data is stored and transmitted in encrypted form.

For questions or complaints about the processing of your data, you can contact us via the contact form or by phone at 07 43 28 40 28. You also have the right to file a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.