Privacy policy

Version 2026-10-01 — updated on 2026-10-01

This policy explains how we process your personal data when you visit rentlasterrenas.com and when you send us a request using the “Request to book” form. If anything is unclear, write to us using our contact form.

Key points

• Only one piece of information is required: your WhatsApp number. Everything else is optional.
• Your request is received by our team, not by the rental company shown in the offer. Nothing is forwarded automatically to rental companies.
• We only send you future commercial offers if you tick the box provided for this purpose, which is unticked by default. If you leave it unticked, your request is handled just the same.
• We do not sell your data. We only use technically necessary cookies: no advertising cookies and no third-party analytics tools.
• You can exercise your rights at any time using the data rights request form or using our contact form.

1. Data controller

The controller of your personal data is THERD SRL (RNC 133-63250-2, Dominican taxpayer number), located at Calle Principal, 32000 Las Terrenas, Samaná, República Dominicana. Contact: the site's contact form.

Request data is recorded in the platform's request database, for which THERD SRL is responsible.

2. What data we process

Data you provide

When you send a request using the “Request to book” form:

• Required: your WhatsApp number, with the international dialing code (for example +1 or +33). Without this number, or if it is wrong, we cannot reply to you or handle your request.
• Optional: first name, last name, email address, rental dates, category or vehicle you want, delivery place, budget and message. If you leave these out, your request is still handled; we may ask you for a few details on WhatsApp.

Please do not include sensitive information (for example about your health) or bank details in your message: they are not needed to handle your request.

Data recorded automatically with your request

• the language in which you are using the site;
• the page from which you sent the request;
• marketing attribution parameters (utm_*), if they were present in the link that brought you to the site;
• the domain of the site you came from (referrer), if your browser sends it;
• the date and time of the request;
• a copy of the price and conditions displayed at that moment;
• the version of this policy that was shown to you;
• your choice regarding commercial offers (box ticked or not), with the text shown to you, its version and the date.

Messages sent with the contact form

If you write to us using the contact form, we record the subject and text of your message, the way to reply that you give (WhatsApp number and/or email address: at least one of the two), your name if you give it, the language, the page you came from, the date, and your choice regarding commercial offers (optional box, unticked by default). This data is used only to reply to you; it is not passed on to any rental company.

Technical security data

When you submit a form, your IP address is used briefly to limit abusive submissions. We only keep a fingerprint of that address (a salted hash), which is deleted after about 24 hours. Your full IP address is not stored in our database. Spam protection works without any third-party captcha.

Audience statistics

We measure traffic with our own counters, aggregated by day (for example, the number of views of each page), without cookies and without personal data.

3. Why we use your data

We clearly distinguish three uses:

1. Answering your request. We contact you on WhatsApp to confirm the price and availability and to propose a solution (vehicle, dates, delivery). If you gave us your email address, we may also use it to reply to you.

2. Following up on that same request. For example, getting back to you if you have not had a chance to reply, or suggesting an alternative if the vehicle you asked for is not available. This follow-up is limited to the request you sent us, and you can ask us to stop at any time.

3. Sending you future commercial offers, only if you agree. If you tick the box provided for this purpose (unticked by default), we may send you commercial offers by WhatsApp or email. If you leave it unticked, your request is handled just the same. You can withdraw your consent at any time by replying STOP on WhatsApp or by using the data rights request form. We never enroll you automatically in any campaign.

We also use some data to keep the service running properly:

• protecting the site and its forms against abuse and spam;
• keeping proof of the information shown to you (price, conditions, version of this policy) and of your choice regarding commercial offers;
• understanding which pages and channels generate requests (utm_* parameters and referring domain), in order to improve the site and our communication.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Applicable law and legal bases

THERD SRL is established in the Dominican Republic. The processing of your data is governed by Dominican law, in particular Law No. 172-13 on the protection of personal data.

If you are in the European Union or the European Economic Area when you use the site or send us a request, the EU General Data Protection Regulation (GDPR) may also apply to the processing of your data.

Under Dominican law (Law No. 172-13)

We process the data in your request on the basis of the consent you give by sending it, after being informed by this policy, or where the law allows processing without consent. Sending future commercial offers is based on a separate, specific consent (the checkbox), which you can withdraw at any time.

Where the GDPR applies

• Answering your request: steps taken at your request prior to entering into a contract, and our legitimate interest in handling the request you send us (Art. 6(1)(b) and 6(1)(f) GDPR).
• Following up on that same request: our legitimate interest in following up on a request you initiated (Art. 6(1)(f)). You can object at any time.
• Future commercial offers: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Security, abuse prevention, proof of the information shown and of your choice, and measuring which channels generate requests: our legitimate interest in protecting the service, being able to demonstrate what was shown to you and what you chose, and improving the site (Art. 6(1)(f)).

5. Who receives your data

• Our team: only authorized staff, through a protected administration area (see section 8).
• Rental companies: they do not receive your data automatically. To check the price and availability, we may ask the rental company about the dates and vehicle you are interested in, without giving it your identity or contact details. If passing data to a rental company becomes necessary to arrange your rental, we will tell you first and only do so with your agreement, limited to what the rental requires (for example your name, your dates and the delivery place).
• Our technical service providers, which process data on our behalf: website hosting (Hostinger International Ltd.), backups and, when we use it, our email service.
• WhatsApp (Meta), which we use to reply to you on the channel you chose. Messages exchanged on WhatsApp are also subject to WhatsApp's own terms and privacy policy.
• Public authorities, only when the law requires it.

We do not sell your data or share it with third parties for advertising purposes.

6. International transfers

THERD SRL is established in the Dominican Republic. Your data is stored on the servers of our hosting provider (Hostinger International Ltd.); the country where they are located depends on that provider. When we reply to you on WhatsApp, messages pass through the infrastructure of WhatsApp (Meta), which may process data in various countries.

Your data may therefore be processed outside your country of residence, including in countries whose laws do not necessarily offer the same level of protection. In all cases, we apply the measures described in this policy.

7. How long we keep your data

• Requests: kept while they are being handled. Inactive requests are automatically anonymized after 12 months, after which they can no longer be used to identify you.
• Contact form messages: automatically deleted after 12 months.
• Proof of your choice regarding commercial offers: kept for as long as necessary to be able to demonstrate it.
• IP address fingerprint: about 24 hours.
• Backups: renewed on a rotating basis (daily backups are kept for about 14 days and weekly backups for about 8 weeks). Deleted or anonymized data disappears from backups at the end of this cycle.

8. Security

• The administration area is restricted to authorized staff and protected by two-factor authentication.
• Access to it and sensitive actions performed in it are logged (audit trail).
• Abusive submissions are automatically limited, and forms are protected by a security cookie.
• Backups are made automatically, kept on our server with restricted access and renewed on a rotating basis.

No system is infallible, but these measures are designed to protect your data against unauthorized access, loss or alteration.

9. Cookies

We only use technically necessary cookies:

• a security cookie (CSRF), which protects forms against fraudulent submissions from other sites;
• session cookies for the administration area, used only by authorized staff who log in.

By default, the site uses no advertising cookies and no third-party analytics tools, and our audience statistics work without cookies (see section 2). Because these cookies are strictly necessary for the site to work, we do not ask for your consent to use them. You can block them in your browser, but forms may then stop working. If we ever wanted to use other cookies, we would update this policy and ask for your prior consent where the law requires it.

10. Your rights

Under Law No. 172-13, you have the rights of access, rectification, cancellation (erasure) and objection, known as “ARCO” rights. You can:

• access your data and find out how we use it;
• rectify or update it if it is inaccurate or incomplete;
• request its erasure, unless the law requires us to keep it;
• object to its processing.

You can also withdraw your consent at any time, in particular for commercial offers. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

If the GDPR applies to your situation (see section 4), you can also:

• request restriction of processing;
• receive the data you provided to us in a structured, commonly used format (portability);
• lodge a complaint with a data protection authority, in particular the one in your country of residence in the EU or EEA (for example the CNIL in France).

In the Dominican Republic, you can also enforce your rights in court through the habeas data action provided for in the Dominican Constitution.

How to exercise your rights

• using the data rights request form;
• or using our contact form.

To protect your data, we verify your identity by asking you to confirm the request from the WhatsApp number you used (or, if that is not possible, by another proportionate means). We reply as soon as possible and within the time limits set by applicable law; our target is to reply within 30 days at most. Exercising your rights is free of charge.

To stop receiving commercial offers, simply reply STOP on WhatsApp.

11. Rental companies and professionals

The offers shown on the site are based on commercial information that is publicly available or provided by the rental companies themselves (prices and conditions), always dated. We never publish the contact details of the rental companies listed. If you represent a rental company and write to us, for example from the Business page to request a correction or removal of information, we use the data you provide to handle your request and reply to you. You can exercise your rights in the same way as anyone else.

12. Minors

Our service is not intended for persons under 18. If you believe a minor has sent us data, please write to us using our contact form so that we can delete it.

13. Changes to this policy

We may change this policy, in particular if the way the site works or the applicable law changes. Each version is identified by its version number and update date, shown at the top of this page, and we record the version that was shown to you when you sent your request. If a change significantly affects how your data is used, we will indicate it clearly on the site.

14. Contact

• Data controller: THERD SRL (RNC 133-63250-2)
• Address: Calle Principal, 32000 Las Terrenas, Samaná, República Dominicana
• Write to us: contact form
• Data rights request form: open the form