In order for us to operate and provide you with services globally, the information you provide to us or that we collect may be transferred or accessed by entities around the world. Enterprise maintains its global information systems primarily in the United States. If you provide to us or if we collect personal information about you outside of the U.S., we will transfer and maintain your personal information in the U.S. However, in limited circumstances, your personal data may be stored outside the U.S., including where we use certain service providers such as call centre support, claims processors and IT providers.
Where applicable, Enterprise enters into Standard Contractual Clauses or another approved mechanism for cross-border transfers.
EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)
We participate in and have certified our compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), (collectively referred to as the “Frameworks”). We are committed to treating all personal data received from European Union (EU) member countries, the U.K., and Switzerland in reliance on these Frameworks and their applicable principles.
To learn more about the Frameworks, and to view our certification, visit the U.S. Department of Commerce's website (https://www.dataprivacyframework.gov/s/) . With respect to information received or transferred pursuant to the Frameworks, we are subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal information in response to lawful requests by U.S. public authorities, including to meet national security or law enforcement requirements.
Enterprise Holdings is responsible for the processing of personal data it receives under the Frameworks and subsequently transfers to third parties acting as an agent on its behalf. Enterprise Holdings complies with the Frameworks’ applicable principles for all onward transfers of personal data from the EU, the U.K., and Switzerland, including the onward transfer liability provisions.
If personal data covered by this Privacy Policy is to be used for a new purpose that is materially different from that for which the personal data was originally collected or subsequently authorized, or is to be disclosed to a non-agent third party in a manner not specified in the Privacy Policy, we will provide you with an opportunity to choose whether to have your personal data so used or disclosed. Requests to opt-out of such uses or disclosures of personal data can be submitted to us by accessing our Global Privacy Portal on our Contact Us page.
As defined by the Frameworks Principles, certain personal data, such as information about medical or health conditions, racial or ethnic origin, political opinions, and religious beliefs, is considered “Sensitive Information.” We will not use Sensitive Information, for a purpose other than for which it was originally collected or subsequently authorized by you unless we receive your affirmative consent (opt-in).
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Enterprise Holdings, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact us via our Global Privacy Portal.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Enterprise Holdings, Inc commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Under certain conditions, as more fully described on the U.S. Department of Commerce’s website (https://www.dataprivacyframework.gov/s/), you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
Franchisees/Fulfilment Provider/Corporate-Owned Locations
If you book a reservation to be fulfilled by a franchisee or fulfilment provider in another country or an Enterprise corporate-owned location (e.g. in the United States, Canada, Germany, Spain, France, Ireland and the United Kingdom), we will transfer your personal information to our franchisee, fulfilment provider or local affiliate in that country in order to facilitate your requested transaction.
Visit the Contact Us page for the data controller applicable to your transaction.