Global Data Transfers And Processing
In order for us to operate and provide you services globally, the information that you provide to us or that we collect may be transferred or accessed by entities around the world, including:
- Franchisees/Corporate-Owned Locations: If you book a reservation to be fulfilled by a franchisee in another country or an Enterprise corporate-owned location (e.g. in the United States, Canada, Germany, Spain, France, Ireland and the United Kingdom), we will transfer your personal information to that country in order to facilitate your requested transaction.
- Enterprise Global Information Systems Based in the United States: Enterprise maintains its global information systems in the United States. If you provide us with or if we collect personal information about you outside of the United States, we will transfer and maintain your personal information in the United States.
When we transfer your personal information and process it in the United States, we do so in accordance with the EU-U.S. Privacy Shield Framework, the Swiss-U.S. Privacy Shield Framework and European Commission-approved standard contractual clauses. To learn more about the Privacy Shield Framework, and to view our certification, visit the U.S. Department of Commerce's Privacy Shield List. With respect to information received or transferred pursuant to these Frameworks, we are subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Enterprise Holdings is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Enterprise Holdings complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.
Under certain conditions, more fully described on the Privacy Shield website [https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint], you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
- Third Party Service Providers: We utilise third party service providers who are located outside the countries where we have corporate-owned locations, such as call centre support, claims processors and IT providers. When we transfer your personal information to our third-party service providers who are located outside the EEA, we use European Commission-approved standard contractual clauses.