Privacy Policy

The data controller responsible for the personal data described in this Privacy Policy is ARUTIUN MARDANIAN LTD.

• Company Registration No.: HE 437747
• Registered office: Evagora Papachristoforou str. 18, Petoussis Building, 3030, Limassol, Cyprus
• Email: ridecrm@gmail.com
• Phone: +357 95 714 252

For questions about personal data or to exercise your rights, please contact us using the details above.

We collect only personal data reasonably necessary to operate our website, respond to enquiries and manage customer relationships.

Information you provide

When you contact us, request a demo or ask for an offer, we may collect:

• Your name
• Company name and country
• Email address and phone number
• Preferred method of communication
• Fleet size and information about your rental business
• Whether your company has a rental website
• Any additional information you include in your message

Communications

When we communicate with you, we may retain relevant emails, messages, correspondence and information about scheduled demonstrations or commercial discussions.

Customer information

If you purchase a RideCRM licence, we may process business contact details, contract information, invoicing details and payment records necessary to fulfil our obligations.

Technical information

Our website hosting provider may automatically process technical information, including IP addresses, browser information, request timestamps and server logs, for website operation, security and troubleshooting. When you send a form, our server also uses your IP address to limit repeated requests. It is held only in the server's temporary memory and is not written to a database.

Form protection

When you open or start using a form on this website, we load Cloudflare Turnstile, a technical security service of Cloudflare, Inc., to protect our forms against automated spam by checking that the request comes from a person and not an automated program. Cloudflare processes technical signals from your browser and connection, including your IP address, TLS fingerprint, user-agent header, and this website's site key and origin. Turnstile may also use your browser's local storage for this check, including a technical item such as cf.turnstile.u, and other technical mechanisms. We do not send the text of your form to Cloudflare, and we do not use Turnstile for advertising tracking or marketing analytics. Cloudflare processes these signals on our behalf to run the check, and also as a separate controller for its own purpose of improving its bot detection. More information:

• Cloudflare Turnstile Privacy Addendum

We process personal data for the following purposes and legal bases:

Responding to enquiries

To answer questions, arrange product demonstrations, prepare commercial offers and discuss the potential purchase of RideCRM. Legal basis: our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR), or taking steps at your request before entering into a contract where Article 6(1)(b) GDPR applies.

Providing RideCRM products and services

To manage licence agreements, coordinate installation, communicate with customers and provide technical support. Legal basis: performance of a contract (Article 6(1)(b) GDPR), where applicable, or our legitimate interest in managing business customer relationships (Article 6(1)(f) GDPR).

Accounting and legal compliance

To issue invoices, maintain accounting records and comply with applicable legal obligations. Legal basis: Article 6(1)(c) GDPR.

Website security

To maintain website security, prevent misuse, including automated abuse of our forms, and protect our systems and legal interests. Legal basis: our legitimate interest in keeping our website and forms secure and free of automated abuse (Article 6(1)(f) GDPR).

No marketing newsletters

We do not use contact details submitted through this website for marketing newsletters, unrelated promotional campaigns or unsolicited advertising. Your information is used to respond to your enquiry and communicate with you about the RideCRM product or services you have requested.

Providing personal data is voluntary.

However, we need sufficient contact information to respond to your enquiry. Fields marked as required in our forms must be completed for the form to be submitted.

Additional business information helps us understand your requirements and prepare a relevant response or commercial offer.

You may also contact us directly by email or telephone instead of using a website form.

We do not sell or rent personal data.

We use trusted service providers to operate our website, process contact requests and manage business communications. These include a website hosting provider, an email delivery provider, a form protection provider (Cloudflare, Inc.), our mailbox provider and, if you choose to contact us that way, messaging service providers. You may ask us for the names of the providers that receive your data.

Personal data may also be shared with professional advisers or public authorities where required by law.

We limit access to personal data to authorised persons and service providers who need it for legitimate business purposes.

Some service providers process or store personal data outside the European Economic Area (EEA), including in the United States. Our email delivery provider stores message content and delivery logs in the United States, whichever region messages are sent from. Our form protection provider and our website hosting provider may also process personal data in the United States. Our mailbox provider may process enquiries outside the EEA under its own terms.

Where such transfers occur, the transfer mechanisms under Chapter V of the GDPR may include:

• European Commission adequacy decisions
• The EU-US Data Privacy Framework for eligible certified organisations
• European Commission Standard Contractual Clauses (SCCs)

According to their published terms, our email delivery, form protection and website hosting providers rely on the EU-US Data Privacy Framework and Standard Contractual Clauses for such transfers. The mechanism can differ between providers and may change.

You may contact us at ridecrm@gmail.com for information about the safeguards applicable to your personal data and how to obtain relevant documentation.

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal obligations.

Our retention periods are:

• Enquiries that do not result in an agreement: up to 2 years after our last relevant communication.
• Form submissions: our website does not store them in a database. They are sent by email through our email delivery provider to our mailbox, where we keep them for the enquiry period above. They are not deleted automatically: we periodically review and remove them in line with the periods in this section.
• Email delivery provider: keeps copies of sent messages and delivery logs for 30 days, and its backups may persist for up to 7 further days. This is separate from how long we keep enquiries in our mailbox.
• Form protection signals: kept by Cloudflare under its own terms, which do not set a fixed period.
• Contracts, invoices and accounting records: generally 7 years, or longer where required by applicable Cyprus law.
• Customer support correspondence: during the customer relationship and for up to 3 years after the relevant support relationship ends, unless a longer period is justified.
• Technical and security logs: only for the period reasonably necessary for security, troubleshooting and applicable provider operations.
• Legal disputes: where necessary, until the dispute is resolved and applicable legal retention or limitation periods have expired.

When personal data is no longer required, we delete it or anonymise it where reasonably possible, subject to applicable legal obligations and backup retention arrangements.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures include, where applicable:

• Encrypted website connections using HTTPS/TLS
• Restricted access to business correspondence and customer information
• Authentication and account security controls
• Confidentiality obligations for authorised personnel
• Appropriate security arrangements with service providers

Although we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

Under the GDPR, you may have the following rights, subject to applicable legal conditions:

• Access: request information about personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data where the legal conditions are met.
• Restriction: request restriction of certain processing activities.
• Data portability: request your data in a structured, commonly used and machine-readable format where applicable.
• Objection: object to processing based on legitimate interests, on grounds relating to your particular situation.
• Withdrawal of consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing.

To exercise your rights, contact us at ridecrm@gmail.com.

We normally respond within one month of receiving a request. Where permitted by law, this period may be extended by up to two additional months for complex or multiple requests. We will inform you of any extension and the reasons for it.

We may request information necessary to verify your identity before processing a request.

We do not use personal data collected through this website for automated decision-making that produces legal or similarly significant effects on individuals.

We do not use website enquiry data for advertising profiling.

The RideCRM marketing website is separate from the RideCRM software installed and operated by customers.

RideCRM may be installed on infrastructure controlled by the customer, with the customer's own database.

Personal data stored within a customer's RideCRM installation, such as rental customer information, reservations and payment records, is generally controlled by that customer.

Where ARUTIUN MARDANIAN LTD processes such information on behalf of a customer during installation, migration or technical support, the applicable responsibilities and data protection arrangements are governed by the relevant customer agreements, including a data processing agreement where required.

This Privacy Policy primarily covers personal data processed through the RideCRM marketing website and our direct business communications.

We do not use the RideCRM marketing website for advertising tracking, behavioural profiling or marketing analytics.

We use Cloudflare Turnstile only to protect our forms against automated spam, as described under "Form protection" above.

Information about cookies and similar technologies used on this website is available in our Cookie Policy:

• Cookie Policy

If our use of cookies or tracking technologies changes, we will update the Cookie Policy and implement any consent mechanisms required by applicable law.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data protection supervisory authority.

In Cyprus, the supervisory authority is:

• Office of the Commissioner for Personal Data Protection — https://www.gov.cy/dataprotection/en/

You may also lodge a complaint with the relevant supervisory authority in another EU Member State, where applicable.

We encourage you to contact us first at ridecrm@gmail.com so that we can address your concerns.

We may update this Privacy Policy to reflect changes in our website, business operations, service providers or applicable legal requirements.

The latest version will always be available on this page, together with its last updated date.

For any questions regarding this Privacy Policy, please contact ridecrm@gmail.com.