Privacy Policy

Who this policy is for

This policy covers the sales site, the panel and the customer sites that Minata Entertainment, LLC (Delaware LLC) serves from minatarentalsuite.com.

There are two relationships: ours with you, and yours with your own renters. In the first we are the controller; in the second you are the controller and we are the processor.

The rules for the second relationship are in the Data Processing Agreement.

What we process

Account data: the authorised person's name, e-mail address, phone number and an irreversible hash of the password.

Company data: the trading name, country, city and, if given, the tax office and tax number.

Subscription and billing data: plan, period, amount, payment status and invoice history. We do not hold the card number; card details go straight to the payment provider.

Technical records: IP address, browser information, request time and error logs, kept for security and for fault finding.

Mobile application (Minata Panel)

The mobile application (Minata Panel) is the iOS version of the same panel and is used by your own staff with their panel account. Everything the application sends is written to the same place as the data you keep in the web panel - your company's own account with us - and is processed under the same terms; for that data you are the controller and we are the processor.

Account and session data: the staff member's e-mail address and password at sign-in, and the device's name so the session can be recognised. Customer records: the name, e-mail address, phone number, national identity or passport number, driving licence number, date of birth, nationality and sex that the staff member enters. Handover records: vehicle handover photographs, damage marks and the customer's signature.

Document reading: when an identity document or a passport is read the scan runs entirely on the device and the camera frame is not sent to us. A photograph of the document that was read is added to the record only when the staff member turns that option on, and the option is off by default. Notification and device data: the device's push notification token, the device model and the application version are kept so that notifications can be delivered.

Camera, photo library and notification access are asked for with the system prompts of iOS and can be withdrawn at any time in iOS Settings. The application carries no third party software development kit, no analytics, no advertising and no tracking, and it processes no location and no contacts data. How long the records are kept follows the settings you make in the panel, and data subject requests from your renters reach you as the controller.

Why we process it

Performing the contract: opening the account, taking the subscription, answering support requests.

Legal obligation: keeping invoices and accounting records.

Legitimate interest: keeping the service secure, preventing abuse and improving the product.

Consent: taken only for marketing messages and withdrawable at any time. Withdrawing it does not affect the service.

Who we share it with

We do not sell data. It is shared only with the sub-processors needed to run the service, and with the authorities where the law requires it.

The sub-processors and what each one does are named in the list on this page. When the list changes this page is updated.

The servers are in the European Union and the edge network and payment infrastructure are global, so data crosses borders. Transfers rest on the written agreements we hold with the sub-processors.

How long we keep it

Account and subscription data is kept while the relationship lasts and afterwards for the limitation periods that apply.

Invoices and accounting records are kept for the period the law requires.

Technical records are kept for at most twelve months and are then deleted or anonymised.

Users in Türkiye

Minata Entertainment, LLC (Delaware LLC) is a company formed in the United States and is not established in Türkiye; this policy is written under the law of the State of Delaware.

For the renter data you keep in the panel YOU are the controller and we are a processor acting on your instructions. The rules for that relationship are in the Data Processing Agreement.

Requests from your own customers reach you first; we give you the support you need to answer them, within the times the law allows.

Complying with local law, telling your own customers what you do with their data and any registration duties are yours.

Security and your rights

Traffic is encrypted with TLS, database backups are kept encrypted, access is granted by role, and administrative actions are written to an audit log.

You can ask to see, correct, delete or port your data, and object to processing. Requests are answered within thirty days at the latest.

Write to support@minatarentalsuite.com for a request, or to hello@minatarentalsuite.com for anything else.