GSA Motors ("we", "us", "our") respects your personal privacy and is committed to protecting your personal data in compliance with UAE Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL) and applicable local privacy regulations in the United Arab Emirates.
This Privacy Policy explains how we collect, use, process, disclose, retain, and safeguard your personal data when you visit https://gsamotors.com, request a vehicle leasing quote, submit an inquiry, or enter into a vehicle lease, trade-in, or financing agreement with us.
2. Personal Data We Collect
We collect personal information necessary to deliver our automotive leasing and sales services, perform identity and credit verifications, and satisfy UAE legal and regulatory requirements. This includes:
Identity & Demographic Data: Full name, nationality, date of birth, Emirates ID details, passport copy, residency visa copy, and driver's license details (including issue/expiry dates).
Financial & Credit Data: Tokenized payment card information, bank account details, salary certificates, bank statements, and employment details (required for credit evaluations and financing options).
Vehicle & Transaction Data: Selected vehicle model, VIN, lease start/end dates, payment history, mileage logs, traffic violation records, and Salik toll activity associated with your leased vehicle.
Technical & Usage Data: IP address, device type, browser specifications, operating system, referring URL, pages visited, time spent on site, and cookie data.
Communications Data: Records of correspondence, inquiries, emails, customer service calls, and WhatsApp messages between you and GSA Motors.
3. How We Collect Your Personal Data
We collect your personal data through various channels:
Direct Submissions: When you complete inquiry or booking forms on https://gsamotors.com, subscribe to our updates, contact us via email or WhatsApp, or submit verification documents in person or digitally.
Automated Site Tracking: As you browse our website, automated scripts and cookies collect technical data regarding your device and site usage patterns.
Third-Party Verification Sources: Verification details received from UAE government databases (such as RTA traffic fine portals), credit verification bureaus, insurance providers, or banking partners with your authorization.
4. Lawful Bases and Purposes of Processing
Under Articles 4 and 5 of the UAE PDPL, we process personal data strictly under valid legal grounds and for defined operational purposes:
Operational Purpose
Lawful Basis (UAE PDPL)
Processing lease applications, verifying identity, and arranging vehicle delivery
Contract Performance (Execution of Lease Agreement)
Credit checks, financial capability assessments, and trade-in evaluations
Consent / Legitimate Interest
Vehicle registration with Dubai RTA and comprehensive insurance policy issuance
Customer support, vehicle maintenance alerts, and lease renewal notifications
Contract Performance
Dispatching promotional offers, vehicle updates, and marketing newsletters
Explicit Consent (Opt-in)
Platform security, fraud prevention, and website optimization
Legitimate Interest
5. Sharing and Disclosure of Personal Data
GSA Motors does not sell, rent, or trade your personal information. We disclose personal data only to trusted third parties to facilitate our operations or comply with UAE law:
Insurance Underwriters: To issue and maintain comprehensive insurance coverage for leased vehicles.
Financial Institutions & Banks: To process financing applications, loan approvals, or electronic lease payments at your request.
UAE Government Authorities: Roads and Transport Authority (RTA), Dubai Police, Ministry of Interior, and Federal Tax Authority (FTA) for vehicle registration, traffic violation settlement, and tax compliance.
Authorized Service Providers: Payment processing gateways, IT hosting facilities, CRM platforms, and authorized automotive maintenance centers acting under strict confidentiality obligations.
6. Data Security Measures
In accordance with Article 21 of the UAE PDPL, GSA Motors implements appropriate technical, physical, and organizational security measures—including SSL encryption protocols, firewalls, secure database architecture, and restricted employee access controls—to safeguard your personal data against loss, unauthorized access, misuse, alteration, or disclosure.
7. Data Retention Policy
We retain personal data only for as long as necessary to fulfill the original collection purposes and to satisfy statutory record-keeping obligations:
Lease Contracts & Financial Data: Retained for a minimum of five (5) years following contract expiration or termination, in compliance with UAE commercial and tax record-keeping requirements.
Inquiry & Marketing Data: Retained until consent is withdrawn or for a maximum of two (2) years from your last active interaction with us.
Upon expiration of the applicable retention period, personal data is permanently deleted or anonymized using secure data erasure standards.
8. Your Data Subject Rights
Under Articles 13–18 of the UAE PDPL, you have specific legal rights regarding your personal data:
Right to Access: Request details on the personal data we hold about you and receive a copy.
Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal data.
Right to Erasure: Request the deletion of your personal data where processing is no longer required or where consent is withdrawn (subject to statutory legal retention requirements).
Right to Restrict or Object: Object to or restrict processing for direct marketing, profiling, or automated processing.
Right to Data Portability: Request transfer of your data to another controller in a structured, machine-readable format.
To exercise any of these rights, please contact our Data Protection Officer at info@gsamotors.ae.
9. International Data Transfers
When cloud hosting platforms, email gateways, or CRM tools store data outside the United Arab Emirates, GSA Motors ensures that cross-border transfers strictly comply with Chapter 5 of the UAE PDPL, verifying that destination jurisdictions provide adequate legal protection or executing binding standard data protection clauses.
10. Cookies and Tracking Technologies
Our website utilizes cookies to enhance functionality, analyze traffic, and offer tailored vehicle options. Essential cookies are deployed automatically for core site operations. Non-essential analytical and advertising cookies (such as Google Analytics or marketing pixels) are activated only after receiving your explicit consent through our Cookie Banner. You can manage or revoke cookie preferences at any time via your browser settings.
11. Contact Details & Privacy Enquiries
If you have questions regarding this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us:
Attn: Data Protection Officer / Compliance Department
Trade Name: G S A SIGNATURE MOTORS CAR RENTAL L.L.C
Commercial License No.: 1533361
Registered Address: Al Quoz Industrial Area Third, Dubai, United Arab Emirates
