Car Rental Bucharest Otopeni Airport from Expedicar: Rent BMW Seria 5 or Similar

Even after I fully paid for the rental and for full insurance, the rental car company required to have my card number and expiration e over to them with no actual explanation threatening they will not release the car without those. Why this is problematic • Security risk: Writing down or storing full card details outside of a proper card terminal breaches PCI DSS (Payment Card Industry Data Security Standards). • Transparency: They are required under EU/EEA consumer protection law to clearly state what any additional payment method is for. Vague answers like “insurance in case of anything” don’t meet that standard. • Unnecessary: With full insurance, they should not need your card details for damage cover. At most, some firms still ask for a small deposit for fuel or traffic fines — but this must be disclosed upfront and charged via terminal, not by taking card numbers manually. In the EU, under PCI DSS (payment card industry security standards) and consumer-protection law, businesses handling cardholder data have strict obligations. Writing down card numbers or storing them in plain text is a major breach. They should be using an approved payment processor or pre-authorisation terminal instead. What they did — demanding card number and expiry after full payment/insurance without an on-the-spot pre-authorisation — is not standard practice and raises security and consumer-rights concerns. It’s very reasonable for you to push back, request deletion of your card details, or dispute it with your card issuer if necessary. So I’m afraid I will never rent with this company again.

Excellent !!!

The only complaint is that I received another car (from the same category) without being informed in advance, everything else is fine.