Privacy Policy

1. Data controller

RentACar is the controller of the personal data described in this policy. You can contact us about privacy matters using the contact details published on our website.

2. Data we collect

We collect only the data we need to provide our services. This may include:

• Identity and contact data: name, date of birth, nationality, email address and phone number.
• Driving licence data: licence number, categories, issue and expiry dates, and issuing country.
• Booking data: pick-up and return locations, dates, chosen vehicle, protection packages and add-ons.
• Payment data: billing details and transaction references. Full card details are handled by our payment provider and are not stored by us.
• Technical data: IP address, device and browser type, and pages visited.

3. How we use your data

We use your data to create and manage your account, process and confirm reservations, verify your driving licence, provide customer support, process payments and deposits, issue invoices, prevent fraud, and comply with our legal obligations. With your consent, we may also send you service updates and offers.

4. Legal bases

We process personal data on the following legal bases: performance of a contract (your rental or booking), compliance with legal obligations (accounting, tax and fiscal rules), our legitimate interests (fraud prevention, security and service improvement), and your consent (marketing communications), which you may withdraw at any time.

5. Sharing your data

We share personal data only where necessary: with payment processors, IT and hosting providers, insurance partners, legal and accounting advisors, and public authorities where required by law. Our service providers process data on our instructions and under appropriate confidentiality obligations.

6. Cookies

We use essential cookies to keep you signed in and to remember your preferences. With your consent we may use analytics cookies to understand how the website is used. You can manage cookies in your browser settings; disabling essential cookies may affect how the site works.

7. Data retention

We keep personal data only for as long as necessary for the purposes described here, or as required by law. Booking and invoice records are typically kept for the period required by accounting and tax regulations, after which they are deleted or anonymised.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. These include encryption in transit, access controls and regular review of our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of data that is no longer necessary.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

10. Marketing

We send marketing communications only with your consent or where permitted by law for existing customers. You can opt out at any time using the unsubscribe link in our emails or by contacting us.

11. Children

Our services are intended for adults who are eligible to drive. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can remove it.

12. Changes and contact

We may update this policy from time to time. The current version is always available on this page. If you have questions about this policy or wish to exercise your rights, please contact us using the details published on our website. You also have the right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection.