Privacy policy
Last updated: 2026-06-25
Last updated: June 25, 2026.
This policy explains what personal data we collect when you rent a car from us, why we collect it, who processes it on our behalf, and the rights you have under the EU General Data Protection Regulation (GDPR). We keep it in plain language on purpose.
Who is the data controller?
Dubrovnik Car Rent, Vukovarska 17, 20000 Dubrovnik, Croatia, is the data controller for every processing activity described here. For anything in this policy, email us at info@dubrovnikcarrent.com.
What personal data do we collect?
We collect only what we need to run your rental — three categories in total:
- Booking form data. When you reserve through our booking page we collect your name, email address, phone number, pickup date and location, and chosen vehicle class.
- Driver licence details at pickup. At our Gruž office or the airport meet & greet we record your licence number, issuing country, and date of birth to prepare the rental contract. Croatian law requires this for every rental agreement.
- Payment details. You pay on pickup by card or cash; we never store card numbers. If we later offer online card payment it will be handled entirely by Stripe — your card number would never touch our servers.
We also keep any emails or WhatsApp messages you send us so we can answer follow-up questions about your booking.
Which processors handle your data?
We use five third-party processors, each bound by a GDPR-compliant data processing agreement:
| Processor | What it does | Notes |
|---|---|---|
| Stripe | Online card payments (not currently active) | PCI-compliant; we never see or store full card numbers |
| Mailgun | Transactional email (booking confirmations, receipts) | EU region — data stays inside the EU |
| Google reCAPTCHA v3 | Spam protection on the booking and contact forms | Invisible, score-based — no challenge shown; assesses request patterns to tell humans from bots |
| Google (Analytics 4, Ads, Tag Manager) | Traffic analytics and ad measurement | Cookie-based, loaded only with your consent |
| Ahrefs Analytics | Aggregate traffic statistics | Cookieless; collects no personal data |
We do not sell personal data, and we do not share it with anyone beyond these processors unless a law or court order requires it.
What legal bases do we rely on?
- Contract performance — booking data, licence details, and payment processing exist to deliver the rental you booked.
- Legitimate interest — fraud prevention, securing our website, and keeping records needed to defend legal claims.
- Consent — marketing and analytics cookies (Google Analytics 4, Google Ads). You can withdraw consent at any time and the site keeps working normally.
How long do we keep your data?
Two retention periods cover almost everything:
- Rental contracts and invoices: 11 years. Croatian accounting law requires us to keep them that long.
- Inquiry emails that never become a booking: 2 years, then we delete them.
When a retention period ends, the data is erased or anonymized.
What are your GDPR rights?
You can, at any time, ask us to:
- Access a copy of the personal data we hold about you.
- Rectify anything inaccurate or incomplete.
- Erase data we no longer have a legal reason to keep.
- Port your data to you or another provider in a machine-readable format.
- Object to processing based on legitimate interest, including any marketing.
We answer every request within 30 days. If you believe we have mishandled your data, you can complain to AZOP, the Croatian data protection authority — no lawyer needed, and filing is free.
What cookies does this site use?
Only Google services set cookies here, and only after you consent through the cookie banner: Google Analytics 4 and Google Ads (managed via Google Tag Manager) use them to measure traffic and ad performance. Ahrefs Analytics runs cookieless and identifies no individual visitor. Decline the banner and no analytics cookies are set at all.
How do you send a privacy request?
Email info@dubrovnikcarrent.com with “Privacy request” in the subject line, or use our contact page. Please write from the same email address you booked with so we can verify it is really you. Postal requests reach us at Dubrovnik Car Rent, Vukovarska 17, 20000 Dubrovnik, Croatia.