Privacy policy

1. Data controller

The data controller is Rent a Car Ezra, Eugena Kumičića 53, 35000 Slavonski Brod, Croatia. For any privacy-related questions, contact us at info@rentacar-ezra.com.

2. What data we collect

When you reserve a vehicle — by phone, email, or in person at the office — we collect data you provide directly: full name, phone number, email address, driving licence number and category, OIB / national ID / passport number, and rental dates.

The website itself does not use tracking cookies or analytics tools.

3. Purpose of processing

We use your data solely to enter into and execute the rental agreement, comply with legal obligations (customer registration, invoicing, vehicle traffic records) and maintain secure communication with you during the rental. Processing is based on contract performance and legitimate interest.

4. Data retention

Rental contract data is retained for the periods required by Croatian VAT law, accounting law, and other applicable regulations (invoices and supporting documents for at least 11 years). Inquiry data that does not result in a rental is deleted after a reasonable communication period.

5. Sharing with third parties

We do not sell or trade your data. It may be available to: our accounting service and insurance provider (only as needed to execute the contract), competent Croatian authorities when required by law, and police or judicial authorities in case of traffic offences, accidents, or other incidents involving the rented vehicle.

6. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, rectify, erase (subject to legal limitations), restrict, and object to the processing of your personal data, as well as the right to data portability. To exercise any of these rights, contact us at info@rentacar-ezra.com.

You also have the right to lodge a complaint with the competent supervisory authority — the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.

7. Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. Despite this, complete security of data transmission over the internet cannot be fully guaranteed.

8. Changes to this policy

We may update this statement periodically to reflect changes in our practices or legal obligations. The latest version is always available on this page.