Last updated: January 2024GDPR CompliantEU Regulation 2016/679

Privacy Policy

This Privacy Policy explains how Fuerte d.o.o. (trading as Avax Rent a Car) collects, uses, and protects your personal data in accordance with GDPR.

Fuerte d.o.o. · Obala Lazareta 3, 21000 Split, Croatia · OIB: 71550144918

Privacy at a glance

✓We only collect data necessary for our rental services

✓We never sell your personal data to third parties

✓You can request deletion or access to your data at any time

Data Controller

The data controller responsible for your personal data is:

Fuerte d.o.o.

Obala Lazareta 3, 21000 Split, Croatia

OIB (VAT ID): 71550144918

Email:

Website: www.avaxrent.com

This Privacy Policy applies to personal data collected through our website, mobile applications, and at our rental stations. We process your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Croatian law.

What Data We Collect

Data collected when making a reservation:

•Full name (first and last name)
•Date of birth
•Email address
•Phone number
•Home address (street, city, country)
•Identity document number (ID card or passport)
•Driver's license number and issue date
•Flight number (if provided)
•Payment card details (processed securely; not stored by us)
•IP address and browser/device information

Data collected during the rental:

•Vehicle collection and return dates and times
•Vehicle condition report details
•Damage reports or accident reports
•Fuel level records
•Mileage records
•Traffic violation or parking fine information

Data collected automatically on our website:

•Browser type and version
•Operating system
•Pages visited and time spent
•Referring URL
•Cookie data (see Cookies section below)

How and Why We Use Your Data

We process your personal data on the following legal bases:

Contract performance (Art. 6(1)(b) GDPR)

•Processing your reservation and rental agreement
•Communicating with you about your booking
•Managing vehicle pickup and return
•Processing payments and pre-authorizations

Legitimate interest (Art. 6(1)(f) GDPR)

•Preventing fraud and unauthorized use of vehicles
•Processing traffic violation and parking fine data
•Exercising legal claims (e.g., unpaid damage)
•Improving our services based on usage data

Legal obligation (Art. 6(1)(c) GDPR)

•Providing data to Croatian authorities when required by law
•Verifying driver's license validity
•Tax and accounting obligations

Consent (Art. 6(1)(a) GDPR)

•Sending marketing emails and promotional offers (only with your explicit consent)
•Price alert notifications
•Non-essential cookies

Who We Share Your Data With

We may share your personal data with:

Law enforcement and regulatory authorities

When required by law or to verify your driver's license.

Parking management companies

To process parking fines and traffic violations.

Insurance companies

In the event of an accident or damage claim.

Payment processors

PCI-DSS compliant processors. We do not store full card details.

Service providers (data processors)

IT, booking system, and email service providers under data processing agreements.

Debt collection agencies

For unpaid obligations under the Rental Agreement.

International transfers

If your data is transferred outside the EEA, we ensure adequate protection through EU Standard Contractual Clauses.

Data Retention

We retain your personal data only as long as necessary:

5 yearsRental agreements and financial records (Croatian accounting law)

3 yearsDamage claims and legal disputes (from date of incident)

1 yearTraffic violation and parking fine data (after resolution)

1 yearReservation data for customers who did not complete a rental

Until withdrawalMarketing consent and price alert subscriptions

After retention periods, data will be securely deleted or anonymized.

Your Rights Under GDPR

Under GDPR, you have the following rights:

Right of access (Art. 15)

You can request a copy of the personal data we hold about you.

Right to rectification (Art. 16)

You can ask us to correct inaccurate or incomplete data.

Right to erasure (Art. 17)

You can request deletion of your data, subject to legal retention.

Right to restriction (Art. 18)

You can request restriction of processing in certain circumstances.

Right to data portability (Art. 20)

You can request your data in a structured, machine-readable format.

Right to object (Art. 21)

You can object to processing based on legitimate interest or direct marketing.

Right to withdraw consent (Art. 7(3))

Where processing is based on consent, you may withdraw at any time.

Right to lodge a complaint

You may lodge a complaint with the Croatian AZOP or another supervisory authority.

To exercise these rights, contact: . We will respond within 30 days.

Cookies

Our website uses cookies and similar technologies:

Strictly necessary cookies

Required

Required for website function (session, security, booking flow). Cannot be disabled.

Analytical cookies

Optional

Help understand how visitors use our website. Used with your consent.

Preference cookies

Optional

Remember your preferences such as language and currency. Used with your consent.

You can manage cookie preferences through your browser settings.

Data Security

We implement appropriate technical and organizational measures:

✓HTTPS encryption for all data transmitted
✓Restricted access (only authorized employees)
✓Regular security assessments
✓Data processor agreements with all third-party providers
✓Secure deletion after retention periods

In case of a data breach that risks your rights, we will notify you and the supervisory authority per GDPR requirements.

Changes to This Policy

We may update this Privacy Policy. When we make significant changes:

•Update the "Last updated" date
•Notify you by email if you have an active reservation
•Post a notice on our website

Continued use after changes constitutes acceptance of the updated policy.

Privacy questions?

Contact our Data Protection team for any GDPR-related requests.