Privacy Policy

Information We Collect

We will collect and process the following personal information about you:

• Full name
• Email address
• Phone/Mobile number
• Date of birth
• Home address
• Driver's license number and issue date
• ID card or passport number
• Payment information (credit or debit card details are processed securely via third parties)
• Vehicle photographs before and after rental
• Account sign-in data (email address, authentication identifiers, and session/device security data; ETERNAL email sign-in uses a one-time code rather than a password)
• Data from your Google account if you choose to sign in with Google (full name, email address, profile picture and Google identifier)
• IP address and device data when using our website

How We Use Your Information

We will use the information that we collect about you for the following purposes:

• Creating and managing your user account and secure sign-in
• Operating our loyalty program and awarding reward points
• Processing and managing vehicle reservations
• Verifying your eligibility to rent vehicles
• Communicating about your booking and providing customer support
• Sending booking confirmations, reminders, and updates
• Marketing and promotional purposes (with your consent)
• Customer feedback collection and testimonials
• Targeted advertising (with your consent)
• Site protection and fraud prevention
• Complying with legal obligations and resolving disputes
• Improving our services and user experience

If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.

How We Share Your Information

We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:

• Supabase (Supabase Inc.) - database hosting, user authentication and secure storage of user account data
• Google (when you choose to sign in with your Google account) - to authenticate your identity (Google OAuth)
• Analytics (Google Analytics) - to understand website usage
• Data collection & processing - for reservation management
• Payment service providers - for secure transaction processing
• Insurance companies - in case of accidents or claims
• Law enforcement authorities - when required by law

We require such third party's to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose. We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights.

Retention Of Your Information

We will retain your personal information with us:

• Active-account data while the account exists and for as long after closure as needed for the stated purposes
• Completed or cancelled rental, payment, invoice and claim records for periods required for accounting, tax, insurance, dispute-resolution and other legal obligations
• Future-reservation and profile data that is not required for a legal record is removed through the account-deletion process
• For other legitimate reasons like enforcement of legal rights, fraud prevention, etc.
• Residual anonymous information and aggregate information may be stored indefinitely

Your Rights

Depending on the law that applies, you may have a right to:

• Access and rectify or erase your personal data
• Receive a copy of your personal data
• Restrict or object to the active processing of your data
• Ask us to share (port) your personal information to another entity
• Withdraw any consent you provided to us to process your data
• A right to lodge a complaint with a statutory authority

To exercise these rights, you can write to us at [email protected]. We will respond to your request in accordance with applicable law. Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.

User Accounts and Sign-In

You can create a user account to manage your reservations and loyalty points. You can sign in to your account in two ways:

• With your email address and a one-time 6-digit code sent by our authentication provider
• With your Google account (Google OAuth) - in which case we receive the basic Google profile data listed above

Authentication and secure processing of sign-in data are handled by our service provider Supabase. ETERNAL email sign-in is passwordless: each one-time code expires and can be used only once. You can delete your account in Personal details or contact [email protected] to exercise your data rights. Deletion removes the profile, future reservations and documents covered by the process; completed and cancelled reservations and accounting records may be retained where required for legal, insurance or dispute-resolution purposes.

Legal Basis for Processing

We process your personal data on the basis of one or more of the following legal grounds:

• Performance of a contract - where processing is necessary to make a reservation, provide the vehicle rental service, and operate your user account
• Your consent - for marketing communications and targeted advertising, which you can withdraw at any time
• Legitimate interests - for fraud prevention, website security, and improving our services
• Legal obligation - where we are required to process and retain data in accordance with applicable law

Cookies

To learn more about how we use cookies and your choices in relation to these tracking technologies, please refer to our Cookie Policy.

Security

The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.

Third Party Links & Use Of Your Information

Our Service may contain links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Car Rental Specific Data

As a car rental company, we also collect and process:

• Driver's license data for eligibility verification
• Information about the vehicle you rent (registration, condition, mileage)
• Vehicle photographs before and after rental
• Insurance plan data you select
• Payment and deposit records
• Accident or damage reports if they occur

International Data Transfers

Our business and this website are based in Bosnia and Herzegovina, but some of your data is stored and processed outside Bosnia and Herzegovina. Specifically, your user account data (including your login details) is stored with our service provider Supabase on servers in the United States (us-west-1 region). Other service providers (such as Google) may also process data outside Bosnia and Herzegovina. When we transfer data to countries that may not provide the same level of data protection, we rely on appropriate safeguards (such as standard contractual clauses) and/or on your consent. By using our Service and creating a user account, you consent to this transfer.