Privacy policy

Effective: 29.07.2026.

This policy describes how DOT Rent a Car collects, uses and protects your personal data, in accordance with the Montenegrin Personal Data Protection Act and the EU General Data Protection Regulation (GDPR).

1. Data controller

DOT Rent a Car, Ul. Slobode 10, 81000 Podgorica, Montenegro.

Contact for privacy questions: info@dotrent.me · +382 67 224 344

2. What we collect

• Booking data: full name, email, phone, rental dates, pickup and return location, and flight number if you provide one.

• Data collected when signing the agreement: driving licence number and passport or ID card number — we collect these because we are legally required to identify the driver.

• Technical data: IP address, device type, browser and anonymised visit statistics.

• Cookies: see our Cookie Policy.

3. Purposes of processing

• Processing and confirming your booking, preparing and performing the rental agreement.

• Sending transactional emails (confirmation, changes, cancellation, return reminder).

• Meeting legal obligations — accounting, invoicing, driver identification, and responding to requests from authorities regarding traffic offences.

• Site security and abuse prevention.

4. Legal basis

• Performance of a contract — processing your booking and rental.

• Legal obligation — retaining accounting records and identifying the driver.

• Legitimate interest — site security, basic analytics, recovery of damages and fines.

• Consent — marketing messages and non-essential cookies; you may withdraw consent at any time.

5. Who we share data with

• Our insurer — in the event of a damage claim.

• Authorities (police, courts, tax administration) — where legally required.

• Brevo (Sendinblue) — our transactional email provider.

• Our hosting provider — server located in Montenegro.

We do not sell personal data and do not share it with third parties for marketing.

6. Retention period

• Rental agreements and invoices: 5 years, due to tax and legal obligations.

• Data from bookings that were not completed: 12 months.

• Technical logs: 90 days.

• Marketing consent: until withdrawn.

7. Your rights

• Right to access your data.

• Right to rectification of inaccurate data.

• Right to erasure, where no legal retention obligation applies.

• Right to restriction of processing and right to object.

• Right to data portability.

• Right to lodge a complaint with the Montenegrin Agency for Personal Data Protection and Free Access to Information.

To exercise your rights, write to info@dotrent.me — we respond within 30 days.

8. Security

The site uses HTTPS encryption, secure httpOnly cookies and regular backups. Only staff who need it for their work can access customer data.

9. Minors

The service is intended for adults. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy. The current version is always available on this page, with its effective date.