Privacy Policy
This Privacy Policy explains how Fuerte d.o.o. (trading as Avax Rent a Car) collects, uses, and protects your personal data in accordance with GDPR.
Fuerte d.o.o. · Obala Lazareta 3, 21000 Split, Croatia · OIB: 71550144918
Privacy at a glance
Data Controller
The data controller responsible for your personal data is:
Fuerte d.o.o.
Obala Lazareta 3, 21000 Split, Croatia
OIB (VAT ID): 71550144918
Email:
Website: www.avaxrent.com
This Privacy Policy applies to personal data collected through our website, mobile applications, and at our rental stations. We process your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Croatian law.
What Data We Collect
Data collected when making a reservation:
- •Full name (first and last name)
- •Date of birth
- •Email address
- •Phone number
- •Home address (street, city, country)
- •Identity document number (ID card or passport)
- •Driver's license number and issue date
- •Flight number (if provided)
- •Payment card details (processed securely; not stored by us)
- •IP address and browser/device information
Data collected during the rental:
- •Vehicle collection and return dates and times
- •Vehicle condition report details
- •Damage reports or accident reports
- •Fuel level records
- •Mileage records
- •Traffic violation or parking fine information
Data collected automatically on our website:
- •Browser type and version
- •Operating system
- •Pages visited and time spent
- •Referring URL
- •Cookie data (see Cookies section below)
How and Why We Use Your Data
We process your personal data on the following legal bases:
Contract performance (Art. 6(1)(b) GDPR)
- •Processing your reservation and rental agreement
- •Communicating with you about your booking
- •Managing vehicle pickup and return
- •Processing payments and pre-authorizations
Legitimate interest (Art. 6(1)(f) GDPR)
- •Preventing fraud and unauthorized use of vehicles
- •Processing traffic violation and parking fine data
- •Exercising legal claims (e.g., unpaid damage)
- •Improving our services based on usage data
Legal obligation (Art. 6(1)(c) GDPR)
- •Providing data to Croatian authorities when required by law
- •Verifying driver's license validity
- •Tax and accounting obligations
Consent (Art. 6(1)(a) GDPR)
- •Sending marketing emails and promotional offers (only with your explicit consent)
- •Price alert notifications
- •Non-essential cookies
Who We Share Your Data With
We may share your personal data with:
Law enforcement and regulatory authorities
When required by law or to verify your driver's license.
Parking management companies
To process parking fines and traffic violations.
Insurance companies
In the event of an accident or damage claim.
Payment processors
PCI-DSS compliant processors. We do not store full card details.
Service providers (data processors)
IT, booking system, and email service providers under data processing agreements.
Debt collection agencies
For unpaid obligations under the Rental Agreement.
International transfers
If your data is transferred outside the EEA, we ensure adequate protection through EU Standard Contractual Clauses.
Data Retention
We retain your personal data only as long as necessary:
After retention periods, data will be securely deleted or anonymized.
Your Rights Under GDPR
Under GDPR, you have the following rights:
Right of access (Art. 15)
You can request a copy of the personal data we hold about you.
Right to rectification (Art. 16)
You can ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17)
You can request deletion of your data, subject to legal retention.
Right to restriction (Art. 18)
You can request restriction of processing in certain circumstances.
Right to data portability (Art. 20)
You can request your data in a structured, machine-readable format.
Right to object (Art. 21)
You can object to processing based on legitimate interest or direct marketing.
Right to withdraw consent (Art. 7(3))
Where processing is based on consent, you may withdraw at any time.
Right to lodge a complaint
You may lodge a complaint with the Croatian AZOP or another supervisory authority.
To exercise these rights, contact: . We will respond within 30 days.
Cookies
Our website uses cookies and similar technologies:
Strictly necessary cookies
RequiredRequired for website function (session, security, booking flow). Cannot be disabled.
Analytical cookies
OptionalHelp understand how visitors use our website. Used with your consent.
Preference cookies
OptionalRemember your preferences such as language and currency. Used with your consent.
You can manage cookie preferences through your browser settings.
Data Security
We implement appropriate technical and organizational measures:
- ✓HTTPS encryption for all data transmitted
- ✓Restricted access (only authorized employees)
- ✓Regular security assessments
- ✓Data processor agreements with all third-party providers
- ✓Secure deletion after retention periods
In case of a data breach that risks your rights, we will notify you and the supervisory authority per GDPR requirements.
Changes to This Policy
We may update this Privacy Policy. When we make significant changes:
- •Update the "Last updated" date
- •Notify you by email if you have an active reservation
- •Post a notice on our website
Continued use after changes constitutes acceptance of the updated policy.
Privacy questions?
Contact our Data Protection team for any GDPR-related requests.