STEFMARK RENT d.o.o.

Privacy policy

Personal data protection statement

We protect the data we collect in accordance with EU Regulation 2016/679 (General Data Protection Regulation – GDPR).

In the event of any subsequent amendments to this Statement, we will publish them in a timely manner, indicating the date of change.

WHY DO WE COLLECT DATA?

All personal data we collect are necessary for performing our business activities and providing our services. The data are processed with special care and with full respect for every individual's fundamental right to privacy and data security.

Stefmark rent d.o.o. will request from clients only the data necessary for concluding a Vehicle Rental Agreement and for the proper conduct of business in compliance with legal and regulatory obligations.

The collected personal data are used for the following purposes:

  • Confirmation of vehicle rental reservations,
  • Conclusion of the Vehicle Rental Agreement,
  • Issuance of invoices to natural or legal persons for vehicle rental services,
  • Communication with rental users by e-mail or telephone regarding inquiries, complaints, or claims,
  • Sending promotional content or notifications,
  • For the purpose of protecting property and legal interests, we collect data concerning the validity and authenticity of documents such as ID cards, driver's licenses, or passports.

WHAT DATA ARE COLLECTED?

For the purpose of preparing and concluding the Vehicle Rental Agreement, we require the following data:

  • Full name of the person using the vehicle rental service,
  • Address and city of residence,
  • Personal Identification Number (OIB),
  • Date of birth (to verify the legal age of the person operating the vehicle),
  • Valid personal or travel document (ID card, passport),
  • Valid driver's license,
  • Telephone or mobile number,
  • E-mail address.

INQUIRIES, COMPLAINTS, AND CLAIMS

In our commitment to providing current and future rental users with the best possible service and quality, we are happy to respond to all your inquiries and feedback.

If you wish to send us a complaint or inquiry, you will be required to provide your full name, address, Personal Identification Number (OIB), and other details such as invoice number, rental period, etc., via e-mail or telephone. This allows us to verify all circumstances and events that occurred and to provide you with an appropriate response.

HOW IS DATA COLLECTED?

Data are collected in the following ways:

  • By telephone or e-mail, for the purpose of reservation or rental arrangements,
  • In person, at our office,
  • Through our website, by subscribing to the Newsletter,
  • By signing consent through the Vehicle Rental Agreement or electronically.

If cookies are used on our website, this will be transparently displayed to all visitors.

HOW DO WE PROTECT PERSONAL DATA?

We protect personal data through appropriate technical and administrative security measures. This ensures that our users are protected from unauthorized access, use, alteration, or loss of data.

Security measures are regularly reviewed and adjusted as necessary, in accordance with the law, technological developments, and our business operations.

IS USER DATA SHARED AND IN WHAT WAY?

Stefmark rent d.o.o. may share personal data of individuals in the following situations:

  • To fulfill legal obligations (when required by a court or other competent authority, during or in connection with criminal, misdemeanor, civil, or other proceedings),
  • To protect the rights, safety, or property of Stefmark rent d.o.o.,
  • In other cases, where the user's prior consent has been obtained.

In each of these cases, Stefmark rent d.o.o. will explicitly inform third parties that they are prohibited from using personal data for any purpose other than those necessary for the execution of specific actions or legal procedures.

DATA RETENTION PERIOD

Personal data are retained for as long as necessary to fulfill the purposes for which they were collected or processed, or for as long as required by the laws of the Republic of Croatia.

In the case of enforcement proceedings or the implementation of legal measures, personal data will be retained until the conclusion of such procedures, in accordance with the regulations governing contractual and legal obligations.

USER RIGHTS

  • Right of access to personal data – Users have the right to request, in writing or in person, information about their personal data that are being processed. Before exercising this right, the identity of the user must be verified.
  • Right to rectification or completion of personal data – In the event of incorrect or incomplete personal data, users have the right to request correction or completion in writing or in person, after identity verification. Users are also obliged to notify the company of any relevant changes to their personal data (e.g., change of surname, address, etc.).
  • Right to erasure of personal data – If there are no longer any circumstances or reasons for retaining personal data, such data will be deleted, provided this is not contrary to applicable regulations or required for establishing, exercising, or defending legal claims.
  • Right to withdraw consent for marketing purposes – Users have the right to withdraw previously given consent for receiving marketing communications at any time.
  • Right to lodge a complaint with a supervisory authority – Users have the right to submit a written or in-person complaint to the company's registered office or to the Croatian Personal Data Protection Agency (AZOP).

WEBSITE, FORMS AND COOKIES

Inquiries via the website. When you send a rental or business rental inquiry through a form on this website, we process the data you entered (name, phone, e-mail, selected vehicle, dates, destination, pick-up location, number of passengers and note) to answer your inquiry and prepare an offer or rental contract (Art. 6(1)(b) GDPR). The inquiry is delivered to us by e-mail through the e-mail sending service Resend (Resend, Inc.), which processes the data only on our behalf. We keep inquiry data for as long as needed to answer and for a possible rental, or as required by law.

Cookies and analytics. We use Google Analytics (Google Ireland Limited) only if you consent in the cookie notice (Art. 6(1)(a) GDPR). It helps us understand how the website is used and sets the cookies _ga and _ga_*, which last up to 2 years. Without your consent, analytics is not loaded. You can withdraw consent at any time via the “Cookie settings” link in the footer.

Necessary storage. Your chosen language and your cookie choice are remembered in your browser (localStorage) so the website works as you chose; this data is not sent to us or to third parties.

Fonts and external content. Fonts, images and videos are loaded from our own server, without requests to third parties. The WhatsApp link opens the Meta Platforms service only when you click it.

Server. The website is hosted by a hosting provider that keeps technical logs (e.g. IP address, time of access) for security and operation of the server.

ŠkodaCitigo