Legal Documents
Privacy Policy
Last updated: July 2026.
1. Data Controller
Tuzla Car Rental (Tuzla Car Rental)
Address: , Bosnia and Herzegovina
Tax ID (JIB): ______________ (pending)
Phone: ·
Director: Mirsad Smajić
2. Data We Collect
When using our website and vehicle rental services, we collect the following personal data:
- •Full name
- •Email address
- •Phone number
- •Driver's licence number and place of issue
- •ID card or passport number
- •Address (for vehicle delivery)
- •GPS coordinates for delivery (if delivery to address is selected)
- •IP address and technical data (automatically, via cookies)
3. Purpose and Legal Basis
Execution of vehicle rental agreement
Basis: Contractual relationship
Sending booking confirmation and agreement by email
Basis: Contractual relationship
Customer support and handling complaints
Basis: Legitimate interest
Newsletter (only with explicit consent)
Basis: User consent
Google Analytics — website traffic analysis
Basis: User consent (cookie consent)
Legal obligations (tax, accounting records)
Basis: Legal obligation
4. Data Retention
- •Rental agreement data: 5 years (legal obligation)
- •Booking data: 2 years from the end of rental
- •Newsletter subscriptions: until unsubscription or deletion request
- •Google Analytics data: 26 months (anonymised)
5. Third Party Sharing
We share your data exclusively with:
- •Supabase Inc. — database hosting (USA, EU Data Protection Framework)
- •Resend Inc. — transactional email delivery
- •Google LLC — Google Analytics (only with your consent)
- •Vercel Inc. — website hosting
We do not sell your data or share it with advertisers or third parties for marketing purposes.
6. Your Rights
📋 Access
Request a copy of your data
✏️ Rectification
Correct inaccurate data
🗑️ Erasure
Request deletion ("right to be forgotten")
⏸️ Restriction
Restrict processing of your data
📦 Portability
Receive your data in a readable format
🚫 Objection
Object to processing for marketing purposes
7. Data Security
- ✓SSL/TLS encryption of all data transfers (HTTPS)
- ✓Database protected with Row Level Security (RLS) policies
- ✓Admin panel access protected by password
- ✓Data stored on servers within the EU or countries with adequate protection
8. Cookies
We use cookies to improve user experience. For detailed information, see our Cookie Policy.