1. Controller
DUO ENTERPRISES d.o.o. Sarajevo, Kurta Schorka 36, 71210 Sarajevo (Ilidža), Bosnia and Herzegovina. Email: info@duorentals.com, phone: +387 62 534 296.
2. Data we collect
- Booking data: first and last name, email address, phone number, postal address, country, date of birth, flight number, notes, the selected car, dates, options and prices.
- Contract data at pickup: details of your ID document and driving licence, and the deposit on your card. We do not store full card numbers.
- Contact messages: name, email address, phone number and the content of your message.
- Usage data: IP address, browser type and version, device type, operating system, the pages you visit and the time of your visit. This data is collected automatically when you use the website.
You do not need an account to use the website. We only collect the data you give us and the usage data described above.
3. Purposes and legal bases
- Handling your booking and the rental contract (performance of a contract).
- Sending booking emails such as the request receipt and the confirmation, and contacting you by email, phone or messaging apps about your booking (performance of a contract).
- Answering your messages and requests (legitimate interest, or steps prior to a contract).
- Keeping accounting and tax records (legal obligation).
- Protecting the website against spam and abuse, for example with a security check and rate limits (legitimate interest).
- Understanding how the website is used so that we can improve it (legitimate interest for cookieless statistics, your consent for Google Analytics).
We only send emails related to your bookings and enquiries, and no advertising emails. We do not use your data for automated decision-making and do not sell it to anyone.
4. Customer ID
When you book, we create a customer ID for you. Together with your email address, it lets you fill in your details automatically on your next booking. We never display your data on the basis of the customer ID alone.
5. Cookies and website statistics
The website uses only the cookies needed for it to work, plus Google Analytics if you agree to it in the cookie banner. Cloudflare Web Analytics measures visits without cookies. Details are in our cookie policy.
6. Recipients and processors
We use carefully selected service providers who process data on our behalf and only according to our instructions:
- Resend for sending booking and service emails.
- Cloudflare for security checks (Turnstile) and cookieless website statistics.
- Google for website statistics (Google Analytics, only with your consent) and for the map on our location page (Google Maps).
- Our hosting provider for operating the website, the database and file storage.
We may also disclose personal data:
- to authorities when we are required to by law or by a valid request from a court, the police or another public authority;
- to protect our rights, for example to enforce the rental contract, to investigate possible misuse or to protect the safety of people;
- in a business transfer, such as a merger or sale of the company. In that case we will inform you before your data becomes subject to a different privacy policy.
7. Transfers outside Bosnia and Herzegovina
Some service providers process data outside Bosnia and Herzegovina, in the European Union or the United States. We only transfer data when an adequate level of protection is ensured, for example through standard contractual clauses.
8. Retention
- Booking and contract data: as long as required by accounting and tax law, generally up to 10 years after the end of the rental.
- Contact messages: up to 2 years after our last reply, unless they lead to a booking.
- Usage data for abuse protection: a few days. Statistics are kept in aggregate form.
9. Security
We protect your data with appropriate technical and organisational measures, such as encrypted connections (HTTPS), access only for authorised staff and regular backups. No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.
10. Your rights
You have the right to:
- know which of your data we process, why and for how long;
- access your data and receive a copy of it;
- have incorrect data corrected and incomplete data completed;
- have your data deleted, unless we must keep it by law (for example for accounting);
- restrict processing and object to processing based on legitimate interest;
- receive your data in a structured, machine-readable format (data portability);
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, write to info@duorentals.com. You also have the right to lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina, or with the supervisory authority in your EU country of residence.
11. Children
Our services are intended for adults. Drivers must be at least 21 years old. We do not knowingly collect personal data from children. If you believe that a child has given us personal data, please contact us and we will delete it.
12. Links to other websites
The website contains links to other services, such as WhatsApp, Viber, Telegram, Google Maps and social networks. Their own privacy policies apply when you use them, and we have no control over their content or practices.
13. Changes
We may update this policy when our services or legal requirements change. The current version is always available on this page, with the date of the last update at the top. We will point out important changes with a notice on the website.
14. Contact
For questions about this privacy policy or your data, contact us:
- by email: info@duorentals.com
- by phone: +387 62 534 296
- by post: DUO ENTERPRISES d.o.o. Sarajevo, Kurta Schorka 36, 71210 Sarajevo (Ilidža)