Privacy policy

Effective Date: 14 July 2026
Last Updated: 14 July 2026

This Privacy Policy explains how PRAVAC RENT A CAR SK S.R.O. collects, uses, stores, shares, and protects personal data when you visit our website, contact us, make a reservation, rent a vehicle, use our services, or otherwise interact with us.

We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, applicable Slovak data protection legislation, and other relevant laws.

1. DATA CONTROLLER

The controller responsible for processing your personal data is:

PRAVAC RENT A CAR SK S.R.O.

Registered Office:
Doležalova 15C 821 04 Bratislava
Slovakia

Company ID (IČO): 56645635
Tax ID (DIČ): 2122373352
VAT ID: SK2122373352

Operating Address:
Galvaniho 10
821 04 Bratislava
Slovakia

Phone: +421 918 595 015
E-mail: pravacrentacareurope@gmail.com

For questions, requests, or concerns regarding your personal data, please contact us using the details above.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data collected through:

* Our website and online booking system.
* Vehicle reservations and rental agreements.
* E-mail, telephone, WhatsApp, social media, and other communications.
* Vehicle collection and return procedures.
* Customer support and roadside assistance.
* Payment and deposit processing.
* GPS, telematics, vehicle security, and fleet-management systems where installed.
* Marketing communications where consent has been provided or another lawful basis applies.
* Complaints, claims, accidents, damage reports, and insurance procedures.

Third-party websites, services, or applications linked from our website may operate under their own privacy policies. We are not responsible for the privacy practices of third parties that act independently from us.

3. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect the following categories of personal data.

3.1 Identification Information

* Full name.
* Date of birth.
* Nationality.
* Passport or national identity card details.
* Driving licence number, category, issuing country, issue date, and expiry date.
* Copies or photographs of identification documents where necessary.
* Signature.

3.2 Contact Information

* Residential or billing address.
* E-mail address.
* Telephone number.
* WhatsApp or other communication details.

3.3 Reservation and Rental Information

* Pick-up and return locations.
* Rental dates and times.
* Vehicle category and selected vehicle.
* Flight number and arrival information for airport delivery.
* Additional drivers.
* Requested accessories or additional services.
* Rental history.
* Rental agreement details.
* Vehicle condition reports.
* Fuel level and mileage records.
* Photographs or videos taken during vehicle handover and return.

3.4 Payment and Financial Information

* Payment status.
* Transaction details.
* Payment method.
* Security deposit and pre-authorisation information.
* Billing information.
* Refund and chargeback information.
* Outstanding amounts and payment history.

Full payment card details may be collected and processed directly by authorised payment service providers such as Stripe. We do not normally receive or store complete card numbers or card security codes.

3.5 Driving, Vehicle, and Telematics Information

Where a vehicle is equipped with GPS, telematics, security, or monitoring systems, we may process:

* Vehicle location.
* Travel route.
* Mileage.
* Fuel or battery level.
* Vehicle status and diagnostic information.
* Warning notifications.
* Date and time of vehicle use.
* Suspected theft, unauthorised use, or cross-border movement.
* Driving-related events where supported by the installed system.

Such information is not used for continuous personal surveillance. It may be processed where reasonably necessary for vehicle security, theft prevention, fleet management, roadside assistance, accident investigation, insurance claims, contractual enforcement, and protection of our legal rights.

3.6 Accident, Damage, and Insurance Information

* Accident reports.
* Police reports.
* Witness details.
* Photographs and videos.
* Damage descriptions.
* Insurance claim information.
* Information concerning other drivers, passengers, or third parties involved in an incident.
* Medical information only where voluntarily provided or strictly necessary for handling an accident, legal claim, or insurance matter.

3.7 Traffic and Legal Information

* Traffic fines.
* Parking penalties.
* Toll charges.
* Road-use charges.
* Administrative penalties.
* Information requested by police, courts, municipalities, toll operators, or other competent authorities.

3.8 Website and Technical Information

When you use our website, we may collect:

* IP address.
* Browser type and version.
* Device type.
* Operating system.
* Language settings.
* Approximate location derived from IP address.
* Website access times.
* Pages viewed.
* Referring website.
* Cookie identifiers.
* Booking-session information.
* Security and error logs.

3.9 Communication Information

We may retain records of communications exchanged through:

* E-mail.
* Telephone.
* WhatsApp.
* Social media.
* Contact forms.
* Customer support systems.

Telephone calls are not recorded unless you are informed in advance and a lawful basis for recording applies.

3.10 Marketing Preferences

* Newsletter subscription status.
* Marketing consent.
* Preferred language.
* Communication preferences.
* Records of consent withdrawal or objection.

4. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

* Directly from you.
* From the person making a reservation on your behalf.
* From an additional driver or corporate customer.
* Through our website and booking platform.
* From payment service providers.
* From insurers, roadside-assistance providers, repair services, and claims handlers.
* From police, courts, toll operators, parking authorities, and other public bodies.
* From vehicle GPS, telematics, security, and diagnostic systems.
* From publicly available registers where legally permitted.
* From business partners, travel agencies, brokers, or booking platforms where you book through them.

Where you provide personal data relating to another person, including an additional driver, you confirm that you are authorised to provide that information and that the person has been informed about this Privacy Policy.

5. PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal data only where a lawful basis applies.

5.1 Processing Necessary to Enter Into or Perform a Contract

We process personal data to:

* Provide quotations.
* Process reservations.
* Confirm vehicle availability.
* Verify driver eligibility.
* Prepare and perform rental agreements.
* Deliver and collect vehicles.
* Process payments, deposits, refunds, and additional charges.
* Provide roadside assistance and customer support.
* Manage vehicle return.
* Communicate regarding the reservation or rental.
* Handle changes, cancellations, and no-shows.

Providing certain identification, driving licence, contact, and payment information is necessary to enter into and perform the rental agreement. If this information is not provided, we may be unable to confirm a reservation or provide a vehicle.

5.2 Processing Necessary to Comply With Legal Obligations

We may process personal data to:

* Comply with accounting, tax, and invoicing requirements.
* Verify identity where required by law.
* Respond to police, courts, regulators, tax authorities, and other public bodies.
* Identify drivers responsible for traffic violations, toll charges, or penalties.
* Comply with anti-fraud, anti-money-laundering, sanctions, or financial regulations where applicable.
* Maintain legally required records.
* Report personal data breaches where legally required.

5.3 Processing Based on Legitimate Interests

Where permitted by law, we may process personal data for our legitimate interests, including:

* Protecting vehicles against theft, fraud, misuse, and unauthorised use.
* Managing and securing our fleet.
* Preventing payment fraud and chargebacks.
* Establishing, exercising, or defending legal claims.
* Recovering unpaid amounts.
* Investigating accidents, damage, and contract breaches.
* Improving customer service and business operations.
* Maintaining website and information-system security.
* Preventing abusive or fraudulent reservations.
* Keeping records of vehicle condition at handover and return.
* Sharing necessary information with insurers, repair services, towing companies, and legal advisers.
* Sending limited communications concerning similar services to existing customers where permitted by law and subject to the right to object.

When relying on legitimate interests, we consider whether our interests are necessary, proportionate, and balanced against your rights and freedoms.

5.4 Processing Based on Consent

We may request your consent for:

* Marketing newsletters.
* Promotional messages.
* Optional cookies and analytics technologies.
* Publication of customer testimonials or photographs.
* Any other processing for which consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.

5.5 Processing Necessary for Legal Claims

Personal data may be retained and used where necessary to establish, exercise, or defend legal claims, including claims relating to:

* Damage.
* Accidents.
* Insurance.
* Unpaid rental fees.
* Traffic fines.
* Chargebacks.
* Contract violations.
* Fraud or theft.

5.6 Vital Interests

In exceptional emergencies, we may process or disclose personal data where necessary to protect the life or physical safety of a customer or another person.

6. PAYMENT PROCESSING

Online payments may be processed through Stripe or another authorised payment service provider.

Payment service providers may collect and process information including:

* Name.
* Billing address.
* E-mail address.
* Telephone number.
* Payment card details.
* Transaction details.
* Device and fraud-prevention information.

Payment providers process personal data under their own legal obligations and privacy terms. They may act as our processor, an independent controller, or both, depending on the relevant processing activity.

We recommend reviewing the privacy policy of the payment provider before completing payment.

7. SECURITY DEPOSITS AND POST-RENTAL CHARGES

Where permitted by the rental agreement and applicable law, payment and transaction information may be used to:

* Authorise or hold a security deposit.
* Collect unpaid rental charges.
* Collect charges for missing fuel.
* Recover damage and repair costs.
* Collect traffic fines, tolls, parking charges, and administrative fees.
* Collect cleaning, towing, recovery, storage, late-return, or missing-equipment charges.
* Process refunds.
* Respond to payment disputes and chargebacks.

Information concerning such charges may be shared with payment providers, banks, insurers, legal advisers, debt-recovery providers, or competent authorities where necessary and legally permitted.

8. GPS, TELEMATICS, AND VEHICLE SECURITY

Vehicles may contain GPS, telematics, anti-theft, diagnostic, and vehicle-security technology.

We may use data generated by these systems for:

* Locating a stolen, missing, overdue, or unauthorised vehicle.
* Confirming whether a vehicle has crossed an unauthorised border.
* Managing breakdowns and roadside assistance.
* Investigating accidents, damage, theft, or suspected misuse.
* Monitoring vehicle mileage, maintenance requirements, and technical status.
* Protecting the safety, security, and value of the vehicle.
* Enforcing the rental agreement.
* Responding to lawful requests from public authorities.
* Establishing, exercising, or defending legal claims.

Access to telematics data is restricted to authorised persons and service providers with a legitimate operational or legal need.

9. PHOTOGRAPHS AND VIDEO RECORDS

We may take photographs or videos of:

* The vehicle before handover.
* Existing damage.
* Vehicle mileage and fuel level.
* The vehicle at return.
* New damage, contamination, missing equipment, or other relevant conditions.

These records may be used to:

* Document vehicle condition.
* Resolve disputes.
* Process insurance claims.
* Establish responsibility for damage.
* Protect both the renter and Pravac Rent a Car.

We aim to avoid unnecessarily recording individuals. However, individuals may occasionally appear incidentally in vehicle-condition photographs.

10. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies.

10.1 Strictly Necessary Cookies

These cookies are required for:

* Website security.
* Booking functionality.
* Session management.
* Payment processing.
* Language settings.
* Fraud prevention.

Strictly necessary cookies may operate without consent where permitted by law.

10.2 Analytics, Preference, and Marketing Cookies

With your consent, we may use cookies to:

* Understand website usage.
* Measure website performance.
* Remember preferences.
* Improve content.
* Measure advertising campaigns.
* Display relevant advertising.

You may manage optional cookies through our cookie banner or browser settings.

Further information should be provided in a separate Cookie Policy identifying the actual cookies and third-party services used on the website.

11. WHO MAY RECEIVE PERSONAL DATA

We may share personal data only where necessary and legally permitted with:

* Employees and authorised representatives.
* Payment processors, including Stripe.
* Website hosting and booking-system providers.
* Cloud and IT service providers.
* E-mail and communication providers.
* Insurers, insurance intermediaries, and claims handlers.
* Roadside-assistance providers.
* Repair shops, vehicle manufacturers, and technical experts.
* Towing, recovery, and storage companies.
* Vehicle owners or leasing providers where the vehicle is not owned directly by us.
* Accountants, auditors, tax advisers, and banks.
* Lawyers, courts, enforcement officers, and debt-recovery providers.
* Police, traffic authorities, toll operators, municipalities, tax authorities, and other public bodies.
* Travel agencies, brokers, and booking platforms involved in the reservation.
* Fraud-prevention and identity-verification providers.
* Potential purchasers or investors in connection with a legitimate corporate transaction.

Service providers may process personal data only for authorised purposes and must apply appropriate confidentiality and security safeguards.

We do not sell personal data.

12. INTERNATIONAL DATA TRANSFERS

Some service providers may process or store personal data outside Slovakia or outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we use an appropriate legal transfer mechanism where required, such as:

* A European Commission adequacy decision.
* Standard Contractual Clauses.
* Additional technical or organisational safeguards.
* Another transfer mechanism permitted under applicable data protection law.

Further information regarding the safeguards used for a specific transfer may be requested using the contact details in this Privacy Policy.

13. DATA RETENTION

We retain personal data only for as long as necessary for the purpose for which it was collected and for any period required or permitted by law.

Retention periods may depend on:

* The duration of the reservation and rental agreement.
* Accounting and tax requirements.
* Insurance and claims requirements.
* Limitation periods for legal claims.
* Traffic fines or toll charges received after the rental.
* Outstanding payments or disputes.
* Fraud prevention and vehicle-security requirements.
* Consent and marketing preferences.

In general:

* Enquiries that do not result in a booking are retained only as long as reasonably necessary to respond and maintain appropriate business records.
* Rental agreements, invoices, payment records, and legally required business documents are retained for the period required by applicable accounting, tax, and commercial laws.
* Damage, accident, insurance, litigation, and debt-recovery records may be retained until the matter and relevant legal limitation periods have ended.
* Marketing data is retained until consent is withdrawn, an objection is made, or the data is no longer required for the relevant marketing purpose.
* Website security logs are retained for a limited period unless longer retention is necessary to investigate fraud, security incidents, or unlawful activity.
* GPS and telematics data is retained only for as long as reasonably necessary for the relevant security, contractual, operational, or legal purpose.

After the applicable retention period expires, personal data is deleted, anonymised, or securely archived where continued storage is legally required.

14. DATA SECURITY

We use appropriate technical and organisational measures designed to protect personal data against:

* Unauthorised access.
* Accidental loss.
* Alteration.
* Disclosure.
* Destruction.
* Misuse.

Measures may include:

* Access controls.
* Password protection.
* Secure communication.
* Encryption where appropriate.
* Restricted employee access.
* Backups.
* Monitoring and logging.
* Staff confidentiality obligations.
* Service-provider agreements.
* Incident-response procedures.

No method of transmission or storage is completely secure. However, we regularly review our safeguards and take reasonable steps to reduce security risks.

15. YOUR DATA PROTECTION RIGHTS

Subject to applicable conditions and limitations, you may have the following rights:

15.1 Right to Information

You have the right to receive clear information about how your personal data is processed.

15.2 Right of Access

You may request confirmation as to whether we process your personal data and obtain a copy of that data together with relevant processing information.

15.3 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

15.4 Right to Erasure

You may request deletion of personal data where the legal conditions are met.

This right does not apply where processing or retention is required for legal obligations, legal claims, fraud prevention, accounting, tax, insurance, or other lawful purposes.

15.5 Right to Restriction

You may request that processing be restricted in certain circumstances, including while the accuracy or lawfulness of processing is being reviewed.

15.6 Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you may request certain personal data in a structured, commonly used, and machine-readable format.

15.7 Right to Object

You may object to processing based on legitimate interests for reasons relating to your particular situation.

You may object to direct marketing at any time. Once you object, we will stop using your personal data for direct marketing.

15.8 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

15.9 Rights Relating to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you, except where legally permitted.

We do not ordinarily make rental decisions based solely on automated decision-making without meaningful human involvement.

15.10 Right to Lodge a Complaint

You may lodge a complaint with the:

Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovakia

You may also contact the supervisory authority in the EU or EEA country of your habitual residence, place of work, or place of the alleged infringement where applicable.

16. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights, contact:

E-mail: pravacrentacareurope@gmail.com
Phone: +421 918 595 015

Please clearly describe your request and identify the personal data concerned.

We may request reasonable information to verify your identity before responding. This protects personal data against unauthorised disclosure.

We will respond within the period required by applicable law. Where a request is complex or numerous requests have been submitted, the response period may be extended as legally permitted.

Requests are generally free of charge. A reasonable fee may apply, or a request may be refused, where it is manifestly unfounded or excessive and the law permits such action.

17. DIRECT MARKETING

We may send promotional communications where:

* You have provided consent.
* The communication is otherwise permitted by law.
* You are an existing customer and the communication concerns similar services, subject to your right to object.

You may unsubscribe at any time by:

* Using the unsubscribe link in an e-mail.
* Replying with an unsubscribe request.
* Contacting us at pravacrentacareurope@gmail.com.

Service communications concerning an active reservation, rental, payment, safety issue, or contractual obligation are not marketing and may still be sent where necessary.

18. SOCIAL MEDIA

When you interact with us through social media, the relevant platform may independently collect and process personal data under its own privacy policy.

We may process:

* Your public profile information.
* Messages sent to us.
* Comments, reviews, and interactions.
* Reservation enquiries submitted through social media.

Do not send payment-card details, complete identity documents, or other highly sensitive information through public comments or unsecured social-media messages.

19. CHILDREN

Our vehicle rental services are intended for adults who meet the applicable age and driving-licence requirements.

We do not knowingly collect personal data directly from children for rental or marketing purposes.

Information concerning child passengers may be processed only where necessary to provide a requested service, such as a child seat, and should be provided by a parent, guardian, or responsible adult.

20. THIRD-PARTY BOOKINGS AND CORPORATE CUSTOMERS

Where a reservation is made by:

* An employer.
* A travel agency.
* A broker.
* A family member.
* Another authorised person.

We may receive personal data from that third party.

The third party is responsible for ensuring that it is legally permitted to provide the information and that the driver or renter has been appropriately informed.

Corporate customers should not provide unnecessary employee information.

21. ACCURACY OF PERSONAL DATA

You are responsible for ensuring that the information provided to us is accurate and current.

Please inform us promptly if your:

* Contact details change.
* Driving licence is suspended, withdrawn, or expires.
* Payment information changes.
* Reservation or flight information changes.

Incorrect or incomplete information may affect our ability to provide the requested service.

22. PERSONAL DATA BREACHES

If a personal data breach occurs, we will assess the risk and take appropriate action.

Where legally required, we will:

* Notify the competent supervisory authority.
* Inform affected individuals where the breach is likely to result in a high risk to their rights and freedoms.
* Take steps to contain and remediate the breach.

23. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect:

* Changes in our services.
* Changes in legal requirements.
* Changes in technology or service providers.
* Changes in our data-processing practices.

The current version will be published on our website with the updated effective date.

Material changes may also be communicated through the website, e-mail, or another appropriate method where required.

24. CONTACT US

For questions about this Privacy Policy or the processing of personal data, contact:

PRAVAC RENT A CAR SK S.R.O.

Registered Office:
Obchodná 560/39
811 06 Bratislava – Staré Mesto
Slovakia

Operating Address:
Galvaniho 10
821 04 Bratislava
Slovakia

Phone: +421 918 595 015
E-mail: pravacrentacareurope@gmail.com