PRIVACY POLICY

Ultra Drive Rent a Car
Last updated: 28.05.2025

1. Introduction

This Privacy Policy describes how Ultra Drive d.o.o. ("we", "us", "our", "Ultra Drive") collects, uses, and protects your personal data when you use our website, contact us via email, or book our car rental services.

We take your privacy seriously and treat your data carefully and in accordance with applicable laws – including the Personal Data Protection Law of the Republic of Serbia and the General Data Protection Regulation (GDPR) of the European Union, where applicable.

For any questions regarding the processing of your personal data, you can contact us at:

2. What data do we collect?

Depending on how you use our website and services, we may collect the following types of personal data:

a) Data you provide directly:

  • Full name
  • Phone number and email address
  • Home address (if required for contract)
  • Driver’s license number
  • Unique personal identification number (JMBG) – only if legally required
  • Payment information (transaction ID, never card numbers)
  • Any additional information you voluntarily submit via forms, phone, or email

b) Data we collect automatically:

  • IP address
  • Device and browser type
  • Session data
  • Cookies (explained in the Cookie Policy)

3. How do we use your data?

Your data is used for the following purposes:

  • To manage and complete vehicle rental reservations
  • To prepare contracts and fulfill legal obligations
  • To communicate with customers (confirmations, inquiries, support)
  • To send promotional content (only with your consent)
  • To improve website functionality and user experience
  • To prevent misuse and for security checks

4. Legal basis for data processing

Data processing is based on one or more of the following legal grounds:

  • Your consent (e.g. for marketing emails)
  • Contractual necessity (e.g. for car rental booking)
  • Legal obligations (e.g. for tax or recordkeeping purposes)
  • Legitimate interest (e.g. service improvement, business protection)

5. Data retention period

We retain data only as long as necessary for the purpose for which it was collected, or as required by law.
Examples:

  • Booking and contract-related data: at least 5 years (accounting purposes)
  • Newsletter emails: until you withdraw consent
  • IP addresses and cookies: as outlined in our Cookie Policy

6. Your rights

According to the law, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request deletion of data ("right to be forgotten")
  • Request restriction of data processing
  • Object to data processing
  • Request data portability
  • Withdraw consent (when processing is based on consent)
  • File a complaint with the Data Protection Commissioner in Serbia (https://www.poverenik.rs)

To exercise your rights, please contact us at office@ultradrive.rs.

7. Data sharing with third parties

Your data will not be shared with third parties unless:

  • It is necessary to deliver the service (e.g. payment processors, IT support)
  • Required by law (e.g. police, tax authority)
  • Based on legitimate interest, with appropriate safeguards

8. Data protection measures

We implement appropriate technical and organizational measures, including:

  • HTTPS encryption
  • Data protection through passwords and encryption
  • Access to data limited to authorized personnel
  • Regular updates and secure procedures

Ultra Drive - Rent a Car
SRB / ENG