Controller and contact
The controller is RENTA AUTO OOD, 357A Slivnitsa Blvd, Sofia 1343, Bulgaria. For privacy questions or requests, email rentauto@abv.bg.
Data we process
For accounts and sign-in we process your name, email, protected password and session data. For an inquiry or booking we process contact details, selected vehicle, dates and locations, driver and billing details, payment status and identifiers, and communications.
To verify driving eligibility we process the details and private copy of your driving licence described in the separate licence notice. For security we process limited technical logs such as IP address, request time and outcome.
Purposes and legal bases
We use the data to answer inquiries, prepare and perform a rental contract, manage payments and accounts on the bases of pre-contractual steps and performance of a contract. Required accounting and tax records are processed under legal obligations. Fraud prevention, service security and legal claims rely on our legitimate interests, balanced against your rights.
Recipients and international transfers
Access is limited to staff and necessary providers: Vercel and Railway for hosting and database services, Stripe when card payment is chosen, UploadThing for private licence storage, Mapbox when an address or route feature is used, and the transactional email provider. Card details are entered directly into Stripe and are not stored by us.
Where a provider processes data outside the EEA, we use an applicable GDPR transfer mechanism such as an adequacy decision or Standard Contractual Clauses with appropriate supplementary measures.
Retention
The driving-licence copy is deleted within 30 days after the rental ends or is cancelled. The checkout-resume cookie lasts up to 30 minutes. Account data is kept while the account is active unless law or a pending claim requires longer. Booking, payment and accounting records follow applicable statutory and claims periods. Inquiries and security logs are kept only as long as needed for their purpose.
Your rights
You may request access, correction, erasure, restriction, portability or object where the relevant right applies by emailing rentauto@abv.bg. You may complain to the Bulgarian Commission for Personal Data Protection at cpdp.bg. We do not make decisions producing legal or similarly significant effects solely by automated means.
Updates
Last updated: 14 August 2026. Material changes will be published on this page.