Trans Lux Rent a Car ("Trans Lux", "we", "our" or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, contact us or rent a vehicle from us.
1. Data Controller
The data controller is Trans Lux Rent a Car, registered in Montenegro, with offices at Zgrada Vujanovic, 1 Sremskog Fronta, 85316 Bečići, Montenegro.
For any privacy-related questions, contact us at [email protected].
2. Data We Collect
We collect the following categories of personal data:
- Identification data: full name, date of birth, nationality, passport / ID number, driving licence number and expiry date.
- Contact data: email address, phone number, postal address.
- Booking data: pickup / drop-off location and date, vehicle category, add-ons selected, cross-border destinations.
- Payment data: card type, last 4 digits, transaction amount and reference (full card details are processed by our PCI-DSS compliant payment provider — we never store full card numbers).
- Technical data: IP address, browser type, device, language, pages visited, referrer URL.
3. Purpose of Processing
We process your personal data to:
- create, manage and fulfil rental contracts;
- process payments, deposits and refunds;
- verify driver eligibility and identity;
- communicate booking confirmations, reminders and post-trip follow-ups;
- comply with legal obligations (tax, traffic enforcement, border crossing records);
- improve our website and services through anonymised analytics.
4. Legal Basis
Our processing is based on:
- Performance of a contract (rental agreement);
- Legal obligation (e.g. retaining invoices, reporting traffic offences);
- Legitimate interest (preventing fraud, recovering damages, securing our website);
- Consent, where applicable (marketing emails, non-essential cookies).
6. Data Retention
Rental contracts and related invoices are retained for 10 years in accordance with Montenegrin tax law. Marketing data is retained until you withdraw consent. Website analytics data is retained for up to 26 months in anonymised form.
7. Your Rights
Subject to Montenegrin law and, where applicable, the GDPR, you have the right to:
- access your personal data;
- request correction of inaccurate data;
- request deletion ("right to be forgotten") where legally permitted;
- restrict or object to processing;
- request data portability;
- withdraw consent at any time;
- lodge a complaint with the Agency for Personal Data Protection of Montenegro.
To exercise these rights, email [email protected]. We respond within 30 days.
8. Security
We apply technical and organisational measures including TLS encryption, access controls, secure backups and staff training. However, no online transmission can be guaranteed 100% secure.
10. Children
Our services are not directed to children under 18. We do not knowingly collect personal data from minors.
11. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Significant changes will be communicated by email when applicable.
12. Contact
Questions or requests? Reach us at [email protected] or via our Contact page.
