Rent a Car Prishtina - Tirana Airport | Premium Car Rental Service

01

Who We Are

Rent A Car International SHPK (NUIS: M32223044Q) is the data controller responsible for your personal information. We are registered in Albania at Autostrada Tirane-Durres Km10, Nr. Pas. 40/44, Tirane.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website rentacarprishtina-tirana.com or any of our services. We are committed to protecting your privacy in accordance with Albanian Law No. 9887 on Personal Data Protection and applicable EU GDPR principles.

02

Data We Collect

We collect the following categories of personal data:

Category	Data Collected	When
Identity	First name, last name, driving licence number, date of birth	At booking
Contact	Email address, phone number, postal address	At booking
Financial	Payment confirmation reference (we do NOT store card numbers)	At payment
Rental	Pick-up/drop-off location, dates, vehicle details, reservation history	During rental
Technical	IP address, browser type, pages visited, referral source	Automatically

03

How We Use Your Data

We use your personal data for the following purposes:

Contract fulfilment — to process and manage your rental reservation
Payment processing — to facilitate secure online payments through our banking partner
Customer support — to respond to your queries and resolve any issues
Legal obligations — to comply with Albanian law, tax regulations, and law enforcement requests
Service improvement — to analyse usage patterns and improve our website and services
Communications — to send your booking confirmation, invoices, and important service notifications

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

04

Payment Data

All online card payments are processed by RaiAccept, the secure e-commerce solution of Raiffeisen Bank Albania. RaiAccept is PCI-DSS compliant and operates under the supervision of the Bank of Albania.

Rent A Car International does never receive, store, or have access to your full card number, CVV, or card expiry date. We only receive a transaction reference number confirming that payment was successful.

By making a payment through our website, you also agree to RaiAccept's privacy and data processing terms.

05

Data Sharing

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data only in the following limited circumstances:

Raiffeisen Bank Albania / RaiAccept — for payment processing
Insurance providers — in the event of an accident or insurance claim
Law enforcement authorities — when legally required (e.g. traffic offences, fraud investigation)
Professional advisors — lawyers or accountants under strict confidentiality obligations

All third parties are required to process your data securely and only for the specific purpose for which it was shared.

06

Data Retention

We retain your personal data for the following periods:

Reservation and rental records: 7 years (required by Albanian accounting and tax law)
Payment records: 7 years
Customer account data: For the duration of your account plus 3 years
Marketing communications: Until you unsubscribe
Website logs (IP, cookies): 12 months

After the applicable retention period, your data is securely deleted or anonymised.

07

Cookies

Our website uses cookies — small text files stored on your device — to ensure the site functions correctly and to improve your experience. We use:

Essential cookies: Required for the website to function (session management, security). Cannot be disabled.
Functional cookies: Remember your language preference and login status.
Analytics cookies: Help us understand how visitors use our site (anonymised data only).

You can control non-essential cookies through your browser settings at any time. Disabling cookies may affect the functionality of certain parts of our website.

08

Your Rights

Under Albanian data protection law, you have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of your data where there is no legal basis to retain it
Right to restriction — request that we limit the processing of your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

09

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

HTTPS encryption for all data transmitted through our website
Secure server infrastructure with restricted access controls
Regular security reviews and software updates
Staff training on data protection obligations

In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

10

Contact & Complaints

For any privacy-related queries or to exercise your rights, contact our data protection point of contact:

Email: [email protected]
Phone: +355 069 164 108
Address: Autostrada Tirane-Durres Km10, Nr. Pas. 40/44, Tirane, Albania

If you are not satisfied with our response, you have the right to lodge a complaint with the Albanian Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale) at www.idp.al.

Privacy Policy

Contents