Privacy policy

1. Who processes your data

The data controller is PREZENT INTERNATIONAL DOO, Banjska 13/14, 11000 Belgrade, Serbia, company reg. no. 20754265, tax no. 107199193, trading as Nevian Rent a Car (office: Mije Kovačevića 10, Belgrade).

For any question about your data, e-mail kontakt@nevian.rs or call +381 64 222 8222.

We process personal data in line with the Serbian Law on Personal Data Protection (Official Gazette RS no. 87/2018).

2. What data we collect

When you book: name, e-mail, phone number, pickup and return dates and places, delivery address, flight number (for airport pickup), chosen car, insurance and extras, any note you add.

At pickup and when signing the rental agreement: details from your driving licence and ID card or passport (name, date of birth, document number, issue and expiry dates), address, deposit and payment details. Card details are not stored on the website; your card is used only on the POS terminal for payment or deposit pre-authorisation.

During the rental: use of the car, mileage, any damage, traffic offences and fines related to the car during the rental period. Our cars have no GPS or other location-tracking devices.

When you contact us: the data you give us in a message, e-mail, contact form, Viber or WhatsApp.

When you visit the website: anonymous usage data (pages visited, clicks on phone and e-mail, site search, device type and country), without IP address and without data that identifies you personally. Cookies – see section 6.

3. Why we use your data and on what basis

• Booking and performing the rental agreement (contract): to confirm your booking, prepare and hand over the car, calculate the price and deposit and contact you about the rental.
• Legal obligations: keeping the records required for car rental services (Law on Tourism), issuing invoices and keeping accounting records, responding to authorities (e.g. traffic offences).
• Legitimate interest: protecting our cars and property, recovering damages and claims, website security, improving our service with anonymous statistics.
• Consent: statistics and marketing cookies and e-mail offers. You can withdraw consent at any time, without affecting earlier processing.

We do not sell your data and do not use it for automated decision-making.

4. Who we share data with

Only when necessary:

• service providers processing data on our behalf and on our instructions: website hosting and database, e-mail sending, accounting, IT support;
• insurance companies, in case of damage or accident;
• competent authorities, when required by law (police, courts, inspectorates, tax authority);
• if you accept statistics and marketing cookies: Google (Tag Manager, Analytics, Ads), Microsoft (Clarity) and Meta Platforms Ireland Ltd. (Meta Pixel – Facebook/Instagram), see section 6.

Transfers outside Serbia: some providers (hosting, e-mail, Google, Microsoft, Meta) may store data on servers in the EU or other countries. Such transfers take place with appropriate safeguards required by law (e.g. standard contractual clauses).

5. How long we keep data

• bookings, rental agreements and service records – 2 years after the rental ends, as required by law;
• invoices and accounting documents – for the periods required by the Serbian Law on Accounting;
• damage and dispute data – until the case is closed and limitation periods expire;
• unconfirmed and cancelled bookings and enquiries – 6 months;
• data for e-mail offers – until you withdraw consent;
• anonymous website statistics – no limit, as they contain no personal data.

6. Cookies

Cookies are small files the website stores in your browser.

• Necessary – always on. Needed for the site to work: language and currency, booking steps, remembering your cookie choice.
• Statistics – only with your consent. Google Analytics and Microsoft Clarity, to see how the site is used and improve it.
• Marketing – only with your consent. Google Ads and Meta Pixel (Facebook/Instagram) – measuring ad performance and showing ads to people who visited the site. Meta Pixel receives: pages visited, car model viewed, booking started (car and price in EUR), booking request sent, contact form sent and clicks on phone, Viber and WhatsApp, plus technical browser data (IP address, device, Meta cookies). The e-mail and phone number you enter in a booking or the contact form are sent to Meta only in hashed (encrypted) form, solely for ad measurement (Meta Automatic Advanced Matching); we do not send your name. Meta is a joint controller for this collection; see www.facebook.com/privacy/policy.

Statistics and marketing cookies are not loaded until you consent. You can change your choice at any time via "Cookie settings" at the bottom of the site, and delete cookies in your browser settings.

7. Your rights

You have the right to:

• access your data and get a copy;
• have inaccurate data corrected;
• have your data erased, except data we must keep by law;
• restrict processing;
• object to processing based on legitimate interest;
• data portability;
• withdraw consent at any time.

Send your request to kontakt@nevian.rs. We will reply within 30 days at the latest. If you believe your rights have been breached, you may complain to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs.

8. Data security

We keep data in protected systems, accessible only to authorised staff. The website uses an encrypted connection (HTTPS).

9. Changes

We may update this policy from time to time. The current version is always published on this page with its last-updated date.