← Back to home page

Privacy policy

Last updated: 20.10.2026

This policy explains which personal data we process, why, for how long and what your rights are. Because we also serve customers living in Europe (EU, Norway, United Kingdom, Switzerland), we apply the General Data Protection Regulation (GDPR and UK GDPR), the Swiss Federal Act on Data Protection (FADP) and Kosovo Law No. 06/L-082 on the Protection of Personal Data.

1. Controller

Kovia Rent a Car L.L.C., Rruga e vjetër e Aeroportit, Harilaç, Fushë Kosovë, Kosovo — email info@koviarentacar.com, phone +383 48 202 131.

2. What data we process and through which channel

  • Visiting the website: the hosting server (OVH) automatically logs the IP address, date and time, requested page and browser type. The website uses no analytics, advertising or tracking tools. Fonts are served from our own server; the website itself sends no request to Google. Only the booking module, if you display it, loads Google services (see section 4).
  • Phone, WhatsApp, email, Instagram, Facebook: name, phone number or address, your messages, travel dates, flight number and the car category you ask about.
  • RentSyst booking module (only if you enable it): the details you enter in the module: name, date of birth, country, contact details (email, phone), driving licence details (number, issue and expiry dates) and, if you upload it, a photo of the licence; dates, pick-up location and vehicle; flight number or notes.
  • Rental contract at the branch: ID card or passport, driving licence, address, payment details, vehicle condition at pick-up and return.

The website has no forms and does not collect any data itself.

3. Purposes and legal bases

  • Answering your enquiries and preparing your booking — pre-contractual steps (Article 6(1)(b) GDPR).
  • Concluding and performing the rental contract — contract (Article 6(1)(b)).
  • Accounting, tax and legal obligations for vehicle rental in Kosovo — legal obligation (Article 6(1)(c)).
  • Website security and abuse prevention (server logs), handling of damage claims and disputes — legitimate interest (Article 6(1)(f)).
  • Loading the RentSyst module and its cookies — your consent (Article 6(1)(a)), which you can withdraw at any time.

4. Recipients

  • RentSyst, our fleet and booking management software, acts as a processor on our behalf. Its policy: rentsyst.com/privacy-policy. Data location: European Union (Rentsyst Ltd, Cyprus; servers in the Netherlands).
  • Google (Fonts, Maps), loaded by the RentSyst module only after your consent: your IP address is transmitted to Google.
  • OVH, the website host (France, EU).
  • WhatsApp (Meta) and Instagram / Facebook (Meta), when you choose to contact us through them: Meta's own terms and privacy policy then also apply.
  • Our accountant, vehicle insurer and public authorities, only where necessary or required by law.

We do not sell your data or share it for advertising.

5. Transfers outside the EU

We are established in Kosovo, outside the European Union. When you contact us or book, your data is processed in Kosovo because this is necessary for the service you request (Article 49(1)(b) GDPR). For RentSyst, Google and Meta, transfers rely on the safeguards provided by these providers (RentSyst: data stored in the EU, with the European Commission's standard contractual clauses for any transfer outside the EEA; Google and Meta: standard contractual clauses and the EU-U.S. Data Privacy Framework).

6. Retention periods

  • Messages without a booking: 12 months after the last exchange.
  • Contracts, invoices and rental documents: kept for as long as required by Kosovo accounting and tax law; copies of ID cards and driving licences during the rental and then for as long as needed to recover sums due and meet legal obligations (Article 4 of the terms and conditions).
  • Data in RentSyst: the same periods as above; RentSyst processes them on our behalf and deletes them on our instruction.
  • Server logs: according to the retention policy of OVH, the hosting provider.
  • Your cookie choice: 6 months, in your browser only.

7. Your rights

You have the right to access, rectify and erase your data, to restrict processing and to data portability, and the right to object to processing based on our legitimate interest. Where processing relies on your consent, you may withdraw it at any time.

Write to us at info@koviarentacar.com. We reply within one month and may ask you to confirm your identity.

You may also lodge a complaint with a supervisory authority: in Kosovo, the Information and Privacy Agency (Agjencia për Informim dhe Privatësi); in the EU, the authority of your country of residence; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

8. Security

The website is served over HTTPS only. Access to customer data is limited to the people who need it to provide the service.

9. Changes

We may update this policy. The date of the current version is shown at the top.