Privacy Policy

How we collect, use, and protect your personal information

Last updated: June 2026  |  Amri Rental  |  Durres, Albania

Your privacy matters to us. This policy explains exactly what data we collect, why we collect it, and how we keep it safe. We comply with the Albanian Law No. 9887 "On the Protection of Personal Data" and applicable data protection standards.

1. Who We Are

Amri Rental is the data controller responsible for your personal information. We are a car rental company based in Durres, Albania.

  • Business Name: Amri Rental
  • Address: 📍 Kompleksi Rotondo, Plepa Durres 2001
  • Email: info@amrirental.com
  • Phone: +355 69 900 0077

2. Data We Collect

We collect personal data when you make a booking, create an account, contact us, or visit our website. The categories of data we may collect include:

Category Examples When Collected
Identity Data Full name, date of birth, nationality Account registration, booking, office visit
Contact Data Email address, phone number Account registration, booking, contact form
Document Data Driving licence number, passport / national ID Booking confirmation, office visit
Booking Data Reservation details, vehicle preference, pick-up/return dates, extras selected When you make or manage a booking
Payment Data Payment method, transaction reference (card numbers are never stored by us) At payment processing
Technical Data IP address, browser type, device type, pages visited Automatically when you browse our website
Communications Data Messages sent via our contact form or email When you contact us

3. How We Use Your Data

We use your personal data for the following purposes:

  • To process and manage your booking — including issuing confirmations, rental agreements, and receipts.
  • To verify your identity and eligibility — checking your driving licence and age before releasing a vehicle.
  • To process payments — securely charging or refunding rental fees via our payment processors.
  • To communicate with you — sending booking confirmations, reminders, and responding to enquiries.
  • To comply with legal obligations — including tax record-keeping and law enforcement requests where required.
  • To improve our services — analysing booking patterns and website usage to enhance our platform and fleet.
  • To prevent fraud and ensure safety — verifying documents and detecting suspicious activity.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contract performance — processing is necessary to fulfil your rental agreement.
  • Legal obligation — we are required by Albanian law to verify driver identity and maintain financial records.
  • Legitimate interests — to prevent fraud, improve our services, and ensure vehicle security.
  • Consent — for any marketing communications, where you have expressly opted in.

5. Who We Share Your Data With

We do not sell your personal data. We may share it with the following trusted third parties, strictly for the purposes described above:

  • Payment processors — to securely handle card transactions (e.g., Stripe, bank payment gateways). These processors are PCI-DSS certified and never share your card data with us.
  • Email service providers — to deliver booking confirmations and notifications (Hostinger SMTP).
  • Law enforcement or regulatory bodies — where we are legally required to disclose information.
  • Professional advisers — accountants, lawyers, or insurers under strict confidentiality obligations.

All third-party processors are contractually required to protect your data and may only use it for the specified purpose.

6. How Long We Keep Your Data

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

  • Booking and rental records: 7 years (Albanian tax and commercial law requirements).
  • Account data: For the duration of your account, plus 2 years after deletion.
  • Contact form messages: Up to 2 years.
  • Document copies (licence, passport): Deleted within 30 days of rental completion, unless a dispute is outstanding.
  • Website logs: Up to 90 days.

7. Your Rights

Under Albanian Law No. 9887 on the Protection of Personal Data, you have the following rights in relation to your personal information:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your data where there is no lawful reason for us to retain it.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Restriction

Request that we limit how we use your data in certain circumstances.

To exercise any of these rights, please contact us at info@amrirental.com. We will respond within 30 days.

8. Cookies

Our website uses session cookies to maintain your login state and currency preference. These cookies are strictly necessary for the website to function and are not used for tracking or advertising purposes. They expire when you close your browser or after a reasonable session timeout.

We do not use third-party analytics, advertising, or tracking cookies.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:

  • HTTPS encryption for all data transmitted through our website
  • Passwords stored using strong one-way hashing (bcrypt)
  • Access to personal data restricted to authorised staff only
  • Card payment data handled exclusively by PCI-DSS certified processors — we never store full card numbers

In the unlikely event of a data breach that affects your rights, we will notify you and the relevant authority as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will publish the updated version on this page with a revised date. We encourage you to check this page periodically.

11. Contact & Complaints

For any privacy-related questions or to exercise your rights, please contact us:

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Albanian Information and Data Protection Commissioner (IDP).