Privacy Policy
1. Who we are
This Privacy Policy explains how VIP ADES, registered in the Republic of Albania (NIPT/VAT L83808804I, registered office at 17 Shkurti, Saranda, Albania), collects, uses, stores and protects your personal data when you use rentalcarvipades.al (the "Website") or rent a vehicle from us ("we", "us", "our"). It should be read together with our Terms & Conditions; where the two conflict on a data matter, this Privacy Policy prevails.
2. Legal basis
We process personal data under Law No. 124/2024 "On Personal Data Protection" (in force since 31 January 2025, aligned with the EU GDPR), and, for bookings and payments, Law No. 9902/2008 "On Consumer Protection" and the Civil Code.
3. Data we collect
Depending on how you interact with us, we collect:
- Booking and identity data — name, email, phone, nationality, date of birth, driving licence details, ID/passport number, and (where relevant) additional-driver details.
- Payment-confirmation data — the outcome of a payment (paid/failed, amount, reference) from our payment providers; we do not receive or store your full card number, CVV or wallet credentials.
- Vehicle and rental data — pickup/return dates and locations, vehicle condition and mileage records, fuel level, damage reports.
- Technical data — IP address, device and browser type, and pages viewed on the Website, including while a booking is in progress but not yet completed.
- Communications — messages you send us by email, WhatsApp, SMS or through the Website.
4. Why we use it
- To take, confirm and fulfil your Booking, and verify you are eligible to drive.
- To process payment and manage the Security Deposit.
- To send booking confirmations, reminders and — where you have provided a mobile number — WhatsApp/SMS updates about your rental.
- To handle accident, damage, theft or fine claims, and meet our legal and accounting duties.
- To measure and improve how our Website performs, and to run advertising campaigns (Section 5).
5. Cookies and advertising
We use Google Analytics to understand how visitors use the Website, and Google Ads conversion tracking to measure the performance of our advertising campaigns. Both set cookies in your browser and may combine data about your visit with other information Google holds about you, under Google's own privacy policy. You can control or delete these cookies through your browser settings, or opt out of personalised Google advertising at adssettings.google.com.
6. Who we share data with
We share personal data only where necessary to run the service described above:
| Recipient | Role | Purpose |
|---|---|---|
| POK Pay (operated by R PAY, licensed by the Bank of Albania) | Independent controller / payment processor | Card and wallet payments, Security Deposit hold |
| PayPal | Independent controller / payment processor | PayPal payments |
| Twilio | Processor | Sending SMS notifications |
| Sent.dm | Processor | Sending WhatsApp/SMS notifications, where enabled |
| Mailgun | Processor | Sending email confirmations and notifications |
| Google (Analytics & Ads) | Independent controller / processor | Website analytics and ad-campaign measurement |
| Our insurer / claims handler | Recipient / controller | Handling accident, damage or theft claims |
| Police and public authorities | Recipient | Traffic offences, fines, and where required by law |
| Hosting / IT providers (name to be confirmed) | Processor | Operating and securing the Website and systems |
We never sell your personal data.
7. International transfers
Some recipients above (Google, PayPal, Twilio, Sent.dm, Mailgun) are based outside Albania/the EEA. Where data is transferred to a country not recognised as adequate under Law No. 124/2024, we rely on an appropriate safeguard such as Standard Contractual Clauses.
8. How long we keep it
We keep driving-licence, ID and booking data only as long as necessary to fulfil the rental, handle any claim or fine, and meet our legal and accounting obligations, then delete or anonymise it. Technical/analytics data is retained for a shorter period, in line with Google's own retention settings for Analytics and Ads.
9. Your rights
You may access, rectify, erase, restrict, object to and port your data, and withdraw consent, subject to law. To exercise any of these, or to request account/data deletion, contact us (Section 11). You may also complain to the Commissioner for the Right to Information and Protection of Personal Data (IDP) in Albania (https://www.idp.al).
10. Keeping your data safe
We use appropriate technical and organisational measures — encrypted connections, access controls, and never storing full card details ourselves — to protect the personal data we hold.
11. Contact and changes
We may update this Privacy Policy from time to time; the version published here is the one in effect.
VIP ADES
17 Shkurti, Saranda, Albania
NIPT/VAT: L83808804I
Email: [email protected]
Phone: +355 688 443 555