Privacy Policy

Data controller

The data controller responsible for your personal data is:

Our approach

We respect your privacy and keep things simple.

We collect only what is necessary to provide a car rental service and comply with legal requirements. We never use customer data for advertising, tracking, or resale.

Information we collect

Information is collected only during the booking and rental process.

• Name and contact details
• Address
• Driver's license information
• Payment information (processed securely by our payment provider)
• Any other information legally required for a rental agreement

This information is used exclusively to process bookings, prepare rental agreements, verify eligibility to drive, and meet legal or insurance obligations.

Legal basis for processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract necessity — To fulfill your booking and rental agreement, process payments, and provide customer support.
• Legal obligation — To comply with Swedish accounting laws (Bokföringslagen), traffic regulations, and other applicable legislation.
• Legitimate interest — To protect against fraud, resolve disputes, and enforce our rental agreements.

What we do not do

• We do not sell personal data
• We do not rent or trade personal data
• We do not track users across other websites
• We do not use data for advertising or profiling

Customer data exists solely to support the rental relationship.

Cookies

We use one essential cookie only.

The bookingId cookie is used to associate your browser with your booking while you move through the booking flow. It does not contain personal information and is not used for analytics or marketing.

See the Cookie Policy for details.

Data retention

We retain personal data only for as long as necessary for the purposes described in this policy. Specific retention periods are:

• Completed rentals: 7 years after the rental ends, as required by Swedish accounting law (Bokföringslagen).
• Customer support inquiries: Up to 2 years for quality and dispute resolution purposes.

When no longer required, data is securely deleted or anonymized.

Sharing information and third-party processors

To operate our service, we use a limited number of third-party service providers who process personal data on our behalf. We only share the minimum information necessary, and each provider is bound by a data processing agreement.

• Hosting provider — Hosts and delivers our application. Based in the United States, with Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms in place.
• Email delivery provider — Sends transactional emails such as booking confirmations. Based in the United States, with Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms in place.
• Database provider — Securely stores booking and customer data. Hosted within the EU (Stockholm, Sweden).
• Payment service provider — Processes payments securely. Based in the EU and acts as an independent data controller for payment transactions.

We may also share information with authorities where legally required (e.g., traffic violations, law enforcement requests).

You may request the specific identity of our processors by contacting us at info@rently.nu.

International data transfers

Your personal data is primarily stored in Sweden. Our database and payment provider operate within the EU/EEA.

Some of our service providers (hosting and email delivery) are based in the United States. For these transfers, we use Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms permitted under GDPR.

Security

We use reasonable technical and organizational measures to protect personal information. While no system can be guaranteed to be completely secure, protecting customer data is taken seriously.

Your rights under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right to access — Request a copy of the personal data we hold about you.
• Right to rectification — Request correction of inaccurate or incomplete data.
• Right to erasure — Request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing — Request that we limit how we use your data.
• Right to data portability — Receive your data in a structured, machine-readable format.
• Right to object — Object to processing based on legitimate interests.

To exercise any of these rights, please contact us at info@rently.nu. We will respond to your request within 30 days.

Right to lodge a complaint

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Visit: www.imy.se

Contact

If you have questions about this policy or how your information is handled, you can contact us at:

Rently Car Rental Sweden AB
info@rently.nu

Policy changes

If this policy changes, the updated version will be posted on this page with a revised date.