Last updated: 17 June 2026

*Montrent is the trading name of Balto Ultimo d.o.o., a limited-liability company registered in Montenegro.*

This Privacy Policy explains how Montrent collects, uses and protects your personal data when you visit montrent.me, request a booking, or rent a vehicle from us. We are a car-rental operator based on the Montenegrin coast, and we take the protection of your personal data seriously. We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable Montenegrin data-protection law.

Please read this policy together with our Cookie Policy, which describes how we use cookies on our website.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

Montrent d.o.o., a car-rental company operating under the laws of Montenegro
Website: montrent.me
For any privacy question or request, please contact us through our contact page. Support is available in English, Russian and Turkish, including via WhatsApp.

If you would like to exercise any of your rights or have a concern about how we handle your data, contacting us is the quickest way to get a response.

2. What personal data we collect

We only collect the data we genuinely need to handle your enquiry, confirm your rental and hand over the car. Depending on your interaction with us, this may include:

Data you provide when you request a booking

Name of the main driver
Email address
Phone number (including any WhatsApp number you contact us on)
Booking details — the car you are interested in, requested pickup and drop-off dates, times and locations (for example Tivat (TIV) or Podgorica (TGD) airports, or Budva, Kotor, Bar, Herceg Novi or Podgorica city)
Any messages or notes you send us, including requests for cross-border travel to neighbouring countries (Croatia, Albania, Bosnia, Kosovo, Serbia)

Data we record at the car handover (pickup)

Because there is no online prepayment and you pay at pickup, certain documents are verified in person when our representative meets you and hands over the car:

Driving licence details of the main driver
Passport or national ID details
The payment card in the main driver's name used for the refundable security deposit and rental payment (we do not store full card numbers; card details are handled by the payment terminal/provider)

Data collected automatically when you use the website

Basic technical and usage data, such as IP address, browser type and pages viewed, used to keep the site secure and working correctly
A language-preference cookie so the site remembers your chosen language. We do not use third-party advertising or tracking cookies by default. See our Cookie Policy for full details.

We do not knowingly collect special categories of data (such as health data), and we ask you not to send us such information.

3. Why we use your data and our legal bases

We only use your personal data for clear purposes, and each purpose has a lawful basis under the GDPR:

Performance of a contract

To respond to your booking request, confirm the exact car and total price with you, and manage your rental from request to return
To verify your driving licence and identity at pickup, as required to lawfully rent you a vehicle
To take and refund the security deposit, apply the included insurance with its excess/deductible (CDW), operate the full-to-full fuel policy, and handle free cancellation up to 48 hours before pickup
To arrange optional services you request, such as delivery / meet-and-greet and cross-border travel (including any green card and cross-border arrangement)

All prices are quoted in EUR and shown as final and all-inclusive; there are no hidden fees.

Legitimate interests

To communicate with you about your enquiry and provide customer support (in EN/RU/TR)
To keep our website and booking systems secure, prevent fraud and misuse
To recover amounts you are responsible for under the rental, such as the insurance excess for damage, unpaid tolls (for example the Sozina tunnel) and traffic fines incurred during your rental
To keep proper business records

Legal obligation

To comply with Montenegrin law, including tax, accounting and any obligations to provide information to competent authorities

Consent

For non-essential cookies and for any optional marketing communications. Where we rely on consent, you can withdraw it at any time without affecting prior processing.

4. Who has access to your data (processors and sub-processors)

We do not sell your personal data. We share it only with trusted service providers who help us run our business, and only as far as needed. These providers act as our processors under written terms and may only use your data on our instructions:

Cloud database hosting — your booking and enquiry data is stored in a Supabase (PostgreSQL) database
Transactional email — booking confirmations and service emails are sent through Resend
CDN / DNS / security — our website runs behind Cloudflare, which provides content delivery, DNS and protection against malicious traffic

We may also share data with professional advisers, payment providers, or public authorities where this is necessary to comply with the law or to establish, exercise or defend legal claims.

5. International transfers

Montrent operates from Montenegro, and some of our service providers (such as those above) may process data on servers located outside Montenegro or the European Economic Area. Where personal data is transferred internationally, we take steps to ensure it remains protected by appropriate safeguards — such as the European Commission's Standard Contractual Clauses or an equivalent recognised mechanism — so that your data continues to enjoy a comparable level of protection.

6. How long we keep your data

We keep your personal data only for as long as necessary for the purposes described in this policy:

Enquiries that do not lead to a rental are kept for a short period and then deleted.
Booking and rental records are kept for the duration of the rental and afterwards for the period required by law (for example for accounting, tax and to handle any disputes, deposit refunds, tolls or fines).
Identity and driving-licence details verified at pickup are retained only as long as needed to manage the rental and meet our legal obligations.

When data is no longer needed, we securely delete or anonymise it.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Access — to obtain a copy of the personal data we hold about you
Rectification — to have inaccurate or incomplete data corrected
Erasure — to have your data deleted where there is no overriding reason for us to keep it
Restriction — to ask us to limit how we use your data in certain circumstances
Portability — to receive certain data in a structured, machine-readable format
Objection — to object to processing based on our legitimate interests
Withdraw consent — where we rely on your consent, at any time

To exercise any of these rights, please contact us via our contact page. We will respond within the time limits set by law. You also have the right to lodge a complaint with the competent supervisory authority for data protection in Montenegro (the Agency for Personal Data Protection and Free Access to Information) or, if you are in the EU, with your local data-protection authority.

8. How we protect your data

We apply appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include encrypted connections (HTTPS) for our website, access controls and restricted permissions on our booking database, and reliance on reputable providers (Supabase, Resend, Cloudflare) that maintain their own recognised security standards. While no system can be guaranteed completely secure, we work to keep your data safe at all times.

9. Cookies

Our website shows a cookie-consent banner and uses only the cookies needed to make the site work and remember your language preference. We do not use third-party advertising or tracking cookies by default. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

10. Children

Our services are intended for adults who meet our driver requirements (a minimum driver age and minimum years holding a licence apply, as shown on each car and your booking confirmation). Our website and services are not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. When we make material changes, we will update the date at the top of this page. We encourage you to review this policy periodically.

12. Contact us

If you have any questions about this Privacy Policy or about how we handle your personal data, please reach out through our contact page. We are happy to help in English, Russian or Turkish, including via WhatsApp.