Privacy Policy

Virage Montecito Rent a Car ("Virage Montecito", "we", "us", "our"), with its registered address at 17 Josipa Broza Tita, Podgorica 81000, Montenegro, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you use our website viragemontecito.me (the "Site") and our vehicle rental services, for what purposes we process it, on what legal basis, to whom we may disclose it, how long we keep it, and what rights you have regarding your data.

Personal data is processed in accordance with the Personal Data Protection Law of Montenegro and other applicable regulations, as well as, to the extent applicable, the standards of the EU General Data Protection Regulation (GDPR), given that the Site may also be accessed by users from the European Union.

The controller of your personal data is Virage Montecito Rent a Car, the authorized Subaru importer for Montenegro, address: 17 Josipa Broza Tita, Podgorica 81000, Montenegro, email: info@viragemontecito.me, phone: +382 67 205 010. For any questions about this Privacy Policy or the processing of your personal data, you may contact us using the details above.

2.1 Data you provide to us directly: - When booking a vehicle: first name, last name, email address, phone number, country, and, where applicable, flight number and any message/note you leave. - At vehicle pick-up (in person, off the Site): details from your driving licence, ID card or passport, and payment card details used for payment and/or the security deposit (Virage Montecito does not store full card numbers - payment processing is handled by an authorised payment processor/bank). - When paying online ("Pay Online"): your payment card details are entered directly on the hosted payment page of our payment service provider, Monri (Monri Payments d.o.o.), and are processed by Monri under its own security standards - Virage Montecito never receives or stores your full card number, expiry date or CVV. - When submitting an enquiry via the contact form: name, email address, phone number (optional), and the content of your message. - When signing up for our newsletter: email address.

2.2 Data we collect automatically: IP address, browser type and version, operating system, pages visited on the Site, time and duration of your visit, referral source (e.g. search engine, social media), as well as data collected via cookies - described in more detail in our Cookie Policy.

We process your data on the following bases and for the following purposes: (a) Performance of a contract - processing booking data, confirming vehicle availability, preparing and performing the rental agreement, booking-related communication, sending confirmation emails; (b) Legal obligation - retaining driving licence and identity document data in accordance with vehicle rental and anti-money-laundering regulations, tax and accounting rules; (c) Legitimate interest - improving service quality, preventing misuse and fraud, basic security and analytics processing of the Site, responding to contact form enquiries; (d) Consent - sending newsletters and marketing communications, using non-essential (analytics) cookies, using the Google reCAPTCHA service to protect forms from automated abuse.

You may withdraw consent given for marketing processing or non-essential cookies at any time, without affecting the lawfulness of processing carried out before withdrawal.

We may share your personal data with the following categories of recipients, only to the extent necessary for the stated purposes: (a) our staff and associates involved in processing your booking and preparing the vehicle; (b) our email delivery provider (SMTP service), to send booking confirmations and notifications; (c) Google LLC, in connection with the Google reCAPTCHA service (protection of forms against automated abuse) and, where enabled, Google Analytics and Google Tag Manager (web analytics); (d) our payment service provider, Monri (Monri Payments d.o.o.), for processing online card payments; (e) our insurer, in the event of damage or a traffic accident; (f) competent public authorities (police, tax authorities, courts), where required by law or necessary to protect our rights. We do not sell or rent your personal data to third parties for marketing purposes.

Certain service providers we use (e.g. Google LLC, in connection with reCAPTCHA and analytics) may process data on servers located outside Montenegro, including in the European Union and the United States. In such cases we rely on the relevant provider applying appropriate data-protection safeguards (e.g. standard contractual clauses or a certified data-transfer framework), in accordance with applicable regulations.

We retain personal data for as long as necessary to fulfil the purpose for which it was collected: booking and rental data, including data from the rental agreement - in accordance with statutory retention periods for business, tax and accounting records (generally up to 10 years from the end of the business year in which the transaction took place); data collected via the contact form that does not result in a booking - up to 24 months from the last contact; newsletter data - until you withdraw consent (unsubscribe); data collected via cookies - in accordance with the periods set out in our Cookie Policy. Once these periods expire, we delete or anonymise the data, unless a longer retention period is required by law.

We apply appropriate technical and organisational security measures (including encrypted (HTTPS) communication, controlled access to data, and regular system updates) to protect your personal data from unauthorised access, loss, misuse or unauthorised disclosure. While we take reasonable protective measures, no method of transmission over the internet is completely secure, and we cannot guarantee the absolute security of data you send to us.

In accordance with applicable data protection regulations, you have the right to: (a) request access to the personal data we process about you and a copy of it; (b) request correction of inaccurate data or completion of incomplete data; (c) request erasure of your data, where the legal conditions for this are met; (d) request restriction of processing in cases prescribed by law; (e) object to processing based on legitimate interest; (f) request portability of data you provided to us, in a structured, machine-readable format; (g) withdraw any consent given, at any time; and (h) lodge a complaint with Montenegro's competent personal data protection authority (the Agency for Personal Data Protection and Free Access to Information), if you believe your data has been processed unlawfully.

Requests to exercise these rights may be sent to the contact details in section 1. We aim to respond to your request without undue delay, and no later than the period prescribed by law.

Our services and the Site are not intended for individuals under 18 years of age, as vehicle rental is, by law, available only to adults holding a valid driving licence. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such data without delay.

The Site uses cookies and similar technologies to provide core functionality, remember your preferences and, with your consent, analyse Site usage. Detailed information about the types of cookies we use, their purpose, and how to manage your consent is available in our Cookie Policy.

The Site may contain links to third-party websites (e.g. Google Maps, social media). We are not responsible for the privacy practices or content of any such third-party sites. We recommend reviewing the privacy policy of every site you visit.

We reserve the right to amend this Privacy Policy at any time, to reflect changes in applicable law or our business practices. Any amendment will be published on this page with the date of the last update. Continued use of the Site after amendments are published constitutes acceptance of the amended Policy.

For any questions, requests or complaints regarding the processing of your personal data, you may contact us at: email info@viragemontecito.me, phone +382 67 205 010, or by post at 17 Josipa Broza Tita, Podgorica 81000, Montenegro.

Last updated: September 2026.