Privacy Policy

Last updated: 6 September 2026.

1. Controller and contact

myRent d.o.o., Ulica Vjekoslava Klaića 14, 10000 Zagreb, Croatia, OIB 94577135640, MB 04823508 and MBS 081131889 provides MyRent services and operates this website.

For privacy questions or to exercise your rights, contact Neven Palčec at [email protected] or +385 99 6378 467.

2. Controller and processor roles

MyRent is the controller for website visitors, enquiries, customer and business relationships, billing, administration and support. When a business customer uses MyRent PMS for guest and reservation data, MyRent acts as processor under that customer's documented instructions and the applicable data-processing agreement.

3. Data we process

We process names, contact details, billing details and accommodation-unit information needed for the business relationship and service. Website use may also generate technical data needed for delivery and security, including an IP address where necessary and technical logs.

4. Purposes and legal bases

We process data to perform a contract or take pre-contractual steps, comply with legal obligations, answer enquiries, provide support, secure the service and protect our rights. Where consent is required, it is requested for the specific purpose and can be withdrawn without affecting earlier lawful processing.

5. Recipients and transfers

Authorised persons access data only as needed. Hetzner provides hosting, server infrastructure and storage; Microsoft provides business email and communication infrastructure. Data may be disclosed to competent authorities or professional service providers when required. We do not sell personal or business data.

Customers may enable booking, registry, communication, payment and other integrations. Their own privacy notices may apply. Where data is transferred outside the EEA, appropriate GDPR safeguards are used.

6. Retention

Contact-enquiry data may be retained for up to five years. Standard website and server logs are retained for up to 90 days, unless a longer period is necessary for a specific security incident or legal obligation. Data needed for an active relationship is retained for the service and mandatory records for the applicable legal period.

7. End of service and export

After service termination, a customer has six months to request access to and export of its data, subject to legal exceptions. Data may remain in backups for a limited time and is removed through the normal backup cycle; permanently deleted data may not be recoverable.

8. Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability or object to processing based on legitimate interests. Send requests to the contact above. You may also complain to the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.

9. Security and incidents

We apply technical and organisational measures proportionate to the risks and restrict access by task. If an incident affects data processed for a customer, we notify the relevant controller without undue delay and provide available information for its response.

10. Cookies and external content

The website uses technical mechanisms needed for operation and protection of the contact form. The contact page may display an embedded Google map; loading external content connects to its provider. Details of analytics, advertising cookies and consent options will be published when those tools are introduced.

11. Changes

We update this policy when processing or other relevant circumstances change. The current text and revision date are available on this page.