This Privacy Policy explains how Visitteo collects, uses, shares, and protects your personal data when you use visitteo.com and all its language versions (the “Website”).
Visitteo is a car rental comparison website. We compare offers from our booking partners and send you to the partner’s website to complete your booking. We don’t take bookings, we don’t process payments, and we don’t ask for your driver details. That means we collect very little personal data, and this page explains exactly what that is.
The controller of your personal data is:
Atlas j.d.o.o.
Brune Bušića 20, 23211 Pakoštane, Croatia
OIB: 33978793252 | MBS: 110071150, registered at the Commercial Court in Zadar (Trgovački sud u Zadru)
Email: [email protected]
We have not appointed a Data Protection Officer, as our activities don’t require one. For any privacy question, write to [email protected].
Visitteo is operated from Croatia, in the European Union. We process personal data under the EU General Data Protection Regulation (GDPR), the Croatian Act on the Implementation of the GDPR, and the Croatian Electronic Communications Act, which governs cookies.
Visitteo is used by travellers all over the world. We apply the same GDPR standard to every visitor, wherever you live. If the law of your country gives you additional rights, we respect them too (see Privacy rights outside the EU below).
When you search for a car, we collect the pick-up and drop-off location, dates and times, and whether you return the car to a different location. When you search for stays, we collect the destination, check-in and check-out dates, the number of guests and rooms. We also record your selected language and currency.
We don’t ask for your name, driver’s licence, date of birth, or payment details. Those are entered only on the partner’s website if you decide to book.
When you visit the Website, your browser automatically sends technical information such as your IP address, browser type and version, device type, operating system, language settings, the page you came from, the pages you visit, and the time of your visit. Our hosting and security services use this data to deliver pages and protect the Website.
With your consent, we and our partners use cookies and similar technologies to understand how the Website is used and to record that a click or booking came from Visitteo. This may include a cookie ID, the pages you viewed, the links you clicked, and an affiliate referral identifier. See our Cookie Policy for details.
Our booking partners send us reports so we can be paid our commission. These reports usually show the date, booking value, commission, status, and our own referral reference. They normally don’t include your name, contact details, or payment information.
Under the GDPR, we need a legal basis for each use of your data. The table below shows what we use your data for and the legal basis we rely on.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Running searches and showing live offers from our partners | Search data, technical data | Providing the service you request under our Terms of Use (Art. 6(1)(b)) |
| Sending you to a partner and recording the referral so we earn our commission | Affiliate referral identifier, click data | Your consent where cookies are used (Art. 6(1)(a)); otherwise our legitimate interest in being paid for referrals (Art. 6(1)(f)) |
| Remembering your language, currency, and cookie choices | Preference cookies | Legitimate interest in a working website (Art. 6(1)(f)); these are strictly necessary cookies |
| Answering your messages and partnership inquiries | Contact data, message content | Steps at your request (Art. 6(1)(b)) and our legitimate interest in replying (Art. 6(1)(f)) |
| Analytics, to improve the Website and our content | Analytics cookie data | Your consent (Art. 6(1)(a)) |
| Security, preventing fraud, bots, and misuse | Technical data, logs | Legitimate interest in protecting the Website (Art. 6(1)(f)) |
| Sending our newsletter | Email address | Your consent (Art. 6(1)(a)) |
| Publishing travel stories or photos you send us | The content you send | Your consent (Art. 6(1)(a)) |
| Accounting, tax, and other legal obligations | Partner reports, business records | Legal obligation (Art. 6(1)(c)) |
| Establishing or defending legal claims | Relevant records | Legitimate interest (Art. 6(1)(f)) |
Where we rely on consent, you can withdraw it at any time. This doesn’t affect anything we did before you withdrew it.
No. The price ranges, averages, and other statistics on our car rental pages are calculated from offer data returned by our partners, not from personal data about you. Read more in our Data methodology.
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. The order of offers follows the criteria explained in How we compare prices and isn’t based on a personal profile of you. We don’t use your personal data to train artificial intelligence models.
We use strictly necessary cookies to run the Website. Analytics, marketing, and affiliate tracking cookies are used only after you accept them in our cookie banner. We use Google Consent Mode, so Google services adapt their behaviour to your choice. You can change or withdraw your consent at any time through the cookie settings link in the footer of every page.
Full details, including a list of cookies, their providers, and how long they last, are in our Cookie Policy.
We don’t sell or rent your personal data. We share it only in the cases below.
To show live offers and send you to complete a booking, we work with independent partners:
We send them your search details to retrieve offers. When you click a link, the partner receives a referral identifier, and it may set its own cookies. Once you’re on a partner’s website, that partner decides how your data is used and is responsible for it as an independent controller. Please read the partner’s own privacy policy before you book. Learn more about these relationships in our Affiliate disclosure.
We use Stay22 to manage some affiliate links. Its script may process your IP address, the page you’re on, and the link you click, so the booking can be credited to Visitteo.
We use trusted providers that process data on our behalf and only on our instructions, under data processing agreements (Art. 28 GDPR). These include our web hosting provider, Cloudflare (content delivery and security), Google (Google Analytics and Google Maps), and our email provider.
We have pages on Facebook, Instagram, X, and YouTube. If you interact with them, the platform also processes your data under its own privacy policy. For Facebook and Instagram Page Insights, we and Meta are joint controllers, and Meta has taken primary responsibility for that processing. Some of our pages embed content such as Google Maps or YouTube videos. These services may collect data when they load.
We may disclose data if the law requires it, or to protect our rights, our users, or the public.
If Visitteo or Atlas j.d.o.o. is merged, sold, or restructured, personal data may be transferred to the new owner, who must continue to protect it under this policy.
Some of our providers and partners are based outside the European Economic Area, for example in the United States, Canada, the United Kingdom, or Switzerland. We only transfer data when it’s protected by a recognised safeguard: an EU adequacy decision (including the EU–U.S. Data Privacy Framework for certified U.S. companies) or the European Commission’s Standard Contractual Clauses. You can ask us for more information about these safeguards.
We keep personal data only as long as we need it for the purpose it was collected for.
| Data | Retention period |
|---|---|
| Contact form messages and emails | Up to 2 years after our last exchange, unless needed longer for a legal claim |
| Partnership correspondence | For the duration of the partnership and up to 2 years after it ends |
| Newsletter subscription | Until you unsubscribe |
| Server and security logs | Short periods, normally no longer than 90 days |
| Google Analytics data | 14 months |
| Cookies | As listed in our Cookie Policy |
| Accounting and tax records | As required by Croatian law, generally up to 11 years |
When the retention period ends, we delete or anonymise the data.
We use technical and organisational measures to protect your data, including HTTPS encryption, Cloudflare security protection, restricted access to our systems, regular software updates, and data processing agreements with our providers. We also keep data collection to a minimum.
No method of transmission over the internet is 100% secure. If a data breach is likely to put your rights at risk, we will report it to the supervisory authority within 72 hours, and we will tell you directly if the risk is high.
Under the GDPR, you have the right to:
To use any of these rights, email [email protected]. It’s free. We’ll reply within one month, and we may ask you to confirm your identity.
You can complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or to the data protection authority in the EU country where you live or work. We’d appreciate the chance to resolve your concern first, so please contact us.
Visitteo is intended for adults. Car rental is only available to adult drivers, and we don’t knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact us and we’ll delete it. The number of children entered in a stays search doesn’t identify anyone.
When you click a booking link, you’re taken to a website we don’t control. The booking, your payment, your driver details, and any personal data you enter there are handled by that partner under its own terms and privacy policy. For questions about data you gave a partner, or about your booking, contact the partner directly.
This Privacy Policy is available in several languages. If there’s any difference between versions, the English version prevails.
We update this policy when our services, partners, or the law change. The “Last updated” date below shows when it was last revised. If we make significant changes, we’ll show a notice on the Website. If a change requires your consent, we’ll ask for it.
For any question about this Privacy Policy or your personal data, email us at [email protected], use our contact form, or write to Atlas j.d.o.o., Brune Bušića 20, 23211 Pakoštane, Croatia.
Last updated: October 8, 2026
