Please close browser page or go back to continue registration process

Privacy Policy

Welcome to a place where you can be assured that we value your privacy and pay special attention to the security of your personal data.

In the following text, we will try to inform you in a simple and easy-to-understand manner about how your personal data is collected, used, and processed, as well as the duration of its use, storage, and the method of its destruction, and how we have secured it against misuse. This Privacy Policy has been created in accordance with the Law on Personal Data Protection.

GAGA TURS ZLATIBOR d.o.o. (hereinafter GAGA TURS ZLATIBOR or „we“) is a public company whose primary activity is urban and suburban passenger land transport in accordance with the law and market principles. The collection and processing of your personal data is necessary in order for all system functions to be available to you, and GAGA TURS ZLATIBOR d.o.o. Užice, Nikole Pašića no.40, 31000 Užice acts as the controller of your personal data. We process your data lawfully, fairly, and transparently, and collect it exclusively so that you can exercise your right to transportation on our lines.

How and which of your personal data do we collect and on what legal basis?

The personal data we collect is obtained directly from you when you decide to use our transport services and fill out a specific form for issuing a certain type of GAGA TURS ZLATIBOR card. In accordance with your needs, you choose one of the offered types of GAGA TURS ZLATIBOR cards, and the data necessary for their issuance is defined by the Rulebook on the use of the electronic payment system, which is published on our website. All your personal information is treated as strictly confidential and is stored appropriately. In accordance with applicable legislation regulating personal data protection, we may process your personal data on the following legal grounds:

• when you have given consent for the processing of your personal data for a specific purpose, with the right to withdraw such consent at any time
• when the processing of your personal data is necessary for the conclusion and performance of a contract you enter into.

We must also note that the Rulebook on the use of the electronic payment system specifically defines the scope of data provided by minors.

Who has access to your data?

In order to protect personal data in accordance with the Law on Personal Data Protection, the company has concluded a data protection agreement with „Allsecure“, thereby regulating the manner and conditions of processing personal data entrusted to the processor by the controller. This agreement defines the implementation of appropriate protection measures to achieve an adequate level of security in relation to the risk, in accordance with the level of technological development and implementation costs, the nature, scope, circumstances, and purpose of processing, as well as the likelihood and level of risk to the rights and freedoms of natural persons.

How long do we retain your data?

As the Rulebook on the use of the electronic payment system defines the physical functionality of the plastic GAGA TURS ZLATIBOR card for a period of three years, this represents the maximum retention period of your data. Of course, we can delete your data before the expiration of this three-year period upon your request, but we must inform you that in that case you are giving up the transport service based on the selected GAGA TURS ZLATIBOR card.

Security measures

The company’s server infrastructure enables the receipt and storage of all data from the electronic ticketing system and provides appropriate infrastructural services, primarily in the area of system security, identity and role management, as well as non-functional requirements related to system security (redundancy, backups, etc.), all with the aim of achieving a high level of system reliability and availability.

Your rights as a data subject

At any time, you can contact us with one of the following requests:
 

- to enable you access to your personal data, to inform you about the purposes for which your data is used, as well as to allow access to such personal data, to know the purpose of processing, categories of your personal data we store, and the period during which we retain the data.
 

- to request correction of inaccurate, incorrectly entered and/or outdated data;
 

- to request restriction of processing of your data, if you dispute the accuracy of personal data within a period allowing the controller to verify the accuracy of the data, if you believe that the processing is unlawful but do not want the data to be erased, if you have lodged an objection, or if you believe that GAGA TURS ZLATIBOR d.o.o. no longer needs your data;
 

- to object to the way we process your data, even in cases where it is not disputed that we process the data in accordance with the Law;
 

- to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, in accordance with the Law. For any additional questions and requests related to the processing of personal data, you can contact our Data Protection Officer.
 

Entry into force and amendments to the Privacy Policy

The Privacy Policy may be amended or supplemented, depending on changes to the Rulebook on the use of the electronic payment system, changes in legal frameworks, or at the request of the competent authority (the Commissioner for Information of Public Importance and Personal Data Protection). We recommend that you regularly monitor amendments and updates to the Privacy Policy on our website.