Privacy Policy

Privacy Notice

The website autorental.ba is owned by Autorental d.o.o. Sarajevo, which respects the privacy of visitors to its website and is committed to protecting the confidentiality of their personal data. For this purpose, this Privacy Policy has been prepared and applies exclusively to activities carried out through websites owned by Autorental d.o.o. Sarajevo. The collection, storage and transfer of personal data are carried out in accordance with the provisions of the Law on the Protection of Personal Data of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina Nos. 49/06, 76/11 and 89/11), which regulates the protection and transfer of personal data and the prevention of unauthorised access to and use of personal data.

This Privacy Policy explains how we handle any personal data that you provide to us or that we collect from you. Please read this Privacy Policy carefully, as it may affect your legal rights.

This Notice may be amended or updated from time to time to reflect changes in our personal data processing practices or changes in applicable legislation. We recommend that you read it carefully and regularly review this page to stay informed about any changes we may make in accordance with the provisions of this Notice.

How We Collect Personal Data

We may collect your personal data directly from you, including when: you provide or publish your personal data; you download, install or use any of our applications; you visit our website; you register to use our website, applications or services; or you interact with a third party whose content or advertisements are displayed on our website or within our applications. We may also obtain your personal data from third parties.

We may collect your personal data from the following sources:

Data provided directly by you
Data obtained through interactions
Data published by you
Data obtained through applications
Data obtained through websites
Registration details
Advertising-related content and information
Information obtained from third parties

Personal Data We May Process

We may process your personal data, demographic information, contact details, records of your consents and permissions, information relating to our websites and applications, information about your interaction with our content or advertisements, and any opinions or feedback you provide about us.

We may process the following categories of personal data:

Personal details: First name, surname and preferred name.
Demographic information: Gender, date of birth, age, nationality, preferred form of address, title and preferred language of communication.
Contact details: Address, telephone number, email address and information relating to your publicly available social media profiles.
Records of consents and permissions: Records of any consent or permission you have provided, including the date and time, the method by which consent was provided and any related information, such as the subject matter of the consent or permission.
Information relating to our websites and applications: Device type, operating system, browser type, browser settings, IP address, language settings, date and time of access to the website or application, application usage statistics, application settings, location data and other technical communication information, some of which may constitute personal data. This may also include your username, password, login security information, usage data and aggregated statistical information.
Advertising content and information: Records of your visits to our online advertisements and content, records of advertisements and content displayed to you on our websites or applications, and any interactions you may have with such content or advertisements. This may include mouse movements, clicks, forms you complete or partially complete, and interactions made through a touchscreen device.
Opinions and views: Any opinion or view that you express, choose to submit to us or publish publicly in relation to us through social media.

Data Processing

We process personal data in accordance with the Law on the Protection of Personal Data of Bosnia and Herzegovina and on the basis of Article 4, concerning the principles of personal data processing.

The data controller is required to:

process personal data fairly and lawfully;
ensure that personal data collected for specific, explicit and lawful purposes is not further processed in a manner incompatible with those purposes;
process personal data only to the extent necessary to fulfil the relevant purpose;
process only authentic and accurate personal data and update such data whenever necessary;
delete or correct personal data that is inaccurate or incomplete, taking into account the purpose for which it was collected or further processed;
process personal data only for the period necessary to fulfil the purpose for which it was collected;
retain personal data in a form that permits identification of the data subject for no longer than necessary for the purposes for which the data was collected or further processed; and
ensure that personal data collected for different purposes is not improperly combined or consolidated.

What Data Do We Process and for What Purpose?

The purpose of our website and social media channels is to engage and interact with users and visitors. We regularly publish news, articles, video content and other materials.

Our social media channels also provide us with statistical information about page visits and visitors. We collect this information because it enables us to manage our content more effectively and in a more targeted manner. In this context, we may occasionally receive information relating to the profiles of individual users who like or follow our social media pages or use applications available through those pages. This allows us to provide improved content and functionality to relevant users through our website and social media channels.

To further improve our content, we may use information collected during visits to our website and social media channels to perform demographic and geographic analyses. Based on these analyses, we may display advertisements according to users’ interests without directly identifying individual users.

All visitor statistics made available to us are provided exclusively in anonymised form. We do not have access to more detailed personal information through such statistics.

Processing of Personal Data

We may process your personal data where: you have provided your clear and explicit consent; processing is necessary for the performance of a contract between you and us; processing is required under applicable legislation; processing is necessary to protect the vital interests of any person; or we have a valid and legitimate interest in carrying out the processing.

Deletion of User Data

At the request of the data subject, Autorental d.o.o. will correct, delete or restrict access to personal data that is found to be inaccurate, incorrectly recorded or otherwise processed in violation of applicable laws and data processing rules. When you request the deletion of your personal data, Autorental d.o.o. will delete the relevant data. At the request of the data subject, Autorental d.o.o. will also notify any third party to whom the data was transferred that the data has been deleted.

All data is stored securely, and you may request the deletion or anonymisation of your personal data at any time. You may submit a deletion request by post or email. Our contact details are provided in the Contact Details section of this Notice.

Autorental d.o.o. retains personal data until consent is withdrawn, the user unsubscribes, a deletion request is received or the applicable statutory retention period expires.

Service Providers

Autorental d.o.o. uses various third-party service providers and technologies, including services provided by companies such as Google and Facebook, which assist us in providing services associated with Autorental d.o.o. Some of the companies that provide services to us are located outside the European Union. We permit such transfers only where we are satisfied that an appropriate level of data protection and security is provided. When you provide us with your personal data, please be aware that it may be transferred to, stored at or processed in a location outside the European Economic Area, including countries that may not provide the same level of protection as that required under the legislation of Bosnia and Herzegovina or the European Union.

We may provide aggregated statistical information and insights that help individuals and companies understand how users interact with their posts, offers, pages and other content on Autorental.ba and elsewhere.

Sensitive Personal Data

We do not intend to collect or otherwise process sensitive personal data. Where it is necessary to process sensitive personal data for a legitimate purpose, we will do so in accordance with the provisions of the Law on the Protection of Personal Data of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina Nos. 49/06, 76/11 and 89/11).

Purposes for Which We May Process Your Personal Data

In accordance with the Law on the Protection of Personal Data of Bosnia and Herzegovina, we may process your personal data for the following purposes: providing services to you; journalistic purposes; operating and managing our websites and applications; communicating with you; conducting surveys; conducting investigations where necessary; complying with applicable legislation; and improving our websites, applications and services.

Disclosure of Personal Data to Third Parties

We may disclose your personal data to: legal, judicial and regulatory authorities; our external professional advisers; our data processors; any party where disclosure is necessary in connection with legal proceedings; any party where disclosure is necessary for the investigation, detection or prevention of criminal offences; any purchaser or prospective purchaser of our business; or any third party that provides advertising, plugins, tools or content used on our websites or applications.

We may disclose your personal data to any authorised person within Autorental d.o.o. Sarajevo for legitimate business purposes, including the administration of our website and applications and the provision of services to you, in accordance with applicable legislation.

Where we engage a third-party processor to process your personal data, that processor will be subject to binding contractual obligations requiring it to process personal data solely in accordance with our prior written instructions. The processor will also be required to implement appropriate measures to protect the confidentiality and security of personal data and comply with all additional requirements imposed by applicable legislation.

Data Profiling

International Data Transfers

We may transfer your personal data abroad exclusively in accordance with the provisions of Article 18 of the Law on the Protection of Personal Data of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina Nos. 49/06, 76/11 and 89/11).

Submitting a Complaint

You have the right to submit a complaint regarding the personal data processing activities carried out by Autorental d.o.o. to the Personal Data Protection Agency of Bosnia and Herzegovina. Where you are located within the European Union, you may also submit a complaint to the competent data protection supervisory authority in the relevant EU Member State or to the Personal Data Protection Agency of Bosnia and Herzegovina.

Data Security

When ensuring the security of personal data, we strictly comply with Article 11, paragraphs 1, 2 and 4 of the Law on the Protection of Personal Data of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina Nos. 49/06, 76/11 and 89/11). We implement appropriate technical and organisational security measures to protect your personal data. Please ensure that any personal data you send to us is transmitted securely.

The data we collect from you is stored in databases managed exclusively by Autorental d.o.o. Sarajevo.

We will take all reasonable steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy. However, the transmission of information over the internet is not completely secure. Although we will take reasonable measures to protect your personal data, we cannot guarantee the security of data transmitted to our website. Any transmission of personal data is carried out at your own risk. Once we receive your personal data, we apply strict procedures and security measures designed to prevent unauthorised access and protect your data to the greatest extent reasonably possible.

We have implemented appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other unlawful or unauthorised forms of processing, in accordance with applicable legislation.

Because the internet is an open system, the transmission of information through it is not entirely secure. Although we will implement all reasonable measures to protect your personal data, we cannot guarantee the security of data that you transmit to us over the internet. Any such transmission is carried out at your own risk, and you are responsible for ensuring the secure transmission of personal data that you send to us.

Data Accuracy

We take all reasonable measures to ensure that your personal data is accurate and kept up to date and that it is deleted or corrected if we become aware that it is inaccurate. We ensure data accuracy in accordance with the personal data processing principles set out in Article 4 of the Law on the Protection of Personal Data of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina Nos. 49/06, 76/11 and 89/11).

We take all reasonable measures to ensure that:

the personal data we process about you is accurate and, where necessary, kept up to date; and
any personal data we process that is inaccurate, taking into account the purposes for which it is processed, is deleted or corrected without delay.

From time to time, we may ask you to confirm the accuracy of your personal data.

Data Minimisation

We take all reasonable measures to limit the amount of personal data we process to what is necessary for the relevant purpose.

We take all reasonable measures to ensure that the personal data we process is limited to the minimum amount necessary in connection with the purposes described in this Notice.

Data Retention

We will take all reasonable measures to ensure that your personal data is retained only for as long as necessary, in accordance with Article 4, paragraph j), and Article 16, paragraph 1, of the Law on the Protection of Personal Data of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina Nos. 49/06, 76/11 and 89/11).

We will take all reasonable measures to ensure that your personal data is processed only for the minimum period necessary for the purposes described in this Notice.

Your Rights

Subject to applicable legislation, you may have a number of rights in relation to your personal data, including the right to: choose not to provide us with your personal data; access your personal data; request the correction of inaccurate or incomplete personal data; request the deletion of your personal data; request the restriction of processing; object to the processing of your personal data; request the transfer of your personal data to another data controller; withdraw your consent; and submit a complaint to the competent personal data protection authority. Before responding to a request relating to these rights, we may ask you to provide appropriate evidence of your identity.

Social Media

Where permitted under the Law on the Protection of Personal Data of Bosnia and Herzegovina, we may use certain limited personal data relating to you and share it with social media or other online platforms, such as Facebook or Google. We may do this for the purpose of generating potential customer enquiries, directing traffic to our website or otherwise promoting our services or Autorental d.o.o. Sarajevo generally. These processing activities are based on our legitimate interest in conducting marketing activities and presenting you with services that may be relevant to your interests.

Autorental d.o.o. Sarajevo does not control or supervise the social media platforms with which your personal data may be shared. Any questions concerning the manner in which those platforms process your personal data should therefore be directed to the relevant platform provider.

Cookies and Similar Technologies

We may process your personal data by placing, accessing or reading cookies and similar technologies.

When you visit our website or use an application, we may place our cookies on your device or access cookies that already exist on your device. Where required by applicable legislation, we will obtain your consent before using such cookies. We use cookies to record information about your device and browser and, in some cases, your preferences and browsing behaviour. Cookies generally do not contain information that directly identifies a user. However, personal data that we store about you may be linked to information stored in and obtained from cookies.

Purpose of Cookies

We do not store sensitive personal data, such as postal addresses or account passwords, in the cookies we use.

Cookies help us provide, protect and improve our products and services. This may include personalising content, adapting and measuring advertisements and providing a safer online environment. Although the cookies we use may change from time to time as our services are improved and updated, we generally use cookies for the following purposes:

to remember information about you so that you do not have to provide it again;
to enable you to remain signed in, including across different devices;
to help us understand how users interact with our services and how those services may be improved;
to protect your user account and personal data;
to display advertisements and provide relevant recommendations from companies and other organisations to users who may be interested in their products, services or activities; and
to customise and personalise your experience by remembering your preferences and settings.
The information stored through cookies on Autorental.ba does not contain personal details that directly identify individual users.

The use of cookies also enables other organisations to assist us in analysing how our website is used, measuring the number of visitors to our website and displaying marketing materials.

We use analytics and insights services provided by social media platforms to obtain anonymised statistical information about visitors to our social media pages.

When you visit one of our social media pages, the relevant platform may store a text file known as a cookie on your device. This cookie may contain a user identifier that can be linked to individual visits. Where you are registered as a user of the relevant platform, this identifier may be linked to the personal data held in your platform account.

Direct Marketing

We may process your personal data to contact you and provide information about services that may be of interest to you. You may unsubscribe from such communications free of charge at any time.

Where we provide services to you, we may use the contact details you have provided to send you information relating to our services, future promotions and other information that may be of interest to you, always in accordance with applicable legislation.

You may unsubscribe from our promotional email list at any time by clicking the unsubscribe link included in each promotional email we send. Once you unsubscribe, we will no longer send you promotional emails. However, we may continue to contact you where necessary to provide services you have requested or to communicate important service-related information.

Contact Details

You may contact us by post or through our official email address.

If you have any comments, questions or concerns regarding the information contained in this Notice, or any other questions concerning the processing of your personal data by us or on our behalf, please contact us at:

Autorental d.o.o.
Hotel Holiday
Zmaja od Bosne 4
71000 Sarajevo
Bosnia and Herzegovina
E-mail: info@autorental.ba

Security

We continuously implement, review and update administrative, technical and physical security measures designed to protect your personal data against unauthorised access, loss, destruction or alteration. If you know or have reason to believe that your user account credentials have been lost, stolen, misused or otherwise compromised, or if you become aware of any actual or suspected unauthorised use of your account, please contact us immediately.

Changes to This Policy

We may update our policies relating to the use of cookies and the protection of personal data from time to time. Where we make significant changes, including changes concerning the manner in which we use your personal data, we will notify you appropriately. Such notification may be provided through a notice on our website, by email or through a message displayed within an application.