Pravne informacije

Politika privatnosti

Kako ROAD STAR d.o.o. Beograd-Zemun, koje posluje pod brendom VOGA, prikuplja, koristi, čuva i štiti podatke o ličnosti koje nam šaljete putem ovog veb-sajta.

SummaryIntroduction

By means of this Privacy Policy, ROAD STAR D.O.O. BEOGRAD-ZEMUN, with its registered office at Zmajeva 12v, Zemun, Belgrade, company registration number: 22197916, tax identification number (PIB): 115723137, represented by its director Mladen Vukašinović (hereinafter: ROAD STAR, we, us, our), informs users, passengers, business users, authorised representatives of business users, website visitors and other natural persons of the manner in which it collects, uses, stores, transfers and protects personal data, in accordance with the Law on Personal Data Protection of the Republic of Serbia and, where applicable, the General Data Protection Regulation of the European Union (GDPR).

Introduction

This Privacy Policy applies to the processing of personal data in connection with:

the use of the website, the mobile application, the web application, the user account, customer support, the call centre, and the systems for ordering, scheduling, confirming and paying for rides;
the provision of public passenger transport by means of the limousine service, i.e. transport by a passenger vehicle hired together with a driver;
communication with users, passengers, business users, partners and other persons;
complaints, requests, objections, refunds, the issuance of invoices, and the safety of passengers, vehicles, drivers and the platform;
electronic communication, marketing, analytics, the prevention of abuse and the improvement of ROAD STAR services.

Definitions

Personal data means any data relating to a natural person whose identity is determined or determinable, directly or indirectly, in particular on the basis of a name, identification number, location data, an electronic identifier, or one or more features of that person's physical, physiological, genetic, mental, economic, cultural or social identity.

Processing means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, adaptation, consultation, use, disclosure, transfer, transmission, comparison, restriction, erasure or destruction.

User means a natural person who registers an account, uses the VOGA application/platform, orders, schedules, pays for, or otherwise uses ROAD STAR services.

Passenger means a natural person who takes a ride, irrespective of whether the ride was ordered and paid for by that person, by another natural person or by a business user.

Business user means a legal entity, entrepreneur or other business entity that uses ROAD STAR services for its employees, associates, guests, clients or other authorised persons.

Driver means a person who is employed or otherwise lawfully engaged in the provision of the limousine service in the name and for the account of ROAD STAR.

Application means the VOGA mobile application, the website, the administration panel, the driver application, the electronic messaging system, the payment system, the support system and all other digital or communication channels through which a ride is ordered, confirmed, organised, tracked, charged for or performed.

Limousine service means the public transport of passengers by a passenger vehicle hired in its entirety together with the services of a driver, in accordance with the applicable regulations.

Identity of the controller and contact details

The controller of personal data is:

ROAD STAR D.O.O. BEOGRAD-ZEMUN

Registered office: Zmajeva 12v, Zemun, Belgrade

Company registration number: 22197916

Tax identification number (PIB): 115723137

Legal representative: Mladen Vukašinović, director

Customer support e-mail: office@voga.rs

Website/application: www.voga.rs

Should ROAD STAR appoint a data protection officer, that officer's contact details will be published in this Privacy Policy and, where applicable, submitted to the Commissioner for Information of Public Importance and Personal Data Protection.

ROAD STAR's roles in data processing

As a rule, ROAD STAR acts as the controller of personal data when it processes data in connection with:

Where ROAD STAR engages third parties for hosting, application maintenance, technical support, the sending of SMS/e-mail messages, payment services, accounting, legal support or similar services, those parties may act as processors or as independent controllers, depending on the nature of the particular service and the legal relationship involved.

Should ROAD STAR in future enable the services of other licensed carriers to be ordered through the VOGA platform, such a model must be specifically governed by the general terms and conditions, by agreements with the carriers and by this Privacy Policy. Until then, this Privacy Policy proceeds on the basis of a model in which ROAD STAR provides the limousine service in its own name and for its own account.

the registration and administration of the user account;
the ordering, scheduling, confirmation, performance and charging of rides;
the issuance of invoices, fiscal receipts, electronic confirmations and business documentation;
customer support, complaints, refunds and dispute resolution;
the safety of passengers, drivers, vehicles, the application and the business;
the prevention of fraud, abuse, unauthorised use of the platform and breaches of the general terms and conditions;
direct marketing, push notifications, analytics and improvement of the service, to the extent permitted by law.

What data we collect

ROAD STAR processes only data that are adequate, relevant and limited to what is necessary for the specific purposes of the processing.

Data you provide when registering and using your account

When you register, log in and use your user account, we may process:

first and last name;
mobile telephone number;
e-mail address;
the selected method of payment and a record of the separate consent to store a tokenised payment instrument, where the user activates such optional functionality;
password, i.e. a technically protected record of the password;
user ID, date and time of registration;
account verification data;
language, country, city and basic account settings;
the history of acceptance of the general terms and conditions, the privacy policy, the cookie policy and any specific consents;
communications with customer support.

Data required to order, schedule and perform a ride

In order to provide the limousine service, we may process:

the starting address or pick-up location;
the destination address or location;
the date and time of ordering, scheduling, and of the start and end of the ride;
the vehicle category;
any special requests of the user, where entered by the user;
the number of passengers, luggage and other logistical data relevant to the performance of the ride;
the estimated and final price of the ride;
data on waiting time, route changes, cancellation, delays or additional services;
data on the assigned driver, the vehicle and the status of the ride;
GPS data on the movement of the vehicle during performance of the ride, to the extent necessary for performance of the service, safety, price calculation, complaints and quality control;
ratings, comments and feedback from users and drivers.

Location data

ROAD STAR may process location data:

The user may manage the technical permissions for location access through the settings of his or her device. If the user disables location access, certain functionalities of the application may be limited, but the user may, where technically enabled, enter the pick-up or destination address manually.

where the user enters an address or location in the application;
where the user grants the application access to the location of his or her device in order to facilitate determination of the pick-up point;
where the location of the assigned vehicle is tracked in order to inform the user of the vehicle's arrival;
where route data are used to calculate the price, resolve a complaint, verify service quality, ensure safety or evidence the performance of the ride.

Payment and transaction data

For the purposes of charging for rides, issuing invoices, processing refunds, keeping transaction records and preventing abuse, we may process:

When paying by payment card, the user enters the card number (PAN), expiry date and CVV/CVC directly into the protected payment environment of the acquiring bank UNICREDIT bank ad, of the payment service provider or of the payment gateway. ROAD STAR does not receive, does not have access to and does not store the account number, CVV/CVC, PIN or other authentication data. Such data are processed by the payment service provider for the purposes of authenticating the user, authorising and executing the particular transaction, preventing abuse and fulfilling its own statutory and regulatory obligations.

ROAD STAR may receive from the acquiring bank or another payment service provider only the data necessary for recording and administering the transaction: a token or other pseudonymous identifier of the payment instrument, the last four digits of the card, the card brand and the expiry date where provided, the transaction identifier, the amount, the date and the payment status. These data are processed for the purposes of performing the contract, refunds, customer support, maintaining statutory records, preventing fraud and protecting legal claims.

If the "Save card" option is enabled in the application, the full card data remain in the secure environment of the acquiring bank or another payment service provider, while ROAD STAR stores only a token or other pseudonymous identifier of the payment instrument. This option is activated only on the basis of the user's separate, freely given, informed and unambiguous consent for future payments and must not be pre-ticked. The user may withdraw consent and remove the stored payment instrument at any time through the application settings or by contacting customer support.

The CVV/CVC is under no circumstances retained after authorisation of the transaction, including in encrypted form or on the basis of the user's consent. The user should not provide the full card number, CVV/CVC or PIN by e-mail, telephone, chat, complaint or another customer support channel.

the ride amount;
the currency;
the method of payment;
the payment status;
the date and time of the transaction;
the transaction identifier;
data on refunds, reversals or failed payments;
a token or other pseudonymous identifier of the payment instrument, the last four digits of the card, the card brand and the expiry date, only where such data are provided by the acquiring bank or another payment service provider;
the payment account number (IBAN), exclusively where separately provided by the user for the purpose of a refund by bank transfer where a refund to the original payment instrument is not possible;
the data required to issue a fiscal receipt, an electronic invoice or another accounting document.

Business user data

Where ROAD STAR provides services to business users, we may process:

The business user is obliged to ensure that the persons for whom it orders rides are informed that their data are provided to ROAD STAR for the purposes of performing the ride, charging, reporting and fulfilling contractual and statutory obligations.

the first and last name, e-mail address, telephone number and position of the business user's authorised representative;
data on employees, associates, guests or other persons for whom the business user orders rides;
internal account, department, project or cost centre codes, where used by the business user;
data on rides performed for the business user;
data required for invoicing, reporting, cost control and the resolution of complaints.

Data of drivers and engaged persons

To the extent relevant to the provision of the service, safety, customer support and transparency towards users, ROAD STAR may process and display to the user certain data about the driver, such as:

The processing of data concerning employees, job applicants, engaged persons and drivers may be governed in greater detail by a separate notice on the processing of data of employees and engaged persons.

the driver's first and last name or initials;
a photograph of the driver, where used in the application;
vehicle details;
the vehicle registration plate;
the location of the vehicle during performance of the ride;
the driver's rating;
the status of arrival and of the start and end of the ride.

Communication, support and complaints

When you contact us by e-mail, telephone, through the application, via a form, chat, the call centre or social networks, we may process:

first and last name;
contact details;
the content of the message or request;
data on the particular ride;
payment and invoice data;
a recording of the call, where call recording has been clearly indicated in advance and there is a lawful basis for such processing;
documentation you provide to us for the purposes of a complaint, refund, objection, identification or dispute resolution.

Technical data, analytics and platform security

When you use the website, the application and the digital services, we may process:

IP address;
device identifiers;
operating system;
application version;
device and browser type;
application language and settings;
access and activity logs;
data on errors, interruptions, application crashes and performance;
data on suspicious activity, attempted unauthorised access, abuse and breaches of the terms of use.

Video surveillance and in-vehicle cameras

If ROAD STAR uses cameras in vehicles, dashcam devices or any other form of video surveillance, the processing is carried out solely to the extent necessary for:

In such a case, users and passengers must be clearly informed of the existence of cameras, the purpose of the recording, the controller, the contact details and the basic rights of data subjects, by means of a notice in the vehicle, in the application or in another appropriate manner.

If cameras are not used, this section does not apply.

the safety of passengers, drivers and third parties;
the protection of vehicles and property;
evidencing the circumstances of a traffic accident, incident, damage or other event;
the prevention and detection of abuse;
the resolution of complaints and legal claims.

Data from public sources and from third parties

ROAD STAR may receive data from third parties, in particular from:

business users ordering rides for their authorised representatives;
payment service providers;
partners providing customer support, technical support and verification services;
the competent state authorities, where prescribed by law;
persons submitting a complaint, objection, lost property request or incident report.

What happens if you do not provide your data

The provision of certain data is necessary for the conclusion and performance of the contract, i.e. for the use of the application and the provision of the ride. If you do not provide the data required for registration, ordering, performance, charging or the issuance of an invoice, ROAD STAR may not be able to enable you to use the application or to provide the requested service.

The provision of data for marketing messages, promotional push notifications, analytical cookies and similar optional purposes is not a condition for the basic use of the service, except where a particular technical functionality is essential for the operation of the application or for the performance of a service you have expressly requested.

Purposes and legal bases of processing

ROAD STAR processes personal data on the following legal bases:

Consent is not a legal basis for the processing of payment data that are objectively necessary for the performance of a particular payment. Consent to the optional storage of a tokenised payment instrument is given separately from acceptance of the general terms and conditions, may be withdrawn as easily as it was given, and cannot justify the retention of the CVV/CVC.

performance of a contract or taking steps prior to entering into a contract — where the processing is necessary for the registration, ordering, scheduling, performance and administration of a ride, as well as for the authorisation and execution of a particular payment initiated by the user;
compliance with a legal obligation — where the processing is necessary for the issuance and retention of invoices, for tax and accounting obligations, for acting upon requests of the competent authorities and for the fulfilment of other statutory obligations;
legitimate interest — where the processing is necessary to protect the rights, property and safety of ROAD STAR, users, passengers, drivers and third parties, to prevent fraud and abuse, to collect claims, to resolve disputes, and to improve the service and the business, provided that the interests or fundamental rights and freedoms of the data subject do not override that interest;
consent — where the processing is based on your consent, in particular for certain marketing messages, promotional push notifications, analytical or marketing cookies, optional functionalities and the storage of a tokenised payment instrument for future separate payments;
protection of vital interests — exceptionally, where the processing is necessary to protect the life, health or physical safety of a user, passenger, driver or another person.

Push notifications, SMS, e-mail and other messages

ROAD STAR may use push notifications, SMS, e-mail, in-app messages and telephone communication in order to:

Service messages that are necessary for the functioning of the application and the performance of a ride are not the same as marketing messages. If you disable all push notifications on your device, certain functionalities of the application may be impaired or unavailable, in particular notifications on the status of the ride and the arrival of the vehicle.

You may refuse or withdraw your consent to marketing messages at any time, free of charge, through the settings in the application, via the unsubscribe link, by sending a request to customer support or through another available mechanism.

verify accounts;
confirm the ordering, scheduling, modification, cancellation and completion of a ride;
provide information on the arrival of the vehicle, the status of the ride, and any change of driver or vehicle;
send invoices, confirmations, and payment and refund notifications;
send service and safety notifications;
resolve complaints, requests and objections;
send promotional offers, benefits, news and marketing messages, only where an appropriate legal basis exists.

Cookies and similar technologies

The ROAD STAR website and application may use cookies, SDKs, pixels, local storage, device identifiers and similar technologies.

Necessary cookies and similar technologies may be used without separate consent where they are essential for the provision of a service you have expressly requested. For analytical and marketing cookies that are not necessary, ROAD STAR will seek consent where required by law.

The user may manage cookies through the settings of the browser, the application or a consent management tool, where such a tool is available.

necessary — for the operation of the website and application, for logging in, for security and for basic functionalities;
functional — for remembering settings and improving the user experience;
analytical — for measuring use of the website and application, detecting errors and improving performance;
marketing — for displaying relevant offers, measuring campaigns and advertising.

Direct marketing

ROAD STAR may send promotional messages, special offers, discounts, information on new services and other marketing content only where an appropriate legal basis exists.

For direct advertising to natural persons, ROAD STAR will as a rule obtain prior consent, unless otherwise permitted by the applicable regulations. Consent to marketing may be withdrawn at any time.

Unsubscribing from marketing messages does not affect the lawfulness of processing carried out before the withdrawal of consent, nor does it affect the sending of service messages that are necessary for the performance of the service, safety, charging, customer support or compliance with statutory obligations.

ROAD STAR's legitimate interest

ROAD STAR may process data on the basis of its legitimate interest, in particular for the purposes of:

Where the processing is based on a legitimate interest, the data subject has the right to object, in accordance with this Privacy Policy and the applicable regulations.

maintaining and protecting user accounts;
providing customer support;
resolving complaints, objections and disputes;
collecting claims and evidencing performance of the service;
preventing fraud, abuse, unauthorised use of the application and breaches of the general terms and conditions;
protecting the safety of passengers, drivers, vehicles, property and the platform;
technical maintenance, testing, development and improvement of the application;
analysing service quality and business processes;
protecting ROAD STAR's rights and interests in administrative, judicial, misdemeanour, inspection and other proceedings;
internal control, audit and business compliance.

Automated processing, algorithms and profiling

The ROAD STAR platform may use automated processes in order to:

ROAD STAR does not take decisions producing legal effects concerning the user, or similarly significantly affecting the user's position, based solely on automated processing, unless such processing is necessary for the conclusion or performance of a contract, is based on law, or is based on explicit consent, subject to the application of the prescribed safeguards.

If an account is restricted, suspended or blocked on suspicion of abuse, the user may request human review of the decision, express his or her point of view and contest the decision before an authorised person of ROAD STAR.

calculate the estimated price of a ride;
determine vehicle availability;
assign a driver or vehicle;
estimate the time of arrival;
detect technical errors;
detect unusual usage patterns and attempted fraud or abuse;
personalise the user experience within the application.

Recipients of the data

ROAD STAR may share personal data with the following recipients, only to the extent necessary for the specific purpose:

ROAD STAR concludes appropriate data processing agreements with processors where required by law and requires the application of appropriate technical, organisational and personnel-related protective measures.

The acquiring bank or another payment service provider, as a rule, acts as an independent controller for the authentication, authorisation and execution of the payment transaction, the prevention of fraud, the resolution of disputed transactions and the fulfilment of its own statutory and regulatory obligations. The technical payment gateway or processor may, depending on the particular service and contract, act as a processor of ROAD STAR or as an independent controller for certain operations.

The identity of the particular payment service provider is displayed to the user in the application or the payment environment before card data are entered. The processing carried out by that provider as an independent controller is also subject to its own privacy policy.

employees and engaged persons of ROAD STAR who have authorised access;
drivers, to the extent necessary for the performance of the ride;
providers of hosting, cloud and infrastructure services;
providers of application development, maintenance and support services;
the acquiring bank, the payment service provider, the payment gateway and the card processor, to the extent necessary for the authentication, authorisation, execution, refund and security of payments;
providers of SMS, e-mail, push and other communication services;
providers of customer support and call centre services;
accountants, auditors, tax advisers and attorneys;
insurance companies, in the event of damage, an accident or an insured event;
business users that have ordered a ride for their authorised representatives, to the extent necessary for reporting and invoicing;
the competent state authorities, courts, inspectorates, the police and other authorised bodies, where ROAD STAR is obliged or authorised to provide the data;
persons acquiring or considering the acquisition of shares, assets or the business of ROAD STAR, in the event of a status change, sale of shares, restructuring, financing or a similar transaction, subject to appropriate confidentiality and data protection measures.

Data retention periods

ROAD STAR retains personal data only for as long as is necessary for the purpose for which they were collected, i.e. for as long as is prescribed by law or necessary to protect the rights and interests of ROAD STAR.

The indicative retention periods are as follows:

Upon expiry of the retention period, the data are erased, anonymised or archived in a manner that restricts further processing, unless there is another lawful basis for continued retention.

user account data — for as long as the account exists and thereafter for a reasonable period necessary for reactivation of the account, resolution of any claims, prevention of abuse and protection of legal interests;
ride data — for as long as necessary for the performance of the service, customer support, complaints, calculation, reporting, dispute resolution and compliance with statutory obligations;
invoices, fiscal receipts, invoices issued, transaction identifiers, amounts, dates, payment statuses and other accounting data — for the periods prescribed by tax, accounting and other applicable regulations; the full card number and CVV/CVC are not retained in these records;
a token or other pseudonymous identifier of a stored payment instrument and the accompanying masked data — until withdrawal of consent, removal of the payment instrument from the application, expiry of the card or cessation of the purpose for which the token was stored, whichever occurs first, unless shorter or longer retention of a particular transaction datum is prescribed by law;
the CVV/CVC — not retained after authorisation of the transaction, whether in encrypted form or on the basis of the user's consent;
data on complaints and disputes — until the final conclusion of the proceedings and the expiry of the relevant limitation periods;
marketing consents and records of unsubscription — for as long as the consent exists, i.e. for as long as it is necessary to prove that consent was given or withdrawn;
technical logs and security records — for the periods necessary for system security, detection of abuse, diagnostics and evidencing of relevant events;
video recordings, where used — only for a short period appropriate to the purpose of the recording, unless longer retention is necessary on account of an incident, damage, complaint, proceedings or a statutory obligation.

Data security

ROAD STAR applies appropriate technical, organisational and personnel-related measures to protect personal data against unauthorised access, loss, misuse, unauthorised disclosure, alteration or destruction.

The protective measures may include:

No information system is absolutely secure. ROAD STAR continuously improves its protective measures in line with the risk involved, technological developments, the nature of the data and the scope of the processing.

access control;
authentication of users and authorised persons;
encryption or pseudonymisation, where appropriate;
logging of access and activity;
segmentation of authorisations;
regular maintenance and updating of systems;
backup copies;
contractual confidentiality obligations;
training of employees and engaged persons;
procedures for responding to personal data breaches.
designing the payment flow so that the full card number and CVV/CVC do not enter ROAD STAR's databases, application logs, analytics systems, backup copies or customer support systems;
selecting payment service providers that apply security standards relevant to card payments, including PCI DSS where applicable.

Personal data breach

In the event of a personal data breach that may result in a risk to the rights and freedoms of natural persons, ROAD STAR will act in accordance with the applicable regulations, including by assessing the risk, documenting the incident, notifying the Commissioner where necessary and notifying the data subjects where prescribed.

Minors

The ROAD STAR application and user account are intended for adults. ROAD STAR does not knowingly allow persons under 18 years of age to register a user account.

A minor may be a passenger only where the ride has been lawfully ordered by an adult, a parent, a guardian, a business user or another authorised person, in accordance with the general terms and conditions, the safety rules and the applicable regulations.

If ROAD STAR becomes aware that a minor has unlawfully opened a user account or provided data without an appropriate basis, it will take reasonable measures to erase or restrict the processing of those data.

A parent or guardian may contact ROAD STAR using the contact details set out in this Privacy Policy in order to request the erasure, rectification or restriction of processing of a minor's data.

Rights of data subjects

Data subjects have the following rights, in accordance with the law:

the right to be informed about the processing of their data;
the right of access to their data;
the right to a copy of the data being processed;
the right to rectification of inaccurate or incomplete data;
the right to erasure of data, where the statutory conditions are met;
the right to restriction of processing;
the right to data portability, where the statutory conditions are met;
the right to object to processing based on legitimate interest and to processing for the purposes of direct advertising;
the right to withdraw consent, where the processing is based on consent;
the right not to be subject to a decision based solely on automated processing, including profiling, where such a decision produces legal effects or significantly affects the person's position, except in the cases permitted by law;
the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

How you can exercise your rights

You may send a request to exercise your rights to:

E-mail: office@voga.rs

By post: ROAD STAR D.O.O. BEOGRAD-ZEMUN, Zmajeva 12v, Zemun, Belgrade

The request should contain sufficient information to enable us to identify the applicant and the data to which the request relates. If we have reasonable doubts as to the applicant's identity, we may request additional information necessary to confirm that identity.

ROAD STAR will respond to the request without undue delay, and no later than within 30 days of receipt of the request. That period may be extended by a further 60 days where this is necessary on account of the complexity or number of requests, of which the applicant will be notified within 30 days of receipt of the request.

As a rule, the exercise of these rights is free of charge. If a request is manifestly unfounded or excessive, in particular where it is repeated frequently, ROAD STAR may refuse to act upon the request or charge the necessary administrative costs, in accordance with the law.

Objection to direct marketing

You have the right to object at any time to the processing of your data for the purposes of direct advertising.

If you object to processing for the purposes of direct advertising, ROAD STAR will no longer process your data for that purpose.

Accuracy of data

The user is responsible for ensuring that the data provided to ROAD STAR are accurate, complete and up to date.

ROAD STAR takes reasonable measures to ensure that the data it processes are accurate and up to date to the extent necessary for the purpose of the processing. The user may amend certain data through the application or contact customer support in order to have data corrected.

Links to third parties

The ROAD STAR website or application may contain links to third-party websites, applications or services. ROAD STAR is not responsible for the privacy policies, security or conduct of those third parties, except to the extent expressly prescribed by law or contract.

Before using third-party services, we recommend that you read their privacy policies and terms of use.

Amendments to the Privacy Policy

ROAD STAR may amend this Privacy Policy from time to time in order to align it with changes in the regulations, the business model, the application, the technical functionalities or the manner in which data are processed.

The current version of the Privacy Policy will be published on the website, in the application or in another appropriate manner. Where the amendments are material, ROAD STAR will notify users through the application, by e-mail, by push notification or through another appropriate channel.

Continued use of the application or the services after the amended Privacy Policy enters into force shall be deemed confirmation that you are aware of the amendments, except where specific consent is required for a particular processing operation.

This Privacy Policy enters into force on the date of its publication on the website or in the application, or on the date on which ROAD STAR begins to apply it in relation to users, whichever occurs earlier.

For ROAD STAR D.O.O. BEOGRAD-ZEMUN
______________________________
Mladen Vukašinović, director

SažetakUvod

Ovom Politikom privatnosti društvo ROAD STAR D.O.O. BEOGRAD-ZEMUN, sa registrovanim sedištem na adresi Zmajeva 12v, Zemun, Beograd, matični broj: 22197916, PIB: 115723137, koje zastupa direktor Mladen Vukašinović (u daljem tekstu: ROAD STAR, mi, nas, naš), obaveštava korisnike, putnike, poslovne korisnike, ovlašćena lica poslovnih korisnika, posetioce internet stranice i druga fizička lica o načinu na koji prikuplja, koristi, čuva, prenosi i štiti podatke o ličnosti, u skladu sa Zakonom o zaštiti podataka o ličnosti Republike Srbije i, kada je primenljivo, Opštom uredbom Evropske unije o zaštiti podataka (GDPR).

Uvod

Ova Politika privatnosti primenjuje se na obradu podataka o ličnosti u vezi sa:

korišćenjem internet stranice, mobilne aplikacije, veb aplikacije, korisničkog naloga, korisničke podrške, call centra, sistema za poručivanje, zakazivanje, potvrđivanje i plaćanje vožnji;
pružanjem usluge javnog prevoza putnika putem limo servis usluge, odnosno prevoza putničkim vozilom iznajmljenim sa vozačem;
komunikacijom sa korisnicima, putnicima, poslovnim korisnicima, partnerima i drugim licima;
reklamacijama, zahtevima, prigovorima, refundacijama, izdavanjem računa, bezbednošću putnika, vozila, vozača i platforme;
elektronskom komunikacijom, marketingom, analitikom, sprečavanjem zloupotreba i unapređenjem ROAD STAR usluga.

Pojmovi

Podatak o ličnosti je svaki podatak koji se odnosi na fizičko lice čiji je identitet određen ili odrediv, neposredno ili posredno, naročito na osnovu imena, identifikacionog broja, lokacijskih podataka, elektronskog identifikatora ili jednog odnosno više obeležja njegovog fizičkog, fiziološkog, genetskog, mentalnog, ekonomskog, kulturnog ili društvenog identiteta.

Obrada je svaka radnja ili skup radnji koje se vrše sa podacima o ličnosti, uključujući prikupljanje, beleženje, razvrstavanje, čuvanje, prilagođavanje, uvid, korišćenje, otkrivanje, prenos, dostavljanje, upoređivanje, ograničavanje, brisanje ili uništavanje.

Korisnik je fizičko lice koje registruje nalog, koristi VOGA aplikaciju/platformu, poručuje, zakazuje, plaća ili na drugi način koristi ROAD STAR usluge.

Putnik je fizičko lice koje koristi vožnju, bez obzira na to da li je vožnju poručilo i platilo samo to lice, drugo fizičko lice ili poslovni korisnik.

Poslovni korisnik je pravno lice, preduzetnik ili drugi poslovni subjekt koji koristi ROAD STAR usluge za svoje zaposlene, saradnike, goste, klijente ili druga ovlašćena lica.

Vozač je lice koje je radno angažovano ili na drugi zakonit način uključeno u pružanje limo servis usluge u ime i za račun ROAD STAR-a.

Aplikacija označava VOGA mobilnu aplikaciju, internet stranicu, administrativni panel, vozačku aplikaciju, sistem elektronskih poruka, sistem za plaćanje, sistem za podršku i sve druge digitalne ili komunikacione kanale preko kojih se naručuje, potvrđuje, organizuje, prati, naplaćuje ili izvršava vožnja.

Limo servis označava javni prevoz putnika putničkim vozilom iznajmljenim u celini sa uslugom vozača, u skladu sa važećim propisima.

Identitet rukovaoca i kontakt

Rukovalac podataka o ličnosti je:

ROAD STAR D.O.O. BEOGRAD-ZEMUN

Sedište: Zmajeva 12v, Zemun, Beograd

Matični broj: 22197916

PIB: 115723137

Zakonski zastupnik: Mladen Vukašinović, direktor

E-mail korisničke podrške: office@voga.rs

Internet stranica/aplikacija: www.voga.rs

Ukoliko ROAD STAR odredi lice za zaštitu podataka o ličnosti, njegovi kontakt podaci biće objavljeni u ovoj Politici privatnosti i, kada je primenljivo, dostavljeni Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti.

Uloge ROAD STAR-a u obradi podataka

ROAD STAR, po pravilu, postupa kao rukovalac podataka o ličnosti kada obrađuje podatke u vezi sa:

Kada ROAD STAR angažuje treća lica za hosting, održavanje aplikacije, tehničku podršku, slanje SMS/e-mail poruka, platne usluge, računovodstvo, pravnu podršku ili slične usluge, ta lica mogu postupati kao obrađivači ili kao samostalni rukovaoci, zavisno od prirode konkretne usluge i pravnog odnosa.

Ako ROAD STAR u budućnosti omogući da se preko VOGA platforme naručuju usluge drugih licenciranih prevoznika, takav model mora biti posebno uređen opštim uslovima, ugovorima sa prevoznicima i ovom Politikom privatnosti. Do tada, ova Politika privatnosti polazi od modela da ROAD STAR pruža limo servis uslugu u svoje ime i za svoj račun.

registracijom i administracijom korisničkog naloga;
poručivanjem, zakazivanjem, potvrđivanjem, izvršenjem i naplatom vožnje;
izdavanjem računa, fiskalnih računa, elektronskih potvrda i poslovne dokumentacije;
korisničkom podrškom, reklamacijama, refundacijama i rešavanjem sporova;
bezbednošću putnika, vozača, vozila, aplikacije i poslovanja;
sprečavanjem prevara, zloupotreba, neovlašćenog korišćenja platforme i kršenja opštih uslova;
direktnim marketingom, push notifikacijama, analitikom i unapređenjem usluge, u meri dozvoljenoj zakonom.

Koje podatke prikupljamo

ROAD STAR obrađuje samo podatke koji su primereni, bitni i ograničeni na ono što je neophodno za konkretne svrhe obrade.

Podaci koje dajete prilikom registracije i korišćenja naloga

Prilikom registracije, prijave i korišćenja korisničkog naloga možemo obrađivati:

ime i prezime;
broj mobilnog telefona;
e-mail adresu;
izabrani način plaćanja i evidenciju posebnog pristanka za čuvanje tokenizovanog platnog sredstva, ako korisnik aktivira takvu opcionu funkcionalnost;
lozinku, odnosno tehnički zaštićen zapis lozinke;
korisnički ID, datum i vreme registracije;
podatke o verifikaciji naloga;
jezik, državu, grad i osnovna podešavanja naloga;
istoriju prihvatanja opštih uslova, politike privatnosti, politike kolačića i posebnih saglasnosti;
komunikaciju sa korisničkom podrškom.

Podaci potrebni za naručivanje, zakazivanje i izvršenje vožnje

Radi pružanja limo servis usluge možemo obrađivati:

polaznu adresu ili lokaciju preuzimanja;
odredišnu adresu ili lokaciju;
datum i vreme poručivanja, zakazivanja, početka i završetka vožnje;
kategoriju vozila;
posebne zahteve korisnika, ako ih korisnik unese;
broj putnika, prtljag i druge logističke podatke relevantne za izvršenje vožnje;
procenjenu i konačnu cenu vožnje;
podatke o čekanju, izmenama rute, otkazivanju, kašnjenju ili dodatnim uslugama;
podatke o dodeljenom vozaču, vozilu i statusu vožnje;
GPS podatke o kretanju vozila tokom izvršenja vožnje, u meri potrebnoj za izvršenje usluge, bezbednost, obračun, reklamacije i kontrolu kvaliteta;
ocene, komentare i povratne informacije korisnika i vozača.

Podaci o lokaciji

ROAD STAR može obrađivati podatke o lokaciji:

Korisnik može upravljati tehničkim dozvolama za pristup lokaciji kroz podešavanja svog uređaja. Ukoliko korisnik onemogući pristup lokaciji, pojedine funkcionalnosti aplikacije mogu biti ograničene, ali korisnik, kada je tehnički omogućeno, može ručno uneti adresu preuzimanja ili odredišta.

kada korisnik u aplikaciji sam unese adresu ili lokaciju;
kada korisnik dozvoli aplikaciji pristup lokaciji svog uređaja radi lakšeg određivanja mesta preuzimanja;
kada se prati lokacija dodeljenog vozila radi informisanja korisnika o dolasku vozila;
kada se podaci o ruti koriste za obračun cene, rešavanje reklamacije, proveru kvaliteta usluge, bezbednost ili dokazivanje izvršenja vožnje.

Podaci o plaćanju i transakcijama

Radi naplate vožnje, izdavanja računa, refundacije, vođenja transakcionih evidencija i sprečavanja zloupotreba možemo obrađivati:

Prilikom plaćanja platnom karticom, korisnik broj kartice (PAN), rok važenja i CVV/CVC unosi neposredno u zaštićeno platno okruženje poslovne banke UNICREDIT bank ad, pružaoca platne usluge ili payment gateway-a. ROAD STAR ne prima, nema uvid u niti čuva broj računa, CVV/CVC, PIN niti druge podatke za autentifikaciju. Te podatke pružalac platne usluge obrađuje radi autentifikacije korisnika, autorizacije i izvršenja konkretne transakcije, sprečavanja zloupotreba i ispunjenja svojih zakonskih i regulatornih obaveza.

ROAD STAR od poslovne banke ili drugog pružaoca platne usluge može primiti samo podatke neophodne za evidenciju i administraciju transakcije: token ili drugi pseudonimni identifikator platnog sredstva, poslednje četiri cifre kartice, brend kartice i rok važenja ako se dostavljaju, identifikator transakcije, iznos, datum i status plaćanja. Ovi podaci se obrađuju radi izvršenja ugovora, refundacije, korisničke podrške, vođenja zakonom propisanih evidencija, sprečavanja prevara i zaštite pravnih zahteva.

Ako je u aplikaciji omogućena opcija „Sačuvaj karticu", puni kartični podaci ostaju u sigurnom okruženju poslovne banke ili drugog pružaoca platne usluge, dok ROAD STAR čuva samo token ili drugi pseudonimni identifikator platnog sredstva. Ova opcija se aktivira samo na osnovu posebnog, slobodnog, informisanog i nedvosmislenog pristanka korisnika za buduća plaćanja i ne sme biti unapred označena. Korisnik može u svakom trenutku povući pristanak i ukloniti sačuvano platno sredstvo kroz podešavanja aplikacije ili kontaktiranjem korisničke podrške.

CVV/CVC se ni pod kojim uslovima ne čuva nakon autorizacije transakcije, uključujući čuvanje u šifrovanom obliku ili na osnovu pristanka korisnika. Korisnik ne treba da dostavlja puni broj kartice, CVV/CVC ili PIN putem e-maila, telefona, chata, reklamacije ili drugog kanala korisničke podrške.

iznos vožnje;
valutu;
način plaćanja;
status plaćanja;
datum i vreme transakcije;
identifikator transakcije;
podatke o refundaciji, storniranju ili neuspelom plaćanju;
token ili drugi pseudonimni identifikator platnog sredstva, poslednje četiri cifre kartice, brend kartice i rok važenja, samo ako te podatke dostavlja poslovna banka ili drugi pružalac platne usluge;
broj platnog računa (IBAN), isključivo ako ga korisnik zasebno dostavi radi refundacije bankovnim prenosom kada povraćaj nije moguće izvršiti na izvorno platno sredstvo;
podatke potrebne za izdavanje fiskalnog računa, elektronskog računa ili drugog računovodstvenog dokumenta.

Podaci poslovnih korisnika

Kada ROAD STAR pruža usluge poslovnim korisnicima, možemo obrađivati:

Poslovni korisnik je dužan da obezbedi da lica za koja naručuje vožnje budu obaveštena o tome da se njihovi podaci dostavljaju ROAD STAR-u radi izvršenja vožnje, naplate, izveštavanja i ispunjenja ugovornih i zakonskih obaveza.

ime, prezime, e-mail adresu, broj telefona i funkciju ovlašćenog lica poslovnog korisnika;
podatke o zaposlenima, saradnicima, gostima ili drugim licima za koja poslovni korisnik naručuje vožnju;
interne oznake naloga, odeljenja, projekta ili troškovnog centra, ako ih poslovni korisnik koristi;
podatke o vožnjama izvršenim za poslovnog korisnika;
podatke potrebne za fakturisanje, izveštavanje, kontrolu troškova i rešavanje reklamacija.

Podaci vozača i angažovanih lica

U meri u kojoj je relevantno za pružanje usluge, bezbednost, korisničku podršku i transparentnost prema korisnicima, ROAD STAR može obrađivati i prikazivati korisniku određene podatke o vozaču, kao što su:

Obrada podataka zaposlenih, kandidata za posao, radno angažovanih lica i vozača detaljnije se može urediti posebnim obaveštenjem o obradi podataka zaposlenih i radno angažovanih lica.

ime i prezime ili inicijali vozača;
fotografija vozača, ako se koristi u aplikaciji;
podaci o vozilu;
registarska oznaka vozila;
lokacija vozila tokom izvršenja vožnje;
ocena vozača;
status dolaska, početka i završetka vožnje.

Komunikacija, podrška i reklamacije

Kada nas kontaktirate putem e-maila, telefona, aplikacije, formulara, chata, call centra ili društvenih mreža, možemo obrađivati:

ime i prezime;
kontakt podatke;
sadržinu poruke ili zahteva;
podatke o konkretnoj vožnji;
podatke o plaćanju i računu;
snimak poziva, ako je snimanje poziva prethodno jasno naznačeno i ako postoji zakonit osnov za takvu obradu;
dokumentaciju koju nam dostavite radi reklamacije, refundacije, prigovora, identifikacije ili rešavanja spora.

Tehnički podaci, analitika i bezbednost platforme

Prilikom korišćenja internet stranice, aplikacije i digitalnih servisa možemo obrađivati:

IP adresu;
identifikatore uređaja;
operativni sistem;
verziju aplikacije;
tip uređaja i browsera;
jezik i podešavanja aplikacije;
logove pristupa i aktivnosti;
podatke o greškama, prekidima, padu aplikacije i performansama;
podatke o sumnjivim aktivnostima, pokušajima neovlašćenog pristupa, zloupotrebama i kršenju uslova korišćenja.

Video-nadzor i kamere u vozilima

Ako ROAD STAR koristi kamere u vozilima, dashcam uređaje ili drugi oblik video-nadzora, obrada se vrši isključivo u meri u kojoj je to potrebno za:

U tom slučaju, korisnici i putnici moraju biti jasno obavešteni o postojanju kamera, svrsi snimanja, rukovaocu, kontakt podacima i osnovnim pravima lica na koje se podaci odnose, putem obaveštenja u vozilu, aplikaciji ili na drugi primeren način.

Ako se kamere ne koriste, ovaj deo se ne primenjuje.

bezbednost putnika, vozača i trećih lica;
zaštitu vozila i imovine;
dokazivanje okolnosti saobraćajne nezgode, incidenta, štete ili drugog događaja;
sprečavanje i otkrivanje zloupotreba;
rešavanje reklamacija i pravnih zahteva.

Podaci iz javnih izvora i od trećih lica

ROAD STAR može dobiti podatke od trećih lica, naročito od:

poslovnih korisnika koji naručuju vožnje za svoja ovlašćena lica;
pružalaca platnih usluga;
partnera za korisničku podršku, tehničku podršku i verifikaciju;
nadležnih državnih organa, kada je to propisano zakonom;
lica koja podnose reklamaciju, prigovor, zahtev za izgubljenu stvar ili prijavu incidenta.

Šta se dešava ako ne dostavite podatke

Dostavljanje određenih podataka je neophodno za zaključenje i izvršenje ugovora, odnosno za korišćenje aplikacije i pružanje vožnje. Ako ne dostavite podatke potrebne za registraciju, poručivanje, izvršenje, naplatu ili izdavanje računa, ROAD STAR možda neće moći da Vam omogući korišćenje aplikacije ili pruži traženu uslugu.

Dostavljanje podataka za marketinške poruke, promotivne push notifikacije, analitičke kolačiće i slične opcione svrhe nije uslov za osnovno korišćenje usluge, osim kada je određena tehnička funkcionalnost nužna za rad aplikacije ili izvršenje izričito zahtevane usluge.

Svrhe i pravni osnovi obrade

ROAD STAR obrađuje podatke o ličnosti na sledećim pravnim osnovima:

Pristanak nije pravni osnov za obradu platnih podataka koji su objektivno neophodni za izvršenje konkretnog plaćanja. Pristanak za opciono čuvanje tokenizovanog platnog sredstva daje se odvojeno od prihvatanja opštih uslova, može se povući jednako jednostavno kao što je dat i ne može opravdati čuvanje CVV/CVC-a.

izvršenje ugovora ili preduzimanje radnji pre zaključenja ugovora — kada je obrada neophodna za registraciju, poručivanje, zakazivanje, izvršenje i administraciju vožnje, kao i za autorizaciju i izvršenje konkretnog plaćanja koje je korisnik inicirao;
ispunjenje zakonske obaveze — kada je obrada potrebna radi izdavanja i čuvanja računa, poreskih i računovodstvenih obaveza, postupanja po zahtevima nadležnih organa i ispunjenja drugih zakonskih obaveza;
legitimni interes — kada je obrada potrebna radi zaštite prava, imovine i bezbednosti ROAD STAR-a, korisnika, putnika, vozača i trećih lica, sprečavanja prevara, zloupotreba, naplate potraživanja, rešavanja sporova, unapređenja usluge i poslovanja, pod uslovom da interesi ili osnovna prava i slobode lica na koje se podaci odnose ne pretežu nad tim interesom;
pristanak — kada se obrada zasniva na Vašem pristanku, naročito za određene marketinške poruke, promotivne push notifikacije, analitičke ili marketinške kolačiće, opcione funkcionalnosti i čuvanje tokenizovanog platnog sredstva radi budućih zasebnih plaćanja;
zaštita životno važnih interesa — izuzetno, kada je obrada neophodna radi zaštite života, zdravlja ili fizičke bezbednosti korisnika, putnika, vozača ili drugog lica.

Push notifikacije, SMS, e-mail i druge poruke

ROAD STAR može koristiti push notifikacije, SMS, e-mail, in-app poruke i telefonsku komunikaciju za:

Servisne poruke koje su neophodne za funkcionisanje aplikacije i izvršenje vožnje nisu isto što i marketinške poruke. Ako isključite sve push notifikacije na uređaju, pojedine funkcionalnosti aplikacije mogu biti otežane ili onemogućene, naročito obaveštenja o statusu vožnje i dolasku vozila.

Marketinške poruke možete odbiti ili opozvati u svakom trenutku, bez naknade, putem podešavanja u aplikaciji, linka za odjavu, slanjem zahteva korisničkoj podršci ili drugim dostupnim mehanizmom.

verifikaciju naloga;
potvrdu poručivanja, zakazivanja, promene, otkazivanja i završetka vožnje;
informisanje o dolasku vozila, statusu vožnje, promeni vozača ili vozila;
slanje računa, potvrda, obaveštenja o plaćanju i refundaciji;
slanje servisnih i bezbednosnih obaveštenja;
rešavanje reklamacija, zahteva i prigovora;
slanje promotivnih ponuda, pogodnosti, vesti i marketinških poruka, samo kada za to postoji odgovarajući pravni osnov.

Kolačići i slične tehnologije

ROAD STAR internet stranica i aplikacija mogu koristiti kolačiće, SDK-ove, piksele, lokalno skladištenje, identifikatore uređaja i slične tehnologije.

Neophodni kolačići i slične tehnologije mogu se koristiti bez posebnog pristanka kada su nužni za pružanje usluge koju ste izričito zatražili. Za analitičke i marketinške kolačiće koji nisu neophodni, ROAD STAR će tražiti pristanak kada je to potrebno po zakonu.

Korisnik može upravljati kolačićima kroz podešavanja browsera, aplikacije ili alata za upravljanje pristankom, ako je takav alat dostupan.

neophodni — za rad stranice, aplikacije, prijavu, bezbednost i osnovne funkcionalnosti;
funkcionalni — za pamćenje podešavanja i unapređenje korisničkog iskustva;
analitički — za merenje korišćenja stranice i aplikacije, otkrivanje grešaka i unapređenje performansi;
marketinški — za prikazivanje relevantnih ponuda, merenje kampanja i oglašavanje.

Direktni marketing

ROAD STAR može slati promotivne poruke, posebne ponude, popuste, informacije o novim uslugama i druge marketinške sadržaje samo kada postoji odgovarajući pravni osnov.

Za direktno oglašavanje prema fizičkim licima, ROAD STAR će po pravilu pribaviti prethodnu saglasnost, osim ako je drugačije dozvoljeno primenljivim propisima. Pristanak za marketing može se opozvati u svakom trenutku.

Odjava od marketinških poruka ne utiče na zakonitost obrade koja je izvršena pre opoziva pristanka, niti utiče na slanje servisnih poruka koje su potrebne za izvršenje usluge, bezbednost, naplatu, korisničku podršku ili ispunjenje zakonskih obaveza.

Legitimni interes ROAD STAR-a

ROAD STAR može obrađivati podatke na osnovu legitimnog interesa naročito radi:

Kada se obrada zasniva na legitimnom interesu, lice na koje se podaci odnose ima pravo da podnese prigovor, u skladu sa ovom Politikom privatnosti i primenljivim propisima.

održavanja i zaštite korisničkih naloga;
pružanja korisničke podrške;
rešavanja reklamacija, prigovora i sporova;
naplate potraživanja i dokazivanja izvršenja usluge;
sprečavanja prevara, zloupotreba, neovlašćenog korišćenja aplikacije i povreda opštih uslova;
zaštite bezbednosti putnika, vozača, vozila, imovine i platforme;
tehničkog održavanja, testiranja, razvoja i unapređenja aplikacije;
analize kvaliteta usluge i poslovnih procesa;
zaštite prava i interesa ROAD STAR-a u upravnim, sudskim, prekršajnim, inspekcijskim i drugim postupcima;
interne kontrole, revizije i usklađenosti poslovanja.

Automatizovana obrada, algoritmi i profilisanje

ROAD STAR platforma može koristiti automatizovane procese za:

ROAD STAR ne donosi odluke koje proizvode pravne posledice po korisnika ili na sličan način značajno utiču na njegov položaj isključivo na osnovu automatizovane obrade, osim ako je takva obrada neophodna za zaključenje ili izvršenje ugovora, zasnovana na zakonu ili zasnovana na izričitom pristanku, uz primenu propisanih mera zaštite.

Ako nalog bude ograničen, suspendovan ili blokiran zbog sumnje na zloupotrebu, korisnik može zatražiti ljudsku proveru odluke, dati svoje izjašnjenje i osporiti odluku pred ovlašćenim licem ROAD STAR-a.

izračunavanje procenjene cene vožnje;
određivanje dostupnosti vozila;
dodelu vozača ili vozila;
procenu vremena dolaska;
otkrivanje tehničkih grešaka;
otkrivanje neuobičajenih obrazaca korišćenja, pokušaja prevare ili zloupotrebe;
personalizaciju korisničkog iskustva u aplikaciji.

Primaoci podataka

ROAD STAR može deliti podatke o ličnosti sa sledećim primaocima, samo u meri potrebnoj za konkretnu svrhu:

ROAD STAR sa obrađivačima zaključuje odgovarajuće ugovore o obradi podataka kada je to potrebno po zakonu i zahteva primenu odgovarajućih tehničkih, organizacionih i kadrovskih mera zaštite.

Poslovna banka, banka prihvatilac ili drugi pružalac platnih usluga, po pravilu, postupa kao samostalni rukovalac za autentifikaciju, autorizaciju i izvršenje platne transakcije, sprečavanje prevara, rešavanje spornih transakcija i ispunjenje sopstvenih zakonskih i regulatornih obaveza. Tehnički payment gateway ili procesor može, zavisno od konkretne usluge i ugovora, postupati kao obrađivač ROAD STAR-a ili kao samostalni rukovalac za pojedine operacije.

Identitet konkretnog pružaoca platne usluge prikazuje se korisniku u aplikaciji ili platnom okruženju pre unosa kartičnih podataka. Na obradu koju taj pružalac vrši kao samostalni rukovalac primenjuje se i njegova politika privatnosti.

zaposlenima i radno angažovanim licima ROAD STAR-a koji imaju ovlašćen pristup;
vozačima, u meri potrebnoj za izvršenje vožnje;
pružaocima hosting, cloud i infrastrukturnih usluga;
pružaocima usluga razvoja, održavanja i podrške aplikacije;
poslovnoj banci, banci prihvatiocu (acquirer-u), pružaocu platnih usluga, payment gateway-u i kartičnom procesoru, u meri potrebnoj za autentifikaciju, autorizaciju, izvršenje, refundaciju i bezbednost plaćanja;
pružaocima SMS, e-mail, push i komunikacionih servisa;
pružaocima korisničke podrške i call centra;
računovođama, revizorima, poreskim savetnicima i advokatima;
osiguravajućim društvima, u slučaju štete, nezgode ili osiguranog slučaja;
poslovnim korisnicima koji su naručili vožnju za svoja ovlašćena lica, u meri potrebnoj za izveštavanje i fakturisanje;
nadležnim državnim organima, sudovima, inspekcijama, policiji i drugim ovlašćenim organima, kada je ROAD STAR dužan ili ovlašćen da dostavi podatke;
licima koja stiču ili razmatraju sticanje udela, imovine ili poslovanja ROAD STAR-a, u slučaju statusne promene, prodaje udela, restrukturiranja, finansiranja ili slične transakcije, uz odgovarajuće mere poverljivosti i zaštite podataka.

Rokovi čuvanja podataka

ROAD STAR čuva podatke o ličnosti samo onoliko dugo koliko je potrebno za svrhu za koju su prikupljeni, odnosno koliko je propisano zakonom ili potrebno radi zaštite prava i interesa ROAD STAR-a.

Okvirni rokovi čuvanja su:

Po isteku roka čuvanja, podaci se brišu, anonimizuju ili arhiviraju na način koji ograničava dalju obradu, osim ako postoji drugi zakonit osnov za nastavak čuvanja.

podaci korisničkog naloga — dok nalog postoji i nakon toga u razumnom roku potrebnom za reaktivaciju naloga, rešavanje eventualnih zahteva, sprečavanje zloupotreba i zaštitu pravnih interesa;
podaci o vožnjama — dok je potrebno za izvršenje usluge, korisničku podršku, reklamacije, obračun, izveštavanje, rešavanje sporova i ispunjenje zakonskih obaveza;
računi, fiskalni računi, fakture, identifikatori transakcija, iznosi, datumi, statusi plaćanja i drugi računovodstveni podaci — u rokovima propisanim poreskim, računovodstvenim i drugim primenljivim propisima; puni broj kartice i CVV/CVC ne čuvaju se u tim evidencijama;
token ili drugi pseudonimni identifikator sačuvanog platnog sredstva i pripadajući maskirani podaci — do povlačenja pristanka, uklanjanja platnog sredstva iz aplikacije, isteka kartice ili prestanka svrhe za koju je token sačuvan, u zavisnosti od toga šta nastupi ranije, osim ako je kraće ili duže čuvanje određenog transakcionog podatka propisano zakonom;
CVV/CVC — ne čuva se nakon autorizacije transakcije, ni u šifrovanom obliku niti uz pristanak korisnika.
podaci o reklamacijama i sporovima — do pravnosnažnog okončanja postupka i proteka relevantnih rokova zastarelosti;
marketinške saglasnosti i evidencije odjave — dok postoji saglasnost, odnosno dok je potrebno dokazati da je saglasnost data ili opozvana;
tehnički logovi i bezbednosni zapisi — u rokovima potrebnim za bezbednost sistema, otkrivanje zloupotreba, dijagnostiku i dokazivanje relevantnih događaja;
video-zapisi, ako se koriste — samo u kratkom roku primerenom svrsi snimanja, osim ako je duže čuvanje potrebno zbog incidenta, štete, reklamacije, postupka ili zakonske obaveze.

Bezbednost podataka

ROAD STAR primenjuje odgovarajuće tehničke, organizacione i kadrovske mere radi zaštite podataka o ličnosti od neovlašćenog pristupa, gubitka, zloupotrebe, neovlašćenog otkrivanja, izmene ili uništenja.

Mere zaštite mogu uključivati:

Nijedan informacioni sistem nije apsolutno bezbedan. ROAD STAR kontinuirano unapređuje mere zaštite u skladu sa rizikom, tehnološkim razvojem, prirodom podataka i obimom obrade.

kontrolu pristupa podacima;
autentifikaciju korisnika i ovlašćenih lica;
enkripciju ili pseudonimizaciju, kada je primereno;
logovanje pristupa i aktivnosti;
segmentaciju ovlašćenja;
redovno održavanje i ažuriranje sistema;
sigurnosne kopije;
ugovorne obaveze poverljivosti;
obuku zaposlenih i radno angažovanih lica;
procedure za postupanje u slučaju povrede podataka o ličnosti.
projektovanje platnog toka tako da puni broj kartice i CVV/CVC ne ulaze u baze podataka, aplikacione logove, analitičke sisteme, sigurnosne kopije ili sisteme korisničke podrške ROAD STAR-a;
izbor pružalaca platnih usluga koji primenjuju standarde bezbednosti relevantne za kartična plaćanja, uključujući PCI DSS kada je primenljiv.

Povreda podataka o ličnosti

U slučaju povrede podataka o ličnosti koja može da proizvede rizik po prava i slobode fizičkih lica, ROAD STAR će postupiti u skladu sa primenljivim propisima, uključujući procenu rizika, dokumentovanje incidenta, obaveštavanje Poverenika kada je potrebno i obaveštavanje lica na koje se podaci odnose kada je to propisano.

Maloletna lica

ROAD STAR aplikacija i korisnički nalog namenjeni su punoletnim licima. ROAD STAR svesno ne omogućava registraciju korisničkog naloga licima mlađim od 18 godina.

Maloletno lice može biti putnik samo kada je vožnju zakonito naručilo punoletno lice, roditelj, staratelj, poslovni korisnik ili drugo ovlašćeno lice, u skladu sa opštim uslovima, pravilima bezbednosti i primenljivim propisima.

Ako ROAD STAR sazna da je maloletno lice nezakonito otvorilo korisnički nalog ili dostavilo podatke bez odgovarajućeg osnova, preduzeće razumne mere radi brisanja ili ograničenja obrade tih podataka.

Roditelj ili staratelj može kontaktirati ROAD STAR putem kontakt podataka iz ove Politike privatnosti radi zahteva za brisanje, ispravku ili ograničenje obrade podataka maloletnog lica.

Prava lica na koje se podaci odnose

Lice na koje se podaci odnose ima sledeća prava, u skladu sa zakonom:

pravo na informisanje o obradi podataka;
pravo pristupa podacima;
pravo na kopiju podataka koji se obrađuju;
pravo na ispravku netačnih ili nepotpunih podataka;
pravo na brisanje podataka, kada su za to ispunjeni zakonski uslovi;
pravo na ograničenje obrade;
pravo na prenosivost podataka, kada su ispunjeni zakonski uslovi;
pravo na prigovor na obradu zasnovanu na legitimnom interesu i na obradu za potrebe direktnog oglašavanja;
pravo na povlačenje pristanka, kada se obrada zasniva na pristanku;
pravo da se ne primenjuje odluka doneta isključivo na osnovu automatizovane obrade, uključujući profilisanje, ako takva odluka proizvodi pravne posledice ili značajno utiče na položaj lica, osim u slučajevima dozvoljenim zakonom;
pravo na pritužbu Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti.

Kako možete ostvariti svoja prava

Zahtev za ostvarivanje prava možete poslati na:

E-mail: office@voga.rs

Poštom: ROAD STAR D.O.O. BEOGRAD-ZEMUN, Zmajeva 12v, Zemun, Beograd

Zahtev treba da sadrži dovoljno informacija da možemo da identifikujemo podnosioca zahteva i podatke na koje se zahtev odnosi. Ako opravdano sumnjamo u identitet podnosioca zahteva, možemo tražiti dodatne informacije neophodne za potvrdu identiteta.

ROAD STAR će na zahtev odgovoriti bez nepotrebnog odlaganja, a najkasnije u roku od 30 dana od dana prijema zahteva. Rok može biti produžen za dodatnih 60 dana ako je to neophodno zbog složenosti ili broja zahteva, o čemu će podnosilac zahteva biti obavešten u roku od 30 dana od dana prijema zahteva.

Ostvarivanje prava je po pravilu besplatno. Ako je zahtev očigledno neosnovan ili preteran, naročito ako se učestalo ponavlja, ROAD STAR može odbiti da postupi po zahtevu ili naplatiti nužne administrativne troškove, u skladu sa zakonom.

Povlačenje pristanka

Ako se obrada zasniva na pristanku, imate pravo da pristanak povučete u svakom trenutku.

Povlačenje pristanka ne utiče na zakonitost obrade koja je izvršena pre povlačenja pristanka. Nakon povlačenja pristanka, ROAD STAR će obustaviti obradu koja se zasnivala na tom pristanku, osim ako postoji drugi zakonit osnov za obradu.

Pristanak možete povući kroz podešavanja aplikacije, putem linka za odjavu, slanjem e-maila na kontakt adresu ili drugim dostupnim kanalom koji ROAD STAR omogući.

Prigovor na direktni marketing

U svakom trenutku imate pravo da podnesete prigovor na obradu podataka za potrebe direktnog oglašavanja.

Ako podnesete prigovor na obradu za potrebe direktnog oglašavanja, ROAD STAR više neće obrađivati Vaše podatke za tu svrhu.

Tačnost podataka

Korisnik je odgovoran da podaci koje dostavlja ROAD STAR-u budu tačni, potpuni i ažurni.

ROAD STAR preduzima razumne mere da podaci koje obrađuje budu tačni i ažurni u meri potrebnoj za svrhu obrade. Korisnik može izmeniti određene podatke kroz aplikaciju ili kontaktirati korisničku podršku radi ispravke podataka.

Linkovi ka trećim stranama

Internet stranica ili aplikacija ROAD STAR-a može sadržati linkove ka internet stranicama, aplikacijama ili servisima trećih lica. ROAD STAR nije odgovoran za politike privatnosti, bezbednost ili postupanje tih trećih lica, osim u meri u kojoj je to izričito propisano zakonom ili ugovorom.

Pre korišćenja servisa trećih lica, preporučujemo da pročitate njihove politike privatnosti i uslove korišćenja.

Izmene Politike privatnosti

ROAD STAR može povremeno izmeniti ovu Politiku privatnosti radi usklađivanja sa promenama propisa, poslovnog modela, aplikacije, tehničkih funkcionalnosti ili načina obrade podataka.

Ažurna verzija Politike privatnosti biće objavljena na internet stranici, u aplikaciji ili na drugi primeren način. Ako su izmene bitne, ROAD STAR će korisnike obavestiti putem aplikacije, e-maila, push notifikacije ili drugog odgovarajućeg kanala.

Nastavak korišćenja aplikacije ili usluga nakon stupanja na snagu izmenjene Politike privatnosti smatraće se potvrdom da ste upoznati sa izmenama, osim kada je za određenu obradu potreban poseban pristanak.

Ova Politika privatnosti stupa na snagu danom objavljivanja na internet stranici, u aplikaciji ili danom kada ROAD STAR počne da je primenjuje u odnosu na korisnike, zavisno od toga šta nastupi ranije.

Za ROAD STAR D.O.O. BEOGRAD-ZEMUN
______________________________
Mladen Vukašinović, direktor

Nazad na vrh ↑

Politika privatnosti

Introduction

Definitions

Identity of the controller and contact details

ROAD STAR's roles in data processing

What data we collect

Data you provide when registering and using your account

Data required to order, schedule and perform a ride

Location data

Payment and transaction data

Business user data

Data of drivers and engaged persons

Communication, support and complaints

Technical data, analytics and platform security

Video surveillance and in-vehicle cameras

Data from public sources and from third parties

What happens if you do not provide your data

Purposes and legal bases of processing

Push notifications, SMS, e-mail and other messages

Cookies and similar technologies

Direct marketing

ROAD STAR's legitimate interest

Automated processing, algorithms and profiling

Recipients of the data

Data retention periods

Data security

Personal data breach

Minors

Rights of data subjects

How you can exercise your rights

Withdrawal of consent

Objection to direct marketing

Accuracy of data

Links to third parties

Amendments to the Privacy Policy

Uvod

Pojmovi

Identitet rukovaoca i kontakt

Uloge ROAD STAR-a u obradi podataka

Koje podatke prikupljamo

Podaci koje dajete prilikom registracije i korišćenja naloga

Podaci potrebni za naručivanje, zakazivanje i izvršenje vožnje

Podaci o lokaciji

Podaci o plaćanju i transakcijama

Podaci poslovnih korisnika

Podaci vozača i angažovanih lica

Komunikacija, podrška i reklamacije

Tehnički podaci, analitika i bezbednost platforme

Video-nadzor i kamere u vozilima

Podaci iz javnih izvora i od trećih lica

Šta se dešava ako ne dostavite podatke

Svrhe i pravni osnovi obrade

Push notifikacije, SMS, e-mail i druge poruke

Kolačići i slične tehnologije

Direktni marketing

Legitimni interes ROAD STAR-a

Automatizovana obrada, algoritmi i profilisanje

Primaoci podataka

Rokovi čuvanja podataka

Bezbednost podataka

Povreda podataka o ličnosti

Maloletna lica

Prava lica na koje se podaci odnose

Kako možete ostvariti svoja prava

Povlačenje pristanka

Prigovor na direktni marketing

Tačnost podataka

Linkovi ka trećim stranama

Izmene Politike privatnosti