Socrat Road Star
This Privacy Policy explains how Socrat Road Star collects, uses, stores, and protects the personal data of users who visit the website https://socrat-roadstar.rs and who use our chauffeured vehicle rental services. We process data in accordance with the Serbian Personal Data Protection Act (ZZPL) ("Official Gazette of the RS", No. 87/2018) and, where applicable, in accordance with the General Data Protection Regulation (GDPR), with which the national law is aligned.
Please read this policy carefully so that you understand how we handle your data.
1. Who we are (the data controller) and contact
The controller of personal data is:
- Legal name: SOCRAT KONSALTING DOO
- Trade name: Socrat Road Star
- Registered seat: Bulevar vojvode Mišića 37, 11102 Beograd (Savski venac), Srbija
- Office address: AFI City Zmaj, Zmajeva 12V i 12G, Zemun, Beograd
- Company number: 21387665
- Tax ID (PIB): 110795236
- Responsible person: Mina Vesković
- Phone: +381 66 635 00 00
- Email: office@socrat-roadstar.rs
- Website: https://socrat-roadstar.rs
For any questions regarding the processing of your personal data, you may contact us using the details above, and in particular via the email address office@socrat-roadstar.rs.
2. What data we collect
We collect only the data we need in order to respond to your inquiry, arrange the transport service, and conduct business communication.
2.1. Personal data you provide (via the inquiry/booking form, a call, or email)
- full name
- phone number
- email address
- trip details: date and time, pickup and drop-off location (route), vehicle type, number of passengers, and other information relevant to the service
- the content of the messages and correspondence you send us (email correspondence, messages submitted through the form)
When you use the "call" option (tap to call), you place a telephone call to us, in the course of which your phone number and the information you share with us during the conversation are processed.
2.2. Technical data about your use of the website
When you visit our website, certain technical data may be collected automatically, such as:
- IP address
- browser type and settings, and device
- operating system
- date and time of the visit, pages visited, and duration of the visit
- data from cookies and similar technologies (see section 5)
We do not intentionally collect special (sensitive) categories of personal data (for example data concerning health, ethnic origin, or religious or political beliefs), and we ask that you do not provide us with such data through the form or in messages.
3. Purposes of processing
We process your data solely for the following purposes:
- to respond to your inquiry and provide you with a quote
- to arrange and deliver the chauffeured vehicle rental service (airport transfers, business travel, special occasions and events, long-term rental)
- to communicate with you regarding a booking and any changes to or cancellation of the service
- to keep records of the services provided and meet our legal (tax and accounting) obligations
- to ensure the functioning, security, and improvement of our website
- to carry out website traffic analytics, with your consent
4. Legal basis for processing
We process data on one or more of the following legal bases provided for under the Serbian Personal Data Protection Act (ZZPL) and the GDPR:
- Performance of a contract and taking steps prior to entering into a contract (Article 12, paragraph 1, point 2 of the Act): when you contact us for a quote or booking and when we deliver the transport service.
- Compliance with the controller's legal obligations (Article 12, paragraph 1, point 3 of the Act): for the purpose of meeting accounting, tax, and other statutory obligations.
- Legitimate interest (Article 12, paragraph 1, point 6 of the Act): for the purpose of conducting business communication, ensuring the security of the website, and preventing misuse, taking care that this interest does not override your rights and freedoms.
- Consent of the data subject (Article 12, paragraph 1, point 1 of the Act): for the use of cookies that are not necessary for the operation of the website and for traffic analytics. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
5. Cookies and analytics
Our website uses cookies and similar technologies.
- Necessary cookies enable the basic functioning of the website and cannot be switched off. No separate consent is required for their use.
- Analytics cookies help us understand how the website is used (for example the number of visits, the most-visited pages). We set these cookies only with your prior consent.
For analytics we may use third-party tools (for example traffic-measurement tools). These tools may set their own cookies and process data in the capacity of a processor or an independent controller, in accordance with their own privacy policies.
You may give or withhold consent for non-necessary cookies, and you may withdraw consent you have given at any time. You can also control and delete cookies through the settings of your web browser. Please note that disabling certain cookies may affect the functionality of the website.
6. Who we share data with
We do not sell your data or transfer it to third parties for marketing purposes. We may share data only with:
- Processors who provide us with technical and business support, such as providers of website hosting and maintenance, providers of email and communication services, and providers of analytics tools. These processors process data solely on our instructions and on the basis of a data processing agreement that meets the requirements of Article 45 of the Act.
- Professional advisers (for example accounting, legal support), where necessary.
- State authorities and competent institutions, where there is a legal obligation or another legal basis to do so (for example pursuant to a request from a court or a competent authority).
We require an appropriate level of protection of your data from all processors.
7. Retention period
We retain data for as long as is necessary to achieve the purpose for which it was collected, that is, for as long as required of us by regulations:
- Data from inquiries that do not result in a contract: we keep it for a reasonable period needed for communication and any follow-up offer, after which we delete or anonymize it within 12 months of the last contact.
- Data related to services delivered: we keep it for the duration of the business relationship and within the periods prescribed by accounting and tax regulations (as a rule, up to 10 years for accounting records, counting from the end of the business year to which the record relates).
- Technical data and cookie data: retained in accordance with the validity period of the individual cookie, that is, until consent is withdrawn.
Once the retention period expires, we permanently delete or anonymize the data.
8. Your rights
In accordance with the Serbian Personal Data Protection Act (ZZPL) and the GDPR, as the data subject you have the following rights:
- The right of access to your data and to information about how it is processed
- The right to rectification of inaccurate data and completion of incomplete data
- The right to erasure of data (the "right to be forgotten"), where the legal conditions for this are met
- The right to restriction of processing in the cases provided for by law
- The right to object to processing based on legitimate interest
- The right to data portability in a structured, commonly used, and machine-readable format, where processing is based on consent or a contract and is carried out by automated means
- The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal
You can exercise all of the above rights by sending a request to the email office@socrat-roadstar.rs or to our address. We respond to a request without delay, and at the latest within 30 days of receiving the request. This period may be extended by a further 60 days where necessary, taking into account the complexity and number of requests, of which we will inform you within 30 days of receiving the request, stating the reasons for the extension.
If you believe that your data is being processed contrary to the regulations, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (address: Bulevar kralja Aleksandra 15, 11000 Beograd; website: www.poverenik.rs). The right to lodge a complaint with the Commissioner does not affect your right to seek protection before a competent court as well.
9. Data security
We apply appropriate technical, organizational, and staffing protective measures to protect your data from unauthorized access, loss, alteration, or misuse. These measures include, among others, access control over data, the use of trusted and secure hosting and communication services, and limiting access to data to only those persons for whom access is necessary.
Please note that no method of transmitting data over the internet is entirely secure, so we cannot guarantee absolute security, but we strive to keep the risk to the lowest possible level. In the event of a personal data breach that may result in a high risk to your rights and freedoms, we will act in accordance with our statutory notification obligations.
10. Transfer of data abroad
Some of our service providers (for example hosting, email, or analytics) may process data on servers located outside the Republic of Serbia, including countries of the European Union or other countries. In that case we ensure that the transfer is carried out in accordance with the Serbian Personal Data Protection Act (ZZPL), that is, only to countries, to parts of their territories, or to recipients that ensure an adequate level of data protection, or subject to the application of appropriate safeguards (for example standard contractual clauses adopted by the Commissioner).
11. Minors
Our services and website are intended for adults. We do not knowingly collect personal data of minors without the consent of a parent or guardian. If we determine that we have unintentionally collected such data without an appropriate basis, we will delete it without delay.
12. Changes to the Privacy Policy
We may update this Privacy Policy from time to time in order to align it with changes in our business or in regulations. Each new version is published on this page, with the last-updated date indicated. We recommend that you check this page periodically so that you are aware of any changes.
13. Data protection contact
For any questions, requests, or complaints regarding the processing of your personal data, as well as to exercise your rights, you may contact us:
- Email: office@socrat-roadstar.rs
- Phone: +381 66 635 00 00
- Address: AFI City Zmaj, Zmajeva 12V i 12G, Zemun, Beograd, Srbija
We will do our best to respond to every request as quickly as possible.