FLEXWAY

Legal documents

Privacy policy

Last updated: May 2025.

1. Data controller

FlexWay Group d.o.o., Kurta Schorka 36, Sarajevo International Airport, 71000 Sarajevo, Bosnia and Herzegovina β€” is responsible for processing your personal data in accordance with the BiH Law on Personal Data Protection.

2. Data we collect

We collect the following categories of personal data:

  • Identification data: name, surname, date of birth, document number
  • Contact data: email address, phone number, address
  • Driving licence: number, expiry date
  • Reservation data: dates, locations, selected vehicles and extras
  • Payment data: processed exclusively via a certified payment processor

3. Purpose and legal basis of processing

We process your data exclusively for the purposes of:

  • Fulfilling the vehicle rental agreement (legal basis: contract)
  • Complying with legal obligations (record-keeping, tax obligations)
  • Communication regarding your reservation
  • Security (driving licence and identity verification)

We do not use your data for automated decision-making or profiling.

4. Data sharing

We do not sell your data to third parties. Data may be shared with:

  • Insurance companies (in the event of damage or accident)
  • Competent government authorities (upon legal request)
  • IT service providers (hosting, email) bound by confidentiality agreements

5. Data retention

We retain data for as long as necessary to fulfil the processing purpose or legal obligations. Rental agreement data is retained for 5 years in accordance with tax legislation. After the retention period, data is deleted or anonymised.

6. Your rights

In accordance with applicable law, you have the right to:

  • Access your data
  • Rectification of inaccurate data
  • Erasure of data ("right to be forgotten")
  • Restriction of processing
  • Data portability
  • Objection to processing

You can submit requests to: reservations.flexwaygroup@gmail.com

7. Data security

We apply technical and organisational protective measures: SSL encryption, access controls, regular security reviews. In the event of a data breach, we will notify you and the relevant authorities within the statutory deadlines.

8. Policy changes

This policy may be updated. We will notify you of significant changes by email or prominent notice on the website. The date of the last update is always visible at the top of the document.

9. Contact

For all questions about privacy and data protection: reservations.flexwaygroup@gmail.com