Bracom d.o.o. respects the privacy of its users and is committed to protecting personal data collected through the website and during the reservation and rental of bicycles.
This Privacy Policy explains what data we collect, the purposes for which we use it, how long we retain it, and what rights users have in relation to their personal data.
The controller of personal data is:
Bracom d.o.o.
Alipašina bb
71000 Sarajevo
Bosnia and Herzegovina
E-mail: info@bracom.ba
For any questions regarding the processing or protection of personal data, you may contact us via the e-mail address listed above.
When making a bicycle reservation through the website, we may collect the following personal data:
full name;
telephone number;
e-mail address;
reservation details, such as the selected bicycle, date, and rental period;
additional information voluntarily provided by the user as part of the reservation or communication with us.
When collecting the bicycle, we may request additional information necessary for concluding and performing the rental agreement, including information from an identification document where required.
The website may also automatically record certain technical information, such as the IP address, device and browser type, access time, and other technical information necessary for the secure and proper operation of the website.
We may use personal data for the following purposes:
receiving and processing bicycle reservations;
confirming, modifying, or cancelling reservations;
communicating with users regarding their reservations;
preparing and performing bicycle rental agreements;
identifying users when bicycles are collected;
maintaining records related to bicycle rentals;
handling complaints, damage claims, or disputes;
complying with legal, accounting, and regulatory obligations;
preventing misuse and ensuring the security of the website and our systems.
We will not use personal data for purposes unrelated to those for which it was collected unless an appropriate legal basis exists for such processing.
We process personal data where such processing is necessary:
to process a reservation and take steps at the user’s request before entering into a contract;
for the performance of a bicycle rental agreement;
to comply with our legal obligations;
for our legitimate interests, such as protecting property, preventing misuse, ensuring system security, and establishing, exercising, or defending legal claims;
on the basis of the user’s consent where consent is required.
Where processing is based on consent, the user may withdraw that consent at any time.
We do not sell personal data or disclose it to third parties for their own marketing purposes.
Personal data may be accessible to service providers we use for the operation of the website and our business, including:
web hosting providers;
e-mail and communication service providers;
IT support and system maintenance providers;
other technical service providers necessary for processing reservations.
Such service providers are given access only to the personal data necessary for the performance of their services.
Personal data may also be disclosed to competent government authorities, police, courts, or other authorities where required by law or where another appropriate legal basis exists.
We retain personal data only for as long as necessary for the purpose for which it was collected.
Data relating to completed rentals may be retained for the period required to fulfil contractual, legal, and accounting obligations and to establish, exercise, or defend potential legal claims.
Data relating to cancelled or uncompleted reservations is retained only for as long as necessary for administrative and security purposes or for handling potential requests or disputes.
Once the applicable retention period has expired, personal data will be deleted or anonymised unless there is a legal obligation requiring us to retain it for a longer period.
The website may use cookies that are necessary for its proper operation and for the functioning of the reservation system.
If we use analytics, marketing, or other cookies that are not strictly necessary for the operation of the website, they will be used in accordance with applicable laws and, where required, only after the user has given consent.
Users may manage their cookie preferences through the cookie settings available on the website.
We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
Access to personal data is limited to authorised persons and service providers who require such access to perform their duties.
In accordance with applicable personal data protection laws, users may have the right to:
request information about whether we process their personal data;
request access to their personal data;
request the correction of inaccurate or incomplete personal data;
request the deletion of personal data where the legal requirements are met;
request restriction of processing;
request data portability where the legal requirements are met;
object to certain types of processing;
withdraw previously given consent where processing is based on consent.
To exercise these rights, users may contact us at info@bracom.ba.
Before acting on a request, we may ask for additional information necessary to verify the identity of the person making the request.
If a user believes that their personal data is being processed in violation of applicable personal data protection laws, they have the right to contact:
Personal Data Protection Agency in Bosnia and Herzegovina
Users may contact the Agency regardless of whether they have previously contacted Bracom d.o.o. regarding the matter.
Certain technical service providers we use may process or store personal data outside Bosnia and Herzegovina.
Where such transfers take place, personal data will only be transferred where an appropriate legal basis exists and appropriate safeguards required by applicable data protection legislation are in place.
Where the rental of a bicycle to a minor requires the consent of a parent or legal guardian, the reservation and rental agreement must be completed in accordance with those requirements.
We do not knowingly collect personal data from minors where there is no appropriate legal basis for doing so.
We may update this Privacy Policy from time to time to reflect changes to the operation of the website, the reservation service, or applicable laws and regulations.
The current version of the Privacy Policy will always be available on the website.