Privacy Policy

Last updated: August 3, 2026

Effective date: August 3, 2026

This Privacy Policy explains how the joint parking service Parkiraj BL collects, uses, stores, shares, and protects the personal data of users of the website, reservation system, and parking locations included in the service.

This Policy applies to the use of the website parkirajbl.com, the submission of reservation requests, communication with users, the use of parking locations, the handling of complaints and incidents, video surveillance, and related administrative and technical activities.

Personal data is processed in accordance with the applicable laws of Bosnia and Herzegovina, including the Law on Personal Data Protection of Bosnia and Herzegovina.

1. Who manages the Parkiraj BL service

Parkiraj BL is a joint digital service that brings together parking locations managed by the following legal entities:

1.1. “TRŽNICA” d.o.o. Banja Luka

  • Full legal name: Privredno društvo za tržničke usluge i trgovinu “TRŽNICA” d.o.o. Banja Luka
  • Address: 4 Ive Lole Ribara Street, 78000 Banja Luka, Bosnia and Herzegovina
  • Tax ID: 4400856610007
  • Company registration number: 1-42-00
  • Parking locations: Tržnica Istok and Tržnica Zapad

1.2. “CITY MALL” d.o.o. Banja Luka

  • Full legal name: “CITY MALL” društvo sa ograničenom odgovornošću Banja Luka
  • Address: 4 Ive Lole Ribara Street, 78000 Banja Luka, Bosnia and Herzegovina
  • Tax ID: 4404030430008
  • Company registration number: 57-01-0175-16
  • Parking location: Palata BL

1.3. “BEWO REAL ESTATE” d.o.o. Banja Luka

  • Full legal name: “BEWO REAL ESTATE” visokogradnja, niskogradnja i završni radovi, export-import d.o.o. Banja Luka; Serbian translation of the abbreviated name: “BEWO nekretnine” visokogradnja, niskogradnja i završni radovi, export-import d.o.o. Banja Luka
  • Address: Braće Podgornika Street bb, 78000 Banja Luka, Bosnia and Herzegovina
  • Tax ID: 4403018280002
  • Company registration number: 71-01-0148-09
  • Parking location within the service: Stara autobuska stanica

Each listed legal entity is the data controller for processing related to the parking location it manages. Where the listed legal entities jointly determine the purposes and means of processing within the central Parkiraj BL web platform, they may act as joint controllers.

For all questions regarding privacy and the exercise of your rights, you may contact us at:

Email: info@parkirajbl.com

Website: parkirajbl.com

2. Personal data we collect

2.1. Data from reservation requests

When submitting a reservation request, we may collect:

  • first and last name, where included in the form;
  • email address;
  • telephone number;
  • vehicle registration number;
  • selected parking location;
  • planned arrival date and time;
  • planned departure date and time;
  • number of additional days;
  • reservation request number, status, and history;
  • notes and other information voluntarily provided by the user.

2.2. Data generated through the use of parking facilities

Depending on the technical equipment at a parking location, we may process:

  • date and time of entry and exit;
  • parking ticket number or another usage identifier;
  • records of barrier, parking machine, or other technical system activation;
  • vehicle registration number;
  • data on the selected parking location;
  • data required for billing and payment records;
  • reservation status and use of parking capacity.

2.3. Communication data

When you contact us or submit a complaint, we may process:

  • first and last name;
  • email address and telephone number;
  • the content of the message, complaint, or request;
  • date and time of communication;
  • documents, photographs, and other attachments;
  • internal records of actions taken in relation to the request.

2.4. Data relating to damage and incidents

When damage or an incident is reported, we may process:

  • identification and contact details of the participants;
  • vehicle registration numbers and vehicle details;
  • date, time, and place of the event;
  • description of the event and reported damage;
  • photographs, video recordings, and supporting documentation;
  • witness details;
  • police report number or details of the competent authority;
  • data required for communication with an insurance company, lawyer, or competent authority.

2.5. Data collected through video surveillance

All parking locations included in the Parkiraj BL service are covered by video surveillance. Recordings may include:

  • images of persons and vehicles;
  • vehicle registration numbers;
  • date and time of presence;
  • direction of movement;
  • events occurring within the camera coverage area.

The controller of the recordings is the legal entity managing the relevant parking location, unless otherwise stated in the video surveillance notice.

2.6. Technical data relating to website use

When using the website, the following data may be processed automatically:

  • IP address;
  • date and time of access;
  • device type, operating system, and internet browser;
  • visited pages and technical request logs;
  • session identifiers;
  • security logs and data relating to attempted misuse;
  • error and system performance data;
  • cookie-related data, in accordance with the Cookie Policy.

2.7. Device location data

If the user activates the function for finding the nearest parking location, the internet browser may request permission to access the approximate or precise location of the device.

Device location is used only after the user grants permission and solely for the purpose of finding the nearest parking location or displaying geographically relevant content.

3. Purposes of data processing

We may process personal data for the following purposes:

  • receiving, verifying, and processing reservation requests;
  • sending a confirmation of receipt or a reservation confirmation;
  • communicating with the user in relation to a reservation;
  • organizing and providing parking services;
  • recording entry, exit, and use of parking facilities;
  • displaying and updating available parking capacity;
  • billing and payment records;
  • preventing misuse, fraud, and unauthorized access;
  • protecting people, vehicles, facilities, and other property;
  • handling complaints, objections, and damage reports;
  • establishing, exercising, or defending legal claims;
  • acting on requests from the police, courts, inspection authorities, or other competent bodies;
  • technical maintenance, protection, and improvement of the website;
  • detecting and correcting errors;
  • fulfilling legal, tax, accounting, and other obligations.

4. Legal basis for processing

We process personal data on one or more of the following legal bases:

4.1. Taking steps at the user’s request and performing a contract

This basis applies where processing is necessary to receive and process a reservation request, communicate with the user, provide parking services, and maintain records related to the use of the service.

4.2. Compliance with legal obligations

We process data where necessary to comply with obligations relating to accounting, taxation, consumer protection, safety, personal data protection, and requests from competent authorities.

4.3. Legitimate interests

Legitimate interests may include:

  • protection of people and property;
  • video surveillance of parking areas;
  • prevention of misuse and security incidents;
  • protection of information systems;
  • establishing, exercising, or defending legal claims;
  • maintaining reasonable records of communications and complaints;
  • improving the quality of the service.

4.4. User consent

Consent is used where required for specific processing activities, particularly for:

  • access to device location;
  • non-essential cookies and analytics technologies;
  • sending promotional messages, if this feature is introduced.

Consent is voluntary and may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Requirement to provide data

Data marked as mandatory in the form is required for processing a reservation request or providing the service.

If the user does not provide the mandatory data, we may be unable to process the request, send confirmation, contact the user, or provide the requested service.

Providing optional data is voluntary.

6. Recipients of personal data

Personal data may be accessible to:

  • the legal entities jointly managing the Parkiraj BL service;
  • the operator of the parking location selected or used by the user;
  • authorized employees and engaged personnel;
  • providers of hosting, maintenance, security, email, and other IT services;
  • providers of barrier systems, entry and exit records, or parking management systems;
  • Google and related providers where Google Maps services are used;
  • banks and payment terminal providers in relation to payments made at a physical location;
  • accountants, auditors, lawyers, insurance companies, and other professional advisers;
  • the police, courts, prosecutor’s offices, inspection authorities, and other competent bodies where a legal basis exists;
  • other persons with the user’s consent or where disclosure is permitted by law.

Data processors may process personal data only on the basis of a contract, documented instructions, and appropriate safeguards.

7. Data sharing between parking operators

When the user selects a parking location, the data required to process the request is provided to the legal entity managing that location.

This may include:

  • the user’s contact details;
  • vehicle registration number;
  • selected time period;
  • request number and status;
  • information required to handle a complaint or incident.

Data is not used for the purposes of another parking operator unless this is necessary for the provision of the joint service, handling a user request, system security, or compliance with a legal obligation.

8. Google Maps and geolocation

The website uses or may use Google Maps Platform to display parking locations, maps, markers, distances, and other geographical information.

When Google Maps content is loaded, Google may receive technical data such as the IP address, browser data, and information about the request.

If the user allows access to the device location, the location may be used to determine the nearest parking location. Device location will not be accessed without the user’s prior permission.

The use of Google Maps services is also subject to Google’s privacy rules and terms of service.

9. Video surveillance

All parking locations included in the Parkiraj BL service are covered by video surveillance for the purposes of:

  • protecting life, health, and the physical safety of persons;
  • protecting vehicles, facilities, equipment, and other property;
  • controlling access to parking facilities;
  • preventing and investigating theft, vandalism, and other incidents;
  • establishing facts related to reported damage;
  • exercising or defending legal claims.

The controller of the recordings is the legal entity managing the relevant parking location. Recordings may be accessed only by authorized persons.

Recordings may be provided to the police, courts, prosecutor’s offices, insurance companies, or another authorized person where an appropriate legal basis exists.

Video surveillance does not guarantee that every event will be recorded or prevented.

10. Data retention period

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by legal obligations and the limitation periods for establishing, exercising, or defending legal claims.

Retention periods are determined according to the purpose of processing, legal obligations, and the periods for exercising or defending legal claims:

  • unaccepted reservation requests: retained only for as long as necessary to process the request, resolve any objection, and prevent misuse of the system;
  • confirmed and completed reservations: retained for the duration of the business relationship and thereafter for the period required to comply with legal obligations and protect legal interests;
  • email communications: retained until the matter is closed and the period during which claims or objections may be submitted has expired;
  • complaints and objections: retained until the procedure is completed and the applicable legal and limitation periods have expired;
  • damage and incident records: retained until the procedure is completed and the relevant periods for exercising or defending legal claims have expired;
  • accounting documentation: retained for the periods prescribed by tax and accounting regulations;
  • security and technical logs: retained for the period required to protect the system, detect misuse, and investigate security incidents;
  • video surveillance recordings: retained in accordance with the internal rules of the operator of the relevant parking location and applicable laws, unless a particular recording has been preserved due to an incident, proceeding, or request from a competent authority.

After the applicable retention period has expired, data is deleted, anonymized, or otherwise securely removed, unless a legal basis exists for further retention.

11. Transfers of data to other countries

Certain technical providers, including Google and providers of hosting, email, or security services, may process data outside Bosnia and Herzegovina.

Where personal data is transferred to another country or an international organization, appropriate legal mechanisms and safeguards are applied in accordance with applicable laws.

12. Automated decision-making

The Parkiraj BL service does not make decisions that produce legal effects or similarly significantly affect the user solely through automated processing.

The technical system may automatically check availability, flag incomplete requests, or prevent obvious misuse, but final confirmation of a request depends on available capacity and the rules of the operator of the relevant parking location.

13. Data security

We implement appropriate organizational and technical measures to protect personal data against unauthorized access, disclosure, use, alteration, loss, or destruction.

Such measures may include:

  • access controls and user permissions;
  • encrypted communications;
  • backups;
  • access logging;
  • regular system updates;
  • protection of web forms;
  • restriction of access to persons who require the data for their work.

In the event of a personal data breach, we will act in accordance with applicable laws and, where required, notify the competent authority and affected individuals.

14. User rights

Under applicable law, the user may have the right to request:

  • information as to whether their personal data is being processed;
  • access to personal data and information about the processing;
  • correction of inaccurate data or completion of incomplete data;
  • deletion of data where the legal conditions are met;
  • restriction of processing;
  • data portability where applicable;
  • objection to processing based on legitimate interests;
  • withdrawal of consent;
  • information about the recipients to whom the data has been disclosed;
  • protection in relation to automated decision-making where applicable.

These rights are not absolute and may be restricted where processing is necessary to comply with a legal obligation, protect the rights of other persons, prevent misuse, or establish and defend legal claims.

15. How to exercise your rights

You may submit a request to:

Email: info@parkirajbl.com

Your request should include:

  • first and last name;
  • contact details;
  • a description of the right you wish to exercise;
  • the parking location or reservation number, where relevant;
  • other information required to locate the record relating to you.

To protect personal data, we may request additional information necessary to verify the identity of the applicant.

A request relating to a specific parking location will be forwarded to the legal entity managing that location.

16. Right to lodge a complaint with the competent authority

If you believe that your personal data has been processed in breach of applicable law, you have the right to contact the Personal Data Protection Agency of Bosnia and Herzegovina.

Before submitting a complaint to the Agency, you may contact us at info@parkirajbl.com so that we may attempt to resolve the matter.

17. Data relating to minors

The service is not intended for independent use by children who do not have the legal capacity to submit a reservation request or enter into a contractual relationship.

We do not knowingly collect children’s data for the purpose of parking reservations. If we become aware that a child’s data has been provided without an appropriate legal basis, we will take reasonable steps to delete it.

18. Cookies and similar technologies

The website uses or may use essential, functional, analytical, and other cookies and similar technologies.

Essential cookies are used for technical operation, security, session management, and form submission.

Non-essential cookies and services are activated in accordance with the user’s choice where consent is required.

Detailed information is available in the separate Cookie Policy.

19. Links to other websites

The website may contain links to Google Maps, social networks, parking operators, and other websites.

This Privacy Policy does not govern data processing on third-party websites. Users are advised to read the privacy policies of those providers.

20. Changes to this Privacy Policy

We may amend this Policy to comply with legal requirements, reflect changes in business processes, introduce new functions, or change technical providers.

A new version will be published on the website with the date of the latest update and the effective date.

Where a change significantly affects the way personal data is processed, users will be informed in an appropriate manner.

21. Contact

For questions about this Policy, the processing of personal data, or the exercise of your rights, you may contact us at:

Email: info@parkirajbl.com

Website: parkirajbl.com