Privacy Policy

Last updated: August 3, 2026

Effective date: August 3, 2026

This Privacy Policy explains how the joint parking service Parkiraj BL collects, uses, stores, shares, and protects personal data of users of the website, the reservation system, and parking locations included in the service.

The Policy applies to use of the website parkirajbl.com, submission of reservation requests, communication with users, use of parking locations, handling of complaints and incidents, video surveillance, and related administrative and technical activities.

Personal data are processed in accordance with the applicable regulations of Bosnia and Herzegovina, including the Law on Personal Data Protection of Bosnia and Herzegovina.

1. Who manages the Parkiraj BL service

Parkiraj BL is a joint digital service that brings together parking locations managed by the following legal entities:

1.1. „TRŽNICA“ d.o.o. Banja Luka

  • Full name: Privredno društvo za tržničke usluge i trgovinu „TRŽNICA“ d.o.o. Banja Luka
  • Address: Ulica Ive Lole Ribara broj 4, 78000 Banja Luka, Bosnia and Herzegovina
  • JIB: 4400856610007
  • MBS: 1-42-00
  • Parking locations: Tržnica Istok and Tržnica Zapad

1.2. „CITY MALL“ d.o.o. Banja Luka

  • Full name: „CITY MALL“ društvo sa ograničenom odgovornošću Banja Luka
  • Address: Ulica Ive Lole Ribara broj 4, 78000 Banja Luka, Bosnia and Herzegovina
  • JIB: 4404030430008
  • MBS: 57-01-0175-16
  • Parking location: Palata BL

1.3. „BEWO REAL ESTATE“ d.o.o. Banja Luka

  • Full name: „BEWO REAL ESTATE“ visokogradnja, niskogradnja i završni radovi, export-import d.o.o. Banja Luka; the Serbian-language translation is: „BEWO nekretnine“ visokogradnja, niskogradnja i završni radovi, export-import d.o.o. Banja Luka
  • Address: Ulica Braće Podgornika bb, 78000 Banja Luka, Bosnia and Herzegovina
  • JIB: 4403018280002
  • MBS: 71-01-0148-09
  • Parking location in the service: Stara autobuska stanica

Each of the listed legal entities is a controller of personal data for processing relating to the parking location it manages. Where the listed legal entities jointly determine the purposes and means of processing data within the central Parkiraj BL web platform, they may act as joint controllers.

For all questions relating to privacy and the exercise of rights, you may contact:

Email: info@parkirajbl.com

Website: parkirajbl.com

2. What personal data we collect

2.1. Data from reservation requests

When a reservation request is submitted, we may collect:

  • first and last name, if provided for in the form;
  • email address;
  • telephone number;
  • vehicle licence plate;
  • selected parking location;
  • date and time of planned arrival;
  • date and time of planned departure;
  • number of additional days;
  • number, status, and history of reservation requests;
  • notes and other information voluntarily provided by the user.

2.2. Data arising from use of the parking facility

Depending on the technical equipment of the parking location, we may process:

  • date and time of entry and exit;
  • parking ticket number or other usage identifier;
  • records of barrier activation, parking ticket machine, or other technical system;
  • vehicle licence plate;
  • data on the selected parking location;
  • data required for calculation and recording of payment;
  • reservation status and use of parking capacity.

2.3. Communication data

When you contact us or submit a complaint, we may process:

  • first and last name;
  • email address and telephone number;
  • content of the message, complaint, or request;
  • date and time of communication;
  • documents, photographs, and other attachments;
  • internal records of handling the request.

2.4. Data on damage and incidents

When damage or an incident is reported, we may process:

  • identification and contact data of participants;
  • licence plates and data on vehicles;
  • date, time, and place of the event;
  • description of the event and reported damage;
  • photographs, video recordings, and accompanying documentation;
  • data on witnesses;
  • police report number or data of the competent authority;
  • data required for communication with an insurance company, lawyer, or competent authority.

2.5. Data collected by video surveillance

All parking locations included in the Parkiraj BL service are covered by video surveillance. Recordings may include:

  • image of persons and vehicles;
  • licence plate;
  • date and time of presence;
  • direction of movement;
  • events in the area covered by cameras.

The controller of the recordings is the legal entity that manages the specific parking location, unless otherwise stated in the notice on video surveillance.

2.6. Technical data on website use

When the website is used, the following may be processed automatically:

  • IP address;
  • date and time of access;
  • type of device, operating system, and internet browser;
  • pages visited and technical request logs;
  • session identifiers;
  • security logs and data on attempted misuse;
  • data on errors and system performance;
  • data related to cookies, in accordance with the Cookie Policy.

2.7. Device location data

If the user activates the function for finding the nearest parking location, the internet browser may request permission to access the approximate or precise location of the device.

Device location is used only after the user’s permission and only for finding the nearest parking location or displaying geographically relevant content.

3. Purposes of data processing

We may process personal data for the purposes of:

  • receiving, verifying, and processing reservation requests;
  • sending confirmation of receipt or reservation confirmation;
  • communication with the user regarding the reservation;
  • organising and providing the parking service;
  • recording entry, exit, and use of the parking facility;
  • displaying and updating available parking capacity;
  • calculation and recording of payment;
  • preventing misuse, fraud, and unauthorised access;
  • protecting people, vehicles, facilities, and other property;
  • resolving complaints, objections, and damage reports;
  • establishing, exercising, or defending legal claims;
  • acting on requests of the police, court, inspectorate, or other competent authority;
  • technical maintenance, protection, and improvement of the website;
  • detecting and remedying errors;
  • fulfilling legal, tax, accounting, and other obligations.

4. Legal basis for processing

We process data on one or more of the following legal bases:

4.1. Taking steps at the user’s request and performance of a contract

We apply this basis when processing is necessary for receiving and processing a reservation request, communicating with the user, providing the parking service, and maintaining records related to use of the service.

4.2. Compliance with legal obligations

We process data when necessary to fulfil obligations in the fields of accounting, tax, consumer protection, security, personal data protection, and acting on requests of competent authorities.

4.3. Legitimate interest

Legitimate interests may include:

  • protection of people and property;
  • video surveillance of parking premises;
  • prevention of misuse and security incidents;
  • protection of information systems;
  • establishing, exercising, or defending legal claims;
  • maintaining reasonable records of communication and complaints;
  • improving service quality.

4.4. User consent

Consent is used when required for particular processing, in particular for:

  • access to device location;
  • non-essential cookies and analytics technologies;
  • sending promotional messages, if this function is introduced.

Consent is voluntary and may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Obligation to provide data

Data marked as mandatory in the form are required for processing a reservation request or providing the service.

If the user does not provide mandatory data, we may be unable to process the request, send a confirmation, contact the user, or provide the requested service.

Provision of optional data is voluntary.

6. Recipients of personal data

Personal data may be available to:

  • legal entities that jointly manage the Parkiraj BL service;
  • the operator of the parking location selected or used by the user;
  • authorised employees and engaged persons;
  • providers of hosting, maintenance, security, email, and other information services;
  • providers of systems for barriers, entry and exit recording, or parking management;
  • Google and related providers when Google Maps services are used;
  • banks and card terminal providers in connection with payment at the physical location;
  • accountants, auditors, lawyers, insurance companies, and other professional advisers;
  • the police, courts, prosecutor’s office, inspectorates, and other competent authorities where there is a legal basis;
  • other persons with the user’s consent or where disclosure is permitted by law.

Data processors may process personal data only on the basis of a contract, documented instructions, and appropriate protection measures.

7. Exchange of data between parking operators

When the user selects a parking location, data required for processing the request are provided to the legal entity that manages that location.

This may include:

  • user contact details;
  • licence plate;
  • selected time period;
  • request number and status;
  • information required to resolve a complaint or incident.

Data are not used for the purposes of another parking operator unless necessary for providing the joint service, resolving a user request, system security, or fulfilling a legal obligation.

8. Google Maps and geolocation

The website uses or may use Google Maps Platform to display parking locations, maps, markers, distances, and other geographic information.

When Google Maps content is loaded, Google may receive technical data such as IP address, browser data, and information about the request.

If the user permits access to device location, the location may be used to determine the nearest parking location. Device location will not be obtained without the user’s prior permission.

Use of Google Maps services is also subject to Google’s privacy rules and terms of use.

9. Video surveillance

All parking locations included in the Parkiraj BL service are covered by video surveillance for the purposes of:

  • protecting life, health, and physical safety of persons;
  • protecting vehicles, facilities, equipment, and other property;
  • controlling access to the parking facility;
  • preventing and clarifying theft, vandalism, and other incidents;
  • establishing facts in relation to reported damage;
  • exercising or defending legal claims.

The controller of the recordings is the legal entity that manages the specific parking location. Recordings may be accessed only by authorised persons.

Recordings may be provided to the police, court, prosecutor’s office, insurance company, or other authorised person where there is an appropriate legal basis.

Video surveillance does not constitute a guarantee that every event will be recorded or prevented.

10. Data retention period

We retain personal data only for as long as necessary for the purpose for which they were collected, or as required by legal obligations and periods for establishing or defending legal claims.

Before public publication, legal counsel and responsible persons should confirm the following periods:

  • unaccepted reservation requests: in accordance with applicable statutory periods;
  • confirmed and completed reservations: in accordance with applicable statutory periods;
  • email communication: in accordance with applicable statutory periods;
  • complaints and objections: until the expiry of statutory and limitation periods;
  • records of damage and incidents: until conclusion of the proceedings and expiry of relevant periods;
  • accounting documentation: within periods prescribed by law;
  • security and technical logs: in accordance with applicable statutory periods;
  • video surveillance recordings: in accordance with the internal policy and applicable rules for the specific location, unless a recording is extracted for an incident, proceedings, or a request of a competent authority.

Upon expiry of the relevant period, data are deleted, anonymised, or otherwise securely removed, except where there is a legal basis for further retention.

11. Transfer of data to other countries

Certain technical providers, including Google and providers of hosting, email, or security services, may process data outside Bosnia and Herzegovina.

Where personal data are transferred to another country or international organisation, appropriate legal mechanisms and protection measures are applied in accordance with applicable regulations.

12. Automated decision-making

The Parkiraj BL service does not make decisions that produce legal effects or significantly affect the user solely by automated processing.

The technical system may automatically check availability, flag incomplete requests, or prevent obvious misuse, but final confirmation of a request depends on available capacity and the rules of the operator of the specific location.

13. Data security

We apply appropriate organisational and technical measures to protect personal data against unauthorised access, disclosure, use, alteration, loss, or destruction.

Measures may include:

  • access control and user authorisations;
  • encryption of communication;
  • backups;
  • logging of access;
  • regular system updates;
  • protection of web forms;
  • limiting access to persons who need the data for their work.

In the event of a personal data breach, we will act in accordance with applicable regulations and, where required, notify the competent authority and affected persons.

14. User rights

In accordance with applicable regulations, the user may have the right to request:

  • information on whether their personal data are being processed;
  • access to personal data and information about processing;
  • rectification of inaccurate or completion of incomplete data;
  • erasure of data where legal conditions are met;
  • restriction of processing;
  • data portability where applicable;
  • objection to processing based on legitimate interest;
  • withdrawal of consent;
  • information on recipients to whom data have been provided;
  • protection in relation to automated decision-making where applicable.

Rights are not absolute and may be limited where processing is necessary for a legal obligation, protection of the rights of others, prevention of misuse, or establishing and defending legal claims.

15. How to exercise rights

You may send a request to:

Email: info@parkirajbl.com

In the request, state:

  • first and last name;
  • contact details;
  • description of the right you wish to exercise;
  • parking location or reservation number, if relevant;
  • other data needed for us to find the record relating to you.

For the protection of data, we may request additional information needed to confirm the identity of the requester.

A request relating to a specific parking location will be forwarded to the legal entity that manages that location.

16. Right to lodge a complaint with the competent authority

If you believe that your personal data have been processed contrary to regulations, you have the right to contact the Personal Data Protection Agency in Bosnia and Herzegovina.

Before lodging a complaint with the Agency, you may contact us at info@parkirajbl.com so that we may attempt to resolve the matter.

17. Data relating to minors

The service is not intended for independent use by children who do not have legal capacity to submit a reservation request or enter into a contractual relationship.

We do not knowingly collect children’s data for the purpose of parking reservation. If we learn that a child’s data have been provided without an appropriate legal basis, we will take reasonable measures to delete them.

18. Cookies and similar technologies

The website uses or may use necessary, functional, analytics, and other cookies and similar technologies.

Necessary cookies are used for technical operation, security, session management, and form submission.

Non-essential cookies and services are activated in accordance with the user’s choice, where consent is required.

Detailed information is available in the separate Cookie Policy.

19. Links to other websites

The website may contain links to Google Maps, social networks, parking operators, and other websites.

This Privacy Policy does not govern data processing on third-party websites. We recommend that users read their privacy policies.

20. Amendments to the Privacy Policy

We may amend this Policy in order to align with regulations, change business processes, introduce new functions, or change technical providers.

The new version will be published on the website with the last updated date and the effective date.

Where an amendment significantly affects the manner of data processing, users will be notified in an appropriate manner.

21. Contact

For questions about this Policy, processing of personal data, or the exercise of rights, you may contact us:

Email: info@parkirajbl.com

Website: parkirajbl.com

Note: This document is a working draft for professional legal review. Before publication, it is necessary to confirm the mutual roles of all three legal entities, the identity of the entity that technically manages the website, actual retention periods, contracts with processors, the manner of international data transfers, and internal acts on video surveillance.