GDPR – DATA PROTECTION

Version: 1.1
Effective date: September 20, 2026
Last updated: September 20, 2026

E-Servis respects user privacy and applies appropriate technical and organizational measures to protect personal data processed through the platform.

This page provides a summary of users' rights regarding personal data protection. More detailed information about the types of data we collect, purposes of processing, retention periods, cookies, and service providers is available in our Privacy Policy and Cookie Policy.

1. WHAT DATA DO WE PROCESS?

Depending on how the E-Servis platform is used, we may process information voluntarily provided by users or generated through the use of the platform, including:

• first and last name;

• email address;

• contact information;

• user account information;

• vehicle information;

• vehicle registration information;

• service and maintenance history;

• mileage information;

• vehicle-related expenses;

• registration, insurance, technical inspection, and maintenance due dates;

• vehicle assignment or usage information;

• notes and other information voluntarily entered into the system; and

• technical information about the device, browser, and use of the platform.

E-Servis does not intentionally collect special categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data.

2. PURPOSES OF PROCESSING

We may process personal data for the following purposes:

• creating and managing user accounts;

• providing the functionality of the E-Servis platform;

• maintaining records of vehicles, services, expenses, and due dates;

• sending reminders and system notifications;

• providing technical and customer support;

• protecting the security of user accounts and the platform;

• detecting and preventing misuse;

• improving functionality and user experience;

• statistical and analytical processing, where permitted; and

• complying with legal and regulatory obligations.

3. GOOGLE ANALYTICS AND COOKIES

E-Servis may use Google Analytics 4 for statistical measurement of platform usage and to improve functionality and user experience.

Google Analytics may process technical and statistical information such as:

• pages and platform sections visited;

• session duration;

• interactions with platform features;

• device type;

• operating system;

• internet browser;

• approximate geographic location; and

• source through which a user reached the website.

E-Servis does not intentionally provide Google Analytics with information that directly identifies a user, such as first and last name, email address, telephone number, vehicle registration number, or vehicle identification number.

Analytics cookies are used in accordance with the user's choices in the cookie settings.

Users may reject analytics cookies or withdraw their consent at a later time.

4. USER RIGHTS

Depending on applicable data protection laws, users may have the right to:

• request confirmation as to whether we process their personal data;

• request access to their personal data;

• request correction of inaccurate or incomplete information;

• request deletion of personal data where legal conditions are met;

• request restriction of processing;

• object to certain types of processing;

• request data portability where applicable;

• withdraw previously given consent; and

• lodge a complaint with a competent data protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

5. ACCESS AND CORRECTION OF DATA

Certain information may be reviewed and updated directly by users through their E-Servis account.

Where information cannot be changed directly through the application, users may submit a request for access or correction through our official contact address.

6. DELETION OF DATA AND USER ACCOUNTS

Users may request deletion of their user account and personal data associated with that account.

Certain information may be retained after a deletion request where necessary for:

• compliance with legal obligations;

• accounting or tax obligations;

• fraud and misuse prevention;

• protection of system security;

• dispute resolution;

• evidence of contractual performance; or

• other legitimate purposes permitted by applicable law.

Information stored in backups may remain for a limited period until the relevant backup cycle expires.

7. WITHDRAWAL OF CONSENT

Where processing is based on the user's consent, the user has the right to withdraw that consent at any time.

Consent relating to analytics cookies and similar technologies may be changed or withdrawn through the cookie settings available on the E-Servis platform.

Withdrawal of consent will not prevent the user from accessing the core functionality of the E-Servis platform.

8. DATA SECURITY

We apply appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or unauthorized disclosure.

Although we take reasonable steps to protect our systems and data, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. SERVICE PROVIDERS AND DATA PROCESSING

We may use third-party service providers for:

• hosting and server infrastructure;

• security and monitoring;

• email and system notifications;

• analytics;

• technical maintenance; and

• other services necessary for the operation of the E-Servis platform.

Such service providers may process limited information only to the extent necessary to provide their services and in accordance with applicable contractual and legal obligations.

10. INTERNATIONAL DATA TRANSFERS

Where providing the Services requires personal data to be processed or transferred outside the country or region in which it was originally collected, appropriate safeguards will be applied where required by applicable data protection laws.

11. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Information associated with a user account may be retained for the duration of the user relationship and for a reasonable period following termination of the account where necessary for legal, security, accounting, dispute-resolution, or other legitimate purposes.

12. HOW CAN YOU EXERCISE YOUR RIGHTS?

For requests relating to access, correction, deletion, restriction of processing, data portability, objections, or other personal data protection matters, you may contact us at:

Email: support@eservis.ba

To protect user accounts and personal information, we may request additional information where reasonably necessary to verify your identity before processing certain requests.

We will review and respond to privacy requests in accordance with applicable data protection laws.

13. RELATED DOCUMENTS

More detailed information is available in the following documents:

Privacy Policy:
https://eservis.ba/privacy-policy

Cookie Policy:
https://eservis.ba/cookie-policy

Terms of Use:
https://eservis.ba/pravila-koristenja

14. CHANGES TO THIS PAGE

We may update this GDPR and Data Protection page from time to time to reflect changes to the E-Servis platform, our service providers, applicable technologies, or data protection requirements.

The date of the most recent update will be displayed at the top of this page.