Privacy Policy


Hello, adventure lover. You may not be surprised to hear that we are committed to protecting the privacy of everyone who uses this website. This Privacy Policy provides information about how we process and protect information, how we use any personal information we collect about you when you use this website, our use of cookies and your privacy rights.In a nutshell, we will never sell your data. We provide controls that allow visitors and customers to have control over the privacy of all personal data that is captured by our service. We are committed to being transparent about what data we collect, how we use it and the measures we take to protect it. When you choose to provide us with information about yourself, you trust us to use it in a responsible manner. We respect that. You can check and manage your preferences in your account, and from the Cookie Preference Centre, accessed from our Cookies Policy. To contact us about any matters relating to your privacy, please use our data request form. Want more? Here goes with the detail.


"Sarajevo Outdoor city" ("SOC") is the legal name of Lupon Ventures d.o.o. 
As a data controller, we collect, process, use and disclose the information you provide using the Website (www.sarajevooutdoorcity.com). We will only use your personal data for the purposes and in the manner set out below, which describes the steps we take to ensure that our processing of your personal data complies with the General Data Protection Regulation (EU (2016/679) GDPR) and any implementing law (Data Protection Act).

What data we use?

When you visit or use our website in any way, we collect and process various types of information about you in various ways. 

Information you give us: 

Identity information, including first name, last name, username, or similar identifier and title.

Contact information, including your address, email address, and phone numbers.

Profile and traveler information, including the history of your inquiries and reservations, your preferences, important information needed to deliver reservations, such as travel plans, dietary and medical requirements, and other information as needed, depending on the reservation, your feedback and responses to reviews, as well as a password and username, when needed.

Marketing and communications information, including your preferences for receiving marketing from us and your communication settings.

Financial data, including bank account and payment card data collected and used solely for the purpose of completing a purchase. The financial information you provide through the Website will be collected, stored and processed by Trekksoft, or any other payment service provider that we specify from time to time. We do not store or use your credit card information, and „Sarajevo Outoor City“ and its employees cannot see your cardholder information. Trekksoft and any other third party payment service providers will be responsible for your payment information which will be subject to the privacy policies available here, as appropriate. 

Data we collect: 

In addition to the information you provide to us, we collect certain information when you visit our website, as explained below and in our cookie policy. The following additional information may be collected:

Technical data, including the Internet Protocol (IP) address used to connect the computer to the Internet, the type and version of browser and the type of device used to access the platform; information about your visit, including the flow of clicks to, through, and from our platform (including date and time), products you've viewed or searched for, page response time, length of visits to specific pages, page interaction information (such as scrolling, clicks, and mouse transitions) and any telephone number used to call our customer service number. This can be stored in video and word form and can allow us to access session videos designed to better illustrate how users interact with the platform. 

Usage data, including information on how you use our website, products and services. 

Information from other sources

We work with third parties (including, for example, business partners, subcontractors in technical services, payment and delivery services, advertising networks, analytics providers, search information providers) and may obtain some non-personal information because they do not identify you or anyone else. For example, we may collect anonymous collective information about how users use our services.

HOW DO WE USE YOUR DATA?

We will only use your personal information for the purposes and legal grounds set out below.

Basic (contractual) uses

The following is necessary so that we can perform the service you request from us:

 As part of our contract with you, we must also pass on basic information about you and your booking to the end provider(s) of the services you have booked. 

When you make a reservation, we inform you who the supplier is, before you decide to finalize the reservation, and we will also confirm this in our confirmation email. By continuing the booking, you confirm that all personal information you share with us will be shared with the supplier for the purpose of fulfilling the service you have requested.

 We cannot be held responsible for the privacy policies or actions of suppliers, but we provide them with guidelines, and their contract with us obliges them to keep all data we share confidential and to process personal data only in accordance with General Data Protection Regulation (EU) 2016 / 679) (GDPR) and all implementing regulations (Data Protection Act).

Uses for which we would like your consent

With your consent, we would like to do the following. You can provide or withdraw this at any time from your account and when you sign up.

We will also ask for your consent to post any reviews about the trips you have been on. You can revoke this consent later and file a data request to remove the review from the platform.

Legitimate uses

Data protection regulations allow the processing of personal data in certain circumstances that are defined as "legitimate interests". We believe that the following uses are necessary to support our legitimate interest in providing you with a world-class service, provided that such interests are not outweighed by your interests and rights. You are free to manage your preferences in this regard from your account and from the cookie settings center.

Once you make a reservation on the platform, we will give you the opportunity to unsubscribe from receiving impersonal marketing and update our email with travel ideas and special offers. We believe that it is reasonable that you might be interested in those holidays that you have booked with us, but we will always give you the opportunity to cancel at some point.

 Legal use

 Subsequent processing is necessary to meet legal and regulatory obligations

If you do not make a reservation, providing your personal information is not a legal or contractual requirement. You may choose not to provide this information; however, you may not be able to access our information, services or products.

In addition to the purpose for which you provided your personal information, you may be given the option (via a checkbox or otherwise) to use your personal information for an activity or service other than the primary activity or service you are requesting.

WHAT ABOUT CHILDREN?

 This Website is not intended for children and we do not accept bookings from children under the age of 16, except where they are an accompanying passenger on a booking made by an adult.

Where children are a passenger on a booking, we will ask for the child’s identity, profile and traveller data as detailed in the ‘information you give us section’, for the purpose of fulfilling our contracted services, as detailed in ‘how do we use the information’ section.

We will not use this data for any other means, including marketing.

If you are a child under the age of 16, please do not attempt to register with us at this Website or provide any personal information about yourself to us. If we learn that we have collected personal information from a child under the age of 16, we will promptly delete that information.

DO WE SHARE PERSONAL INFORMATION WITH THIRD PARTIES?

We will never sell or rent your personal data, and only share it with third parties in certain limited circumstances, which we will explain below.

As well as sharing your data with suppliers when you have made a booking with us (see ‘How do we use your data?' above), there are certain circumstances where we need to share your data with third parties to operate and manage our Website, process bookings, and fulfil and deliver our service to you.

We use a select number of trusted external service providers for certain technical data analysis, processing and/or storage offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services offered and we contractually bind them to keep any information we share with them as confidential and to process Personal Data only according to our instructions.

Third Party Service Providers we may share data with include;

 We may also provide non-personal data to third parties, where such information is combined with similar information of other users of the Website. The aggregate information that we share may include anonymous information that is captured through the use of cookies and other similar tracking technology. The third parties to whom we may provide this information may include our Website design, data analysts, development and hosting contractors.

We may also disclose your personal data to the following recipients:

If Lupon Ventures d.o.o. or substantially all of its assets are acquired by a third party, in which case your personal data held by us may be included in the transferred assets (for example, in the form of a database of users of the Website). Similarly, personal data may be transferred as part of a corporate reorganisation, insolvency proceeding, or other similar event, if permitted by and done in accordance with applicable law;

If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or court order, or in order to enforce, establish, exercise or defend legal rights, the rights, property, or safety of you, us, our group, or employees;

To enforce applicable terms of use, including investigation of potential violations as permitted by law;

To detect, prevent, or otherwise address fraud, security, or technical issues; 

To protect against harm to the rights, property or safety of Us, our employees, our users, customers, or the public as required or permitted by law;

 We may also seek your express consent in other circumstances where we would like to share specific items of data with a particular party. We will always be transparent about who we are sharing with and why in these circumstances, and you have full control over whether we may share that data or not.

WHERE IS YOUR DATA STORED AND IS IT SECURE?

 The data that we collect from you will be transferred to, and stored in the cloud. It may also be processed by staff operating outside the EGP who work for us, or for one of our hosts. This includes staff and partners engaged in, among other things, the fulfilment of your booking and the provision of support services.

By submitting your personal data, you agree to this transfer, storing or processing, including such transfer storing or processing in any cloud service. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Policy and the Data Protection Act.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

HOW LONG DO WE STORE YOUR DATA?

We store your personal data during the time that you are a customer, for purposes of providing you the services, and for up to seven years after you cease to be a customer. If you have never been a customer, but have consented to receive information or marketing updates from us, we may store your data for up to three years after the last time you used the platform.

We reserve the right to store or delete your personal data earlier or later than set forth herein if required to do so by an applicable law or regulation, including the GDPR and for the exercise or defence of legal claims.

LINKS TO OTHER WEBSITES

Our Website may, from time to time, contain links to third party websites. If you follow a link to any of those third party websites, please note that those websites have their own privacy policies and we do not accept any responsibility or liability for those practices. Please check those policies before you submit any personal data to those websites.

YOUR RIGHTS

„SARAJEVO OUTDOOR CITY“ is committed to ensuring that you have control and visibility of your personal data. Below is a summary of your rights and additional commitments. You may exercise your rights by contacting us via data request form.

Right to Object

You have a right to object to the processing of your personal data in those cases where we are processing your personal data in reliance on our legitimate interests. In such a case we will stop processing your personal data unless we can demonstrate compelling legitimate interests which override your interests and you have a right to request information on the balancing test we have carried out. You also have the right to object where we are processing your personal data for direct marketing purposes. You can manage you consent settings in your account.

Automated Decision-Making

 You have a right not to be subjected to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affects you other than where the decision is:

Where we base a decision solely on automated decision-making, you will always be entitled to have a person review the decision so that you can contest it and put your point of view and circumstances forward.

Right to Complain

You have the right to lodge a complaint with the Data Protection Authority, in particular in your place of residence, place of work or place of an alleged infringement, if you are unhappy with how we are processing your personal data.

We will respond to your request in writing, or orally if requested, as soon as practicable and in any event not more than one month after receipt of your request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request. We may request proof of identification to verify your request. All requests should be submitted through our data request form. 

CHANGES TO OUR PRIVACY AND COOKIES POLICIES

We reserve the right to change our Privacy and Cookies Policies from time to time at our sole discretion. If we make any changes, we will post those changes here and update the “Last revised” date at the top. Where you have previously consented to our use of your personal data, your continued use of the website after we make changes is deemed to be acceptance of those changes, so please check the Privacy and Cookies Policies periodically for updates. If we consider the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy and cookies policy changes). We will also keep prior versions of the Privacy and Cookies Policies in an archive for your review.

CONTACT US

If you have any questions, comments, requests and complaints regarding our Privacy and Cookies Policies and the information we hold, please contact us via our email address;

[email protected]
or call us at +387 33 943 153.
 

We are here for you!

 

BS | EN