Privacy policy
How we process personal data when you use Transferi.rs, send an enquiry or arrange a journey.
Controller and contact
Transferi.rs and its service are operated by Grand Solutions D.O.O., registered at Antifašističke borbe 25, Beograd, Srbija. The company is the controller of your personal data. For all privacy questions and rights requests, email [email protected] .
Data we collect
When you contact us or send an enquiry, we process your name, email address, phone number if supplied, message subject and content, and any booking reference. To arrange transport, we also process pick-up and destination locations and addresses, dates and times, return details, passenger count, flight number if supplied, vehicle preference, additional requests and notes.
Required fields are marked in the forms. They are needed to answer your enquiry or prepare and arrange transport; without them we may be unable to handle your request. Other details are voluntary. Do not send payment card details, document copies or health information through the forms. If you provide other passengers’ details, inform them about this policy and share only what is necessary.
Use of the website and its security checks also involves technical data, such as your IP address, browser and device information, requested pages, and message delivery and verification records.
Purposes and legal grounds
We use your data to answer enquiries, prepare quotes, communicate with you, and arrange and provide agreed transport. The legal ground is taking steps at your request before entering into a contract, or performing a contract. For general business correspondence, we rely on our legitimate interest in responding to messages and conducting the requested communication.
We process invoices and necessary tax and accounting records to fulfil legal obligations. For preventing abuse, reliable message delivery, and establishing, exercising or defending legal claims, we rely on our legitimate interest in protecting the website, business and rights.
We do not use enquiry or booking data for marketing or record calls. Our manager decides on quotes and bookings; we do not make decisions with legal or similarly significant effects solely through automated processing, including profiling.
Access, providers and international processing
Our manager accesses the business mailbox containing enquiries and bookings. Drivers receive only the basic information needed for the journey: the customer’s name, contact details and route information. Accounting records in local software are accessible to our manager and director. We may disclose data to competent authorities when required by law.
BeotelNet provides the email mailbox, Brevo delivers form messages, and Cloudflare provides hosting, website protection and Turnstile security checks. These providers and their authorised processors may process data needed for their services. Cloudflare’s delivery ledger contains technical request metadata, rather than the full message text.
Providers use international infrastructure, so processing may involve countries outside Serbia, including EU countries, the United States and other Cloudflare network locations. We do not claim that all processing takes place in Serbia or the EU. Cloudflare and Brevo terms describe their safeguards and contractual mechanisms for international processing; their application to our contractual relationship is still being verified. Contact us for information about specific recipients, locations and safeguards.
How long we keep data
We keep enquiries that do not result in a booking for up to 6 months after the last correspondence. We keep emails about completed bookings for up to 2 years after both the journey and payment are completed. These periods apply to routine business correspondence.
We retain invoices, tax and accounting documents for the periods required by applicable law. We may retain only the data needed for unpaid obligations, incidents, complaints or legal proceedings for longer, while a justified need or legal obligation remains.
We use technical records to check delivery, prevent duplicate messages and investigate abuse. Specific deletion periods for these records and providers’ backups have not yet been confirmed. Our email retention periods do not mean simultaneous erasure of all providers’ copies. Contact us for information about their retention.
Browser storage and public reviews
We do not use marketing cookies or analytics pixels. During a session, your browser may store route filters and searches to make the website easier to use. Journey details carried into the form may appear in the URL, browser history and technical records. Turnstile processes technical signals to detect automated abuse.
We display selected public Google reviews, including the author’s display name and review text. The source is the public review; our legal ground is our legitimate interest in presenting customer experiences. We display a review while it is selected for the website, subject to the author’s right to object.
Your rights
Under applicable law, you can request access and a copy, correction, erasure or restriction of processing, object to processing based on legitimate interests, and request portability where the legal conditions are met. Erasure is not an absolute right, particularly where retention is legally required or necessary for a legal claim. If any processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Email your request to [email protected] . Where necessary, we request only the information needed to verify your identity. We provide information about our response without undue delay and within 30 days; we notify you within that period of any legally permitted extension and its reason. You may lodge a complaint with Serbia’s Commissioner for Information of Public Importance and Personal Data Protection.