Privacy Policy

Last updated: 10 May 2026.

1. Who we are

Smart Serbia Travel is a digital tourism platform helping travellers explore Serbia. The data controller is Smart Serbia Travel (contact: steletomic@gmail.com).

2. What data we collect

• Account data: name, email address, password (stored encrypted).
• Order data: shipping address, purchase history in the shop.
• Usage data: pages you visit, features you use (no third-party tracking cookies).
• Reviews and content you generate.

3. How we use your data

• Providing platform services (bookings, shop, passport, planner).
• Communication about accounts and orders.
• Improving the platform based on anonymous usage data.

4. Data retention

We retain your data while you have an active account. You can request deletion of your account and all data at any time at steletomic@gmail.com.

5. Your rights (GDPR)

• Right of access — request a copy of your data.
• Right to rectification — correct inaccurate data.
• Right to erasure — request deletion of your data.
• Right to portability — download your data in a standard format.

For all privacy questions write to: steletomic@gmail.com

6. Security

We use HTTPS encryption, bcrypt for passwords, CSRF protection on all forms, and regular security audits.