Privacy Policy

This Privacy Policy explains what personal data the East Serbia Tourist Card platform collects when you use our website, request information, or purchase a package, and how that data is used, shared, and protected.

The merchant identified above is responsible for processing the personal data described in this Policy. Use the published contact details for privacy requests.

Depending on how you use the Service, we may collect: contact details you submit through the contact form (full name, email, and your message); and buyer details collected during checkout (full name, email, and, where applicable, phone number, city, and country). Card usage information, such as which included services have been used, is linked to the card and not to a public account.

Withdrawal requests include your name, email, address, order details and optional reason. We also process technical request metadata for security. Google reCAPTCHA is loaded only after you enable it; Google processes verification data under its own privacy policy. You can reopen cookie settings to change your choice. Reloading applies withdrawal of consent to an already loaded verification script.

We use your data to respond to enquiries submitted through the contact form; to process orders, issue digital cards, and send purchase confirmations and fiscal receipts; to provide customer support related to an order or card; and to meet legal, tax, and fiscal obligations.

We process your data to perform the contract formed when you place an order or submit an enquiry, to comply with legal obligations such as fiscal record-keeping, and, where you have given it, on the basis of your consent, such as the privacy acknowledgement given when submitting the contact form.

We share the minimum data necessary with our payment provider to process payment, and with the relevant authority where fiscal reporting is required by law. A partner whose service you purchase can see the usage status of its own service on your card, but does not receive your contact details or the amounts paid for other partners' services.

We keep your personal data only for as long as necessary for the purposes described in this Policy, including any period required to meet our legal, tax, and fiscal record-keeping obligations, after which it is deleted or anonymized.

We use first-party cookies to remember your language and cookie preference. The cart and chat history use local storage; checkout draft details use session storage. Checkout consent must be given again for a new checkout.

When enabled, Google reCAPTCHA protects our contact and withdrawal forms and communicates with Google. We do not use advertising or analytics tools. Accepting optional cookies does not activate future services; we will request consent before introducing them.

Subject to applicable data protection law, you may request access to, correction of, deletion of, or a portable copy of your personal data, object to certain processing, or ask us to restrict how your data is used. To exercise any of these rights, contact us using the details on our Contact page.

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, but we work to keep your data protected at every stage of processing. If a personal data breach occurs that is likely to affect you, we will notify the competent authority and, where required, the affected individuals within 72 hours of becoming aware of it.

The Service is not directed at children acting without a parent or guardian, and checkout is intended to be completed by an adult on behalf of all travellers included in an order.

We may update this Privacy Policy to reflect changes to the Service or applicable law. Material changes will be reflected in an updated effective date shown at the top of this page.

For any question about this Privacy Policy or how your personal data is handled, please contact us through the details published on our Contact page.