PRIVACY POLICY NSBIKE

1. Introduction

Public Utility Company “Parking servis” Novi Sad (hereinafter: the Company) is committed to protecting the personal data of its users and processes such data in accordance with the Law on Personal Data Protection of the Republic of Serbia.

This Privacy Policy applies to the use of the website nsbike.rs, the NSBike Public Bicycle System, and all related services.

The purpose of this Policy is to inform you about:

what personal data we collect;
how we collect it;
the purposes for which we use it;
the legal basis for processing;
how long we retain it;
who may have access to it; and
your rights.

By using the NSBike system, you confirm that you have read and understood this Privacy Policy.

2. Data Controller

The controller of your personal data is:

Public Utility Company “Parking Service” Novi Sad
Address: Filipa Višnjića 47
21101 Novi Sad, Serbia
Phone: +381 800 021 104
Е-mail: pitanja@parkingns.rs
Web: https://parkingns.rs

3. Categories of Personal Data We Collect

Depending on how you use the NSBike system, we may collect the following categories of personal data.

Providing data marked as mandatory is a condition for registration and use of the NSBike service. If a user does not provide the mandatory data, the Company will not be able to register the user or provide the requested service. Providing data for marketing purposes and statistical cookies is voluntary, and refusing consent does not affect the ability to use the basic service.

3.1. Identification Data

Full name
National Identification Number (JMBG)
Residential address
National ID card number
Mobile phone number
Email address

3.2. User Account Data

Registration date
User account status
Unique user identifier
Login history

3.3. NSBike Usage Data

Bicycle rental date and time
Bicycle return date and time
Pickup station
Return station
Bicycle identification
Rental duration
System usage history

3.4. Payment Data

When payment for services is made, we may process:

Transaction identifier
Transaction date and time
Transaction amount
Payment status
Information regarding a successful or unsuccessful transaction

Important: Public Utility Company “Parking servis” Novi Sad does not collect or store payment card information. Payment card data is processed directly within the system of an authorized payment service provider, in accordance with the security and regulatory requirements applicable to that provider.

3.5. Technical Data

When accessing the website, the following information may be collected automatically:

IP address
Browser type
Operating system
Device type
Access logs
Statistical website usage data

4. How We Collect Personal Data

We collect personal data:

directly from users during registration or while using our services;
through communication with customer support;
automatically while using the website through system logs and cookies.

5. Purpose of Processing

We process personal data for the following purposes:

user registration;
providing bicycle rental services;
user identification;
maintaining records of system usage;
processing and collecting payments;
handling complaints and claims;
preventing misuse, damage, and bicycle theft;
ensuring system security;
providing customer support;
statistical analysis and service improvement;
complying with legal obligations.

If we wish to use your personal data for marketing purposes, we will do so only with your prior consent.

Purpose	Categories of Personal Data	Legal Basis
Registration and account management	Name, contact details, account identifier	Entering into and performance of a contract
Provision of services	User, bicycle, station, and time identifiers	Performance of a contract
Payment processing	Transaction identifier and status	Performance of a contract and compliance with legal obligations
Accounting records	Transaction data	Legal obligation
Security and prevention of misuse	Logs and usage history	Legitimate interest
Handling complaints and disputes	Usage and communication data	Contract, legal requirements, and legitimate interest
Marketing	Contact details	Consent
Statistical cookies	Cookie identifiers and technical data	Consent

6. Legal Basis for Processing

Personal data is processed based on:

performance of the NSBike service agreement;
compliance with the Company's legal obligations;
the Company's legitimate interests (system security, fraud prevention, and protection of property);
your consent (marketing and statistical cookies).

7. Data Retention

Personal data is retained only for as long as necessary for:

providing the service;
fulfilling legal obligations;
resolving potential disputes;
exercising rights and fulfilling obligations arising from the use of the NSBike system.

User account data is retained for the duration of the contractual relationship and for [a specified period] after the account is terminated.

Transaction data is retained for the periods prescribed by accounting and tax regulations.

System and security logs are retained for [a specified number of months].

Data processed based on consent is retained until consent is withdrawn or until the expiration of a predetermined period.

User account data is retained for as long as the user account remains active or until the user requests the deletion of their account, except where further retention is necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

Transaction data is retained for the periods prescribed by accounting regulations, tax regulations, and other applicable regulations relating to payment services.

System and security logs relating to the processing of payment transactions are retained for up to 36 months, in accordance with the legal and regulatory obligations of the PaySpot payment institution.

Data processed based on consent is retained until consent is withdrawn, unless further retention is necessary to comply with legal obligations.

After the applicable retention period expires, the data is securely deleted or anonymized.

8. Disclosure of Personal Data

Your personal data may be disclosed to:

IT service and technical support providers;
authorized payment processors;
competent public authorities where required by law;
other persons where there is a legal basis for disclosure.

Your personal data is not sold or disclosed to third parties for marketing purposes without your explicit consent.

9. International Data Transfers

As a general rule, personal data is processed within the Republic of Serbia.

Where the operation of certain information systems requires the transfer of personal data outside the Republic of Serbia, such transfers will be carried out exclusively in accordance with the Law on Personal Data Protection and with appropriate safeguards in place.

At the time of publication of this Privacy Policy, the Company does not transfer personal data outside the Republic of Serbia.

10. Data Security

The Company implements appropriate technical and organizational security measures, including:

HTTPS/TLS encrypted communication;
access control mechanisms;
system access logging;
protection against unauthorized access;
data backup procedures;
safeguards against data loss, alteration, or destruction.

The Company implements appropriate technical, organizational, and personnel measures to protect personal data, taking into account the nature, scope, circumstances, and purpose of the processing, as well as the likelihood and severity of risks to the rights and freedoms of natural persons.

11. Cookies

The website uses:

essential (functional) cookies;
statistical cookies.

Statistical cookies are used only with the user’s prior consent.

By giving consent, the user agrees to the use of technologies for personalization and analytics on the nsbike.rs website. Detailed information about the types of technologies used, their purpose, the data retention period, and how users can manage their settings is available in this Privacy Policy.

Users may change their cookie preferences through their web browser settings at any time.

12. Automated Decision-Making

The Company does not make decisions producing legal effects based solely on automated processing, nor does it perform user profiling.

13. Your Rights

In accordance with the Law on Personal Data Protection, you have the right to:

access your personal data;
rectify inaccurate personal data;
request deletion of your personal data where legal requirements are met;
restrict processing;
data portability, where applicable;
object to processing;
withdraw your consent at any time.

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection if you believe your personal data is being processed in violation of applicable legislation.

Requests may be submitted to: pitanja@parkingns.rs zastitapodataka@parkingns.rs

The Company will respond to a request without undue delay and no later than 30 days from the date of receipt of a complete request. This period may be extended by an additional 60 days where necessary due to the complexity and number of requests. The applicant will be informed of any such extension in a timely manner. The Company may request additional information in order to reliably verify the identity of the applicant.

14. Minors

The NSBike service is intended for users who meet the requirements established in the Terms of Use. Where the service is used by a minor, the processing of the minor’s personal data will be carried out only where an appropriate legal basis exists and where the requirements regarding the consent or approval of a parent or legal representative have been met, where such consent is required.

The Company will not knowingly collect personal data relating to minors in violation of applicable legislation or the Terms of Use.

15. Changes to this Privacy Policy

The Company reserves the right to amend this Privacy Policy at any time in order to comply with legal changes, technical developments, or service improvements.

The current version of the Privacy Policy will be published on nsbike.rs, together with the date of the latest revision.

16. Contact

Data Protection Officer

For any questions regarding the processing of personal data or the exercise of your rights, you may contact the Data Protection Officer:

Email:zastitapodataka@parkingns.rs
Address: Bulevar Mihajla Pupina 1, second floor, Office No. 211
Phone:021/48 99 117

Last updated: July 31, 2026