Privacy Policy

This Privacy Policy explains how the company Rail Estate d.o.o. Belgrade collects, uses, stores, and protects users' personal data when using the Polazak online platform for purchasing bus tickets. The Policy aims to provide users/passengers with clear, comprehensive, and transparent information about: what data we collect, how we process it, for what purposes the data is used, what rights users have regarding data processing, and how they can exercise these rights.

Rail Estate d.o.o. Belgrade, with headquarters at Ljubljanska 32, Zvezdara, Belgrade (registration number: 20916834, Tax ID: 108018053) is the data controller within the meaning of the Law on Personal Data Protection and the General Data Protection Regulation (GDPR). For all questions regarding data protection, you can contact us at: info@polazak.com or by phone +381 63 471 119.

We collect the following categories of data: basic identification data (name, surname, date of birth, personal document number and expiry date, citizenship), contact data (email address, phone number), platform usage data (IP address, device information, session data), and transaction data (purchase data, route, travel date). Data is processed exclusively for lawful purposes: ticket purchase and issuance, data forwarding to carriers, communication and customer support, marketing (with consent), statistical analytics, system security, and fulfillment of legal obligations.

Your personal data is stored in accordance with legal deadlines: purchase data up to 3 years, user accounts until deletion, complaints 2 years, technical logs up to 12 months. You have the right to access, rectification, erasure ('right to be forgotten'), restriction of processing, data portability, objection, withdrawal of consent, and complaint to the Commissioner for Data Protection. All rights can be exercised by contacting info@polazak.com. We apply appropriate technical and organizational data protection measures (SSL/TLS encryption, firewall, monitoring, employee training). This policy comes into force on August 29, 2025, and is available on the website.