RideLogger
Open app
English

Last updated: 2026-03-21 · Version 2.1

Privacy Policy (V2) — Servisna Knjižica

1) Data controller

The data controller and owner of the Servisna Knjižica project is:

A Data Protection Officer (DPO) has been appointed. Contact details:

2) Who this policy applies to

This policy applies to the processing of personal data of users of the Servisna Knjižica web and mobile application, as well as visitors to the website.

3) What data we collect

Depending on how you use the service, we may process the following categories of data:

  1. Account data — first and last name, email, phone number (if used), password (hashed)
  2. Vehicle and service data — make/model, year, registration details (if entered), service events, reminders, invoices/files you upload
  3. Usage and device data — IP address, user agent, device type, OS, error logs, technical access logs
  4. Marketing and analytics — cookies/identifiers for analytics and advertising (only where valid consent is required and given)
  5. Payment data — we do not store full card details; payment processing is performed by an external payment processor (e.g. PayPal) as a separate controller/processor under its own terms

4) Purposes and legal bases

We process data only where we have an appropriate legal basis:

  1. Performance of a contract / provision of the service
    • registration and sign-in
    • maintaining the service record and application functionality
  2. Legitimate interests
    • system security, abuse prevention, fraud protection
    • limited internal performance analytics (non-invasive)
  3. Legal obligation — compliance with applicable laws and lawful requests from authorities
  4. Consent
    • analytics and marketing cookies/trackers (e.g. Google Analytics, Meta/Facebook Pixel) where consent is required
    • sending marketing messages, where applicable

Where processing is based on consent, you may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

5) Cookies and similar technologies

We use necessary, functional, analytics and marketing cookies.

Details (names, duration and purposes) are set out in the separate Cookie Policy.

  • Necessary cookies: may not require consent where permitted by law.
  • Analytics/marketing cookies: activated only after consent where required.

You can change cookie settings at any time via the cookie banner at the bottom of the page (“Accept all” or “Essential only”) and through the Cookie Policy page on this site.

6) Recipients and processors

We may share data with trusted partners only to the extent necessary to provide the service:

  • hosting and infrastructure
  • analytics (e.g. Google Analytics)
  • advertising (e.g. Meta/Facebook Pixel)
  • payment processors (e.g. PayPal)
  • support and maintenance

We enter into appropriate data processing agreements with processors.

7) International transfers

If data is transferred outside your country or outside the EEA/EU, we use appropriate safeguards (e.g. standard contractual clauses, adequacy decisions and/or other lawful mechanisms).

8) Retention periods

We keep data for as long as needed for the purpose of processing and/or as required by law. Typical periods (example — adjust to real rules):

  • account data: while the account is active; after account closure, retained for up to 90 days (unless the law requires longer) for backups and abuse prevention, then deleted or anonymised.
  • service data: until deleted by the user or for up to 90 days after account closure, in line with retention rules.
  • security logs: typically up to 12 months
  • marketing data based on consent: until consent is withdrawn or the defined period expires

9) Data security

We apply technical and organisational measures, including (where applicable):

  • access control and authorisation
  • encryption in transit (TLS)
  • access segmentation and activity logging
  • regular backups and recovery plans
  • testing and improving security measures

10) Your rights

You may request:

  • access to your data
  • rectification of inaccurate data
  • erasure of data (within legal limits)
  • restriction of processing
  • data portability
  • objection to processing based on legitimate interests
  • withdrawal of consent (where consent is the basis)

Requests should be sent to: online@servisna-knjizica.com.

You also have the right to lodge a complaint with a supervisory authority.

11) Children

The service is not intended for persons under 16 without parental/guardian consent where required by law.

12) Changes to this policy

We may update this policy from time to time. The updated version will be published on this page with a new “last updated” date. If changes are material, we will notify users in an appropriate way within the service.

13) Contact

For questions about privacy and data processing: