Privacy Policy

The Public Enterprise “Motorways of the Republic of Srpska” LLC Banja Luka respects your privacy and is committed to protecting the personal data you provide to us as users of our services. Please read the following text to learn more about our Privacy Policy and the manner in which we use and process personal data collected from our users.

Information About the Data Controller

Public Enterprise “Motorways of the Republic of Srpska” LLC Banja Luka
Vase Pelagića 10, 78 000 Banja Luka
Phone:
E-mail: info@autoputevirs.com
Company ID: 11047459
Tax ID: 4402955260002

Information About the Data Protection Officer

Address: Vase Pelagića 10, 78 000 Banja Luka
E-mail: dpo@autoputevirs.com
Phone: +387 51 233 670, +387 51 233 680

Basic Terms

This policy aims to clearly, understandably, and accessibly explain which personal data we collect, for what purpose, how we protect it, and how you may exercise your rights.

To fully understand the rights you possess and how you may exercise them, it is important to know that certain terms in this document have the following meanings:

• Personal data means any information relating to a natural person whose identity has been determined or can be determined.
• Processing of personal data means any operation or set of operations performed on personal data or sets of personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
• Recipient means a natural or legal person, or public authority, to whom personal data are disclosed, regardless of whether it is a third party.
• The Personal Data Protection Agency of Bosnia and Herzegovina is the independent supervisory authority responsible for monitoring the implementation of the Law in order to protect the fundamental rights and freedoms of individuals regarding the processing of personal data.
• Data subject means a natural person whose identity has been determined or can be determined, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, network identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
• Processor means a natural or legal person or public authority that processes personal data on behalf of the controller.

Purpose of Collecting Personal Data and Categories of Data

The Public Enterprise “Motorways of the Republic of Srpska” LLC Banja Luka collects personal data for the purpose of providing certain services in a high-quality manner.

Personal data are collected in the following cases:

• Data collected for the fulfillment of legal obligations and compliance with applicable legal regulations, particularly in the areas of labor, occupational safety and health, tax legislation, financial and general regulations
• Performance of various contractual obligations – data are submitted to contractors and/or creditors during the term of the contract and during the execution of contracted works
• Fulfillment of legitimate interests, protection of public interests, and other vital interests
• Conducting internal business processes – with the aim of improving operational efficiency, project profitability, preservation of company assets, human resource management, etc.
• Security reasons and operational needs

The Public Enterprise “Motorways of the Republic of Srpska” LLC Banja Luka processes the following categories of personal data (in accordance with the legally prescribed bases for processing): user service data, toll collection-related data, contact information, video recordings and content collected through video surveillance including dates and times of passage, user account data, TAG device data, payment transaction data and other financial data, employee data, data necessary for fulfilling legal and regulatory obligations, as well as other similar data necessary for the fulfillment of business, legal, and contractual obligations.

Considering the dynamic nature of business operations, the above may represent a variable category. In all cases, the controller is obliged to ensure transparency and timely information to the data subjects.

Principles of Personal Data Processing

The Public Enterprise “Motorways of the Republic of Srpska” LLC Banja Luka processes personal data lawfully, transparently, and fairly by following these principles:

• Principle of lawfulness, fairness, and transparency – personal data will be processed in accordance with applicable regulations and all rights provided by the Law and internal acts, while providing all necessary information regarding which personal data are collected, used, disclosed, or otherwise processed.
• Purpose limitation principle – personal data are collected for specific, explicit, and lawful purposes and will not be further processed in a manner incompatible with those purposes.
• Data minimization principle – personal data are collected and processed only to the extent necessary, relevant, and limited to what is required in relation to the purposes for which they are processed.
• Accuracy principle – the company ensures that data are accurate and will take all reasonable measures to ensure that inaccurate personal data are erased or corrected without delay.
• Storage limitation principle – personal data are stored only for as long as necessary for the purposes for which they are processed, or longer if there is a legitimate interest.
• Integrity and confidentiality principle – data are collected and processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage through appropriate technical and organizational measures.

Rights of Data Subjects

Data subjects may exercise the following rights:

• Right of access to personal data
• Right to rectification and supplementation
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to be informed when data are collected directly from the data subject or from other sources

Retention Periods for Personal Data

Personal data are retained only for as long as necessary to fulfill the purpose of processing. Once the purpose has been achieved and there is no other legal basis for further retention, nor a need for establishing, exercising, or defending legal claims, the data will be deleted, destroyed, blocked, or anonymized. The Public Enterprise “Motorways of the Republic of Srpska” LLC Banja Luka handles data in accordance with legally prescribed procedures to ensure the protection of data subject rights.

Protection of Personal Data Privacy

The Public Enterprise “Motorways of the Republic of Srpska” LLC Banja Luka adheres to strict security procedures and the provisions of the Personal Data Protection Law (“Official Gazette of Bosnia and Herzegovina”, No. 12/2025 dated 28 February 2025) regarding the storage and protection of users’ personal data in order to prevent data loss, illegal or unauthorized use, and unauthorized access.

We undertake all reasonable technical and organizational measures to protect users’ personal data, including the use of advanced security technologies and procedures to protect data from alteration, loss, and unauthorized access.

Users’ personal data are stored on physical storage media located in restricted-access facilities and subject to strict control. All employees involved in personal data processing are obliged to maintain confidentiality by signing confidentiality statements.

Cookies Policy

Cookies are small text files that most websites store on computers, tablets, and mobile devices in order to recognize individual devices used during access. They store website settings and preferences, such as preferred language or address, enabling the website to recognize useful user information and display content tailored to user needs, all with the aim of providing users with free services featuring full functionality and high-quality content. Cookies are not harmful and are always time-limited.

The website www.autoputevirs.com collects two types of cookies:

• Necessary cookies required for the smooth functioning of the website.
• Statistical cookies used to monitor website visit statistics, while your data (IP address, cookie identifiers) may be used for advertising customization during future visits.

Browsers can be configured not to accept cookies; however, in such cases, users may not experience full website functionality.

The server hosting this website is protected with all necessary security measures to ensure the safety of your data.