Privacy Notice
1. Introduction
The purpose of this privacy notice is to describe the data processing activities carried out by ST Fleet Solutions (hereinafter: the "Controller") and to provide information about the rights and obligations related to the processing of personal data.
The Controller processes personal data in accordance with applicable data protection laws, with particular regard to Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
The Controller is committed to protecting personal data and respecting the privacy of users.
2. Controller details
Company name: ST Fleet Solutions
Registered office: 1117 Budapest, Garda utca 4. 8em. 1.ajt
Email: office@stfleetsolutions.hu
Website: https://stfleetsolutions.rs
The Controller is responsible for the data processing activities described in this notice.
3. Categories of personal data processed
The Controller may process the following types of personal data:
• name
• email address
• phone number
• company name
• position
• IP address
• browsing data
• vehicle-related data
• GPS location data (in the case of fleet management services)
4. Purpose and legal basis of processing
4.1 Contact and quotation requests
The Controller processes data in order to handle inquiries submitted through the website.
Data processed:
• name
• email address
• phone number
• message content
Purpose of processing:
• contact
• quotation
• customer communication
Legal basis: consent of the data subject (GDPR Article 6(1)(a))
Retention period: up to 12 months.
4.2 Performance of a contract
The Controller processes data for the purpose of providing fleet management and telematics services.
Data processed:
• customer name
• company name
• contact details
• vehicle data
• device identifiers
• vehicle location data
• usage data
Purpose of processing:
• provision of the service
• fleet management
• vehicle tracking
• operation of the system
Legal basis: performance of a contract (GDPR Article 6(1)(b))
Retention period: up to 5 years after termination of the contract.
4.3 Customer support and complaint handling
The Controller processes data for the purpose of handling customer complaints.
Data processed:
• name
• contact details
• complaint content
Legal basis: legitimate interest (GDPR Article 6(1)(f))
Retention period: 5 years.
4.4 Website operation
Technical data may be recorded during the operation of the website.
Data processed:
• IP address
• browser type
• operating system
• time of visit
• pages viewed
Purpose of processing:
• operation of the website
• security
• statistics
Legal basis: legitimate interest.
5. Use of cookies
The website uses cookies to improve the user experience and ensure the proper operation of the website.
Cookies may include: Necessary cookies: required for the operation of the website.
Statistical cookies: used to analyze traffic and usage.
Marketing cookies: may be used to understand user preferences and for marketing purposes.
Users may consent to the use of cookies, and may also delete or disable them at any time in their browser settings.
6. Data transfers and processors
The Controller may engage data processors for the provision of the service.
These may include, for example:
• hosting provider
• IT service provider
• analytics provider
• CRM system provider
Data processors may process personal data solely on the basis of the Controller's instructions.
7. Data security
The Controller implements appropriate technical and organizational measures to protect personal data, in particular:
• preventing unauthorized access
• protection against data loss
• ensuring data integrity
• secure operation of IT systems
8. Rights of data subjects
Data subjects have the following rights:
Right to information: the data subject may request information about the processing of their personal data.
Right to rectification: the data subject may request the correction of inaccurate data.
Right to erasure: the data subject may request the deletion of their personal data.
Right to restriction of processing: the data subject may request restriction of processing.
Right to data portability: the data subject may request their data in a structured format.
Right to object: the data subject may object to the processing of their personal data.
9. Remedies
If a data subject believes that the Controller processes their personal data unlawfully, they may lodge a complaint with the competent data protection authority or bring the matter before a court.
In Serbia, the competent authority is:
Commissioner for Information of Public Importance and Personal Data Protection
10. Amendments to this notice
The Controller reserves the right to amend this privacy notice at any time.
The amended version will be published on the website.
If you would like, in the next step I can also prepare three very useful additional documents for this website:
1. Cookie Policy (separate page)
2. General Terms and Conditions (GTC)
3. Imprint / Legal notice