Privacy policy
1. Data controller
The data controller is Belvi d.o.o.. Contact for any data-protection matter: office@belvi.rs.
Full controller details: Preduzeće za trgovinu i usluge export-import BELVI DOO Beograd, Jurija Gagarina 12b, Novi Beograd, PIB 101709810, company no. 06037763.
Data Protection Officer: Ana Tomašković, zastita.podataka@belvi.rs, +381 11/322-3300.
2. Data we collect
Contact data: first and last name, e-mail address, phone number.
Traveller data needed for the booking and trip: name, date of birth, passport or ID number, and where legally required a national ID number (e.g. for the fiscal receipt or border/contract obligations).
Payment data and booking data.
Technical data: IP address, device data and cookies (see the cookies section).
3. Purposes and legal basis
Performance of the travel contract and providing the services you requested (processing is necessary to enter into and perform the contract).
Compliance with legal obligations: fiscalisation, e-invoicing (SEF), filings to state systems (CIS/eTurist), and tax/accounting law.
Legitimate interest: system security and fraud/abuse prevention.
Consent: for marketing messages and for non-essential (analytics) cookies. You may withdraw consent at any time.
4. Retention
Contract and financial data are kept in line with tax and accounting law.
Documentation on sold travel packages, including the travel contract and traveller data, is kept in our booking system for 2 years, after which it is deleted.
Job applications are kept for up to 1 year, for later assessment of hiring needs.
Data processed on the basis of consent is kept until consent is withdrawn.
Technical logs and non-essential cookies are kept for the periods stated in the cookie policy.
5. Processors and recipients
Data may be processed on our behalf by carefully selected processors: the hosting provider, an error-reporting tool and an e-mail delivery service. A data-processing agreement is in place with each of them.
State information systems (fiscalisation, SEF, CIS/eTurist) receive data solely to meet a legal obligation.
We do not sell your data and do not pass it to third parties for marketing purposes.
6. International transfers
Data is processed within the Republic of Serbia and the European Economic Area.
Where processing outside that area does occur, the transfer is made only under the safeguards required by the Serbian Personal Data Protection Act. The list of recipients and the legal basis for the transfer are available on request, at the address in section 9.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection.
You may withdraw any consent at any time, without affecting the lawfulness of processing before withdrawal.
You may lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection.
To exercise your rights, contact: office@belvi.rs.
8. Cookies
We use essential cookies to run the site (session, security) and, with your consent, analytics cookies. You give consent via the banner on your first visit and can change your choice by clearing cookies in your browser.
9. Contact
For any question about this policy, contact: office@belvi.rs.
Data Protection Officer: Ana Tomašković, zastita.podataka@belvi.rs, +381 11/322-3300.
10. Changes to this policy
We may update this policy from time to time. Last updated: 22/09/2026.