Skip to content

Privacy policy

1. Who is responsible for your data

The controller of your personal data is Murić Trans, Donja Vidovska 140, 77230 Velika Kladuša, Bosnia and Herzegovina. Contact for all data questions: murictrans@hotmail.com.

This policy explains how we process data when you use this website, book a trip or write to us. We apply the Law on Personal Data Protection of Bosnia and Herzegovina (2025) and, for passengers in the European Union, the General Data Protection Regulation (GDPR).

2. What data we process

We process only the data we need:

  • Reservations: first and last name of each passenger, the chosen departure (route, date, time, stop), seats and fare category, the contact person's phone number and — if given — email, the site language and any note you write.
  • Passengers' passport or ID card number, when you give it or the carrier asks for it: to identify passengers on international lines and to recognise returning passengers.
  • Passengers' date of birth, when you give it or the carrier asks for it: for the passenger list and border checks on international lines, and for children's fares.
  • Contact form: name, phone and/or email, topic and message.
  • Technical data: IP address and basic request data (e.g. time, browser) in server logs and to protect against abuse (request rate limits).
  • Your browser's sessionStorage temporarily keeps a reservation in progress so a refresh doesn't lose it. This is not a cookie; it is cleared when you close the tab or finish the reservation.

3. Why we process data (purposes and legal bases)

  • Performing the contract of carriage and the reservation: recording the booking, the driver's passenger list, contacting you about the trip (Art. 6(1)(b) GDPR and the corresponding provisions of BiH law).
  • A carrier's legal obligations: passenger lists on international lines, accounting and tax records (Art. 6(1)(c) GDPR).
  • Answering your enquiry from the contact form or by email (Art. 6(1)(b) and (f) GDPR).
  • Security and proper operation of the website, preventing abuse (legitimate interest, Art. 6(1)(f) GDPR).

Passenger names and a phone number are needed to book; without them we cannot make a reservation. We don't use the data for marketing, don't sell it and don't build profiles.

4. Who processes data on our behalf

Data is processed only by service providers with whom we have a data processing agreement and who may use it only on our instructions:

  • Šahbaz Group d.o.o., Maglaj, Bosna i Hercegovina — the “Velocity Hub” reservation and transport management system. Data is stored on Google Cloud / Firebase (Google) infrastructure.
  • Resend (Resend, Inc., SAD) — sending booking confirmation emails and contact form messages.
  • Vercel (Vercel Inc., SAD) — website hosting.

Murić Trans drivers and staff see passenger data as far as they need it for the journey. We disclose data to authorities (e.g. border police) only where the law requires it.

5. Transfers to other countries

Murić Trans is based in Bosnia and Herzegovina. When you book with us from the EU, your data is transferred to BiH because this is necessary to perform the contract of carriage (Art. 49(1)(b) GDPR).

The email and hosting providers, and Google as infrastructure provider, may also process data in the United States. Such transfers rely on the European Commission's standard contractual clauses or, where applicable, the EU-US Data Privacy Framework.

6. How long we keep data

  • Reservation data: 2 years after the travel date, unless rules (e.g. accounting) require longer.
  • Contact form messages and emailed enquiries: 12 months.
  • Technical server logs: up to 30 days.

After that we delete the data or anonymise it permanently.

7. Cookies and tracking

This website uses no analytics or advertising cookies and does not track you across other sites. Only one technically necessary cookie is used, to remember your chosen language.

On the Contact page we show a Google Maps map. When it loads, Google receives your IP address and may set its own cookies; Google's privacy policy applies. Links to Google Maps, WhatsApp and Facebook lead to those services.

8. Your rights

You have the right to:

  • access your data and receive a copy,
  • have inaccurate data corrected,
  • erasure and restriction of processing,
  • data portability,
  • object to processing based on legitimate interests.

Send your request to murictrans@hotmail.com; we reply within one month. You may also lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina and, if you live in the EU, with the data protection authority of your country (e.g. in Germany or Austria).

9. Security

The website works only over encrypted connections (HTTPS). Reservation system keys are used only on the server and never reach the browser. Only people who need it for their work can access the data.

10. Changes to this policy

We may update this policy when the law or our services change. The current version, with the date of the last change, is always published here.