Personal data protection

At NOMAGO d.o.o., we are aware of the significance and importance of the protection of the personal data that you entrust to us, which is why we carefully store and manage your personal data.

This privacy policy refers to the processing of personal data at the company NOMAGO d.o.o. and provides information the company’s clients and visitors to the company’s website about the purposes of processing, the types of personal data we process, the rights we guarantee and the basis of personal data processing.

The company NOMAGO d.o.o. processes personal data in accordance with the provisions of Regulation (EU) 2016/697 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR), national legislation and the latest guidelines and standards for personal data protection.

In order to provide you with an adequate user experience and to be able to cooperate with you appropriately, we will ask you for certain personal data. We will always ask you to provide only those personal data that are indispensable for us, so that we can, according to your wishes, cooperate with you and use them in accordance with the purpose for which they were given. We are obliged to process the personal data which you entrust to us lawfully and fairly, therefore we will never use your personal data for other purposes, which are not compatible with the processing purposes for which your personal data were collected.

The GDPR regulation, adopted by the European Union, dictates high standards of personal data protection, which determine how your data are collected, stored, allowing you access to them, as well as to request erasure and much more. In accordance with the legislation and our awareness of the importance of this field, we have prepared explanations on the protection of your data and the rights you have as a data subject. Before providing your consent to the collection or processing of your personal data, please read this explanation carefully.

Contact details of the data controller


Full name of the Controller

NOMAGO storitve mobilnosti in potovanj, d.o.o.

Registered office

Vošnjakova ulica 3, 1000 Ljubljana

Tax number

SI 52398790

Registration number

5143373000

e-mail

info@nomago.si

Phone number

01 431 77 00

Website

www.nomago.si

Data Protection Officer

Contact details of the Data Protection Officer (DPO)

Phone number:  01 431 77 00
E-mail:  dpo@nomago.si

Personal data are any information relating to a particular or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, national identification number, location data, or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The controller processes the following types of personal data for precisely determined and predetermined purposes:

  • name and surname
  • permanent or temporary residence address
  • phone number
  • e-mail
  • age group
  • birth data (date, place and country of birth)
  • nationality
  • personal document data (number, date of issue and expiry, where and who issued it)
  • special health conditions
  • personal income data
  • student or pension status
  • GO card number
  • mobile application use analysis
  • website use analysis
  • e-mail response analysis
  • IP address of devices connected to the internet and the use of cookies on the website
  • date and time of access
  • bus geolocation

Your personal data are processed by the company only:

  • based on your explicit consent. (item (a), paragraph 1, Article 6 of the GDPR)
  • if the collection of your personal data is necessary in order for us to conclude a contract with you. (item (b), paragraph 1, Article 6 of the GDPR)
  • if the collection of personal data is required by legislation in force (e.g. regarding data on an issued invoice). (item (c), paragraph 1, Article 6 of the GDPR)
  • when the company NOMAGO d.o.o. has a legitimate interest in collecting your personal data, except when the interests or fundamental rights and freedoms of individuals overrides the company's interest. (item (f), paragraph 1, Article 6 of the GDPR)

The company NOMAGO d.o.o. processes personal data for the purpose of the conclusion and performance of a contract or on the basis of a request imposed by legislation in force for the following purposes:

PURPOSE

DESCRIPTION

Conclusion of a contract: Purchase, tickets for transportation, purchase of a monthly or an annual ticket.

We will process your data for the purpose of fulfilling the contractual obligation to carry out transportation on the basis of a daily, monthly or annual ticket.

Issuance of an invoice for the service performed


We will process your personal data in accordance with legal requirements for the purposes of issuing an invoice for the service performed.

Reservation of excursions, travel, accommodation

We will process your personal data for the purpose of making reservations for excursions, travel and accommodation.

Supporting clients in the reservation process and resolving potential issues

We process your personal data on a contractual basis for the purpose of resolving potential issues that arise during the performance of the contract in connection with the performance of contractual obligations, and for the purpose of providing support to clients during transport or with regard to accommodation.

Prevention and identification of misuse and actions that have the characteristics of a criminal offense

Your personal data are processed by the company for the purpose of preventing misuse and identifying actions that have the characteristics of a criminal offense and reporting data to competent authorities and services (prosecutor's office, police...)


PURPOSE

PERSONAL DATA AND RETENTION PERIOD

DESCRIPTION

Improving security and preventing breaches of the company's information systems

IP address

The company processes your personal data for the purpose of preventing breaches of the company's information systems, attacks on the company's websites and identifying critical points in the company's information system, as well as improving information security in the company.

Use of cookies on company websites

Necessary cookies

Storage period: during the use of the company's websites, or until receipt of the withdrawal of consent to the use of cookies.

In order to ensure the smooth functioning of the website, the company uses cookies, based on item (f) of the first paragraph of Article 6 of the General Regulation. Cookies allow us to adapt the website to your needs and make it easier for you to use, to provide you with content that is important to you, and not to provide you with content that is not important to you or that is inappropriate.

By using the website, you agree to the use of necessary cookies. Necessary cookies are necessary for websites to function; we do not store your personal data in them, and they are used for the normal and proper functioning of websites. We use optional cookies, which are necessary for the functioning of various interfaces, based on your consent.

Market research, analytics and improving our services

Logs, website users’ IP addresses, users’ navigation on websites. Cookies required for basic Google Analytics. Data are processed anonymously.

Storage period: The data we process for the purpose of market research and improvement of our services will be processed exclusively until the cessation of the purpose of carrying out market research and establishing important facts for the improvement of our services.

We use your personal data for the purpose of performing analyses in order to improve our services, to determine potential errors in our systems and websites, to determine the effectiveness of our websites and to ensure a better quality of services and website functioning. The company carries out general statistical data processing (basic Google Analytics) regarding the general behavior of customers and their orders. For this purpose, the company processes the data of natural persons in such a way that it is not possible to identify them.

Promotional activity and trading of products and services with existing clients

Name and surname, phone number, address, e-mail address

Storage period: We will retain data for the purpose of trading with existing clients for as long as is necessary for the realization of the purposes of conducting marketing and trading activities, i.e. until we receive the withdrawal of your consent to the processing of personal data for the purpose of trading.

The activity of trading and promotion in relation to existing clients includes primarily:

  • Displaying content customized for you on company websites, taking into account your age and wishes,
  • Participation in prize contests and promotional activities of the company,
  • sending practical advice, useful information and advice regarding transport, accommodation, landmarks...


Determining the geolocation of buses and application users in order to ensure the service of detailed monitoring of bus arrivals and departures at bus stops and the current location of buses in the NOMAGO Intercity application.

Resolution of complaints and compensation requests submitted by travelers.

Geolocation of buses

Location data of your mobile device,

E-mail

Phone number

Storage period: The data are stored for 5 years from the procedure for the period of consideration of the clients’ complaints or compensation requests, i.e. until the conclusion of the initiated legal proceedings.

The company NOMAGO d.o.o. makes it possible for you to use the Intercity application to track the geolocation of buses using your mobile device in order to ensure the service of detailed monitoring of bus arrivals and departures and tracking the current bus location. Data on your bus location will also be used in the event of a complaint or compensation claim. You decide for yourself in the application whether you will allow the application to track your geolocation.

The company NOMAGO d.o.o. will obtain your personal data:

  • from yourself: if you forward your personal data to us yourself for the specific purpose of processing,
  • from third parties: in the event that your personal data are forwarded to us by a third party (for example, a friend buys a ticket in the name of 4 friends and forwards their names and surnames to us, the father books a travel arrangement for the whole family and enters the personal data of all family members...).

The personal data obtained from you either when using the NOMAGO d.o.o. websites, or on the basis of your express consent, will be stored in an electronic or physical collection of personal data (depending on the form of the personal data obtained). The collections are adequately protected by technical, organizational and logical-technical measures. Only persons authorized by the company NOMAGO d.o.o. have access to the collections of personal data.

The personal data that you digitally forward to us are stored on servers at the company's headquarters, and may also be stored at the companies whose software we use. For example, the provider of an e-mail communication software tool stores data on the addressees. The company Nomago d.o.o. cooperates exclusively with the leading providers of such software tools, and before each instance of cooperation we agree, i.e. ensure that the providers of software tools do not have any right to access the data. We also check whether they have adequately organized data protection mechanisms, as well as whether there is assurance that they will never use any of our clients’ data.

The nature of our business is such that, in certain cases, we have to share your personal data with other contractual processors and controllers whom we cooperate with.

  • Providers of hotel services and other accommodation
  • Contractual providers, who ensure the development of IT services, information security and the development of applications used by the company NOMAGO d.o.o.
  • Cloud service providers
  • Contractual providers, who carry out bus and other transport operations for the company Nomago d.o.o.
  • Airline carriers
  • Contractual processors, who provide the sale of tickets for the company NOMAGO d.o.o.
  • Contractual processors offering tourist services and accommodation
  • Contractual processors that perform payment services and offer payment systems
  • Insurance companies
  • Contractual processors that perform tourist guide services

NOMAGO d.o.o. works only with verified contractual processors, who guarantee adequate protection of your personal data, with a guarantee of appropriate technical and organizational measures, and process your personal data in compliance with the General Data Protection Regulation.

The provider will not forward your personal data to unauthorized third parties.

Contractual processors may process personal data only within the framework of the controller's instructions and may not use personal data to pursue any personal interests.

The controller strives every day to ensure the adequate security of personal data processing, which is why they constantly update and upgrade security systems to ensure secure personal data processing. Your personal data are protected against loss, destruction, unauthorized disclosure and access by unauthorized persons throughout the whole period of processing.

In the event of travel or transportation to third countries, NOMAGO d.o.o. will also have to forward your data to third countries to various contractual processors, such as accommodation providers (hotels, apartments), transportation providers (airlines) and others.

The company NOMAGO d.o.o. always cooperates with providers in third countries who guarantee adequate protection of personal data.

The company NOMAGO d.o.o. guarantees you the following personal data protection rights:

1. Right to withdraw consent

In the event that you, as an individual, have given consent to the processing of personal data for one or more personal data processing purposes, you have the right to withdraw your consent at any time.

After receiving the withdrawal of your consent for one or more processing purposes, the controller will immediately stop processing your personal data for that purpose.

The withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing of personal data concerning you until your withdrawal or the use of such personal data for the purposes determined by law or a contract.

2. Right to access personal data concerning you that are processed

You have the right to receive confirmation from the controller as to whether personal data concerning you are being processed, as well as access to personal data concerning you and the following information: purpose of processing, type of personal data concerning you, users of your personal data, intended period of storage of personal data, source of personal data.

3. Right to have inaccurate personal data concerning you rectified

At any time, you have the right to request the controller to rectify or complete incorrect or incomplete personal data concerning you.

The controller will notify you of the rectification of your personal data without delay.

4. Right to restriction of personal data processing

You have the right to request that the controller restrict the processing of your personal data in case of their inaccuracy, illegality, cessation of the purpose of processing or submission of a complaint.

5. Right to erasure of personal data (“right to be forgotten”)

You have the right to request that the controller erase the personal data concerning you that they process without undue delay.

In case of erasure of personal data on the basis of your request, the controller will inform you about the deletion.

6. Right to object

In addition to the right to withdraw consent, you may, in case your personal data are used for information purposes or direct trading, request in writing the cessation of the use of your data for this purpose at any time. In the event of an objection to processing for trading purposes, the controller will immediately cease the processing of personal data for trading and information purposes.

7. Right to data portability

You have the right to have the personal data concerning you that are processed by the controller directly transferred from the controller to another controller, when technically feasible.

You can exercise all of the aforementioned rights from this statement on the basis of a request to exercise a particular right. You can submit a request to exercise your rights in physical or electronic form. A request to exercise rights by mail is sent to the address NOMAGO, storitve mobilnosti in potovanj, d.o.o., Vošnjakova ulica 3, 1000 Ljubljana, or to the e-mail address: info@nomago.si, or dpo©nomago.si.

In the event of a personal data breach, you have the right to lodge a complaint against the controller with the competent supervisory authority at the address: Informacijski pooblaščenec, Zaloška 59, 1000 Ljubljana or at: gp.ip@ip-rs.si.

Despite the great effort to protect data, unfortunately, there is no complete protection. There is always the possibility that a particularly serious breach of our IT systems or an unpredictable error could jeopardize the protection of your personal data.

In case of a threat to the protection of your personal data and in the event that it is likely that such a threat to the protection of personal data could cause a great risk to your rights and freedoms, we will notify you thereof without delay.

In case of a threat to the protection of personal data, we will notify the competent authority without undue delay, and no later than 72 hours after becoming aware of the threat to the protection of your personal data.

We reserve the right to adjust or update the personal data protection statement without prior notice in accordance with changes in legislation. The current version published here is valid every time.

Any change to this privacy policy will be published on this website.

Version: 2.0 of 17 September 2019

NOMAGO, storitve mobilnosti in potovanj, d.o.o.
Vošnjakova ulica 3
1000 Ljubljana
e-mail address: info@nomago.si
phone: +386 1 431 77 00

Most searched information
or send an email to
or send an email to