CabX

Privacy policy

This Privacy Policy explains how Mediatorium d.o.o. ("Service Provider", "we") collects, uses and protects users' personal data ("you") when using the mobile application ("Application").

1. Data Controller

The controller of your personal data is:​
Mediatorium d.o.o.​
Address: Kelekovići 5, Rakitje​​
VAT: 76889470557​​
E-mail: info@mediatorium.co

2. What data we collect

We collect and process only data necessary for the functioning of the Application:

  • User account data (name, surname, e-mail, password, vehicle data).
  • Subscription and payment data (Apple App Store or Google Play Store transactions).
  • Trip data (distance, duration, price).
  • Data for QR code generation (driver identification and basic trip prices).
  • FINA certificate provided by the user (used exclusively for fiscalization).
  • Technical data (IP address, device, application version) for security and service improvement.

3. Purpose and legal basis of processing

We process your data for the purpose of:

  • enabling the use of the Application (legal basis: contract performance, Art. 6(1)(b) GDPR),
  • billing services through the App Store and Google Play (contract and legal obligation),
  • invoice fiscalization using FINA certificate (legal obligation, Art. 6(1)(c) GDPR),
  • displaying trip prices to passengers via QR code (legitimate interest),
  • technical maintenance and improvement of the Application (legitimate interest).

4. Data storage

  • Personal data is kept as long as necessary to fulfill the purpose for which it was collected or as required by law.
  • Payment and invoice data is kept for a minimum of 11 years (in accordance with tax regulations).
  • FINA certificates are kept in a secure form and used exclusively for fiscalization. After expiration, the certificate is deleted or replaced with a new one.

5. Data sharing

We share your data only when necessary:

  • with billing service providers (Apple, Google)
  • with hosting and IT service providers,
  • with state authorities when required by law.

Data is not sold to third parties.

6. User rights (GDPR)

The user has the right to:

  • access their data,
  • correct inaccurate data,
  • request deletion ("right to be forgotten"),
  • restrict processing,
  • transfer data to another data controller,
  • object to processing.

You can submit requests to: info@cabx-taxi.eu
If you believe your rights have been violated, you can contact the Personal Data Protection Agency (AZOP).

7. Data security

We take appropriate technical and organizational protection measures to prevent loss, misuse or unauthorized access to your data and certificates.

8. Changes to the Privacy Policy

This Policy may be updated from time to time. Users will be notified of significant changes through the Application or by email.

9. Contact

For all questions about data protection, contact:​
Mediatorium d.o.o.​
E-mail: info@mediatorium.co and/or info@cabx-taxi.eu