na granici. ← Back to the planner

YOUR DATA

Privacy policy

What data we use, why we need it and how you can manage it.

Version:

You can browse the planner and public cameras without an account. We read your device location only when you request that feature and permit it in your browser. For questions and requests, contact kontakt@nagranici.com.

1. Who processes your data

The controller of data processed by Na granici to operate nagranici.com is Na Granici. For privacy questions, data corrections and account requests, contact kontakt@nagranici.com.

This policy covers processing within the Na granici website. External services and original camera providers publish their own notices about processing under their control.

2. What data we use and why

Browsing and security

The server processes your IP address, request date and time, requested page URL, response status, browser information and, when provided, the referring page. Technical data is used to deliver content, detect errors, limit abuse and protect the system. Request URLs may contain the text you enter in searches.

Accounts and sign-in

When registering, you provide a name, email and password. Passwords are stored as hashes, not readable text. We also process account creation and update times, email verification status when available, account permissions and technical session data. Sign-in attempts and IP addresses are used to protect account access.

If you choose Google sign-in, Google provides an account identifier, name, email and confirmation that the email is verified. We do not receive your Google password. The access token is used to verify your identity; a Google identifier is stored in your account to link sign-in.

Place search and journey planning

We use your search text to find places. To calculate routes, we process the selected starting points and destinations, their names, countries and coordinates. This data is sent to the services described below and may be temporarily cached for faster responses. Your selected starting point and destination are also stored in your browser’s local storage.

When you select the current-location option and grant browser permission, coordinates are sent to our server and the place-search service. Denying permission does not prevent manual entry. The planner does not continuously track your movement in the background.

Contact

If you contact us, we process your email, message and any information you voluntarily provide to respond or resolve your request. Do not send passwords, document copies or unnecessary information about other people.

3. Purposes and legal basis of processing

We process data needed to create an account, sign in and perform requested functions to provide the service at your request. Technical data used to protect the site, fix errors and prevent abuse is processed on the basis of our legitimate interest in keeping the service safe and functional, with due regard for your rights.

Access to device location is based on your choice and permission, which you can withdraw in browser settings. When processing requires separate consent, we request it separately and it can be withdrawn. We may also process data to meet a specific legal obligation or comply with a lawful request from a competent authority.

An account is not required for public features. Account features cannot be used without the information needed for registration and access verification. Accepting the terms of use or simply visiting the site does not constitute consent to every possible type of processing or to marketing messages.

4. Who receives your data

Authorised site maintainers and hosting, technical infrastructure and email providers may access data to the extent needed for their tasks. The planner uses the following services:

  • Google: sign-in if you choose it; Google Maps opens only when you select its link. Google Analytics, when configured, loads only after you accept analytics. Google privacy policy.
  • openrouteservice / HeiGIT: place-search text and coordinates for reverse geocoding. HeiGIT privacy policy.
  • Mapbox: coordinates and parameters needed to calculate a route, sent through our server. Mapbox privacy policy.
  • OpenStreetMap: your browser downloads map tiles directly from the map service. The service receives technical request data and may infer which part of the map you are viewing. OpenStreetMap privacy policy.
  • UNPKG: when the planner opens, your browser downloads the map library, transmitting the usual technical information associated with an internet request. UNPKG.

Requests sent from our server do not intentionally forward account names or emails to route-planning services. When your browser contacts an external service directly, that service receives your IP address and other information needed to deliver content.

External providers may process data on infrastructure outside Serbia, including elsewhere in Europe and in the USA. Their processing locations and safeguards are described in the policies above. Contact us by email for information about specific recipients, transfers and safeguards in processing for which we are responsible. This policy itself does not constitute your consent to an international transfer.

5. Cookies and device storage

We remember your choice of Serbian or English in the site_locale cookie for up to one year. Changing the language does not change your analytics-cookie choice.

We use technical cookies for sessions, maintaining sign-in and protecting requests against abuse. Sessions are configured to expire after approximately 120 minutes of inactivity; new requests may extend the expiry time. The request-protection cookie may be named XSRF-TOKEN.

In localStorage in your browser, under the key na-granici-journey, stores your selected places and the coordinates of your starting point and destination so the planner can be reopened. This record has no automatic expiry and remains until you remove site data in your browser. On a shared device, clear site data when you finish.

Google Analytics and your choice

When Google Analytics is configured, we use it only with your consent to analyse public-page visits and improve the site. It may process information about pages viewed, referral sources, devices, browsers and interactions, together with technical request data sent to Google. This integration does not send account names or emails or enable advertising personalisation.

We do not load Google Analytics before acceptance or after rejection. Sign-in, the planner and cameras work without analytics consent. This setting does not stop other external services needed for maps or sign-in, described above.

We remember your “Accept analytics” or “Decline analytics” choice in browser storage for up to 180 days. If persistent storage is blocked, your choice may last only until the tab closes. When analytics is configured, “Privacy settings” lets you change your choice. On withdrawal, we remove accessible analytics cookies for this site and reload the page without analytics. Withdrawal does not affect the lawfulness of earlier processing and does not itself delete data already sent to Google.

Analytics cookies may have their own expiry periods. Google Analytics data retention depends on account settings and the type of data. Contact us by email for information about the current retention period and to exercise your rights. Google privacy policy and processing of data from partner websites also explain Google’s processing.

You can delete or restrict cookies, local storage and location permissions in browser settings. Blocking technical cookies may prevent sign-in and request submission. The site currently uses no dedicated advertising-tracking tools; introducing them would require separate notice and consent where necessary.

6. Cameras and automated analysis

We retrieve border-camera images from external sources to display traffic and estimate the visible queue. Images may include people, vehicles and registration plates. Public availability of a camera does not mean its images cannot contain personal data.

Processing on our site informs users about traffic and analyses vehicle counts and movement on the basis of our legitimate interest in that purpose. The analysis is not intended to identify people or vehicle owners, and estimated waiting time is not a decision about an individual traveller’s rights. We do not use it to verify identity or authorise border crossings.

The original provider is responsible for processing performed by its camera. You can contact us about the image copy and display on Na granici. When requesting review or removal of content relating to you, identify the camera, time and page URL. Do not publish additional personal information in your report.

7. How long data is retained

  • Account: while needed for account use; you can request account closure and deletion by email. If information must be retained because of a legal obligation, security incident or legal claim, we will explain the reason and retention criteria.
  • Session: sessions and their cookies expire after a period of inactivity. Expiry does not mean that all technical records are immediately physically removed.
  • Place-search cache: results are cached for up to 24 hours. Other technical caches have expiry periods determined by their function and may be refreshed by new requests.
  • Web-server access and error logs: rotated daily, retaining up to 14 previous rotations. Other diagnostic records are kept as needed to investigate an error or incident; you can request retention information for a specific record.
  • Camera images and derived views: scheduled cleanup every two hours removes images older than 24 hours. Cleanup and workers pause from 01:00 to 04:00 Belgrade time, so eligible images are then removed during the next permitted cycle. Protected calibration or verification samples may be retained longer. Result history and analysis reports are retained separately and are not deleted by the same procedure.
  • Messages and requests: as long as needed to respond, track handling and legitimately protect legal interests. Backups, when available, may follow a separate replacement cycle and are not the same as active data.

Retention is limited by the processing purpose. If you request deletion or information about specific data, we will explain any exceptions or technical limitations rather than promise its immediate removal from every record.

8. Your rights and how to exercise them

Under applicable rules, you can request access to and a copy of your data, correction, deletion, restriction of processing and portability where statutory conditions are met. You can object to processing based on legitimate interest and withdraw consent without affecting the lawfulness of earlier processing.

Send your request to kontakt@nagranici.com, preferably from the address linked to your account. Briefly describe your request. We verify identity proportionately and do not request more data than necessary.

We provide information about the action taken without undue delay, within 30 days at the latest. If complexity or the number of requests justifies an extension, we will explain the reasons and revised deadline within that period. If you believe your rights have been infringed, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection, and use other available legal remedies.

9. Data security and policy changes

We apply measures including HTTPS transport, password hashing, access controls and sign-in attempt limits. No system offers absolute protection; report suspected unauthorised access to our contact email without sending your password.

We update this policy when processing or services change. A dated new version will be published here; we will provide additional notice or request separate consent when necessary.