Poslednje ažuriranje: 03.08.2026.
0. O ovoj internet stranici
Ova stranica je prezentaciona stranica platforme. Kroz nju se podaci prikupljaju samo na dva načina.
Kontakt forma: ime i prezime, naziv biznisa, adresa elektronske pošte, broj telefona i tekst poruke koje sami unesete. Ti podaci se koriste isključivo da bismo odgovorili na Vaš upit i ne koriste se za slanje reklamnih poruka bez Vašeg pristanka.
Izbor jezika: stranica pamti da li ste izabrali srpski ili engleski, u lokalnom skladištu Vašeg pregledača. Taj podatak ostaje na Vašem uređaju i ne šalje se nama.
Stranica ne koristi kolačiće za praćenje, niti alate za analitiku i oglašavanje.
Pružalac usluge smeštaja stranice može voditi tehničke zapise o pristupu, uključujući IP adresu, radi bezbednosti sistema i otklanjanja grešaka.
Odeljci koji slede odnose se na mobilnu Aplikaciju.
1. Uvod
Ova Politika privatnosti objašnjava koji se podaci o ličnosti prikupljaju kroz mobilnu aplikaciju za zakazivanje termina (u daljem tekstu: Aplikacija), u koje svrhe se obrađuju i koja prava imate.
Obrada se vrši u skladu sa Zakonom o zaštiti podataka o ličnosti Republike Srbije ("Sl. glasnik RS", br. 87/2018).
Na Korisnike koji se nalaze u Evropskoj uniji primenjuje se i Opšta uredba o zaštiti podataka (Uredba (EU) 2016/679), pa se prava opisana u ovoj Politici u tom slučaju ostvaruju u skladu sa tom uredbom.
Izrazi Korisnik, Pružalac usluge, Zaposleni i Termin imaju značenje određeno Uslovima korišćenja.
2. Ko je rukovalac, a ko obrađivač
Pružalac usluge kod koga zakazujete termin (salon, ordinacija ili drugi privredni subjekt) je rukovalac Vašim podacima: on odlučuje zbog čega i kako se podaci koriste u njegovom poslovanju.
[NAZIV PRIVREDNOG SUBJEKTA], [ADRESA] (u daljem tekstu: Pružalac platforme) obezbeđuje tehničku platformu i podatke obrađuje kao obrađivač, po nalogu Pružaoca usluge i u meri neophodnoj za rad Aplikacije.
Za podatke o Vašem nalogu i za bezbednost sistema Pružalac platforme nastupa kao rukovalac.
3. Podaci koje prikupljamo
Podaci o nalogu: ime i prezime, adresa elektronske pošte, lozinka u kriptovanom obliku, izabrani jezik i status naloga (potvrđen, blokiran, obrisan).
Broj telefona, samo ako ga sami unesete pri registraciji ili kasnije u profilu.
Podaci o terminima: datum, vreme i trajanje termina, izabrana usluga, zaposleni i lokacija, status termina, kao i napomena koju sami unesete uz rezervaciju.
Obaveštenja i poruke: naslov i tekst obaveštenja koja dobijate kroz Aplikaciju, poruka koju Vam Pružalac usluge pošalje uz izmenu ili otkazivanje termina, ime zaposlenog i Vaše ime zapisano uz obaveštenje, vreme slanja i podatak o tome da li ste obaveštenje pročitali.
Podaci o uređaju za obaveštenja: token uređaja neophodan za slanje push obaveštenja, kao i osnovni tehnički podaci o uređaju.
Napomena: napomena uz rezervaciju je slobodan tekst koji vidi Pružalac usluge. Molimo Vas da u nju ne unosite podatke koje ne želite da podelite, posebno podatke o zdravlju.
4. Svrhe i pravni osnov obrade
Otvaranje i vođenje naloga, zakazivanje i otkazivanje termina i podsetnici pred termin — radi izvršenja ugovora, odnosno preduzimanja radnji na Vaš zahtev.
Obaveštenja o promenama termina i o novim porukama — radi izvršenja ugovora i legitimnog interesa da budete blagovremeno obavešteni.
Bezbednost naloga, sprečavanje zloupotreba i otklanjanje grešaka — radi legitimnog interesa za siguran rad sistema.
Ispunjenje zakonskih obaveza kada takve obaveze postoje.
Vaši podaci se ne prodaju, ne iznajmljuju i ne koriste za obuku sistema veštačke inteligencije.
Davanje podataka je uslov za korišćenje Aplikacije: bez imena i adrese elektronske pošte nije moguće otvoriti nalog ni zakazati termin, jer Vas Pružalac usluge bez njih ne može prepoznati. O zakazivanju, izmeni i otkazivanju termina obaveštavamo Vas kroz Aplikaciju i push obaveštenjima, pa broj telefona za to nije neophodan.
Broj telefona i napomena uz rezervaciju su dobrovoljni i možete ih izostaviti. Broj telefona služi samo da Vas Pružalac usluge pozove kada je to potrebno, na primer kod hitne izmene termina.
Odluke o Vama ne donose se automatizovano, niti se vrši profilisanje.
5. Kome se podaci dostavljaju
Pružaocu usluge kod koga zakazujete termin i njegovim zaposlenima, u obimu potrebnom za pružanje usluge. U odnosu na te podatke Pružalac usluge nastupa kao rukovalac, u skladu sa tačkom 2.
Google Ireland Limited, odnosno Google LLC, kroz uslugu Firebase Cloud Messaging, radi isporuke push obaveštenja na Vaš uređaj.
Pružaocu usluga smeštaja podataka (hosting) na kome radi sistem.
Nadležnim organima kada za to postoji zakonska obaveza.
6. Prenos podataka u inostranstvo
Slanje push obaveštenja podrazumeva prenos tokena uređaja i sadržaja obaveštenja Google-ovoj infrastrukturi, koja može biti van Republike Srbije. Prenos se vrši u države koje obezbeđuju primereni nivo zaštite ili uz odgovarajuće mere zaštite u skladu sa zakonom.
7. Rok čuvanja
Podaci o nalogu čuvaju se dok nalog postoji. Kada obrišete nalog, pristup Aplikaciji odmah prestaje i nalog se ne može vratiti.
Ime i prezime, adresa elektronske pošte, broj telefona, korisničko ime i lozinka čuvaju se još 30 dana nakon brisanja, radi sprečavanja zloupotrebe postupka registracije, a zatim se brišu ili nepovratno anonimizuju. Izuzetak su podaci koje smo dužni da čuvamo po zakonu.
Podaci o terminima ostaju kod Pružaoca usluge kao zapis o pruženoj usluzi, u periodu koji on odredi kao rukovalac. Po isteku roka iz prethodnog stava ti termini više nisu povezani sa podacima koji Vas identifikuju.
Obaveštenja i poruke čuvaju se uz nalog i podležu istom roku kao i ostali podaci o nalogu.
Token uređaja briše se pri odjavi sa naloga, brisanju naloga, brisanju aplikacije ili kada Google prijavi da token više nije važeći.
8. Vaša prava
Imate pravo na pristup podacima, ispravku netačnih podataka, brisanje, ograničenje obrade, prigovor na obradu i prenosivost podataka.
Nalog možete obrisati i sami, kroz Podešavanja u Aplikaciji. Brisanje je trajno i ne može se poništiti. Kasnije možete otvoriti nov nalog istom adresom elektronske pošte, ali raniji termini neće biti vraćeni.
Za ostale zahteve obratite se na kontakt iz tačke 12; odgovor dobijate najkasnije u roku od 30 dana. Zahtev možete uputiti nama ili Pružaocu usluge kod koga zakazujete. Ako se zahtev odnosi na podatke kojima je rukovalac Pružalac usluge, prosledićemo mu ga bez odlaganja i o tome Vas obavestiti.
Kada se obrada zasniva na Vašem pristanku, pristanak možete povući u svakom trenutku. Povlačenje ne utiče na zakonitost obrade vršene pre povlačenja.
Ako dođe do povrede podataka koja može da izazove visok rizik po Vaša prava, bićete o tome obavešteni bez nepotrebnog odlaganja.
Imate i pravo da podnesete pritužbu Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti Republike Srbije, a ako se nalazite u Evropskoj uniji, nadzornom organu države svog uobičajenog boravišta.
9. Bezbednost podataka
Komunikacija između Aplikacije i servera je kriptovana. Lozinke se čuvaju isključivo u kriptovanom obliku i nisu vidljive ni zaposlenima. Pristup podacima imaju samo ovlašćena lica, u obimu potrebnom za obavljanje posla.
Nijedan sistem nije potpuno bezbedan, pa se preporučuje korišćenje jedinstvene lozinke i njeno čuvanje u tajnosti.
10. Obaveštenja i izbor korisnika
Push obaveštenja možete isključiti u podešavanjima Aplikacije ili uređaja, u svakom trenutku. Time se ne ukidaju obaveštenja unutar same Aplikacije.
11. Maloletnici
Aplikacija je namenjena licima sa navršenih 13 godina. Podatke lica mlađih od 15 godina obrađujemo samo uz saglasnost roditelja ili staratelja.
Ako saznamo da je nalog otvorilo lice koje ne ispunjava ovaj uslov, nalog i podatke uz njega brišemo bez odlaganja. Ako smatrate da je dete otvorilo nalog bez Vaše saglasnosti, obratite se na kontakt iz tačke 12.
12. Izmene politike i kontakt
O bitnim izmenama ove Politike bićete obavešteni kroz Aplikaciju pre nego što izmene stupe na snagu.
Za sva pitanja u vezi sa zaštitom podataka obratite se na info@terminohub.com.
Last updated: 3 August 2026
0. About this website
This is the platform's presentation website. Data is collected through it in two ways only.
Contact form: the name, business name, email address, phone number and message text you enter yourself. This data is used solely to answer your enquiry and is not used for marketing messages without your consent.
Language choice: the site remembers whether you selected Serbian or English, in your browser's local storage. That value stays on your device and is not sent to us.
The site uses no tracking cookies and no analytics or advertising tools.
The website's hosting provider may keep technical access logs, including the IP address, for system security and troubleshooting.
The sections below concern the mobile App.
1. Introduction
This Privacy Policy explains what personal data is collected through the appointment booking mobile application (the App), why it is processed and what rights you have.
Processing is carried out in accordance with the Personal Data Protection Act of the Republic of Serbia (Official Gazette of RS, no. 87/2018).
For Users located in the European Union, the General Data Protection Regulation (Regulation (EU) 2016/679) applies as well, and the rights described in this Policy are then exercised in accordance with that Regulation.
The terms User, Service Provider, Employee and Appointment have the meaning given to them in the Terms of Use.
2. Controller and processor
The Service Provider you book with (salon, practice or other business) is the controller of your data: it decides why and how the data is used in its business.
[COMPANY NAME], [ADDRESS] (the Platform Provider) supplies the technical platform and processes data as a processor, on the instructions of the Service Provider and only as far as the App requires.
For your account data and for the security of the system, the Platform Provider acts as controller.
3. Data we collect
Account data: first and last name, e-mail address, password in encrypted form, chosen language and account status (verified, blocked, deleted).
Phone number, only if you enter it yourself during registration or later in your profile.
Appointment data: date, time and duration of the appointment, chosen service, employee and location, appointment status, and the note you enter yourself with a booking.
Notifications and messages: the title and text of notifications you receive through the App, any message the Service Provider sends you with a change or cancellation, the employee's name and your own name recorded with the notification, the time it was sent, and whether you have read it.
Device data for notifications: the device token needed to deliver push notifications, and basic technical data about the device.
Please note: the booking note is free text visible to the Service Provider. Please do not enter data there that you would rather not share, in particular health data.
4. Purposes and legal basis
Creating and running an account, booking and cancelling appointments and reminders before an appointment — to perform the contract, or to take steps at your request.
Notifications about appointment changes and new messages — to perform the contract and for the legitimate interest of keeping you informed in time.
Account security, abuse prevention and fault fixing — for the legitimate interest in running the system safely.
Meeting legal obligations where such obligations exist.
Your data is not sold, rented, or used to train artificial intelligence systems.
Providing data is a condition of using the App: without a name and an e-mail address an account cannot be opened and an appointment cannot be booked, because the Service Provider would not be able to identify you. Bookings, changes and cancellations are notified to you through the App and by push notifications, so a phone number is not needed for that.
The phone number and the booking note are optional and may be left out. The phone number is only used so that the Service Provider can call you where necessary, for example if an appointment has to be changed urgently.
No decisions about you are made by automated means, and no profiling is carried out.
5. Who receives the data
The Service Provider you book with and its employees, to the extent needed to provide the service. In relation to that data the Service Provider acts as controller, as set out in section 2.
Google Ireland Limited, or Google LLC, through Firebase Cloud Messaging, in order to deliver push notifications to your device.
The hosting provider on whose infrastructure the system runs.
Competent authorities where there is a legal obligation to disclose.
6. International transfers
Sending push notifications means transferring the device token and the notification content to Google infrastructure, which may be outside the Republic of Serbia. Transfers are made to countries providing an adequate level of protection or subject to appropriate safeguards under the law.
7. Retention
Account data is kept while the account exists. When you delete the account, access to the App ends immediately and the account cannot be restored.
Your first and last name, e-mail address, phone number, username and password are kept for a further 30 days after deletion, to prevent abuse of the registration process, and are then deleted or irreversibly anonymised. Data we are required to keep by law is the exception.
Appointment data stays with the Service Provider as its record of a service performed, for a period it determines as controller. After the period in the preceding paragraph, those appointments are no longer linked to data that identifies you.
Notifications and messages are kept with the account and are subject to the same period as the rest of the account data.
The device token is deleted on sign-out, on deleting the account, on uninstalling the app, or when Google reports that the token is no longer valid.
8. Your rights
You have the right to access your data, to rectify inaccurate data, to erasure, to restriction of processing, to object to processing and to data portability.
You can delete the account yourself, through Settings in the App. Deletion is permanent and cannot be undone. You may open a new account later with the same e-mail address, but earlier appointments will not be restored.
For other requests use the contact in section 12; you will receive an answer within 30 days at the latest. You may address a request to us or to the Service Provider you book with. If the request concerns data the Service Provider controls, we will pass it on without delay and let you know.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
If a data breach occurs that is likely to result in a high risk to your rights, you will be informed without undue delay.
You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia, or, if you are located in the European Union, with the supervisory authority of the country of your habitual residence.
9. Data security
Communication between the App and the server is encrypted. Passwords are stored only in encrypted form and are not visible even to staff. Only authorised persons have access to data, to the extent their work requires.
No system is completely secure, so we recommend using a unique password and keeping it secret.
10. Notifications and your choices
You can turn push notifications off in the App or device settings at any time. This does not remove messages inside the App itself.
11. Minors
The App is intended for persons aged 13 and over. Data of persons under 15 is processed only with the consent of a parent or guardian.
If we learn that an account has been opened by someone who does not meet this requirement, we delete the account and the data belonging to it without delay. If you believe a child has opened an account without your consent, use the contact in section 12.
12. Changes to this Policy and contact
You will be notified of material changes to this Policy through the App before they take effect.
For any questions about data protection, contact info@terminohub.com.