Privacy policy

In short: Dostupni Beograd shows no ads, uses no visitor tracking tools and does not sell data. You can use the site without an account. We keep data about you only when you give it to us (an account, a rating, a problem report, a message) and only for as long as it is needed.

Who processes the data

The data controller is [[FILL IN: full name of the organisation]], [[FILL IN: address]], tax ID [[FILL IN: PIB]], registration number [[FILL IN: MB]]. For any question about your data write to [[FILL IN: privacy email]].

What we collect and why

Using the site without an account

• Your needs (e.g. wheelchair, low vision) are stored only on your device, in a cookie, so the scores can be adjusted to you.
• Settings (script, text size) are stored on your device.
• Location: when you choose "Accessible near me", your browser asks for permission. The location is used only in your browser to move the map to you. It is never sent to our server or stored.
• Accessible route: when you ask for a route to a place, the starting point (your location or the point you tapped on the map) is sent through our server to OpenRouteService, which calculates the route. We do not store it.
• Saved pages: places you have opened are kept on your phone so you can read them offline. They are removed when you sign out or clear the site data in your browser.

Account

For an account we keep your email address, first name (last name is optional), your password in protected form (we never see it), your chosen needs, favourite places and language. The account lets you rate places and keep favourites. Basis: your consent at registration and providing the service you asked for.

Ratings and experiences

When you rate a place we keep the rating, the text and the visit date. Your first name is shown publicly with the rating. A moderator reviews ratings before they are published.

Problem reports

A report contains a description and, if you choose, your name, email address (so we can reply), a photo and a point on the map. Hidden data in photos (such as GPS location and phone model) is removed automatically. We also keep the IP address to protect against abuse.

Contact form messages

We keep your name, email address, message and IP address, to reply and to protect the form against abuse.

Security

We record sign-in attempts (email, IP address, success) to protect accounts against password guessing. To protect forms against automated sending we use a protected fingerprint of the IP address (on the contact form also of the email address) from which the address cannot be read, and your browser briefly computes a protection check before sending. Messages that look like spam are kept apart for a moderator to check and are deleted after 30 days.

Cookies and data on your device

• db_sess: sign-in and form security. Deleted when you close the browser.
• needs: your chosen needs, 1 year.
• script: Latin or Cyrillic, 1 year.
• Browser storage: text size and pages saved for offline reading.

We use no analytics or advertising cookies, which is why the site shows no cookie banner.

Outside services

For the site to work your browser also connects to these services. Like any site you open, they see your IP address:

• OpenFreeMap (openfreemap.org): map images. It sees the part of the map you look at.
• OpenStreetMap: the source of the map data and of points such as toilets and stops. It receives no data from you.
• OpenRouteService (openrouteservice.org, HeiGIT, Heidelberg, Germany): calculates accessible routes. It only receives the starting point and the place you are going to, through our server, without your IP address.
• unpkg.com: the map display library.
• [[FILL IN: email provider]]: sends account confirmation and password reset emails.
• [[FILL IN: hosting provider]]: the server the site runs on.

How long we keep data

• Account, ratings and favourites: while you have the account. Accounts never confirmed are deleted after 30 days.
• Problem reports and their photos: 2 years after they are closed (reports marked as spam after 30 days).
• Contact form messages: 2 years (spam after 30 days).
• Sign-in attempts: 30 days. Protected IP fingerprints: 2 days.
• Admin change log: the IP address is removed after 1 year.

Deletion runs automatically every day.

Who sees your data

Only our team (editors and moderators) sees data, and only what they need for their work. We do not sell data or give it to others, except where the law requires it (e.g. a court order).

Your rights

You have the right to know which data about you we keep, to correct it, to ask for deletion or restriction, to object, to receive your data in a portable form and to withdraw your consent at any time. Write to [[FILL IN: privacy email]]. We reply within 30 days at the latest.

If you believe your rights were violated, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).

Protecting data

The site works only over an encrypted connection (https). Passwords are kept only in protected form. Only authorised team members can open the admin area, and every change they make is recorded.

Children

Accounts can be opened by people over 15. Younger people need the consent of a parent or guardian.

Changes

We will announce important changes to this policy on the site. Last change: 23 October 2026.

This policy follows the Law on Personal Data Protection of the Republic of Serbia.