Privacy Policy — Walk Belgrade

Last updated: September 2026

1. Who We Are and How to Contact Us

Data controller:
Milica Kapeli PR City Walk Beograd
Milentija Popovica 43, Novi Beograd, Republic of Serbia
Tax ID: 115848614
Email: [email protected]

For any questions, requests or complaints regarding your privacy, please contact us at: [email protected]

2. What Data We Collect and Why

Account data
We collect: email address and password
Purpose: creating and managing your user account, sending purchase confirmations and app notifications

GPS location
We collect: device location during an active walk
Purpose: automatically triggering audio guides when you reach a specific point on the route

Purchase data
We collect: which tours you have purchased
Purpose: providing access to purchased content across all your devices

Technical data
We collect: device type, operating system version
Purpose: improving app stability and quality

3. Legal Basis for Processing

Processing of your data is based on the following legal grounds in accordance with Serbian Personal Data Protection Law and GDPR:

Performance of a contract — processing of account and purchase data is necessary to provide the services you requested
Consent — use of GPS location is based on your explicit consent, which you may withdraw at any time
Legitimate interest — processing of technical data to improve app stability and security

4. GPS Location

Walk Belgrade uses GPS location exclusively during an active walk to automatically trigger audio guides at each point on the route.

Important:

Location is NOT collected in the background when you are not actively using the app
Location is NOT stored on our servers
Location is used solely to trigger audio content in real time

You grant consent for GPS location use when you first launch the app. You may withdraw consent at any time through Settings > Privacy > Location on your device. In that case, the GPS feature will not work, but all other app features remain available.

5. Purchase and Payment Data

In-app purchases are processed exclusively through:

Apple App Store (for iOS users)
Google Play (for Android users)

Walk Belgrade does not collect, view or store payment card data or any other payment information. All financial data is processed directly by Apple or Google in accordance with their privacy policies.

Walk Belgrade stores only a record of which tours you have purchased, in order to provide access to your content.

6. Third Parties and SDKs

Walk Belgrade uses the following third-party services:

Mailgun (Sinch)
Role: sending system emails (registration confirmation, purchase confirmation)
Data: user email address
More info: mailgun.com/privacy-policy

Google Maps
Role: displaying maps and navigation within the app
Data: Google Maps is aware that a user is using the map, but does not receive the user's identity or personal data from Walk Belgrade
More info: policies.google.com/privacy

Cloudflare
Role: delivering audio content via CDN network
Data: technical data necessary for content delivery
More info: cloudflare.com/privacypolicy

Apple App Store / Google Play
Role: processing payments and distributing the app
More info: apple.com/legal/privacy / policies.google.com/privacy

Walk Belgrade does not use advertising SDKs, cross-app user tracking, or sell data to third parties.

7. Where Data Is Stored

Your data is stored on servers operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — within the EU, in accordance with GDPR data protection standards.

Mailgun processes data in accordance with EU standards. Any transfer of data outside the EU/EEA is carried out only with appropriate safeguards in accordance with applicable regulations.

8. How Long We Keep Your Data

Account data: retained for as long as your account is active. After account deletion, data is erased within 30 days, except for data we are legally required to retain.

Purchase data: retained for as long as necessary to provide the service and fulfil legal and accounting obligations.

Technical data: retained in anonymised form for app improvement purposes.

9. Your Rights

Under Serbian Personal Data Protection Law and GDPR, you have the following rights:

Right of access — you may request to see the data we hold about you
Right to rectification — you may request correction of inaccurate data
Right to erasure — you may request deletion of your account and data
Right to restriction of processing — you may request temporary restriction of processing of your data
Right to data portability — you may request your data in a machine-readable format
Right to object — you may object to processing based on legitimate interest
Right to withdraw consent — you may withdraw consent for GPS location at any time

For all requests, contact us at: [email protected]

We will respond without undue delay, and no later than 30 days from receipt of your request. Where permitted by law, this period may be extended by a further 60 days, and you will be notified accordingly.

10. Data Security

Walk Belgrade applies TLS encryption during data transmission and appropriate measures to protect data stored on our servers.

We recommend that you protect your password and contact us at [email protected] if you suspect any unauthorised access to your account.

11. Children

Walk Belgrade is not intended for persons under the age of 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. If you are a parent or guardian and believe your child has used the app, please contact us at [email protected].

12. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. We will notify you of any significant changes by email or via an in-app notification. The date of the last update is shown at the top of this document.

13. Supervisory Authority

If you believe that the processing of your data is not in accordance with the law, you have the right to lodge a complaint with the supervisory authority.

In the Republic of Serbia, the supervisory authority is:
Commissioner for Information of Public Importance
and Personal Data Protection
Bulevar Kralja Aleksandra 15, Belgrade
www.poverenik.rs