Privacy Policy
Effective: 1 May 2026 · Jurisdiction: Republic of Serbia · Law: PDPA No. 87/2018 (aligned with EU GDPR)
Who We Are
This Privacy Policy applies to Mad Max Quads, operated by Dragan Zivkovic, providing guided quad tours from Bela Crkva, Serbia. Website: www.madmaxquads.rs.
We are the data controller responsible for any personal data collected through this website, our booking process, and our on-site waiver forms.
What We Collect
We only collect what we genuinely need to operate our tours safely and legally.
| Data | How Collected | Required? |
|---|---|---|
| Full name | Booking form / Waiver | Yes |
| ID or Passport number | Waiver (on-site) | Yes — legal ID required for liability |
| Driver's licence number & category | Waiver (on-site) | Yes — Category B or F mandatory |
| Phone number | Booking form / Waiver | Yes — for booking confirmation & emergencies |
| Emergency contact name & phone | Waiver (on-site) | Yes — safety requirement |
| Photos & video footage | Recorded during tours | Consent-based (see Section 5) |
| Website usage data (cookies) | Automatically via browser | Consent-based (see Section 9) |
We do not collect payment card details, sensitive health records, or any data beyond what is listed above.
Why We Use It
| Purpose | Data Used |
|---|---|
| Tour booking & confirmation | Name, phone |
| Safety & legal compliance (Rental Agreement) | Name, ID/passport, licence number, emergency contact |
| Liability documentation | Name, ID/passport, licence, signed waiver |
| Emergency contact in case of incident | Emergency contact name & phone |
| Social media & marketing (with consent only) | Photos & video footage |
Legal Basis for Processing
Under the Serbian Personal Data Protection Act (PDPA No. 87/2018), we process your data on the following legal grounds:
| Basis | Data & Activity |
|---|---|
| Contract | Name, phone — necessary to fulfil your booking and provide the tour service |
| Legal obligation | ID/passport, driver's licence — required by Serbian law for quad vehicle operation and liability documentation |
| Legitimate interest | Emergency contact — necessary to protect rider safety in case of incident |
| Consent | Photos, video, marketing use — only processed where you have explicitly opted in via the waiver tick-box |
Photos & Video — Marketing Consent
We record video and take photographs during tours for safety documentation and, where you have consented, for marketing purposes including social media (Instagram, Facebook, TikTok) and our website.
This is entirely opt-in. You choose Yes or No on the waiver. Declining does not affect your ability to book or participate in a tour.
If you consent: photos and videos in which you appear may be used on our social media channels and website. We will not tag you personally without your additional permission.
Withdrawing consent: you can withdraw your consent at any time by contacting us (see Section 12). Withdrawal does not affect the lawfulness of any use that occurred before your withdrawal, and material already published on third-party platforms (e.g. Instagram) may remain visible subject to those platforms' own retention policies.
Safety footage: regardless of your marketing consent choice, footage may be retained as evidence in the event of an accident, damage claim, or legal dispute.
How Long We Keep Your Data
| Data | Retention Period | Reason |
|---|---|---|
| Signed waiver & ID details | 5 years | Serbian statute of limitations for civil liability claims |
| Booking & contact data | 2 years | Operational records & dispute resolution |
| Safety / incident footage | Until claim is resolved, or 3 years if no claim | Legal evidence |
| Marketing photos/video (consented) | Until consent withdrawn | Marketing purposes |
After the retention period expires, data is securely deleted or anonymised.
Your Rights Under Serbian Law
The Serbian PDPA grants you the following rights regarding your personal data. To exercise any of these rights, contact us at the details in Section 12.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data where there is no legal obligation to retain it.
Ask us to pause processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Withdraw any consent given (e.g. for marketing footage) at any time.
Object to processing based on legitimate interests.
Complain to Serbia's Data Protection Commissioner at poverenik.rs.
Children & Minors
Riders must be of legal driving age and hold a valid Category B or F licence; we do not admit minors as riders. Where the personal data of a minor is incidentally collected (for example, captured in promotional photography or video at our base), parental or legal-guardian consent is obtained before any use, or the data is excluded. This follows the Serbian Personal Data Protection Act, under which consent for processing data relating to persons under 18 must be given by a parent or legal guardian.
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The effective date at the top of this page will always reflect the latest version. We recommend checking this page periodically.
Contact Us
For any questions about this Privacy Policy, to exercise your data rights, or to withdraw consent for marketing use of your footage, see the contact block below.
Mad Max Quads / Dragan Zivkovic
Bela Crkva, Vojvodina, Republic of Serbia
Website: www.madmaxquads.rs
We will respond to all data rights requests within 30 days, as required by Serbian PDPA.
If you are unsatisfied with our response, you have the right to lodge a complaint with Serbia's data protection authority: Commissioner for Information of Public Importance and Personal Data Protection — www.poverenik.rs.