TIM System d.o.o. Sarajevo develops and maintains FME (Fleet Management Experience), a fleet management platform. For us, protecting your personal data is part of the job, not a formality: FME holds ISO/IEC 27001:2022 certification for information security management. This notice complies with the Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette of BiH, No. 12/2025).
This is a translation for convenience. If there is any difference between versions, the Bosnian version applies.
Who is responsible for your data
TIM System d.o.o. Sarajevo
Gatačka 13, 71000 Sarajevo, Bosnia and Herzegovina
Identification number: 4200840490002
E-mail: info@fmetim.com · Phone: +387 33 777 701
Data protection officer: Haris Hastor
E-mail: privatnost@fmetim.com
For any questions about how your data is processed, and to exercise your rights, please contact the data protection officer directly.
What data we collect
We process only the data needed for a specific, clearly stated purpose.
| Type of data | Examples | When we collect it |
|---|---|---|
| Technical visit data | IP address, browser and device type, pages visited, time of visit | On every visit to fmetim.com |
| Contact details | Full name, company name, e-mail, phone, content of the message | When you send us an enquiry or request an offer or demo |
| User account data | Username, role, access rights, login records | When you use the FME platform or app |
| Vehicle and driver data | Vehicle location and movement, mileage, fuel consumption, travel orders, driving licence details | When a client uses FME |
We do not collect personal data such as your name, e-mail or phone number without your knowledge: we receive it only when you provide it yourself.
Purposes and legal basis for processing
| Purpose | Data | Legal basis |
|---|---|---|
| Displaying and securing the website | Technical visit data | Legitimate interest (correct and secure operation of the site) |
| Replying to an enquiry, offer, demo | Contact details | Steps taken before entering into a contract, at your request |
| Providing the FME service and support | Account, vehicle and driver data | Performance of the contract with the client |
| Accounting and legal obligations | Contract and invoice data | Legal obligation |
| Statistics for our Facebook and Instagram profiles | Aggregated data on visits and reactions to our profiles (Page Insights) | Legitimate interest (measuring the reach of our posts) |
We do not send newsletters or promotional e-mails. We use your contact details only to reply to your enquiry and for the cooperation you yourself requested.
Cookies
fmetim.com does not use cookies for analytics or marketing and does not track visitors. The site has no tools such as Google Analytics, Google Ads or Meta Pixel, and fonts, images and video are loaded from our own server, without external services. That is why we do not show you a cookie consent banner.
If we introduce analytics or marketing cookies in the future, we will activate them only with your prior consent and will update this notice beforehand.
Social media
TIM System and FME have profiles on Facebook, Instagram and TikTok. We are responsible for the content we publish and for our communication with you. The network operator (Meta Platforms for Facebook and Instagram, TikTok for TikTok) is responsible for running the platform and for your user profile, under its own privacy rules.
fmetim.com contains only plain links to our profiles, without embedded social media plug-ins, so the networks receive no data about your visit until you click a link. For the statistics of our Facebook and Instagram pages (Page Insights), TIM System and Meta Platforms Ireland Ltd. are joint controllers. Meta has taken primary responsibility for this processing and for handling your rights, as set out in Meta's Page Insights Controller Addendum, and we receive from Meta only aggregated statistics without data on individuals. If you want to send us personal data, for example for an offer, we recommend e-mail rather than a message on social media.
The FME platform and mobile app
When a company uses FME, that company (our client) decides why and how its vehicles and drivers are tracked. The client is therefore the data controller, and TIM System is the processor, which processes the data only on the client's instructions and under a data processing agreement.
- Vehicle movement data (GPS location, routes, speed, stops) is collected through a device installed in the vehicle or through the mobile app, in line with the rules set by the client.
- The client's drivers and employees should receive information about vehicle tracking from their employer. For questions and to exercise your rights, please contact your employer first, and we will help them respond.
- The mobile app (Android and iOS) asks for access to location, camera and notifications only when this is needed for the feature you are using. You can withdraw these permissions at any time in your phone settings.
- Logging in to the app takes place via app.gpstim.ba, which is part of the same FME service.
Data from GPS devices (Teltonika) is sent only to our servers. The device manufacturer has no access to this data.
Other data FME may process
Depending on the modules the client uses, FME may also process: driver identification by RFID card; driver documents with expiry dates (driving licence, licences, certificates, tachograph cards); photos of fuel receipts, damage and breakdowns; the location and time a panic button was pressed; vehicle sensor data (CAN, fuel level, cargo area temperature), which becomes personal data when linked to a driver.
Private trips and working hours
FME sorts trips into business and private trips according to the working hours set by the client. Drivers can correct the purpose of a trip, and every change is logged. During private trips the vehicle's location and positions are hidden and are not visible to the client's users.
The client's obligations as an employer
Before introducing FME, we recommend that the client establishes the legal basis and purpose of tracking, informs drivers in writing what is tracked, when and why, limits tracking outside working hours to what is strictly necessary, decides who in the company has access to the data, and assesses the impact of the processing on personal data protection.
Our obligations as a processor
- we process data only on the client's written instructions and for the purposes set out in the contract;
- our employees are bound by confidentiality;
- we apply technical and organisational measures in line with ISO/IEC 27001;
- we engage other processors only with the client's knowledge and under a contract with the same obligations;
- we help the client respond to requests from drivers and other individuals;
- we inform the client of any personal data breach without delay;
- when the contract ends, we return or permanently delete the data, as the client chooses;
- we allow the client to verify compliance.
Google and Apple services and maps
- Google Maps Platform: displaying maps, searching addresses, calculating routes and geocoding. When a map loads, Google may receive the device's IP address and data about the area displayed.
- Apple Maps (iOS): displaying maps and opening navigation. When you open navigation from the app, the destination is passed to Apple's or Google's maps app.
- Push notifications and error reports: via Google Firebase and the Apple Push Notification service; they contain technical data about the device and the error.
Google and Apple process this data under their own privacy rules, on servers that may be located outside BiH. We do not share vehicle movement history or other FME data with them: it is stored only on our servers in BiH.
Automated decision-making and the obligation to provide data
FME does not make automated decisions that have legal or similarly significant effects on drivers or other individuals. Alerts only notify users, and every decision is made by a person.
Providing data through the website is voluntary. Without contact details we cannot reply to an enquiry or prepare an offer. Our services are intended for companies and institutions; we do not knowingly collect data from people under 18.
Where data is stored and for how long
All FME platform data is stored on servers in the BH Telecom data centre in Bosnia and Herzegovina.
| Data | Retention period |
|---|---|
| Vehicle movement data (GPS) | 1 year, after which it is permanently deleted |
| Reporting data not related to vehicle tracking (fuel, servicing, travel orders, etc.) | As agreed with the client, as a rule for the duration of the contract |
| Enquiries from the website | 12 months from the last contact, unless the enquiry leads to a contract |
| Contracts and invoices | As long as accounting and tax laws require |
| Technical website access logs | 30 days |
Who we share data with
We do not sell your data or pass it on to third parties for marketing purposes. Data is received only by recipients without whom the service cannot work, or to whom we are legally required to provide it.
| Recipient | Role | Location |
|---|---|---|
| BH Telecom d.d. Sarajevo | Hosting of FME platform servers and backups; hosting of the fmetim.com website; mobile data transmission from GPS devices | BiH |
| A1 Telekom Austria | Mobile data transmission from GPS devices, including roaming for vehicles abroad | EU |
| Maps, addresses and routes in the FME platform; push notifications | Outside BiH, mainly the EU and the USA | |
| Apple | Maps, navigation and push notifications in the iOS app | Outside BiH, mainly the EU and the USA |
| Meta Platforms Ireland Ltd. | Statistics for our Facebook and Instagram profiles (Page Insights), as joint controller | EU, and possibly the USA |
| Competent authorities | Only where the law expressly requires it | BiH |
When data is transferred outside BiH, we rely on the safeguards provided for in the Law on Personal Data Protection of BiH, such as standard contractual clauses.
Data security
FME is certified to ISO/IEC 27001:2022 for the development of fleet management software, vehicle tracking services, and the sale, installation and servicing of GPS devices.
- Data transfer between your device and our servers is protected by encryption (HTTPS).
- Each user sees only the data the client's administrator has given them rights to, and changes are logged.
- Backups are made every 7 days and stored on BH Telecom servers in BiH.
- Employees receive data protection training, and we have an internal procedure for incidents.
In the event of a data breach we inform our clients and, where required, the Personal Data Protection Agency of BiH.
Your rights
Under the Law on Personal Data Protection of BiH you have the right to:
- find out whether and what data of yours we process, and receive a copy of it;
- ask for inaccurate or incomplete data to be corrected;
- ask for data to be deleted, except where we must keep it by law or under a contract;
- ask for processing to be restricted;
- receive your data in a structured, commonly used format;
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
Send your request to privatnost@fmetim.com. We reply without delay, and within one month at the latest. If you believe your rights have been violated, you can file a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (www.azlp.ba).
Changes to this notice
We update this notice when our services or the regulations change. The current version is always published on fmetim.com.
Last updated: November 2026.