Privacy Policy

1. Data controller

WEBSALTY cares about your privacy.

Please read the Privacy Notice carefully before using the website. By using this website, you agree to the Privacy Notice and confirm that you have read, understood the terms under which we process your personal data.

VEB PORTALI WEBSALTY BEOGRAD, with its registered office at the address 100 Mileve Maric Anstajn St., 11070 Novi Beograd, registration number: 65350645, TIN: 111349976 (hereinafter: “ WEBSALTY or We”), respects and protects the privacy of each person (natural persons – hereinafter collectively referred to as : “Person or You”) whose personal data processes (hereinafter: “Personal Data”).

The processing of personal data is carried out by WEBSALTY in accordance with the Law on Personal Data Protection (“Official Gazette of the RS”, No. 87/2018) (hereinafter: the “Law”) and the Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation).

As we are aware that privacy is important to you and to protect the privacy of the Person whose Personal Data we collect, WEBSALTY has adopted this Privacy Notice which defines which Personal Data we collect, how, for what purpose we process it, how we protect it, how long preserve and what rights you have. In any case, if you have any questions or concerns, feel free to contact us at any time by sending an electronic request to the e-mail address: info@shoperbia.online.

1. Basic terms

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller means a natural or legal person, public authority that independently or together with others determines the purpose and manner of processing. The law which determines the purpose and manner of processing, may also determine the controller, or prescribe the conditions for its determination.

Processor means a natural or legal person, public authority that processes personal data on behalf of the controller.

Reipient means a natural or legal person,  public authority to which personal data have been disclosed, regardless of whether it is a third party or not, unless it is a public authority that receives personal data in accordance with the law in the investigation of a particular case and process this data in accordance with the rules on the protection of personal data relating to the purpose of processing.

Consent of the data subject means any voluntary, determined, informed and unambiguous expression of the will of that person, by which that person, by statement or clear affirmative action, gives consent to the processing of personal data relating to him.

Personal data breach means a breach of the security of personal data that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that has been transmitted, stored or otherwise processed.

Sensitive data refers to data revealing racial or ethnic origin, political opinion, religious or philosophical beliefs or trade union membership, as well as processing of genetic data, biometric data for the purpose of unique identification, health or sexual life data or sexual orientation of an individual. We do not collect your Sensitive Data.

Personal data of children refer to persons under 15 years of age. We do not collect Children’s Personal Data. We collect personal data of persons over 15 years of age and only for the purpose of using information society services, in accordance with the provisions of Article 16 of the Law on Personal Data Protection.

1. Principles relating to processing of personal data

When processing your Personal Data, WEBSALTY respects the principles of personal data processing, and we proceed as follows:

• Personal data will be processed lawfully, fairly and transparently in relation to the Data Subject (“legality, fairness and transparency”);

• Personal data will be collected for the purposes specifically set out in this Privacy Notice, which are explicit, justified and lawful and still cannot be processed in a manner inconsistent with those purposes (“purpose limitation”);

• Personal data will be adequate, relevant and limited to what is necessary in relation to the purpose of processing (“data minimization”);

• Personal data will be accurate and, if necessary, updated. In this regard, we will take all reasonable steps to ensure that inaccurate personal information is deleted or corrected without delay (“accuracy”), and we ask that you always notify us of any changes to your Personal Information.

• Personal data will be kept in a form that allows the identification of the Person only for the period necessary to achieve the purpose of processing (“storage limitation”);

• Personal data will be processed in a way that ensures adequate protection of personal data, including protection against unauthorized or unlawful processing, as well as against accidental loss, destruction, or damage through appropriate technical, organizational and personnel measures (“integrity and confidentiality”).

1. Personal data that we process

Depending on the specific purpose, we process the following categories of personal data:

1. Contact information: Name and surname, e-mail address, mobile phone number / landline number;
2. Information from the computer / mobile device: Any information about the computer system or other technological device you use to access our website, such as the Internet Protocol (IP address) address used to connect the device to the Internet, the type of operating system and the type of browser and version. If you access the site via mobile phone, the information collected will also include, where permitted, unique device ID, advertising ID, geographic location and other mobile device data.
3. Cookies: Information collected through cookies in accordance with the Cookie Policy available on the site.

• Manner of collecting personal data

1. When you contact our employees

When you contact our employees (by phone, email or social media) to answer various inquiries or to assist in the operation of the website itself, you consent to WEBSALTY’s collection of your following Personal Information, depending on the reason for your contact ): name and surname, email address, mobile phone number / landline number.

The purpose of processing the mentioned Personal Data is to establish communication with you in order to provide answers to your inquiries, to provide assistance in the functioning of the website itself, or to provide answers to all your dilemmas and requests.

Providing the above Personal Data is a necessary condition for establishing communication between you and WEBSALTY. Otherwise, we will not be able to answer your request, ie we will not be able to answer your request.

Also, in order to improve the functioning of our website and our services, we record your call or your voice when you talk to our employees, in which case your vote represents the personal data we process.

The stated Personal Data is stored in our database until you revoke the consent, ie no later than 1 year from your last activity on our website.

• When you visit our website

When you visit our website, in certain cases, we process your personal data via cookies. On the other hand, there are cookies that do not collect your Personal Information. To learn more details, please visit our Cookie Policy.

• When presenting a merchant on our website

In case you want to cooperate with us and make your site available on our site.

We process the data of contact persons / legal representatives in order to establish cooperation and establish email and telephone communication. In this regard, the personal data of the contact persons / legal representatives that we process in this case are as follows: name and surname, gender, position name, e-mail address and mobile / landline number.

In the event that you do not provide us with the mentioned Personal Data, we will not be able to proceed with the establishment of our cooperation. Therefore, the legal basis for the processing of these personal data is the realization of the contract between the merchantand us.

The purpose for which personal data of the contact person / legal representative of the merchant is collected is to present the merchant’s website on our website, i.e., to establish email and telephone communication, all in accordance with the agreement concluded between the merchant and us.

We will keep the personal data of the contact person / legal representative at the merchant in our database for 01 year from the day of termination of business cooperation, after which we will delete them.

• Purpose of Personal Data Processing

The purpose of processing personal data is:

1. answering your questions;
2. improving the functioning of our website;
3. presentation of the merchant’s website;
4. email and telephone communication with the merchant, after the presentation of his website;
5. other purposes defined in the Cookie Policy.

• Legal basis for the processing of personal data

We process your Personal Data on various, legally prescribed, grounds, such as the following:

1. Your consent

Your Personal Data obtained on the basis of your consent will be processed and stored in our database, as long as your consent exists, i.e., until the eventual withdraw of your consent. You can withdraw  your consent to the collection, processing and use of your Personal Data at any time by withdrawing your consent by electronic request at the e-mail address: info@shopserbia.online

Please note that the withdrawal of consent does not affect the admissibility of the processing of personal data carried out on the basis of your consent before withdrawal.

• Performance of contractual obligations

We collect Personal Data that is necessary for the conclusion and performance of contracts with the merchant and the fulfillment of pre-contractual obligations, in which case we have a basis for collecting, processing, and storing your Personal Data.

• Compliance with legal obligations

To the extent that the processing of your Personal Data is necessary in order to fulfill legal obligations, i.e., obligations defined by various laws, the basis for the processing of your Personal Data is the relevant legal regulation.

• Recipient and third party

WEBSALTY does not sell, donate, or rent personal data.

We disclose personal information to certain recipients, i.e., third parties: merchants whose websites you access through our website, IT service providers,  public authority.

WEBSALTY will not make your Personal Data available to other recipients or third parties, except as provided in this Privacy Notice.

1. Period of storage of personal data

The data that we collect on the basis of the law, we keep for as long as determined by a particular law or other regulation.

The data that we collected on the basis of the contractual relationship will be kept for 01 years from the day of termination of business cooperation, after which we will delete them.

Personal data that are processed exclusively on the basis of the consent of the Persons to whom they relate are processed in accordance with the purpose for which they were collected, i.e., until the withdrawal of consent by the Persons to whom the data relate.

The information collected regarding the submission of an inquiry or request is kept for the time required to satisfy your request or inquiry.

• Rights of the data subject in connection with the processing of personal data

You can request access, correction or deletion of personal data, ie restriction of processing, and you have the right to object to the processing, as well as the right to data portability. You also have the right to revoke consent.

Below is an explanation of each of these requirements. In each of these cases, please send an email info@shoperbia.online if you wish to exercise any of your rights or have additional privacy questions. We will respond to your request in accordance with applicable law.

Access You have the right to request access to your personal data that we hold about you and to find out details about what data we collect and for what purposes we use it, as well as other information provided by law.

Correction WEBSALTY takes appropriate steps to ensure that the information we hold about you is accurate and complete. However, if you do not believe this to be the case, you can request that they be supplemented or corrected.

Deletion In some cases, you have the right to request that your personal data be deleted, such as when there is no longer an initial need to keep your personal data that we have collected or when you withdraw your consent. However, this must be reconciled with other factors. For example, we may not be able to fulfill your request due to certain legal or regulatory obligations.

Restrictions on processing In some cases, you have the right to request that the processing of your personal data be restricted, for example, when you believe that your personal data we hold is inaccurate or when you think it is no longer necessary to keep it.

Data portability In some cases, you have the right to request that we transfer your personal data that you have provided to us to a third party.

Objection You have the right to object if you consider it justified in relation to the particular situation in which you find yourself. However, please keep in mind that we may not be able to provide certain services or benefits if we are unable to process the necessary personal data for these purposes.

Withdrawal of consent You have the right to withdraw your consent at any time.

Right to complain to the competent authority The data subject has the right to lodge a complaint with the competent authority (Commissioner for Information of Public Importance and Personal Data Protection) on the processing of personal data relating to him / her.

• Transfer of Personal Data outside the territory of the Republic of Serbia

The transfer of personal data to another state or international organization, without prior approval, may be made if it is determined that that other state / international organization provides an appropriate level of protection of personal data. In this regard, the Decision on the list of states, parts of their territories or one or more sectors of certain activities in those states and international organizations in which it is considered that an adequate level of protection of personal data is provided (“Official Gazette of RS”, No. 55 / 2019) (hereinafter: the “Decision”), it is determined where it is considered that an appropriate level of protection of personal data is provided.

The companies to which we transfer personal data use cloud servers located in the territory of Europe, which, in accordance with the Decision, the states have determined to provide an appropriate level of protection of personal data, so that the transfer is free.

• Links to Third Party Websites and Services

Our site contains links to third party websites (merchants). Please note that we are not responsible for the collection, use, maintenance, sharing or disclosure of data by third parties. If you provide information on third party sites and use those websites, the privacy policies and terms of use of those third parties will apply. We recommend you to read the privacy policies of the websites you visit before submitting personal information.

Please note that WEBSALTY will not respond to inquiries you make to WEBSALTY that relate to the services of merchants whose links are on our website. In this regard, please do not provide us with your personal information for this purpose. Such Personal Data will not be processed by WEBSALTY and will be deleted.

• Confidentiality of Personal Data and Transparency

Your Personal Data will be treated as confidential information and we will take the necessary measures to protect it in accordance with the Law. They will be accessible only to persons who, given the description of the work they perform, should be acquainted with your personal data and only to the extent necessary to perform their work.

This Privacy Notice is available on our website. If we decide to change our Privacy Notice, the changes will be posted and published on our website, so please check the Privacy Notice periodically.

If you have any questions or requests regarding the processing of your Personal Data, please feel free to contact us at any time at the email address: info@shopserbia.online