Privacy Policy
1. General Information and Information about Data Controller
Dear Consumers,
Please read the Privacy Policy carefully before making a purchase in our website. By purchasing in our website, you agree to the Privacy Policy and confirm that you have read and understood the terms under which we process your personal data and accepted this Privacy Policy.
IVAN VRANIĆ PR GLOBAL INTEL, located at Bojčinska 13, Belgrade (Zemun), registration number: 67788141, VAT number: 114702671 (hereinafter: Trader or We), respects and protects the privacy of every individual (natural persons - users of the web shop, potential users, or other individuals - hereinafter collectively referred to as: Person or You) whose personal data we collect and process (hereinafter: Personal Data).
The collection, processing, and storage of Personal Data is conducted in accordance with the Law on Personal Data Protection ("Official Gazette of RS", No. 87/2018) - (hereinafter: the Law).
In this privacy policy, you can read everything that is significant for the privacy and protection of your personal data, including issues that define the following: what Personal Data we collect, how we collect it, for what purpose we process it, how we protect it, how long we keep it, and what your rights are regarding your Personal Data. The privacy policy explains our practices regarding the collection of Personal Data, whether we collect it directly from you, from third parties, during your visit to our website, through your written or oral communication with us, or otherwise. If you have any questions or concerns, feel free to contact us at any time at the email address .
2. Basic Terms and Personal Data Processed by the Trader
Personal Data shall mean any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as a name and an identification number, location data, an online identifier in electronic communication networks or to one i.e. more characteristics of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data processing shall be any operation or set of operations which is performed on personal data or on collections of personal data, whether or not by automated means, such as collection, recording, classification, grouping i.e. structuring, storage, adaptation or alteration, disclosure, inspection, use, disclosure by transmission i.e. by delivery, multiplication, dissemination or otherwise making available, comparison, restriction, erasure or destruction.
The controller shall be a natural or legal person, or an authority, that independently or jointly with others determines the purposes and means of processing.
The processor shall be a natural or legal person, i.e. a public authority which processes personal data on behalf of the handler.
The recipient shall be a natural or legal person i.e. a public authority to which the personal data are disclosed, irrespective of whether it is a third party or not, except where it is a case of public authorities which receive personal data in the framework of an investigation in a particular case in compliance with the law and process such data in compliance with the rules on the protection of personal data that pertain to the purpose of the processing.
Consent of the person to who the data relates to shall be each freely given, specific, informed and unambiguous expression of the will of such person, by which such person, by a statement or by a clear affirmative action, provides consent to the processing of personal data relating to him or her.
Personal data breach shall be a breach of security of personal data leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, the personal data which is transmitted, stored or otherwise processed.
Sensitive data refers to data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of unique identification of a person, data concerning health, or data regarding the sexual life or sexual orientation of a natural person.
We inform you that we do not collect your sensitive data unless you provide it voluntarily or if we are required to do so by applicable regulations.
Personal data of children refers to individuals under the age of 15.
We do not collect personal data from children. We collect personal data from individuals over the age of 15 only for the purpose of using information society services, in accordance with Article 16 of the Law on Personal Data Protection.
3. Principles of Personal Data Processing
At all times, when collecting, processing, and storing your Personal Data, the Trader acts as follows:
- Personal data will be processed lawfully, fairly and in a transparent manner in relation to the person to whom the data relates to ("lawfulness, fairness and transparency"),
- Personal data will be collected for specified, explicit, legitimate and lawful purposes and cannot be further processed in a manner that is incompatible with those purposes ("limitation relating to the purposes of processing"),
- Personal data will be Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimization"),
- Personal data will be Accurate and, where necessary, kept up to date. Taking into account the purposes for which it is processed, every reasonable measure must be taken to ensure that personal data that is inaccurate is erased or rectified without delay ("accuracy"), and we kindly ask you to inform us of any changes to your Personal Data,
- Personal data will be Stored in a form which permits identification of persons only within the time limit that is necessary for the achievement of purposes of processing ("storage limitation"),
- Personal data will be Processed in a manner that ensures appropriate protection of the personal data, including protection against unauthorized or unlawful processing, as well as against accidental loss, destruction or damage, by using appropriate technical, organizational or staff-related measures ("integrity and confidentiality").
4. Personal Data Collected and Processed by the Trader About You
The personal data we collect, process, and store includes the following:
- First and last name,
- Email address,
- Data about purchased products,
- Personal identification number, ID document number,
- Bank account number.
5. Method of Collecting Personal Data
a) When Purchasing Products
When concluding a sales contract with the Trader, for the purposes of concluding and executing the contract, you are required to provide us with the following Personal Data, which you enter when purchasing products: first and last name and email address.
Payment card information entered by the consumer during the purchase is visible only to the payment processor Monri WS Payments gateway. At no stage of the payment process Trader doesn’t have access to the payment card information.
The purpose for which we process the Personal Data is to fulfill the sales contract with the Trader.
The specified Personal Data is retained in our database for five years after the purchase of the product.
b) When Exercising Your Legal Rights
To enable you to exercise consumer rights in accordance with the Law on Consumer Protection and the Terms of Use, and to inform you that we have received your request for the realization of legal rights, you need to provide us with your Personal Data, specifically: first and last name, personal identification number, ID document number, and email address. In the case of a refund, you will also need to provide your bank account number.
The purpose for which we process the Personal Data is to facilitate the fulfillment of your legal rights and to notify you that we have received your request related to the exercise of those rights.
If you do not provide us with the specified Personal Data, we will not be able to enable you to realize your legal rights.
The specified Personal Data is retained in our database for five years from the exercise of your legal rights.
c) When Communicating with Our Employees and Checking Purchased Products
When communicating or contacting our employees via email to obtain responses to various inquiries regarding the products we offer or any other questions you may have, You give consent to the Trader collecting your following Personal Data: first and last name; email address.
After making a purchase, the consumer can check purchased products using the following Personal Data: first and last name; email address, in a specific section for purchased products. The consumer consents to this processing at the time of their first purchase on our website.
The purpose of collecting and processing the Personal Data is to establish communication with you to respond to your inquiry and to provide the best possible consumer experience.
The specified Personal Data is retained in our database until you withdraw consent, or for a maximum of five years from your last activity in our website.
6. Purpose of Collecting and Processing Personal Data
The purposes of collecting Personal Data are:
- To conclude and execute the sales contract for products,
- To carry out payment transactions,
- To comply with the Trader's legal obligations and to realize your legal rights in accordance with the Law on Consumer Protection and the Terms of Use,
- To respond to your inquiries and enhance the consumer experience.
7. Legal Basis for Processing Personal Data
In accordance with the principle of lawfulness, we process your Personal Data based on various legally prescribed grounds, such as the following:
You consent
Your Personal Data obtained based on your consent will be processed and stored in our database as long as your consent is valid, or until you withdraw it. You can withdraw your consent for the collection, processing, and use of your Personal Data at any time by following the instructions in the email you received from us, which allows you to withdraw your consent through an electronic request sent to the email address: info@global-intel.net.
The withdrawal of consent does not affect the lawfulness of the processing of Personal Data carried out based on your consent prior to the withdrawal.
Execution of Contractual Obligations
The Trader collects Personal Data that is necessary for concluding and executing the sales contract and fulfilling pre-contractual obligations, in which case we have a legal basis for collecting, processing, and storing your Personal Data.
Execution of Contractual Obligations
The Trader collects Personal Data that is necessary for concluding and executing the sales contract and fulfilling pre-contractual obligations, in which case we have a legal basis for collecting, processing, and storing your Personal Data.
Fulfillment of Legal Obligations of the Controller
To the extent that the processing of your Personal Data is necessary for the fulfillment of the Trader's legal obligations, or obligations defined by various laws, the legal basis for processing your Personal Data is the relevant legal regulation (e.g., the Law on Consumer Protection, the Law on Prevention of Money Laundering and Financing of Terrorism, etc.).
8. Recipient and Third Parties
To realize the payment for products purchased through this website, we engage Monri WSPay - Web Secure Payment Gateway.
This company has access to Personal Data necessary to perform the tasks for which it is engaged, but it may not use this data for other purposes (if it does, it will be considered an independent Data controller).
The Trader will not make your Personal Data available to other recipients or third parties, except in cases specified in this Privacy Policy.
9. Retention Period of Personal Data
Data collected by the Trader based on legal grounds must be retained for the duration specified by applicable laws or regulations.
Data collected based on a contractual ground will be kept for five years from the last consumer activity in our website.
Data processed solely based on your consent will be retained until consent is withdrawn or for five years from your last activity in our website.
10. Rights of the Data Subject Regarding the Processing of Personal Data
In addition to the rights mentioned in this Privacy Policy and other rights provided by law and regulations in accordance with the law, the data subject has the right to:
- Request information on whether the Trader processes their Personal Data and to request access to that data.
Upon the request of the data subject, we will provide information about the Personal Data we process or that our processors handle, in accordance with our instructions. This includes the purpose of processing Personal Data, the legal basis and duration of processing, the name and address of the processor, and their activities related to processing, circumstances and impact of any data breach, as well as measures taken to address it. In the case of data transfer, we will also provide information about the legal basis for such transfer and the recipient.
We will provide you with a written response in a understandable language as soon as possible after your request is submitted, and no later than 15 days from the date of receipt of the request. The written response will be provided free of charge, unless the request is clearly unfounded or excessive, particularly if it is repeated frequently. In such cases, we may charge necessary administrative costs for providing the written response or we may refuse to act on the request.
We are obliged to provide the data subject, upon request, with a copy of the Personal Data we process. We may charge a fee for the necessary costs of producing additional copies requested by the data subject. If the request for a copy is submitted electronically, the information will be provided in a commonly used electronic format, unless the data subject has requested a different method of delivery.
- To request the correction, completion, or deletion of their Personal Data and the right to object to the processing of their data.
The person to whom the data relates has the right to have their inaccurate Personal Data corrected without unnecessary delay. Depending on the purpose of processing, the data subject has the right to complete their incomplete Personal Data, which includes providing an additional statement.
The data subject has the right to request the deletion of their Personal Data by the Trader.
We are obliged to delete Personal Data without unnecessary delay if:
- the Personal Data are no longer necessary for the purposes for which they were collected or processed in another manner,
- the data subject has withdrawn their consent on which the processing was based, and there is no other legal basis for processing,
- the data subject has objected to the processing,
- the Personal Data have been processed unlawfully,
- the Personal Data must be deleted to comply with legal obligations,
- the Personal Data were collected in connection with the use of information society services as defined by the law.
The data subject has the right to receive the Personal Data they previously provided to us in a structured, commonly used, and machine-readable format and has the right to transfer this Personal Data to another controller without hindrance from our side, provided that the following conditions are met:
- the processing is based on consent or a contract,
- the processing is carried out automatically.
- To restrict the processing of Personal Data
The processing of Personal Data by the Trader may be restricted if one of the following cases applies:
- the data subject contests the accuracy of the Personal Data, for a period that allows us to verify the accuracy of the Personal Data,
- the processing is unlawful, and the data subject opposes the deletion of the Personal Data and instead requests a restriction on the use of the Personal Data,
- we no longer need the Personal Data for the purposes of processing, but the data subject has requested it for the establishment, exercise, or defense of legal claims,
- the data subject has lodged an objection to the processing in accordance with Article 37, paragraph 1 of the Law, and an assessment is ongoing to determine whether the legal basis for processing by the controller overrides the interests of the data subject.
We are obliged to inform all recipients to whom Personal Data have been disclosed about any correction, completion, deletion of Personal Data, or restriction of their processing in accordance with the law, unless this requires disproportionate effort in terms of time and resources. We are also required to inform the data subject, upon their request, about all recipients.
We are obliged to inform all recipients to whom Personal Data have been disclosed about any correction, completion, deletion of Personal Data, or restriction of their processing in accordance with the law, unless this requires disproportionate effort in terms of time and resources. We are also required to inform the data subject, upon their The data subject has the right to receive their Personal Data previously provided to us in a structured, commonly used, and machine-readable format and has the right to transfer this data to another controller without hindrance from our side, in accordance with the law.
The data subject has the right to receive their Personal Data previously provided to us in a structured, commonly used, and machine-readable format and has the right to transfer this data to another controller without hindrance from our side, in accordance with the law.
If they believe it is justified, based on their specific situation, the data subject has the right to object to the processing of their Personal Data at any time, in accordance with the law.
The data subject has the right not to be a subject to a decision based solely on automated processing, including profiling, if that decision produces legal effects concerning data subject or significantly affects their situation.
11. Procedure in Case of Personal Data Breach
If a Personal Data breach is likely to result in a high risk to the rights and freedoms of the data subject, we are obliged to notify the data subject without undue delay about the breach, in accordance with the law.
In the case of a Personal Data breach that may pose a risk to the rights and freedoms of the data subject, the Trader must inform the Commissioner for Information of Public Importance and Personal Data Protection without undue delay, or if possible, within 72 hours of becoming aware of the breach.
The notification provided to the competent authority will contain all information required by the law.
12. Transfer of Personal Data Outside the Territory of the Republic of Serbia
The transfer of Personal Data to another country or international organization without prior approval may be carried out if it is determined that the other country/international organization provides an adequate level of protection for Personal Data. In this regard, the Decision on the List of Countries, Parts of Their Territories, or One or More Sectors of Specific Activities in Those Countries and International Organizations Where an Adequate Level of Protection for Personal Data is Provided ("Official Gazette of the RS", No. 55/2019) specifies where an adequate level of protection for Personal Data is deemed to be ensured.
13. Links to Third-Party Websites and Services
Our website contains a link to the third-party website Monri WSPay - Web Secure Payment Gateway, which serves as the Payment Gateway for purchasing products.
When you use the services of third parties, the privacy policies and terms of use of those third parties will apply. Therefore, we recommend that you read the privacy policies of the websites you visit before submitting any Personal Data.
14. Confidentiality of Personal Data and Transparency
Your Personal Data will be treated as confidential information, and we will take appropriate measures to protect it in accordance with the law. Access to this data will be granted only to individuals who, due to the nature of their job, need to be familiar with your Personal Data, and only to the extent necessary for the performance of their duties.
This Privacy Policy is available on our website. If we decide to change our Privacy Policy, the changes will be posted and published on our website.
Contact
TIN: 114702671
Address: Bojcinska 13, 11080 Belgrade
Email: info@global-intel.net
Phone: +381601672408