Privacy Policy

1. Categories of personal data and purposes of processing

    

   • Metadata
     You can use our website without providing any personal information about yourself. In this case, “ATELJE BUDOAR” d.o.o. Beograd will only collect the following metadata based on your use of our website:

      

     The page from which you came to our website, the date and time of access, the amount of data transferred, the status of the transfer, the type of web browser, the IP address, the operating system and interface, the language and version of the browser software.

     Your IP address will be used to give you access to our website or application. When an IP address is no longer required for this purpose, we will shorten your IP address by removing the last eight characters of your IP address. Metadata, including the abbreviated IP address, will be used to improve the quality and services on our website or in the application by analyzing the behavior of our users.

   • Account
     If you create an account on our website, you may be asked to provide some of your personal information, for example: name and surname, company address, e-mail address, selected password, telephone number, bank account information, credit card information, address for invoicing and delivery, interest in certain products/services (optional), request to receive marketing emails (optional). “ATELJE BUDOAR” d.o.o. Beograd processes such personal data in order to provide you with account functionality, to provide you with marketing materials to the extent permitted by applicable regulations and to analyze your interests for marketing purposes.
   • Product ordering
     If you order a product through our website or application, “ATELJE BUDOAR” d.o.o. Beograd collects and processes your following personal information: your account information, product type and quantity, purchase price, order date, order status, product return conditions. “ATELJE BUDOAR” d.o.o. Beograd processes such personal data for the purpose of realizing the contractual relationship and ordering products, providing consumer protection services, complying with legal obligations, protection, realization and implementation of legal requirements and marketing in accordance with the interests of users.
2. Third parties

    

   • Other recipients
     “ATELJE BUDOAR” d.o.o. Beograd may transfer – in accordance with applicable data protection regulations – personal data to law enforcement, government agencies, legal advisers, external consultants or business partners.
   • International transfer of personal data
     The personal data we collect or receive about you may be transferred to and processed by recipients located inside or outside the European Economic Area (“EEA”). These countries include those listed at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm which provides an adequate level of data protection from the point of view of European regulations on personal data protection. Recipients in the United States are partially certified under the “EU-US Privacy Shield” and are therefore considered to provide an adequate level of data protection from the point of view of European data protection regulations. Other recipients may be located in other countries that do not provide an adequate level of protection from the point of view of European data protection regulations. “ATELJE BUDOAR” d.o.o. Beograd shall take all necessary measures to ensure that transfers outside the EEA are adequately protected as required by the relevant data protection regulations. Regarding transfers to countries that do not provide an adequate level of data protection, we base the transfer on appropriate protection measures, such as standard data protection clauses adopted by the European Commission or the supervisory authority, an approved code of conduct together with binding and enforceable obligations of the recipient or approved certification mechanisms together with the binding and enforceable obligations of the recipient. You may request a copy of such appropriate safeguards by contacting us as set forth below in Section 6 (Contact Us).
3. Legal basis for processing
   We may base the processing of your personal data on the following legal grounds:

    

   • You have consented to the processing of your data for one or more specific purposes;
   • Processing is necessary for the implementation of the contract in which you are one of the parties or to take steps, at your request, and before concluding the contract;
   • Processing is required to comply with the legal obligations to which we are subject;
   • Processing is necessary to protect the vital interests – of you or another individual;
   • Processing is necessary for legitimate interests that we or a third party seek to protect, except when such interests are outweighed by your interests or fundamental rights and freedoms that require the protection of personal data, especially if you are a child;
   • Other relevant legal bases for data processing, in particular provisions in the laws of the Member States;

   We may process your particularly sensitive personal data on the following legal basis:

   • You have given your explicit consent to the processing of particularly sensitive personal data for one or more specific purposes;
   • Processing is necessary for the purposes of performing obligations and utilizing the specific rights of “ATELJE BUDOAR” d.o.o. Beograd or data subjects in the field of labor regulations;
   • Processing refers to personal data that are exclusively disclosed to the data subject;
   • Processing is necessary to determine, enforce or defend against legal claims or whenever courts act in their capacity;

   Submission of your personal information is required by law or contract or is required to enter into a contract with us or to receive our services / products that you have requested or have simply voluntarily decided so.

   Failure to provide your personal information may lead to unfavorable aspects for you, e.g. you will not be able to receive certain products and services. However, unless otherwise stated, failure to provide your personal information does not entail legal consequences for you.

4. What rights do you have and how can you utilize them?
   If you have given your consent to the specific collection, processing and use of your personal data, you can revoke that consent at any time, which will be effective in the future. Then, you can oppose the use of your personal data for marketing purposes at no cost other than the transfer costs in accordance with the basic tariffs.

    

   Under applicable data protection regulations, you have the right (i) to request access to your personal data, (ii) to request correction of your personal data, (iii) to request the erasure of your personal data, (iv) to request a restriction on processing your personal data, (v) to request data portability, (vi) to object to the processing of your personal data (including objection to profiling) and (vi) to oppose automated decision making (including profiling).

   To utilize your rights, contact us as described in Section 6 (Contact Us) below.

   In the case of a complaint, you also have the right to lodge a complaint with the competent supervisory authority for data protection.

5. How long do we keep your personal information?
   Your personal information is retained for as long as necessary so that we can provide you with the requested services and products. When our relationship ends, we will either delete your personal information or anonymize your personal information, unless there are legal requirements to keep it (for example, for tax purposes). We may retain your contact details and interest in our products or services for an extended period of time if “ATELJE BUDOAR” d.o.o. Beograd is permitted to send you marketing materials. Also, applicable law may require us to retain certain personal information about you for a period of 10 years after the relevant tax year. We may also retain your personal data after the termination of the contractual relationship if your personal data is needed to comply with other applicable laws or if we need your personal data to determine substantiation or defend legal claims, only when necessary. To the extent possible, we will limit the processing of your personal data for those limited purposes after the termination of the contractual relationship.
6. Contact us
   If you have any questions about the processing of personal data, you can send them to the following address: info@budoaratelier.com