Privacy Policy

1. Who we are

The controller of your personal data is NEMANJA ĆUK PR ŠTAMPANJE NA PAPIRU I LEPLJENJE NA DRVO ORTH CORNER SURČIN(PETROVČIĆ) (Preduzetnik), with its registered seat at BRANKA PEŠIĆA 38, 11282, PETROVČIĆ, Srbija, Tax ID 115698736, registration number 68565286. The workshop operates under the Orthodox Corner brand.

Contact for data protection questions:

• Email: kontakt@orthodoxcorner.rs
• Phone: +381 63 1250 222
• Address: BRANKA PEŠIĆA 38, 11282, PETROVČIĆ, Srbija

2. What data we collect

While you use the website and place an order, we collect only the data necessary to provide the service:

When you order a product

• First and last name
• Email address
• Phone number
• Delivery address (street, city, postal code)
• Order contents (products, quantities, sizes)
• Payment method (bank transfer / cash on delivery)
• Optional: order note

When you contact us

• Name and email address
• Optional: phone
• Message content

Automatically collected data

The website uses essential technical cookies to function (see section 8). With your consent we also use Google Analytics for anonymous visit statistics; without consent, analytics cookies are not set.

3. Purpose of processing

We process your data solely for the purpose of:

1. Processing and delivering your order
2. Sending order confirmation and payment instructions
3. Communicating with the courier service
4. Responding to your inquiries
5. Issuing invoices and meeting legal obligations (accounting, tax obligations)

We do not use your data for marketing without your explicit consent.

4. Legal basis for processing

The processing of your data is based on the following legal grounds:

• Performance of a contract - for data necessary to fulfil your order
• Legal obligation - for data we must retain under the Accounting Act and tax regulations
• Legitimate interest - for data necessary to prevent fraud and protect the website
• Consent - for marketing communication (only if you opt in)

5. Who we share data with

We do not sell or disclose your data to third parties for marketing purposes. We share it solely with:

• The courier service - name, address, phone for delivery
• The bank / payment service provider - for bank transfer payments
• Competent state authorities - only where legally required
• The accountant - invoice data for legal obligations
• Google Analytics (Google Ireland Ltd.) - anonymous visit data, only with your consent (see section 8). Google may process data outside the EU, with standard contractual clauses as the safeguard mechanism.

6. How long we keep data

We keep your data for as long as necessary for the purpose of processing or as required by law:

• Order data and invoices - 10 years (Accounting Act)
• Email communication - 2 years from the last contact
• Technical cookies - 30 days or until the session expires
• Google Analytics data - up to 14 months (GA4 setting)

Once the retention period expires, we permanently delete or anonymise the data.

7. Your rights

Under the Serbian Personal Data Protection Act, you have the following rights:

• Right of access - you may request to see the data we hold about you
• Right to rectification - you may request correction of inaccurate data
• Right to erasure - you may request deletion of your data (except data required by law)
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interest
• Right to withdraw consent at any time
• Right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs)

To exercise any of these rights, contact us at kontakt@orthodoxcorner.rs.

8. Cookies

Our website uses essential technical cookies to function (for example, the cart, the session, your cookie choice). These cookies do not require your consent under applicable regulations.

With your consent we use Google Analytics 4 for anonymous visit statistics (which pages are viewed, where visitors come from) in order to improve the website. On your first visit we display a banner - analytics cookies are set only after you click "Accept". If you decline, Google Analytics runs without cookies. You can withdraw consent by deleting cookies in your browser settings.

9. Data security

We take technical and organisational measures to protect your data from unauthorised access, alteration, disclosure or loss:

• HTTPS encryption across the entire website
• Secure hosting with regular backups
• Restricted access to data - authorised staff only
• Regular security updates

10. Changes to this policy

We reserve the right to update this policy from time to time - for example, if the legal framework or the way the website operates changes. The date of the last update is shown at the top of the page. We will notify customers with an account of material changes by email.

11. Contact

For any questions about this policy or how we process your data:

Note: this policy is aligned with the Serbian Personal Data Protection Act ("Official Gazette of the RS", No. 87/2018). For any doubts about the interpretation of specific provisions, consultation with a lawyer specialising in data protection is recommended.