Dear users, given the nature of the business activities of the company GIFTIĆ D.O.O. BELGRADE, it is necessary and indispensable for us to collect certain types of personal data about our customers and website users.
However, since the interests of our customers come first, we inform you that we have organized technical and administrative measures so that we can adequately ensure the protection of the personal data of our customers and website users.
In this regard, we inform you that we collect, process, and store your personal data in the manner prescribed by the applicable Law on Personal Data Protection (“Official Gazette of the Republic of Serbia”, No. 87/2018), as well as other relevant legal and by-law acts in this area.
We are obliged to ensure that there is no misuse of the data you have entrusted to us, and you can be confident that the data you have provided will be used only for purposes permitted by law, and that we will not make them available to other persons without a legal basis.
Please read the privacy terms carefully before you begin registration and purchase. We inform you that with each visit to this website, as well as during registration and purchase, we will consider that you have been acquainted with the privacy policy and that you fully agree with it.
In accordance with the Law on Personal Data Protection and other relevant legal and by-law provisions, as controllers of your data, it is our duty to inform you about your rights regarding the processing of personal data that we carry out, and about our obligations as personal data controllers, the purpose for which the data are collected, and the aim for which the processing is applied.
We inform you that we determine the purpose and manner of processing your personal data that we collect and that we ensure personal data are processed in accordance with positive legal regulations and to prevent loss, misuse, or alteration of customers’ personal data, as well as that we take care to protect your data.
Below you can read more about the reasons why we collect your data and the way your data are processed:
Controller of your personal data:
GIFTIĆ D.O.O. BELGRADE, with its registered seat in Belgrade, Dr Milivoja Petrovića 3
Activity code: 4791 – Retail trade by mail order or via the Internet
Registration number: 67898516, Tax ID (PIB): 114845248
Legal representative: Rodoljub Davidović
Person responsible for data processing: Rodoljub Davidović
Contact: rodoljub.davidovic@gifticbeograd.com, 064/432-7429
Purpose and legal basis for processing your data
We process your data in accordance with the relevant legal provisions that permit processing for the following purposes:
– Based on your consent – meaning that the data subject has consented to the processing of their personal data for one or more specifically determined purposes.
In this particular case, it concerns your consent for the processing of personal data that you give us for each processing we perform. We implement this by informing you in advance which of your data we need and for what purpose, and you agree to such processing.
Regarding processing based on your consent, we inform you that you may “withdraw” or subsequently revoke your consent at any time. Revocation of consent does not affect the lawfulness of the processing carried out before the revocation, when you had previously given consent for such processing. That is, all data we collected about you on the basis of consent before the revocation were collected legally, but your revocation prevents us from continuing to collect data about you.
– For the performance of a contract that you have concluded with us, or to take steps at the request of the data subject prior to entering into a contract;
We process and collect your data to the extent necessary to perform the contract that you accept and conclude with us when you register on our website, so that we can manage your registration and purchases, respond as quickly as possible to your inquiries, requests, and complaints, and deliver the products you ordered in the manner and under the conditions previously agreed.
– Where processing is necessary to comply with legal obligations that we, as controllers of your data, have under the law;
– Where processing is necessary to protect the vital interests of the data subject or another natural person;
– Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
In the above legal situations, we collect your data in order to fulfill the appropriate legal obligations we have as a registered company, or for the purpose of vital interests or tasks of public significance.
– Where processing is necessary for the purposes of the legitimate interests pursued by us as controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
– Purpose of processing for the realization of the legitimate interests of our company:
We believe we have a legitimate interest to process your data for marketing and market research purposes—i.e., to monitor your preferences and interests and thereby tailor and improve our product range, and achieve better communication with customers, all so that we can best adapt our products and operations to your requirements and offer you products that fully meet your wishes.
Data about you that we collect and process
– Your identification data (first and last name, address, contact phone number, email address, the language and market from which you communicate with us, number of a personal identification document— for tax reasons in case of product returns)
– Economic and transaction data (your card number and expiry date in case of card payment at purchase, data about your purchases and orders)
– Information about connection, geolocation, or browsing (location data, device identifier or advertising ID, purchase history, demographic data, number of website visits, pages visited).
The data we have collected are necessary in order to provide the highest quality service and the best possible communication with you.
We use the data collected from a registered user for the purpose of:
– Processing orders, responding to inquiries or complaints, enabling different payment methods for our customers, enabling refunds in the case of returns, filtering website content in accordance with your needs, enabling you to have a better overview of products we believe you are interested in based on previously collected data, and enabling you as a registered user to participate in various promotions and discounts we offer.
We use data collected lawfully for marketing purposes, based on the specific consent you have given us, to research your preferences for certain products, to inform you about special benefits, discounts, prize games, and new products, and to conduct market research (sending appropriate queries, surveys, etc.), all for the purpose of improving the quality of our products and services.
Access to collected data
Your personal data are accessible to our employees at GIFTIĆ D.O.O. BELGRADE whose contracts include a confidentiality clause, as well as to independent service providers to the extent necessary for us to deliver our products in the agreed manner and within the agreed timeframes.
We share your data with:
- DAILY EXPRESS DOO BELGRADE, with its registered seat in Belgrade, Zage Malivuk 1, registration number: 08192189, Tax ID (PIB): 101754136, whose legal representative is Nikola Rizinić
Transfer of personal data to another country or an international organization
If it becomes necessary for any reason to transfer personal data to another country, to a part of its territory, or to an international organization, rest assured that such transfer will be carried out only if it is determined that that other country, part of its territory, or international organization ensures an adequate level of protection of personal data.
It is considered that an adequate level of protection is ensured in countries and international organizations that are parties to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, or in countries, parts of their territories, or international organizations for which the European Union has determined that they provide an adequate level of protection.
Retention period for your personal data
We inform you that the data you have provided to us are kept for as long as necessary to achieve the purpose for which they were provided, or to the extent required by relevant legal regulations.
Below we indicate how long we keep your data depending on the purpose for which they were collected:
– Data you provided when registering on the online portal are kept as long as you are a registered user, i.e., until your account is deactivated. If you deactivate your account, we will keep the data for the next six months from the date of deactivation, so that we can resolve any complaints that may have arisen earlier during that period.
– Data related to the sale/purchase of goods are processed until the purchase in question is completed, including the time for resolving objections, complaints, or requests regarding the delivered goods;
– Data related to your inquiries or requests are kept and processed to the extent necessary to fulfill your request or respond to your inquiry.
– Data collected for marketing purposes— for which you have given us consent—are kept until you withdraw your consent;
– Data collected through interaction with you (such as purchase analysis, IP address, device analysis, re-targeting marketing, etc.) during the website visit will be deleted within 24 months from the date of their collection.
If we are obliged by certain legal obligations to keep the data longer, we will keep them for as long as required by applicable legal regulations.
After the retention period expires, we permanently delete personal data or anonymize them so that they can no longer be linked to a specific individual.
Rights you have as a data subject
You have the right to request from us:
– Access to data – you have the right to information on whether we process your personal data and access to that data;
– Rectification of data – you have the right to have inaccurate personal data corrected without undue delay, and you have the right to complete your incomplete personal data, which includes providing an additional statement;
– Erasure of data – you have the right to request the deletion of certain data we have collected about you;
– Right to restriction of processing – you have the right to restrict the processing of your personal data;
– Right to object to processing – if justified in relation to your particular situation, you have the right to object at any time to the processing of your personal data;
– Data portability – you have the right to receive the personal data you have previously provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, if the processing is based on consent and is carried out by automated means;
– Right to withdraw consent to data processing – you have the right to withdraw consent at any time; withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal based on your consent given before the withdrawal;
– Right to lodge a complaint with the Commissioner – if you believe that we have in any way violated your rights regarding the processing of personal data, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.
– Right to be informed – you have the right to be provided with information about the source from which the personal data originate and, where applicable, whether the data come from publicly available sources;
Processing of minors’ data
We do not collect, retain, or process data of minors.
A minor, within the meaning of the Law on Personal Data Protection, is a person under 15 years of age. A minor who has reached 15 years of age may independently give consent for the processing of their personal data in the use of information society services.
Contact for submitting objections or resolving complaints
If you need to resolve any uncertainty, misunderstanding, or exercise your rights under the Law, please contact us in one of the following ways:
Mailing address of the company:
Controller of your personal data is:
GIFTIĆ D.O.O. BELGRADE, with its registered seat in Belgrade, Dr Milivoja Petrovića 3
Activity code: 4791 – Retail trade by mail order or via the Internet
Registration number: 67898516, Tax ID (PIB): 114845248
Legal representative: Rodoljub Davidović
Person responsible for data processing: Rodoljub Davidović
Contact: rodoljub.davidovic@gifticbeograd.com, 064/432-7429
If you decide to send a corresponding inquiry or complaint regarding your data, we inform you that this is possible and that, in that case, we will request a copy of a certain identification document from you, in order to identify you as the holder of the right to request access to certain information and to be sure that we are delivering confidential personal information to a person authorized to receive such information.