THE FIRMA 0.2 D.O.O. BELGRADE-OLD TOWN, with its registered seat at the address: Čubrina 1, Belgrade, registration number: 21655821, TIN: 112348594 (hereinafter: “Online shop or We”), respects and protects the privacy of each person (natural persons – customers, potential customers) or another person – hereinafter collectively referred to as: “Person or You”) whose personal data it collects (hereinafter: “Personal Data“).
Collection and storage of personal data is carried out in accordance with the Act on Personal Data Protection (“Official Gazette of the Republic of Serbia” No. 87/2018) (hereinafter: the “Act“) as well as with the EU General Data Protection Regulation (EU 2016/679) (hereinafter: “GDPR“), where applicable (in the case of processing Personal Data of Persons who are residents of a Member State of the European Union, We will also apply the provisions of the GDPR, to the extent applicable).
We appreciate you as our visitor and client and recognize that privacy is important to you.
To protect the privacy of any person whose Personal Data we collect, we have published our Privacy Policy. The Privacy Policy defines what Personal Data we collect, for what purpose we use it, how we protect it and what are your rights regarding the processing of Personal Data. Namely, we have developed this Privacy Policy to show you our practice regarding the collection and processing of Personal Data that we collect from you or about you at this web address: marijatarlac.com, through written or oral communication, when you conclude a contract for the purchase of goods, or from some other source.
In any case, feel free to contact us at the email address: [email protected]
General conditions
Scope of application
This Privacy Policy applies to any processing of Personal Data by the Online Shop.
“Personal Data” is any data relating to a natural person whose identity is determined or identifiable, directly or indirectly, in particular on the basis of an identity mark, such as name and identification number, location data, identifiers in electronic communications networks or one, that is, more features of his physical, physiological, genetic, mental, economic, cultural and social identity;
“Person” means a natural person whose personal data are processed;
“Personal data processing” is any action or set of actions that is performed automatically or non-automatically with personal data or their sets, such as collecting, recording, sorting, grouping, or structuring, storing, matching or changing, detecting, inspecting, use, disclosure by transmission or delivery, duplication, dissemination or otherwise making available, comparing, restricting, deleting or destroying;
“Sensitive data” refers to data revealing racial or ethnic origin, political opinion, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the purpose of unique identification, health data or sexual data. the life or sexual orientation of the individual;
We do not collect your sensitive data unless you make it available to us voluntarily.
“Personal Data of children” refers to persons under the age of 18.
We do not collect children’s Personal Data. As a parent or legal guardian, do not allow your children to make their Personal data available without your permission.
If you send us Personal Data about other individuals (e.g., provide the delivery address / residence address of another person or the information of the person you wish to process with the Gift Card), We will consider that you have the authority to do so and that you have allowed us to we use that person’s information in accordance with this Privacy Policy.
Controller of the processing data and legal framework
The Online shop, as the Controller of the processing of your Personal Data, respects your privacy and undertakes to protect your Personal Data, all in accordance with this Privacy Policy.
How we collect personal data
Personal data is collected directly from you, as the persons whose data are processed or by other persons.
We collect Personal Data in a variety of ways:
We collect your Personal Data when you visit our website and when you contact us via email, telephone, social networks.
The purpose of collecting Personal Data is to provide answers to various inquiries regarding our goods or to establish communication with you in order to answer your inquiries or to specify your request. In that case, you consent to us collecting and processing your following Personal Data: name and surname, gender, email address and mobile phone number / landline number. Additionally, the purpose of collecting the above Personal Data is to send notifications about offers, news, additional information, current events, events and promotions that we organize.
Providing the stated Personal Data is a necessary condition for establishing communication between you and us. Otherwise, we will not be able to answer your inquiry or we will not be able to answer your inquiries or your requests regarding our goods.
The stated Personal Data is stored in our database until you revoke the consent.
We collect your personal data for the purposes of concluding a contract for the purchase of goods or for the purposes of the exercising of the contract for the purchase of goods, as well as for the purposes of email and telephone communication for the implementation of the contractual relationship or the establishment of a contractual relationship. The personal data that we collect and process on that occasion are: name and surname, gender, email address, mobile phone number / landline number and delivery address / address of residence.
The purpose of processing the above Personal Data is to conclude a contract for the purchase of goods or the exercising of the contract for the purchase of goods, as well as the realization of email communication and telephone communication for the implementation of the contractual relationship or the establishment of a contractual relationship.
Providing the above Personal Data is a necessary condition for concluding a contract for the purchase of goods or for the purposes of execution of the contract for the purchase of goods, which is concluded between you and us, or for the purpose of email and telephone communication between you and us. Otherwise, we will not be able to conclude or realize the concluded contract on the purchase of goods.
We collect your Personal Data in order to create and send a Gift Card. The personal data we collect and process on that occasion are: email address, mobile phone number / landline number and Gift Card delivery address / residence address (in case you want to receive a Gift Card in printed form).
The purpose of processing the stated Personal Data is to enable the purchase of a Gift Card
The stated Personal Data is stored in our database as long as it is necessary for concluding the contract on the purchase of goods, ie. until all contractual obligations from the contract on the purchase of goods are fulfilled, ie. until the purchase and delivery of the Gift Card is performed. Exceptionally, personal data collected for these purposes may be stored for a longer period of time for the period necessary to establish, execute or defend a legal claim.
The conclusion of a contract for the purchase of goods via the Internet is considered the conclusion of a distance contract. An integral part of the distance contract is the right of the buyer or the Person to withdraw from the contract within 14 days without giving a reason.
In order to exercise your legal right to withdraw from the contract, you need to fill in the form on your irrevocable statement of decision to exercise the right to withdraw from the contract for the purchase of goods. By filling out the above form, which you are obliged to send to our email address: [email protected], you are revealing a number of Personal Data to us. In this regard, the Personal Data that we collect and process on that occasion are: name and surname, gender, place and address for delivery of goods / place and address of residence and email address.
The purpose of processing the above mentioned Personal Data is to exercise the right to withdraw from the contract for the purchase of goods, in accordance with the Act on Consumer Protection. Therefore, the basis for the processing of these Personal Data for a specific purpose is the fulfillment of our legal obligations.
Providing the stated Personal Data is a necessary condition for exercising the right to withdraw from the concluded contract on the purchase of goods. Otherwise, we will not be able to enable you to exercise your legal right.
The stated Personal Data is stored in our database for as long as it is necessary for the purpose of exercising your right to withdraw from the concluded contract for the purchase of goods. Exceptionally, personal data collected for these purposes may be stored for a longer period of time for the period necessary to establish, execute or defend a legal claim.
The conclusion of a contract for the purchase of goods via the Internet is considered the conclusion of a distance contract. An integral part of the distance contract is the right of the buyer to file a complaint in case of non-compliance of the purchased goods.
In order to exercise your legal right to complain, you need to fill out a complaint form. By filling out the above form, which you are obliged to send to our email address: [email protected], you are revealing a number of Personal Data to us. In this regard, the Personal Data that we collect and process on that occasion are: name and surname, gender, place and address of residence / place and address for delivery of goods and email address.
The purpose of processing the said Personal Data is to exercise the right to file a complaint, in accordance with the Consumer Protection Act. Therefore, the basis for the processing of the said Personal Data for a specific purpose is the fulfillment of our legal obligations.
Providing the stated Personal Data is a necessary condition for exercising the right to complain. Otherwise, we will not be able to enable you to exercise your legal right.
The stated Personal Data is stored in our database for as long as it is necessary for the purpose of exercising your right to file a complaint. Exceptionally, personal data collected for these purposes may be stored for a longer period of time for the period necessary to establish, execute or defend a legal claim.
To learn more about cookies and how to manage them, including how to turn them off, visit the Cookie Policy section at ___________________________________.
In the Cookie policy you will be informed which specific personal data we process via cookies.
2) Personal data provided by other persons
There are cases when you can provide us with the personal data of third parties, e.g., for the preparation and delivery of the promotional offer for which you consider that could be interesting to someone you know or in case of buying a Gift Card, in which case we will consider that you are authorized by that person to act in such a way and we will not bear any liability for processing Personal Data of third party.
Which Data we collect
We collect your following personal data:
Purpose of collecting and processing the Personal data
The purpose of collecting the Personal Data:
We may use depersonalized data for statistical purposes.
Lawful basis for processing Personal data
Lawful basis for processing personal data is:
Your Personal Data acquired on the basis of your consent will be processed and stored as long as your consent exists, or until the revocation of your consent. You can revoke your consent on the acts of collecting, processing and using of your data at any time by sending an electronic request to the e-mail address: [email protected].
Revocation of your consent doesn’t effect on permissibility of processing Personal data, performed before the revocation.
We collect your Personal data, that are necessary for us to conclude and execute contract with you and fulfill pre-contractual obligations.
Personal Data are necessary for concluding a contract for the sale of goods, so that we can fulfill our contractual obligations.
If you do not provide us with the necessary Personal Data, we will not be able to conclude a contract for the sale of goods or to fulfill all our contractual obligations.
We collect your Personal Data that we need in order to exercise your legal rights (the right to withdraw from the concluded contract or the right to file a complaint), with that only, in order to fulfill our legal obligations.
The Personal Data that you disclose to us in order to exercise the mentioned rights are necessary for the fulfillment of our legal obligations.
If you do not provide us with the necessary Personal Data, we will not be able to realize the exercise of your legal rights.
Recipient and third party
We will not disclose your Personal Data to the other recipients or third parties, except in cases provided in this Privacy Policy and the General Terms and Conditions. Regarding this, in order to enable the delivery of the Goods to you, we are obliged to share some of your Personal Data, along with the order, with the courier service (Post of Serbia or DHL) that delivers the Goods.
Period of storing the Personal Data
Personal Data that we collect for the purpose of concluding a contract of the sale of goods or for the realization of a contract, we will store only as much as it is necessary for the purpose of fulfilling the contract or until all contractual obligations under the contract of the sale of goods are fulfilled. Exceptionally, Personal Data collected for these purposes may be stored for a longer period of time, and that so for the period that is necessary to establish, exercise or defend a legal claim.
Personal Data processed specifically on the basis of your consent will be stored until the consent is revoked.
Personal Data that we collect in order to exercise your legal rights (the right to withdraw from the concluded contract for the purchase of goods or the right to file a complaint) or to fulfill our legal obligations, are stored in our database as long as it is necessary for the purpose of exercising legal rights.
Rights of Person related to the processing of the Personal Data
Besides the rights already mentioned in this Privacy Policy, as well as other rights provided by law and other regulations in accordance with the law, the Data Subject has also the following rights:
In case of the mentioned request of the Person, we will provide information about the Personal Data of the Persons processed by Us or our processors, in accordance with our instructions, the purpose of processing the Personal Data, the legal basis and duration of processing, the name and address of the processor and its activities related to the processing, impact on the violation of the personal data, as well as the measures taken to eliminate them, and, in the case of data transfer, information on the legal basis of such a transfer and the receiver.
After your written request, we will provide you, no longer than 15 days from the day we received the request, with written explanation in understandable language. The written explanation shall be provided free of charge, unless the request is manifestly ill-founded or excessive, and in particular if it is repeats frequently. In that case, we can charge the necessary administrative expenses of giving a written statement and acting upon the request, or we can refuse to act upon the request.
We are obliged to provide the Data Subject, at his request, with a copy of the Personal Data we process. We may demand reimbursement of necessary costs for making additional copies requested by the Data Subject. If the request for a copy is submitted electronically, the information shall be provided in the commonly used electronic form, unless the Data Subject has requested for a different submission.
Data Subject has the right to have his / her inaccurate personal data corrected without necessary delay. Depending on the purpose of the processing, the Data Subject has the right to supplement his/her incomplete personal data, which includes giving an additional statement.
Data Subject has the right to request deletion of his/her Personal Data by Online Shop.
We are obliged to delete Personal Data without necessary delay if: 1) Personal Data are no longer necessary for the purpose for which they were collected or otherwise processed, 2) Data Subject has revoked the consent on the basis of which the processing was performed, and there is no other legal basis for processing, 3) The person has filed an objection to the processing, 4) Personal Data have been illegally processed, 5) Personal Data must be deleted in order to fulfill legal obligations; 6) Personal Data is collected regarding to the usage of information society services in terms of the Act.
Data Subject has the right to receive the Personal Data previously provided to us, in a structured, commonly used and electronically legible form and has the right to transfer this Personal Data to another controller without obstruction from us, if the following conditions are fellfield:
1) The processing is based on consent or on contract;
2) The process is performed automatically.
We are obliged to inform all Recipients which Personal Data has been disclosed of any correction or addition or deletion of Personal Data or restriction of their processing in accordance with the Law and GDPR, unless it is not possible or it requires an excessive expenditure of time and resources. We are obliged, on its request, to inform about all recipients the person who is the subject of the Personal Data.
Data Subject has the right to receive his / her Personal Data previously provided to us in a structured, commonly used and electronically readable form and has the right to transfer this Data to another controller without interference on our part, in accordance with the Law.
If he/she considers that it is justified according to the special situation in which he finds himself, Data Subject has the right to submit us at any time an Objection to the processing of his/her personal data, in accordance with the Law.
Data Subject has the right not to be a subject of a decision made solely on the basis of automated processing, including profiling, if that decision produces legal consequences for that person or that decision significantly affects his/her position.
Procedure in the case of breach of personal data
If breach of Personal Data may produce a high risk to the rights and freedoms of the Person, we are obliged, without unnecessarily delay, to notify a Data Subject of a breach, in accordance with the Law.
In the event of a Personal Data breach that may produce a high risk to the rights and freedoms of the Person, we are obliged to notify about it the Commissioner for Access to Information of Public Importance and Personal Data Protection without unnecessarily delay, or if its possible within 72 hours from learning from the injury.
Transfer of personal data to other countries
The transfer of personal data to another state or international organization, without prior approval, may be made if it determined that that other state/international organization provides an appropriate level of protection of Personal Data. Regarding this, Decision on the list of states, parts of their territories or one or more sectors of certain activities in those states and international organizations in which it is considered that an adequate level of Personal Data protection is provided (“Official Gazette of RS”, no. 55/2019) (hereinafter: the “Decision”), it is determined where it is considered that an appropriate level of Personal Data is provided.
In this regard, we transfer the Personal Data only to German (where the cloud is located).
Application of Data Protection principles
When processing Personal Data, we will at all time strive to act in accordance with the following principles of data processing:
We are responsible for the application of these principles and must enable their implementation (“responsibility for action”).
Link to third party websites and services
Our website may contain links to third party websites. Please consider the fact that we are not responsible for the collection, use, maintenance, sharing or disclosure of Data and information by third parties. If you disclose Personal Data on the website pages of third parties and use those sites, the Privacy Policies and Terms of use of those third parties will apply to that processing. We encourage you to read the Privacy Policies of the websites you visit before you disclose your personal information.
Data confidentiality and transparency
Your Personal Data will be treated as confidential information and we will undertake the appropriate necessary measures to protect it in accordance with the Law. They will be accessible only to persons who, given the description of the work they perform, should be acquainted with your Personal Data and only to extent necessary to perform their work.
This Privacy policy is available on the web page marijatarlac.com
If we decide to change our Privacy policy, the changes will be available and published on the website page marijatarlac.com
In case that you have any questions or requests regarding the processing of your Personal Data, please contact us at the email address: [email protected]
Your Online shop
All rights reserved by Marija Tarlac
