Privacy policy

Controller

[Company name] d.o.o., [Street, postal code, city], Serbia, [email protected]

EU representative (Art. 27 GDPR): [name, address]

What we process and why

• Orders (name, address, email, phone, order details) — to perform the contract (Art. 6(1)(b) GDPR).
• Account (email, password hash, addresses) — to provide your customer account.
• Payments — processed by Stripe Payments Europe Ltd.; we never see full card numbers.
• Emails — order and service emails; marketing only with your consent.
• Reviews — your first name and last initial are shown publicly.
• Cookies — only strictly necessary cookies unless you consent. See Cookies.

Recipients

Hosting (Hetzner Online GmbH, Germany), payment providers, shipping carriers, email provider.

Retention

Order data is kept as required by tax law (typically 10 years); account data until you delete your account.

Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Contact [email protected]. You may complain to a supervisory authority.