Privacy Policy
Processing of personal data in the online store and on the website
1. Who processes your data
The data controller is:
| Item | Value |
|---|---|
| Name | JOVIĆ VILJUŠKARI D.O.O. |
| Registered office | Kralja Petra I br. 205, 21400 Bačka Palanka, Republic of Serbia |
| Company registration number | 08697329 |
| Tax identification number (PIB) | 100753531 |
| Phone | 021/6040-505 |
| info@viljuskari-jovic.rs | |
| Data protection contact | Jelena Glušac, info@viljuskari-jovic.rs |
The website has a Messenger button. It is a plain link: until you click it, nothing is loaded from Meta's servers and no cookie is set through it. By clicking it you leave our website and continue the conversation in the Messenger app, where the terms of use and privacy policy of Meta Platforms apply. Only the identifier of the page you came from is passed with the link, for example “proizvod-ep15-03”, so that we know what you were interested in. We do not pass your name, email address or any other data in this way.
We process data in accordance with the Law on Personal Data Protection of the Republic of Serbia.
The online store is intended exclusively for legal entities and entrepreneurs. Data about a business entity — business name, tax identification number (PIB), company registration number — are not personal data. This policy applies to data about representatives, contact persons and website visitors, who are natural persons.
2. What data we collect
Data you provide to us
| When | Data |
|---|---|
| Contact form, email, phone | first and last name of the contact person, company name, email address, phone number, content of the message |
| Order in the store | company details, first and last name of the contact person and of the person taking delivery, delivery address, phone number, email address |
| Payment | data from the payment statement — payer's name, account number, amount, reference number |
| Complaint about a defect | data from the complaint, description of the defect, data about the goods, attached evidence |
| Newsletter subscription | email address, record of the consent given |
| User account | username, email address, order history |
Data recorded by the system
When you visit the website, the server automatically records your IP address, browser and operating system type, time of access and the pages you viewed.
Based on the IP address, we automatically determine only the country from which you are accessing the site, so that the appropriate currency and tax treatment can be shown in the cart. The country you enter in the billing address is ultimately applied. This website uses GeoLite data from MaxMind, available at https://www.maxmind.com.
Cookie data
Data on behaviour on the website, collected by cookies and similar technologies. Details are in section 8 of this policy.
3. Why we process data and on what legal basis
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to enquiries, preparing quotes | taking steps at your request prior to entering into a contract | for the duration of the communication and 12 months thereafter |
| Processing the order, issuing the proforma invoice, delivery | performance of the contract | for the duration of the contract |
| Issuing invoices and electronic invoices, bookkeeping | compliance with legal obligations | 10 years — tax and accounting regulations |
| Assigning and managing the customer code | performance of the contract and legitimate interest — matching payments | for the duration of the business relationship and 10 years thereafter |
| Handling complaints about defects | performance of the contract and legitimate interest | until the limitation period for claims expires |
| Exercising warranty rights | performance of the contract | for the warranty period and one year thereafter |
| Website security, fraud prevention | legitimate interest | 6 to 12 months |
| Debt collection and handling disputes | legitimate interest | until the claims become time-barred |
| Visitor analytics | your consent | until withdrawn, no longer than 14 months |
| Marketing and displaying ads | your consent | until withdrawn |
| Newsletters | your consent | until consent is withdrawn |
Are you obliged to provide data
Data marked as mandatory in the order form are necessary for concluding and performing the contract. Without them, we cannot process the order or deliver the goods.
The tax identification number (PIB) and company registration number are mandatory because sales are made exclusively to business entities and because electronic invoices are issued on that basis.
Providing an email address for newsletters is voluntary and is not a condition of purchase.
Automated decision-making
We do not make decisions based solely on automated processing that would produce legal effects concerning you or significantly affect your position. We do not carry out profiling to determine prices — the price is the same for all buyers.
4. To whom we disclose data
We do not sell, rent or disclose data to unauthorised persons. Data are available only to trusted service providers who process them on our behalf and on our instructions, under a data processing agreement:
| Recipient category | Purpose | Location |
|---|---|---|
| Hosting provider — AdriaHost d.o.o., Belgrade | hosting of the website and databases | Netherlands |
| Website maintenance agency | technical maintenance | Serbia |
| Courier and freight forwarding service | delivery of goods | Serbia |
| Accounting agency | bookkeeping | Serbia |
| Bank | processing payments | Serbia |
| Tax Administration and the electronic invoicing system | legal obligation | Serbia |
| Google (Analytics, Tag Manager) | analytics — with your consent | USA |
| Meta Platforms (Pixel) | marketing — with your consent | USA |
| Mailchimp / Intuit | sending newsletters — with your consent | USA |
| Microsoft (Clarity) | behaviour analytics — with your consent | USA |
| Automattic (Jetpack, WordPress.com statistics) | visitor statistics and website security | USA |
| Google (Google Ads, via the Google for WooCommerce plugin) | conversion measurement and advertising | USA |
| conversion measurement and advertising | USA | |
| Meta Platforms (Messenger) | a conversation you start by clicking the Messenger button | USA |
5. Transfer of data to other countries
The website and database are hosted on servers in the Netherlands. The Netherlands is a member state of the European Union and is on the list of countries considered to provide an adequate level of personal data protection, so no special safeguards are required for that transfer.
The tools listed in the table above that are based outside the Republic of Serbia may transfer data to the United States of America and other countries.
The transfer is based on the standard contractual clauses adopted by the Commissioner for Information of Public Importance and Personal Data Protection, and on your explicit consent given when choosing cookies.
You can request information about the safeguards applied at info@viljuskari-jovic.rs.
6. Your rights
With regard to your data, you have the following rights:
- Right of access — to obtain confirmation of whether we process your data, which data, for what purpose, to whom we disclose them and how long we keep them, as well as a copy of those data.
- Right to rectification and completion — to request the correction of inaccurate data and the completion of incomplete data.
- Right to erasure — to request the erasure of data we no longer need, data we process on the basis of consent you have withdrawn, or data we process unlawfully.
- Right to restriction of processing — to request a temporary suspension of processing, for example while we verify the accuracy of the data.
- Right to data portability — to receive the data you have provided to us in a structured, commonly used and machine-readable format.
- Right to object — to object to processing based on our legitimate interest. Where direct marketing is concerned, we stop processing immediately.
- Right to withdraw consent — to withdraw your consent at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- Right to lodge a complaint — to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, Belgrade, office@poverenik.rs.
Submit your request to info@viljuskari-jovic.rs or by post to our registered office. We act without delay and no later than 30 days from receipt of the request. This period may be extended by a further 60 days where necessary, in which case we will inform you within 30 days. Handling requests is free of charge.
7. Data security
We apply technical, organisational and staffing measures to protect data against loss, theft, unauthorised access, alteration and disclosure. The website uses an encrypted connection. Only employees who need the data for their work have access to it, and they are bound by confidentiality.
In the event of a personal data breach that may pose a risk to your rights, we notify the Commissioner without undue delay and, where possible, within 72 hours. If the breach may pose a high risk, we also notify you.
8. Cookie Policy
Our website uses cookies — small text files stored on your device — as well as similar technologies set by our analytics and marketing partners. We divide cookies into two groups: necessary cookies, which are set automatically because they are essential for the website to work, and analytics and marketing cookies, which are set only if you choose "Accept all" on the cookie banner.
| Name / type | Origin | Purpose | Duration | Consent required |
|---|---|---|---|---|
| wordpress_test_cookie | First party (website) | Checks whether the browser supports cookies | Session | No — necessary |
| _ga, _gid | Google Analytics, loaded via Google Tag Manager (third party) | Anonymous statistical data on visits, number of users and navigation through the website | _ga: 2 years, _gid: 24 hours | Yes |
| _gat | Google Analytics, loaded via Google Tag Manager (third party) | Limits the frequency of requests to the server | 1 minute | Yes |
| _fbp | Meta / Facebook Pixel, loaded via Google Tag Manager (third party) | Measures and improves the delivery of ads on Facebook and Instagram | About 3 months | Yes |
| Mailchimp cookies (connected site) | Mailchimp – The Rocket Science Group / Intuit Inc. (third party) | Recognises visitors for features such as newsletter sign-up and email marketing | Depends on the Mailchimp features enabled (up to 12 months) | Yes |
Google Tag Manager is the tool we use to manage the Google Analytics and Meta Pixel tags listed above; it does not set a separate cookie itself, but it is not loaded until you give consent.
Note: the exact list of cookies set by Mailchimp depends on the features enabled in our Mailchimp account; details can be found in Mailchimp's own cookie policy.
How to control cookies?
When you first visit the website, a banner with two options appears at the bottom of the page:
- "Accept all" — all cookies in the table above are loaded.
- "Necessary only" — only necessary cookies are loaded; analytics and marketing cookies are not set.
We remember your choice for 7 days, after which we will ask you again. You can change your choice at any time by clicking "Cookie settings" in the website footer. In addition, you can change your browser settings (Chrome, Firefox, Safari, Edge) at any time to block or delete cookies. Please note that disabling necessary cookies may affect the proper functioning of certain parts of the website.
9. Changes to this policy
We may update this policy to reflect changes in regulations or changes to the website. Each version enters into force upon publication on this page.
Last updated: 22 September 2026
JOVIĆ VILJUŠKARI D.O.O., Bačka Palanka
