Section 1 – INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTROLLER CONTACT DETAILS

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how your personal data is handled when using our website. Personal data is any data by which you can be personally identified.

1.2 The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nikola Beograd. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

 

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.

 

Section 2 – DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for informational purposes only — i.e., if you do not register or otherwise submit information to us — we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited

• Date and time of access

• Amount of data sent in bytes

• Source/reference from which you came to the page

• Browser and operating system used

• IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be forwarded or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

 

Section 3 – COOKIES

In order to make the visit to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies).

When cookies are set, they collect and process certain user information, such as browser and location data, as well as IP address values to a certain extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

 

In some cases, cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart). If personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Article 6(1)(b) GDPR for the performance of the contract or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests.

Note: You can set your browser to inform you about the setting of cookies and decide individually on their acceptance, or exclude the acceptance of cookies for specific cases or in general.

Section 4 – CONTACT

When contacting us (e.g., via contact form or email), personal data is collected. What data is collected in the case of a contact form can be seen from the form itself. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact with you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry, provided that there are no statutory retention obligations to the contrary.

Section 5 – DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed when you provide it to us for the execution of a contract or when opening a customer account. What data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data.

Section 6 – USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Subscription to the email newsletter: If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your email address. We use the so-called "double opt-in" procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR.

6.2 Sending the email newsletter to existing customers: If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. Data processing is carried out exclusively on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6(1)(f) GDPR. You have the right to object to the use of your email address for advertising purposes at any time with effect for the future.

 

Section 7 – DATA PROCESSING FOR ORDER FULFILLMENT

7.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. The legal basis for the transfer of data is Article 6(1)(b) GDPR.

 

Section 8 – REVIEW REMINDER

We use your email address for a one-time reminder to submit a review of your order for the review system we use, provided you have given us your express consent in accordance with Article 6(1)(a) GDPR during or after your order. You can withdraw your consent at any time by sending a message to the data controller.

Section 9 – USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins (Shariff Solution): Our website uses so-called social plugins of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. To increase the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins, but only via an HTML link. This ensures that a connection to Facebook servers is not established when you access a page on our site containing such buttons. When you click the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins.

9.2 Google+ Plugins (Shariff Solution): Our website uses social plugins of the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The same Shariff solution via HTML link is used for data protection, ensuring there is no direct connection to Google servers until you actively click the button.

9.3 Instagram Plugin (Shariff Solution): Our website uses social plugins of the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. The same Shariff solution via HTML link applies, ensuring that a connection to Instagram servers is not established until you actively click the button.

Section 10 – ONLINE MARKETING

10.1 DoubleClick by Google: This website uses the online marketing tool DoubleClick by Google (Google LLC). DoubleClick uses cookies to serve relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) GDPR. According to Google, DoubleClick cookies do not contain personal information.

10.2 Google AdWords Conversion Tracking: This website uses the online advertising program Google AdWords and its conversion tracking. We use Google AdWords to draw attention to our attractive offers on external websites. A conversion tracking cookie is set when a user clicks on a Google AdWords ad. These cookies typically expire after 30 days and are not used for personal identification. Processing takes place on the basis of our legitimate interest in accordance with Article 6(1)(f) GDPR.

Section 11 – WEB ANALYTICS SERVICES

Google (Universal) Analytics: This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies that allow an analysis of your use of the website. This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures the anonymization of the IP address by shortening it and excludes direct personal reference.

Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a User ID. A unique, persistent, and anonymized ID is assigned upon the first visit to the page and is set across all devices. The User ID does not contain personal data and does not transmit such data to Google. You can object to the collection and storage of data via the User ID at any time with effect for the future.

Section 12 – RETARGETING / REMARKETING / ADVERTISING RECOMMENDATIONS

Facebook Custom Audience (Pixel): This website uses the "Facebook Pixel" of Facebook Inc. If express consent is given, user behavior can be tracked after they see or click on a Facebook ad. This process serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes. The collected data is anonymous to us. However, the data is stored and processed by Facebook. Processing is carried out only with express consent in accordance with Article 6(1)(a) GDPR. Consent to use the Facebook Pixel may only be given by users over 13 years of age.

Google AdWords Remarketing: Our website uses the functions of Google AdWords Remarketing. Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. Processing is carried out on the basis of our legitimate interest in accordance with Article 6(1)(f) GDPR. Further data processing takes place only if you have consented to Google linking your web and app browsing history with your Google account.

Section 13 – RIGHTS OF THE DATA SUBJECT

13.1 Applicable data protection law grants you comprehensive rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data:

• Right to access (Article 15 GDPR): The right to information about your processed personal data, purposes of processing, categories, recipients, planned storage period, and more.

• Right to rectification (Article 16 GDPR): The right to immediate correction of inaccurate data and/or completion of incomplete data stored by us.

• Right to erasure (Article 17 GDPR): The right to request the erasure of your personal data if the conditions of Article 17(1) GDPR are met.

• Right to restriction of processing (Article 18 GDPR): The right to request the restriction of the processing of your personal data.

• Right to notification (Article 19 GDPR): The right to be informed about all recipients to whom personal data has been disclosed.

• Right to data portability (Article 20 GDPR): The right to receive your personal data in a structured, commonly used, and machine-readable format.

• Right to withdraw consent (Article 7(3) GDPR): The right to withdraw consent at any time with effect for the future.

• Right to lodge a complaint (Article 77 GDPR): The right to lodge a complaint with a competent supervisory authority.

13.2 Right to Object:

• Right to object: If we process your personal data based on our overriding legitimate interest within the framework of a balancing of interests, you have the right to object to this processing at any time with effect for the future for reasons arising from your specific situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

• Direct Advertising: If we process your personal data for the purpose of direct advertising, you have the right to object at any time to the processing of personal data relating to you for the purpose of such advertising. If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.

Section 14 – DURATION OF PERSONAL DATA STORAGE

The duration of the storage of personal data is based on the respective statutory retention period (e.g., commercial and tax retention periods). After the expiry of this period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment or initiation of a contract and/or there is no longer a legitimate interest on our part in further storage.