Personal data that we collect in order to provide you with the best service: first and last name of the respondent, personal identification number (OIB), telephone number and/or mobile number, email address, address for delivery of the order, information on the bank account (card payment for goods and return of funds).
Other data that is collected automatically when accessing and using the site, regardless of the use of the services offered:
- IP-address, date and time of access to services
• data about the device accessed (model, hardware, software, operating system, internet browser, and language settings).
• Information about our services that you have used and in what way,
• If you access our pages via a mobile device, we collect data about the device manufacturer, the type of device and the operation of the application, that is, about the difficulties of using the application on some devices so that they can be improved
• Cookies
Why do we collect personal data?
The legal basis for the collection of the personal data of the respondent is contained in the applicable legal rules, the express and unequivocal consent of the respondent and the contractual relationship between the respondent and the data controller.
All personal data of respondents are collected and processed lawfully, fairly and transparently with respect to the respondent.
The purpose of processing and collecting your personal data:
- creating a profile on the official website of the prendaonline.com web store.
• processing and delivery of your order • responding to your inquiries regarding the products we offer
• processing of your complaints on goods purchased in the web store
• return of goods and termination of contract
• regulation of payment and refund methods
• replacement of purchased goods
We process the collected data, as well as the data obtained through the provision of services, only for the purpose for which they were given and for which we received your consent.
To whom do we make your personal data available?
We do not make the personal data we have collected about the subject available to unrelated third parties. In order to fulfill our obligation to you and provide you with the requested services, we make the data available to our business partners. Our business partners are the banks through whose services we enable card payments and refunds (online payment service) and delivery services (e.g. national postal service of Serbia). Delivery services are authorized to use your data exclusively for the purpose of delivering an individual order.
Our business partners are obliged to maintain confidentiality within the framework of the contractual relationship and to act conscientiously with your personal data that we have passed on to them and to take measures to protect it in accordance with applicable legal regulations.
We can make your personal data that we process available to third parties only in cases of justified request by the competent authority or in case of fulfillment of a legal obligation.
Your collected personal data on the website of prendaonline.com are not transferred to third countries or international organizations and are used only for the purposes for which they were given.
How long do we keep your data?
We store your personal data for the period of time that is necessary to achieve the legitimate and lawful purposes for which they were collected and processed. Exceptionally, data can be stored for a longer period, if the valid and applicable regulations and provisions of the Regulation specify a longer period.
What are your rights related to the processing and collection of personal data?
Each respondent whose personal data we collect and process exercises the rights that belong to him based on the provisions of the Regulation and other applicable legal regulations.
- the right to transparent information, communication and modalities for exercising the rights of respondents
- the right to information about the processing of personal data
- the right to access personal data
- the right to data correction
- the right to delete personal data
- the right to limit the processing of personal data
- the right to portability of personal data
- the right to object to the processing of personal data and
- the right to object to automated individual decision-making, including profiling
- the right to withdraw consent
a) The respondent’s right to transparent information, communication and modalities for exercising the respondent’s right
This right includes the application of plain language and transparency in the collection and processing of data, for the data subject this implies that information about the processing of personal data will be readily available, in written form or, if appropriate, in electronic form, on the website. If requested by the data subject, the information they can provide orally, provided that the identity of the respondent has been established by other means.
b) The right of the respondent to be informed about the processing of personal data
The data subject must be provided with information about the data controller and his contact details, the data protection officer (if applicable) and his contact details, what data is collected, what is the purpose and legal basis of the data processing, how long the collected data is kept and who is the recipient of the data, if the collected data is transferred outside the European Union. Also, the respondent must be aware of the fact that he can request access to personal data from the controller and their correction or deletion, restriction of data processing and also objection to processing, which includes withdrawal of consent for data processing, if given. In addition to the above, the respondent must be informed that he has the right to file a complaint with the competent authority.
c) Right of access
Each respondent has the right to access his/her personal data that is collected and processed about him/her and may request detailed information, especially on the purpose of processing, on the type/categories of personal data that are processed, including insight into his/her personal data, on recipients or categories of recipients, and about the expected period in which personal data will be stored. Access to personal data can be limited only in cases where this is prescribed by European Union law or national legislation, i.e. when such a limitation respects the fundamental rights and freedoms of other persons.
d) Right to rectification
The respondent has the right to obtain from the controller the correction of inaccurate personal data relating to him without undue delay. Taking into account the purposes of the processing, the respondent has the right to supplement incomplete personal data, including by providing an additional statement. For example: every respondent can ask for correction of the address of residence or residence.
e) The right of the respondent to delete personal data
Every respondent has the right to ask the controller to delete his personal data if any of the following assumptions are met:
- collected personal data are no longer necessary in relation to the purpose for which they were collected or processed;
• the consent for the processing and collection of data on which the processing is based has been withdrawn and there is no other legal basis for the processing;
• an objection has been filed against data processing and the controller has no stronger legitimate reasons for processing;
• personal data were illegally processed;
• personal data must be deleted in order to comply with a legal obligation under Union law or the law of the country to which the controller is subject;
• personal data were collected in connection with the offer of information society services. To exercise your right, please contact the data controller in writing by email.
f) The right of the respondent to limit the processing of personal data
Each respondent exercises the right to limit the processing of personal data if: he disputes their accuracy, if the processing is illegal, and opposes their deletion, if the data must be kept in order to fulfill or defend the legal requirements of the respondent, and if an objection to the processing of personal data has been lodged.
g) The right to object
At any time, you can submit a complaint to the controller regarding the processing of personal data, if they are processed for the purposes of performing tasks of public interest or in the exercise of your official powers, based on legitimate interest or for direct marketing purposes. The data controller may no longer process personal data unless the data controller proves that there are compelling legitimate reasons for processing that go beyond the interests, rights and freedoms of the data subject or for the purpose of establishing, exercising or defending legal claims, and if it is an objection against data processing for the purposes of direct marketing, personal data may no longer be processed in such Also, the right to object also applies to automated individual decision-making, including the creation of profiles.
h) The right to withdraw consent
The subject has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. The respondent withdraws consent for data processing by deleting his profile on the prendaonline.com page, or unregistering. He can continue to use it as a guest. After withdrawing consent and using the site as a guest, the same will no longer have access to all services offered by the prendaonline.com site. Withdrawal of the Respondent’s consent leads to the impossibility of continuing to use the site if the collected personal data is necessary for carrying out certain site activities. After the respondent has deleted his profile, i.e. unregistered from the site, his personal data are anonymized in such a way that it is no longer possible to connect them to the person they refer to.
How can you exercise your rights?
To exercise your rights, you should contact prendaonline.com as the manager of the publication, in writing, to the contact information from this privacy policy. Prendaonline.com will answer your questions as soon as possible.
Marketing activities of prendaonline.com
In order for the users of our services to be informed in time about all our new activities, services and offers, the company prendaonline.com conducts marketing activities such as sending newsletters, promotional messages and notifications.
We carry out the aforementioned marketing activities only if you have given us your consent or if we have a legitimate interest. If the marketing activity is carried out on the basis of your consent, you can withdraw your consent at any time and our marketing activities, in the part of the withdrawn consent, will stop towards you.
Personal data protection measures
Given that your privacy and security are extremely important to us, prendaonline.com as the manager of personal data processing, takes care that your data is processed in accordance with applicable regulations and that appropriate technical and organizational measures are applied to their processing, security and protection. When processing data, only those data are processed that are necessary to achieve the purpose of processing, with the highest level of privacy protection. Also, the collected personal data are kept for a limited time and can only be accessed by authorized persons and are not automatically, without individual intervention, available to an unlimited number of people.
All authorized persons who have access to the personal data of the respondents are familiar with the rules for the protection of personal data, and are obliged to preserve the business secrets and privacy of all users of the services of the company prendaonline.com. With all our partners who provide the company prendaonline.com provide certain services, agreements on the protection of personal data are concluded, so that there is no unauthorized use of personal data or any other violation of the rights of the respondents. We regularly analyze and improve all the measures we apply in order to continuously maintain the highest level of protection of your personal data and prevent possible violations.
Social networks
Prendaonline.com in its business, in order to present its services to potential and existing users, it uses social networks belonging to the Meta Platforms, Inc. group: Facebook and Instagram, where it has open business profiles. When interacting on the mentioned platforms, the user’s personal data is collected and processed, but not stored.
Persons who, by the company prendaonline.com authorized to manage accounts on the mentioned platforms, have access to your messages and posts intended for the company prendaonline.com, and store them only if they are required to do so by law.
Every user who visits the profiles on the mentioned platforms of the company prendaonline.com provides insight into attendance statistics and demographic data. The above statistics do not contain personal data, but enable the creation of better and more interesting content for the end user of our services. If you use platforms belonging to the Meta Platforms, Inc. group: Facebook and Instagram to interact with prendaonline.com pages, platforms transfer your personal data to the United States of America. In this case, they act as data controllers and we recommend that you read their privacy policies, which are available on their pages.
By clicking during registration, the Respondent accepts this Privacy Statement and confirms that he has read and understood it in its entirety and that he agrees to the collection, processing and sharing of personal data in the manner and to the extent determined by the Privacy Statement itself.
Prendaonline.com reserves the right to modify this privacy statement at any time by publishing the amended text of the Privacy Statement on its site, accordingly, please note that it is necessary to periodically review the Privacy Statement to determine whether it meets your needs. If you do not agree with the same, we advise you to delete your profile or unregister from the site.