Privacy and Personal Rights Protection Policy
PRIVACY AND PERSONAL DATA PROTECTION POLICY
Ljetopis Co. d.o.o.
Last updated: [enter date]
1. General Information
This Privacy and Personal Data Protection Policy governs how Ljetopis Co. d.o.o., headquartered at Kralja Nikole br. 4, 81000 Podgorica, Montenegro, collects, uses, processes, stores and protects the personal data of users of the website http://ljetopis.me/, customers, business partners and other persons with whom it communicates or has a business relationship.
Data controller details:
Ljetopis Co. d.o.o.
Tax ID: 03782743
VAT: 30/31-29367-6
Address: Kralja Nikole br. 4, Podgorica 81000, Montenegro
Telephone: +382 20 634 840
Email: [email protected]
Working hours: 07:30h – 15:30h / Monday – Friday
In this policy, the terms “Ljetopis”, “we”, “us” and “our” refer to Ljetopis Co. d.o.o.
2. Commitment to Privacy Protection
Ljetopis Co. d.o.o. respects the privacy of all users and processes personal data lawfully, fairly and transparently, applying appropriate technical and organisational security measures.
We process personal data only where there is a legal basis to do so and only to the extent necessary to achieve a specific processing purpose.
3. What information may we collect
Depending on the purpose and method of communication, we may collect the following categories of personal data:
- first and last name
- residential or delivery address
- telephone number
- email address
- order, purchase or enquiry details
- payment and transaction details, to the extent available to us
- IP address
- technical information about the device, browser and use of the website
- information provided via the contact form, email correspondence or telephone contact
- other information voluntarily provided to us by the user
Ljetopis Co. d.o.o. does not collect more data than is necessary for the specific processing purpose.
4. How we collect information
We may collect personal data:
- directly from users when they provide it themselves
- via forms on the website
- via email correspondence
- via telephone contact
- when submitting an enquiry, request or order
- automatically, through cookies and similar technologies
- through lawful business cooperation and administrative processes
5. Purposes of processing personal data
We may process personal data for the following purposes:
- responding to user enquiries
- establishing and maintaining communication with the user
- fulfilling an order, making a sale or managing a contractual relationship
- issuing quotations, invoices and other related documentation
- organising delivery and logistics
- maintaining records in accordance with the law
- handling complaints, objections or user requests
- improving service quality and the user experience
- site administration and security
- preventing misuse, fraud and unauthorized access
- fulfilling legal obligations
- sending notifications, where there is a legal basis to do so
- statistical and analytical processing in anonymized or aggregated form
6. Legal Basis for Processing
We process personal data when at least one of the following legal bases applies:
- the user has given consent to the specific processing
- the processing is necessary for the performance of a contract or to take steps before entering into a contract
- the processing is necessary to fulfill a legal obligation
- the processing is necessary to protect the legitimate interests of Ljetopis Co. d.o.o., unless the user's rights and freedoms override those interests
Where processing is based on consent, the user has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
7. Legitimate Interest
Where applicable, Ljetopis Co. d.o.o. may process data on the basis of legitimate interests, particularly for:
- protecting the site, systems and infrastructure
- preventing misuse and fraud
- maintaining internal administration and records
- improving the site's services, content and functionality
- establishing and protecting legal claims
In such cases, we ensure that users' rights and freedoms are not compromised.
8. Who May Have Access to the Data
Personal data may be accessible only to those who need it to achieve the purpose of processing, namely:
- authorized employees and associates of Ljetopis Co. d.o.o.
- IT, hosting and technical support providers
- accounting, legal and administrative service providers
- courier and logistics services, where necessary
- banks, payment institutions and payment processors, where necessary
- competent government authorities, where required by law
All third parties with access to the data are required to protect it and process it exclusively in accordance with the law and their contractual obligations.
9. Transfer of Data to Third Parties
Ljetopis Co. d.o.o. will not sell, rent or unlawfully disclose personal data to third parties.
Data may be transferred to third parties only when:
- it is necessary to perform a service or contract
- there is a legal obligation
- the user has given consent
- this is necessary to protect the legal interests of Ljetopis Co. d.o.o.
10. International Data Transfers
If personal data is transferred outside Montenegro or outside a country that ensures an adequate level of protection, Ljetopis Co. d.o.o. will ensure that the transfer is carried out with appropriate legal, technical and organisational safeguards, in accordance with applicable regulations.
11. Data Retention Period
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law or justified by a legitimate interest.
The retention period may depend on the type of data and the purpose of processing, including:
- the duration of the business or contractual relationship
- the periods prescribed by tax, accounting and other regulations
- the period required to resolve complaints, disputes or legal claims
- the period until consent is withdrawn, if processing is based on consent
At the end of the retention period, the data is deleted, anonymised or otherwise permanently removed as appropriate.
12. Data Security
Ljetopis Co. d.o.o. takes appropriate technical and organisational measures to protect personal data from:
- unauthorised access
- loss
- destruction
- misuse
- alteration
- unauthorised disclosure
Safeguards may include access controls, information system security, backups, access logs, communications security and other security procedures in line with the nature of the data and the risks of processing.
Although we take reasonable and appropriate security measures, no security system is absolutely impenetrable, and complete security cannot therefore be guaranteed.
13. Rights of Data Subjects
In accordance with applicable regulations, the user may have the right to:
- request access to their personal data
- request the correction of inaccurate data or the completion of incomplete data
- request the deletion of data where the legal requirements are met
- request restriction of processing
- object to processing
- request data portability, where applicable
- withdraw consent to processing, where processing is based on consent
- lodge a complaint with the competent data protection authority
To exercise their rights, the user may contact us via:
Email: [email protected]
Telephone: +382 20 634 840
To protect data, Ljetopis Co. d.o.o. may request additional verification of the applicant's identity before acting on a request.
14. Data Accuracy
The user is responsible for ensuring that the data they provide is accurate, complete and up to date.
If any information changes, the user should notify us so that we can update our records.
15. Cookies and Similar Technologies
The website may use cookies and similar technologies for:
- the technical operation of the website
- improving the user experience
- visitor analytics and statistics
- website security
- marketing, where applicable
More detailed information about the use of cookies may be set out in a separate Cookie Policy.
Users can manage cookies through their browser settings or cookie management tools, where available.
16. Links to Third Parties
The website may contain links to other websites or third-party services.
Ljetopis Co. d.o.o. is not responsible for the content, operation or privacy policies of those third parties. We recommend that users familiarise themselves with the relevant terms before using such websites.
17. Data of Minors
Ljetopis Co. d.o.o. does not knowingly collect the personal data of minors without an appropriate legal basis or the consent of a parent or guardian, where such consent is required.
If we become aware that such data has been provided without the appropriate consent, we will take reasonable steps to remove it.
18. Amendments to the Policy
Ljetopis Co. d.o.o. reserves the right to amend or supplement this Privacy Policy at any time to reflect changes in legislation, business operations or technical improvements.
The updated version will be published on the website, together with the date of the latest update.
By continuing to use the website after changes are published, the user is deemed to have read the amended version of the policy.
19. Contact
For any questions, requests or complaints concerning this Privacy Policy and the processing of personal data, you can contact us:
Ljetopis Co. d.o.o.
Kralja Nikole No. 4, 81000 Podgorica, Montenegro
Email: [email protected]
Telephone: +382 20 634 840
Web: http://ljetopis.me/