Privacy Policy

With an aim to protect and preserve personal data SARUNA SKYLINE SYSTEM LTD BEOGRAD – SAVSKI VENAC adopts and publishes this Privacy policy in order to enable and protect the security of personal data. This privacy policy in a transparent and easily accessible way informs data subjects about the collection, usage, nature and scope of processing of personal data on behalf of SARUNA SKYLINE SYSTEM LTD BEOGRAD – SAVSKI VENAC, with the address in Belgrade – Municipality Savski Venac, Knez Miloša street no.90a, Company ID: 21530999, Tax ID: 111735675 (hereinafter: Saruna or „we/us/our“ and similar).

This Privacy policy informs data subjects about information Saruna collects from data subjects, as well as about the way Saruna collects data while accessing Saruna’s website – https://saruna.rs/

Personal data are all data relating to a natural person whose identity is determined or identifiable, directly or indirectly, in particular on the basis of an identity mark, such as name or identification number, location data, identifier in electronic communications networks or one, or more features of his physical, physiological, genetic, mental, economic, cultural or social identity (hereinafter referred to as “PD“).

The legal framework for regulating the protection of personal data has been determined within the Law on Personal Data Protection (“Official Gazette of the RS”, No. 87/2018), hereinafter “the Law“).

PD within Saruna is being protected in accordance with this Privacy policy as well as in accordance with other data protection related general acts of Saruna if those general acts have been adopted and came into force.

In case our website provides a link to other websites, we hereby invite data subjects to carefully read and get familiar to terms and conditions regarding personal data protections of linked websites, as Saruna is neither aware nor responsible for the processing of personal data on behalf of linked websites and therefore shall not be held responsible for protection of personal data of data subjects while using linked websites.

Collection of PDs and lawfulness of processing

Saruna is processing information collected directly from data subjects, which includes information collected at the place of business operation, collected while accessing Saruna’s website, whether such information is with or without remuneration, as follows:

  • Information regarding the order in the process of purchasing the service in accordance with the Terms and Conditions,

  • Information regarding order for additional services,

  • Information regrading contact information when Saruna is being reached out in order to get in touch or get applied for the newsletter,

  • Information collected when accessing the website and use the cookies or google analytics.

All collected information is saved and kept in the on the confidential and adequate way.

In accordance to legally binding rules regarding the personal data protection, processing shall be lawful only if and to the extent that at least one of the following applies:

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

  • Processing is necessary for compliance with a legal obligation to which the controller is subject;

  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject;

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes, while subject matter data subject is entitled at any moment to withdraw such consent.

Data subject shall be obliged to submit only those personal data which are being used when the processing is necessary for compliance with a legal obligation to which the controller is subject.

Except previously been said, processing base on all other legal grounds is voluntary. Notwithstanding, if data subjects decide not to hand over personal data, Saruna may not be able to engage certain undertakings.

Legal grounds for the processing of personal date are being determined with regard to the purpose of processing. Saruna shall inform the data subject regarding the purpose of processing prior to the processing.

Sauna is processing different categories of personal data in regard to the request of the data subject.

Depending of the way how data subject has reached out to us as well as depending of the type of request data subject sent to us, we may process following personal data: name and surname, phone number, email address, as well as other information data subject send to us in regard to the type of request.

Creating a Service Purchase Order and Submitting a Supplementary Service Request:

The purpose of processing: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

Lawfulness of processing: according to the article 12 paragraph 1 point 2 of the Law;

The period for which the personal data will be stored: during the provision of services for which personal data is processed, as well as afterwards as long the obligations of the controller last, and at the latest until the exercise of the right to erasure (right to be forgotten);

Security of processing: The data is being stored by using appropriate technical and personnel measures in databases that are accessed via a protected password, while persons who have access to such data have a special obligation to preserve the confidentiality;

Transfers of personal data to third countries or international organisations: Saruna does not transfer personal data to a third country or an international organisation.

Providing other information

The purpose of processing: the data subject has given a consent to the processing of his or her personal data for one or more specific purposes;

Lawfulness of processing: according to the article 12 paragraph 1 point 1 of the Law;

The period for which the personal data will be stored: during the provision of services for which personal data is processed, as well as afterwards as long the obligations of the controller last, and at the latest until the exercise of the right to erasure (right to be forgotten);

Security of processing: The data is being stored by using appropriate technical and personnel measures in databases that are accessed via a protected password, while persons who have access to such data have a special obligation to preserve the confidentiality;

Transfers of personal data to third countries or international organisations: Saruna does not transfer personal data to a third country or an international organisation.

Website traffic

The purpose of processing: the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

Lawfulness of processing: according to the article 12 paragraph 1 point 1 of the Law;

The period for which the personal data will be stored: during the provision of services for which personal data is processed, as well as afterwards as long the obligations of the controller last, and at the latest until the exercise of the right to erasure (right to be forgotten);

Security of processing: The data is being stored by using appropriate technical and personnel measures in databases that are accessed via a protected password, while persons who have access to such data have a special obligation to preserve the confidentiality;

Transfers of personal data to third countries or international organisations: Saruna does not transfer personal data to a third country or an international organisation.

By visiting the website https://saruna.rs/ (hereinafter: website) the user’s behavior and the following data are being recorded:

  • Domain and IP address,

  • Browser and operational system,

  • Time and duration,

  • Data regarding other website,

  • Links regarding other websites,

  • Other information provided by data subjects.

When the data subject visits our website, when using applications and other platforms, various data are being exchanged between data subject device and our server, which data may constitute the personal data. The data collected in this way is, among other things, used to optimize our website or for the purpose of advertising as well as for the purpose of statistics.

When the data subject visits our website, the browser which is being used will automatically send to the server of our website following information:

  • IP address of the device from which the request was sent and which has Internet access,

  • Date and time of access,

  • Name and URL of the downloaded file,

  • Website / application from which to access (referrer URL),

  • The browser data subject is using and, if necessary, the computer operating system that supports the Internet, as well as the name of your provider.

The server temporarily stores the above-mentioned specified data in a log file for the purposes of:

  • Ensuring the establishment of a smooth connection,

  • Ensuring comfortable use of our website / application,

  • System security and stability assessments.

The legal basis for the processing of the IP address processing is a consent of a data subject. The consent has been given in the form of the cookies notice. Every time data subject is accessing to the website the cookies notice shall be displayed while allowing a data subject to refuse to provide a consent for some of cookies. If a data subject refused to provide a consent dor some cookies, the data subject may be enabled to access certain parts of the website. The data collected in this way shall not be transferred to the third party. The data is being stored temporarily and deleted automatically.

Use of cookies

Http cookies (hereinafter: “cookies”) are data collected by accessing the point – IP addresses of users or data subject while using information society services/website and which helps Saruna to adjust the content of information society services according to such access points, i.e. IP address.

“Cookies” are text files, which are being stored on the computer of the user or data subject, through the IP address, i.e. the point of attachment, while the user or data subject accesses the Saruna website. Once the cookies policy is accepted by accepting the “cookies” when accessing the website, Saruna will use “cookies” to adjust and improve the content of the website.

The user or data subject who choose not to use some of the “cookies” is able to prevent some of the cookies while accessing the website. In such case, certain contents of the website may be unavailable or partially available.

A user or data subject who is accessing the website is able to prevent the usage of the most (except necessary) cookies on the following way.

If a user or data subject accessing the website does not want to store cookies on their device, they can prevent that by using the cookies settings option of their device or web browser.

Saruna is processing cookies data in the following way.

The cookies which are being used:

Necessary cookies: Necessary cookies help make the website usable and enable basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Performance cookies: help website owners understand how visitors interact with the website by anonymously collecting information and reporting.

Setup cookies: allow a website to remember information that changes the way the website behaves or looks, such as your language setting or the region you are in.

Advertising cookies: Marketing cookies are used to track visitors on websites. The intention is to display advertisements that are relevant and attractive to the individual user and thus of greater value to publishers and third-party advertisers..

Unclassified cookies: Unclassified cookies are those cookies that are in the process of being classified by us and individual cookie providers.

There are different types of cookies:

Session cookies: Session cookies are cookies that last for one session. The session starts when you start the website or web application and ends when you leave the website or close the browser window. Session cookies contain information that is stored on a temporary memory that is deleted after the end of the session.

Permanent cookies: is a file stored on a user’s computer that remembers information, settings, preferences, or login credentials previously saved by the user. This saves time and creates a more convenient website experience. Web servers set an expiration date for these cookies.

First party cookies: First-party cookies are stored directly on the website (or domain) you visit. These cookies allow website owners to collect analytical data, remember language settings and perform other useful functions that provide a good user experience. The domain owner can see the data that the cookie retrieves. First-party cookies cannot be used to track user activity on a site other than the original website on which it was placed.

Third party cookies: A third party cookie is placed on the website by someone other than the owner (third party) and collects user data for the third party. As with standard cookies, third-party cookies are set so that the site can remember something about the user later.

Google Analytics:

Google Analytics uses a set of cookies to collect information and report site usage statistics without personally identifying individual visitors to Google..

Facebook pixel:

The Facebook pixel sets and runs cookies to track users as they interact with your business on Facebook and Instagram.

Rights of data subjects

Information to be provided where personal data are collected from the data subject:

  • the identity and contact details of the controller, as well as his representative, if designated;

  • contact details of the data protection officer, where applicable;

  • on the purpose of the intended processing and the legal basis for processing;

  • the existence of a legitimate interest of the controller or a third party, if the processing is performed on the basis of processing necessary to achieve the legitimate interests of the controller or a third party, unless those interests are overridden by the interests of protection of fundamental rights and freedoms of data subjects, in particular if the data subject is a minor;

  • about the recipient, i.e. the group of recipients of personal data, if they exist;

  • on the period of storage of personal data or, if that is not possible, on the criteria for its determination.

Data subjects are entitled to:

  • request from the controller access, correction or erasure of personal data, i.e. right to ratification, the right to object, as well as the right to data portability;

  • withdraw consent at any time even-though the withdrawal of consent, doesn’t have an effect on the lawfulness of processing based on consent before the withdrawal, if the processing is performed on the basis of consent of the data subject for one or more specific purposes or the processing of special types of personal data of the person to whom the data relates and who gave explicit consent for processing for one or more purposes;

  • file a complaint to the Commissioner;

  • request information whether the processing of personal data is a legal or contractual obligation or whether the processing of personal data is a necessary for concluding a contract, as well as whether the data subject has an obligation to provide personal data and the possible consequences if the data, he/she does not give it,

  • request information about the existence of automated decision-making, including profiling and relevant information on the logic used, as well as the significance and expected consequences of that processing for the data subject.

The data subject shall have the right to lodge a request regarding data protection, as well as to submit a question by using the following email: office@saruna.rs.

This Privacy Notice has been adopted on 10th November 2022 and shall enter into force within eight days since the day of the adoption.

This Privacy notice has been written in both Serbian and English languages. In case of any discrepancies, the Serbian version of this Privacy policy shall prevail.

Saruna has the right to amend and change this Privacy policy.