PRIVACY POLICY OF THE COMPANY ASKONA D.O.O. UGRINOVCI

• GDPR – General Data Protection Regulation of the European Union (2016/679);

• Candidate – a person applying for and interested in a job position with the Controller, work outside of employment, an internship, or another form of learning opportunity;

• User – a collective term for Customer, Customer Declaring a Complaint,  Website Visitor, Notification Recipient, and Follower on Social Networks;

• Customer – an adult who is the user of purchasing Service at the Website of the Controller, or the potential or real buyer of the Controller's products at the Retail Place;

• Customer Declaring a Complaint – an adult who sent the complaint request to the Controller, and which previously purchased the products from the Controller; 

• Competent Authorities – authorities responsible for preventing, investigating, and detecting criminal offenses, prosecuting offenders, enforcing criminal sanctions, including protecting and preventing threats to public and national security, and any legal entity authorized by law to perform these activities;

• Processing of personal data – every act or set of acts performed automatically or non-automatically with the personal data of the User, such as collecting, recording, organizing, grouping, or structuring, storing, adapting or altering, disclosing, consulting, using, revealing by transmission, submitting, duplicating, disseminating or otherwise making available, comparing, limiting, deleting or destroying;

• Processor – a natural person or legal entity engaged by the Controller to process Users' Personal Data on its behalf;

• Terms and Conditions – the document regulating the contractual relationship between the Controller and Customer, or User, which Customers and Users have accepted by agreeing to these Terms; and

• Personal Data – any information related to an identified or identifiable natural person, directly or indirectly, particularly based on identity markers, such as name and identification number, location data, electronic communication network identifiers, or one or more characteristics of their physical, physiological, genetic, mental, economic, cultural, or social identity;

• Visitor – a natural person using the Website and/or Internet shop therein, who is not a Customer, Customer Declaring a Complaint, Follower on Social Networks or Notification Recipient;

• Commissioner or Supervisory Authority – an independent authority established by law, responsible for overseeing the implementation of the Law and performing other duties prescribed by the Law;

• Follower on Social Networks – a natural person following official page/profile of the Controller on the social network Facebook, Instagram, TikTok, Meta, YouTube, LinkedIn;

• Notification Recipient – an adult who has given explicit consent to receive notifications in the form of newsletters or updates about news and products offered by the Controller (hereinafter “Newsletter”);

• Consent – any voluntary, definite, informed and unequivocal expression of the will of the User, by which he/she, by a statement or a clear affirmative action, gives his consent to the processing of his/her personal data;

• Controller – the company mentioned in Article 1.1 above;

• Third Party – a natural or legal person, or authority, who is not a User, Visitor, Controller, or Processor, nor authorized to process Personal Data under the direct supervision of the Controller or Processor;

• Terms of Usage – a document regulating a contractual relationship between the Controller and Customer/User, and which envisages conditions and rules of usage of the Website, as well as rights and obligations of the Customer/User with regard to the Website, and services it provides, and which the Customers/User accepted by agreement to the Terms of Usage;

• Service – a service provided via Internet shop, or a service of online sale of products and goods of the Controller, which include Beds, mattresses, furniture, massagers, bedding, sofas, as well as all other products published at the Website and within the Internet shop;

• Law – Law on Personal Data Protection of the Republic of Serbia (“Official Gazette of RS,” No. 87/2018).

• Business Name: ASKONA d.o.o. Ugrinovci

• Registered Seat: Nova 9, no. 8, Zemun – Ugrinovci, Republic of Serbia

• Company Number: 22021842

• TIN: 114424110

• first and last name;

• phone number;

• home address or address of residence (country/region, city, street and home number, postal number);

• email address;

• any personal data entered in the “notes to the order” section or provided voluntarily by the Customer in communication or correspondence with the Controller.

• IP Address and data collected from the Visitor's internet browser.

• product name and code;

• purchase date of the product;

• invoice number;

• Customers bank account number;

• name of the retail location and website

• date of the complaint receipt and date of the complaint receipt confirmation

• complaint receipt confirmation number

• quantity and price of the products

• decision on the customer response and the date the response was delivered;

• contracted appropriate term for resolution or details of any extension, along with the manner and date of complaint resolution;

• description and reason for the complaint; and

• handwritten signature.

• date of birth (day, month and year); and

• data collected from the internet browser.

• Resume (i.e., CV); and

• Personal Photograph.

The Controller may also obtain Candidate data from third parties, specifically:

• Employment agencies – e.g. when an employment agency contacts us to identify you as a potential candidate;

• From publicly available online sources – e.g. from your current employer's website or professional social networks such as LinkedIn; and

• Through written or verbal recommendations – e.g. from a former employee/employer or a person you listed as a reference.

• Name and details of the profile on social networks https://www.youtube.com/@AskonaSRB

https://www.facebook.com/askonaserbia/

https://www.instagram.com/askona_serbia/

• the need to fulfill contractual rights and obligations between the Controller and the User, and to meet obligations and rights under the Terms and Conditions and Terms of Usage, as well as to take pre-contractual actions with Candidates, as prescribed by the Terms and Conditions, Terms for Usage and the Law, in accordance with Article 12, paragraph 1, item 2 of the Law;

• the Controller’s legal obligation, in accordance with Article 12, paragraph 1, item 3 of the Law and Article 55 of the Consumer Protection Act;

• explicit consent given by the User, Customer, or Candidate, which has a separate form and is considered given upon acceptance, in accordance with Article 12, paragraph 1, item 1 of the Law;

• the legitimate interest of the Controller, in accordance with Article 12, paragraph 1, item 6 of the Law; and

• other legal conditions/bases that require the Controller to collect, store, and process User data.

• to fulfil contractual obligations of the Controller and User, including those from Terms and Conditions (data from Article 4.2.);

• for the purpose of making a decision regarding the complaint claim submitted by the Customer Declaring a Complaint (data from Article 4.4.);

• for purpose of conducting out-of-court disputes in accordance with the Consumer Protection Act and all other applicable laws in the Republic of Serbia, in connection with the out-of-court dispute initiated by the Customer Declaring a Complaint and whose complaint request was rejected; 

• to conduct Candidate selection processes, verifying if the Candidate’s qualifications, experience, and education match the open positions with the Controller and determining if the Candidate is the best fit for the company (data from Article 4.6.);

• to enable contact with the Controller via messages in the “Contact” section (technical data processed through the website) or in other appropriate manner (sharing personal data at the Retail Place, etc.);

• to inform the Notification Recipient, who has given its explicit consent to receive newsletters, and for purpose of receiving promotional offers and other information regarding the Controller’s products (data from Article 4.5.);

• to improve the User experience while visiting the Website, where Users may contact us by phone or email. We will collect relevant data to provide swift and effective assistance in the future and enhance our services (data from Articles 4.3. and 4.7.);

• for other purposes consented to by the User, unless consent is withdrawn in accordance with the Law and this Privacy Policy; and 

• for other purposes in accordance with the Law.

• whether there is a connection between the purpose for which the data was collected and the intended secondary purpose;

• the circumstances in which the data was collected, including the relationship between the Controller and the User;

• the nature of the data; and

• the potential consequences of further processing for the User.

• the identity and contact details of the Controller and the person employed or otherwise engaged by the Controller who is responsible for data processing;

• the purpose of the intended processing and the legal basis for processing;

• the existence of a legitimate interest of the Controller or a third party, if processing is based on legitimate interest;

• the recipient or categories of recipients of personal data, if any;

• any intention of the Controller to transfer personal data to another country or international organization;

• the retention period for personal data, or if this is not possible, the criteria used to determine that period;

• the existence of the right to request access, correction, or deletion of personal data, as well as the right to restrict processing, the right to object, and the right to data portability;

• the existence of the right to withdraw consent at any time and that such withdrawal does not affect the legality of processing based on consent before its withdrawal;

• the right to file a complaint with the Commissioner;

• whether providing personal data is a legal or contractual requirement or a necessary condition for entering into a contract, and whether the data subject is obliged to provide personal data and the possible consequences of not doing so; and

• the existence of automated decision-making, including profiling, if the Controller engages in such processing.

• personal data is no longer necessary for the purpose for which it was collected or otherwise processed;

• the User has withdrawn consent on which processing was based, in accordance with the Law, and there is no other legal basis for processing;

• the User has objected to processing in accordance with the Law, and there is no other legal basis for processing that overrides the legitimate interest, rights, or freedoms of the data subject;

• personal data has been unlawfully processed;

• personal data must be deleted to comply with the Controller's legal obligations; and

• personal data was collected in connection with the use of information society services under the Law.

• exercising the right to freedom of expression and information;

• compliance with a legal obligation that requires processing by the Controller or for tasks performed in the public interest or in the exercise of official authority vested in the Controller;

• public interest purposes in the field of public health, in accordance with the Law;

• archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with the Law; and

• the submission, exercise, or defense of legal claims.

• the processing is based on consent or the performance of a contractual obligation; and

• the processing is carried out automatically.

MB: 22021842 PIB: 114424110. This data is secured by an SSL certificate and regular daily backups. Access to the database on this server is available to the Controller and employees of the Controller authorized by the Controller, as well as to the server holder acting as Processor. 

In the event of a change in the data storage location specified in Articles 9.1. and 9.2., the Controller will update and amend the Privacy Policy, displaying the revised version on the Website.

• countries that are members of the Council of Europe Convention for the Protection of Individuals with regard to automatic processing of personal data, or to countries deemed by the EU to provide an adequate level of data protection; or

• companies with a valid and up-to-date EU-U.S. Privacy Shield certification, guaranteeing certain data protection standards for the category of personal data being exported; or

• where an appropriate data export mechanism, such as standard contractual clauses, has been implemented to ensure the adequate protection of your personal data.

• a description of the nature of the personal data protection breach, including the types of data and an approximate number of Users affected, as well as an approximate number of personal data records affected;

• the name and contact details of the person from whom further information about the breach can be obtained;

• a description of the possible consequences of the breach; and

• a description of measures taken or proposed by the Controller and/or Processor in response to the breach, including any measures taken to mitigate adverse effects.

• appropriate technical and organizational security measures were applied to the personal data affected by the breach;

• subsequent measures were taken to ensure that the data breach no longer poses a high risk to the rights and freedoms of the affected individual; or

• notifying the affected individual would involve a disproportionate use of time and resources, in which case the Controller must notify the affected individuals through a public announcement or other effective means.

• Controller's Business Name: ASKONA d.o.o. Ugrinovci;

• Address: Nova 9, br: 8, Zemun – Ugrinovci, Republic of Serbia;

• Controller's Email: [email protected]

• Controller's Phone: [ +381 636 600 75]

• Working hours:  Mon.–Sun.: 10:00–20:00