Privacy policy

Controller

Who is responsible for your data

The data controller is Hani International ltd doo.

Data

What data we process

Depending on your purchase or your request, we process:

• Your name, delivery address, phone number and email address.
• Order details: the products purchased, the amount and the payment status.
• The details needed to issue an invoice.
• The content of any message you send us, including enquiries, complaints and return requests.
• The details needed to refund you, where that applies.

We receive this data primarily from you. Information about delivery and payment status may reach us from the providers of those services.

Purpose

Why we use the data

We process personal data in order to:

• Receive, prepare and deliver your order and communicate with you about your purchase — to enter into and perform a contract.
• Issue invoices, keep the records required of us and handle complaints and consumer requests — to meet our legal obligations.
• Protect the business, prevent misuse and establish or defend legal claims — on the basis of legitimate interest, with due respect for your rights.

The fields marked as required at checkout are necessary to complete the purchase. Without the contact details and the address we cannot process and deliver an order.

Recipients

Who we share data with

We pass data on only to the extent needed for a particular purpose, to the following categories of recipient:

• Courier services, in order to deliver your order.
• Banks and payment service providers, depending on the payment method you choose.
• Providers of hosting and maintenance for the website and our business systems.
• Accounting and legal partners, where that is necessary.
• The competent authorities, where there is a legal obligation.

Retention

How long we keep data

Purchase records and accounting documentation are kept for the periods prescribed by the applicable laws. Complaint records are kept for the period prescribed by law.

Other correspondence is kept for as long as it is needed to resolve the request and any dispute connected with it. Once the purpose has ended and the mandatory periods have expired, we delete the data or anonymise it.

Your rights

What you can ask us to do

Subject to the conditions set out in law, you may request access to your data, correction of inaccurate data, erasure, restriction of processing and data portability. You may object to processing that is based on legitimate interest.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of the processing carried out beforehand.

Send your request to pastrello@reklamacije.rs. To protect your data we may ask for further information to confirm your identity. We answer within the statutory deadline, as a rule no later than 30 days.

The right to erasure does not cover data we are required to keep by law, or data needed to establish or defend legal claims.

Cookies

Technical processing and cookies

Updates

Changes to this policy

We update this policy when the way we process data changes, or when our legal obligations change. The version in force is always available on this page, together with the date it was last updated.