Privacy Policy
How we collect, use, and protect your personal data
1 General Information
This Privacy Policy explains how SDOBA Bakery collects, uses, stores, and protects personal data of visitors to our website sdoba.rs and our customers.
We are committed to protecting your privacy and processing your personal data in accordance with the Law on Personal Data Protection of the Republic of Serbia ("Zakon o zaštiti podataka o ličnosti", Official Gazette RS No. 87/2018).
By using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with any provisions, please refrain from using our services.
2 Data Controller
The controller responsible for the processing of your personal data is:
- Name: Sdoba
- Address: Bulevar Zorana Đinđića 44a, 11070 Novi Beograd, Srbija
- Email: info@sdoba.ru
- Phone: +7 (999) 123-45-67
3 What Data We Collect
We may collect the following categories of personal data:
- Contact information (name, phone number, email address) — when you place an order or contact us
- Delivery address — when you request delivery of your order
- Order history and preferences — to improve our service
- Technical data (IP address, browser type, device information, cookies) — collected automatically when you visit our website
4 Purpose of Data Processing
We process your personal data for the following purposes:
- Processing and fulfilling your orders, including delivery
- Communicating with you regarding your orders and inquiries
- Improving our website, products, and services
- Complying with legal obligations under Serbian law
To complete delivery orders, we may share your name, phone number, and delivery address with third-party delivery partners such as Glovo and Walt, solely to arrange the delivery. We may also share anonymized or aggregated analytics data with Google LLC for website analytics and performance monitoring.
5 Legal Basis for Processing
We process your personal data based on the following legal grounds as defined by the ZZPL:
- Your consent — for cookies and marketing communications (Article 12, ZZPL)
- Performance of a contract — for processing your orders (Article 12, ZZPL)
- Legitimate interest — for improving our services and website security (Article 12, ZZPL)
In accordance with Article 15 of the ZZPL, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
6 Cookies and Tracking Technologies
Our website uses the following types of cookies:
- Essential cookies — required for the website to function properly (language preference, shopping cart, session management)
- Analytics cookies (Google Analytics) — to understand how visitors interact with our website
- Preference cookies — to remember your settings such as theme and language
You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the website.
7 Your Rights
In accordance with the ZZPL, you have the following rights regarding your personal data:
- Right to access — request information about the data we hold about you (Article 26)
- Right to rectification — request correction of inaccurate or incomplete data (Article 29)
- Right to erasure — request deletion of your personal data (Article 30)
- Right to restriction — request limitation of processing of your data (Article 31)
- Right to data portability — receive your data in a structured, machine-readable format (Article 36)
- Right to object — object to the processing of your data for certain purposes (Article 37)
If you believe that your data protection rights have been violated, you have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti).
8 Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Serbian law.
Order data is retained for the period required by tax and accounting legislation. After the retention period expires, your data is securely deleted or anonymized.
9 Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated revision date. We recommend checking this page periodically for any updates.
Questions about your data?
Contact us and we will be happy to help.