1. General

This policy of personal data processing was developed in accordance with LAW ON PERSONAL DATA PROTECTION Published in: "Official Gazette of the Republic of Serbia" No. 97/08 and establishes the procedure for personal data processing and measures to ensure the security of personal data at M2529 d.o.o. Beograd (hereinafter, the “Operator”) in order to protect the rights and liberties of individuals and citizens when their personal data is processed, including the rights of privacy and personal and family secrecy.

This policy of data operator in relation to personal data processing (hereinafter, the “Policy”) is applied to all information that the Operator can obtain about visitors of the website https://exim.flowers.

2. Key terms used in policy:

1. automated personal data processing: the use of computer equipment to process personal data;

2. blocking of personal data: temporary suspension of personal data processing (except where processing is required to update personal data);

3. website - a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https://exim.flowers

4. personal data information system: all personal data contained in databases and all information technologies and equipment enabling such personal data to be processed;

5. anonymization of personal data: actions making it impossible, without additional information, to identify the specific owner of personal data;

6. personal data processing: any action (operation) or set of actions (operations) performed on personal data with or without automated equipment, including the collection, recording, systematization, accumulation, storage, modification (updating, revision), retrieval, use, transfer (dissemination, provision, access), anonymization, blocking, deletion or destruction of personal data;

7. operator: a state or municipal authority, legal entity or individual that processes personal data and/or organizes such processing, whether independently or jointly with other persons, and that determines the purposes of personal data processing, the range of personal data to be processed and the actions (operations) performed with personal data;

8. personal data — any information relating directly or indirectly to a particular or identifiable User of the website https://exim.flowers

9. user - any visitor of the website https://exim.flowers

10. provision of personal data: actions taken to disclose personal data to a specific individual or group of individuals;

11. dissemination of personal data: actions taken to disclose personal data to an indefinite number of persons (transfer of personal data); to acquaint an unspecified number of persons with such data, including by publicizing personal data in the mass media and making it available in information and telecommunication networks; or to provide access to personal data in any other way;

12. cross-border transfer of personal data: the transfer of personal data abroad to a foreign government authority, foreign individual or foreign legal entity;

13. destruction of personal data: actions that make it impossible for the content of personal data in a personal data information system to be recovered and/or that result in the destruction of the physical media on which personal data are stored.

3. Operator can process the following personal data of the User:

- Full name;

- Email address;

- Contact telephone numbers;

- Date and place of birth;

- The site also collects and processes anonymized data about visitors (including cookies) using Internet statistics services (Yandex Metrika, Google Analytics and others);

The above-mentioned data is further united in the text of the Policy by the general concept of “Personal data”.

4. Purpose of processing personal data

1. The purpose of processing User’s personal data is informing the User by sending e-mails; concluding, executing and termination of comercial contracts; providing User with access to the services, information and/or materials contained on the website.

2. The Operator also has the right to send the User notifications about new products and services, special offers and various events. The user can always unsubscribe from receiving informational messages by sending the Operator a letter to the e-mail address sales@exim.flowers marked "Unsubscribe from receiving notifications about new products and services and special offers"

3. Depersonalized User data collected through Internet statistics services are used to collect information about Users ' actions on the site, improve the quality of the site and its content.

5. Legal basis of personal data processing

1. The Operator processes the User's personal data only if it is filled in and / or sent by the User independently through special forms on the site sales@exim.flowers. By filling in the appropriate forms and / or sending your personal data to the Operator, the User agrees with this Policy.

2. The Operator processes the impersonal data about the User in case it is allowed in the settings of the User’s browser (if cookies and JavaScript are enabled).

6. Procedure of collection, storage, transfer and other types of personal data processing

The Operator ensures the security of personal data that it processes by taking legal, organizational and technical measures necessary for compliance with federal laws concerning personal data security.

1. The Operator takes the following organizational and technical measures to prevent unauthorized access to personal data

2. The Operator and other persons that receive access to personal data must not disclose it to third parties or disseminate it without the personal data owner’s consent unless otherwise prescribed by federal law.

3. In case of revealing inaccuracies in personal data, the User can update them independently by sending a notification to the Operator's e-mail address sales@exim.flowers marked “Updating personal data”.

4. The term for processing personal data is unlimited. The user may at any time withdraw his consent to the processing of personal data by sending a notification to the Operator’s email address sales@exim.flowers marked “Withdrawal of consent to the processing of personal data”

7. Cross-border transfer of personal data

1. Before such transfer begins, the Operator must satisfy itself that the foreign state to which personal data is to be transferred ensures adequate protection of personal data owners’ rights.

2. Personal data may be transferred to foreign states that do not ensure adequate protection of personal data owners’ rights when:

- the personal data owner has given written consent for the cross-border transfer of his/her personal data

- this is required for the performance of an agreement to which the personal data owner is a party

8. Final clauses

1. The user can receive any clarification on issues of interest relating to the processing of his/her personal data by contacting the Operator via email sales@exim.flowers.

2. This document will reflect any changes in the policy of personal data processing by the Operator. The policy is valid indefinitely until it is replaced by a new version.

3. The current version of the Policy is freely available at https://exim.flowers/policy